last executing test programs: 4m13.854585449s ago: executing program 2 (id=2038): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x10003, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="8ffdcb7907009875f375ffff8fdd6317ce6207f43f000000000000431ccaf57b00080000000000000104c21b49098f847cb20de0ebd65ee246865c5b97dd735f91f5259ff3ec"], 0xfe1b) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x73}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x15, &(0x7f00000000c0), 0xb9) 4m13.423378476s ago: executing program 2 (id=2043): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x10100) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1f000000}, @generic={0x2f}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x6, 0xfdcb, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r2, 0x58, &(0x7f00000004c0)}, 0x10) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x5452, &(0x7f00000013c0)) 4m12.967371873s ago: executing program 2 (id=2046): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/93, 0x74, 0x5d, 0x1, 0x1, 0x10000, @value}, 0x28) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, r1, 0x5, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r2, &(0x7f0000000140)="07fe577f80171ab549eb79360545593a7f6ca32189996aaedc921b520ea78c92ff74a11ca5afe2dd80b66081ec0b6c0fead8c727dd99d657e02f338b925003abcc161a1ed67a4d84237edd436869d922", &(0x7f00000001c0)=""/133}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xc, 0x9, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20) r5 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r5, 0x29, 0x4b, 0x0, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r1, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000280)={r7}) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) close(r2) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x1c3aebd0, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r9, 0x40047451, 0xf0ff1f00000000) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x4) 4m11.845823861s ago: executing program 2 (id=2053): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x8100, 0xc8, 0xffffffff, 0x0, 0x0, 0x341}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7fff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x21, 0x1000, 0x6, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00fec0"], 0xcfa4) 4m11.25383302s ago: executing program 2 (id=2056): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x10100) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1f000000}, @generic={0x2f}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x6, 0xfdcb, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r2, 0x58, &(0x7f00000004c0)}, 0x10) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x5452, &(0x7f00000013c0)) 4m10.817471067s ago: executing program 2 (id=2060): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r5}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r8}, 0x38) 3m55.042322622s ago: executing program 32 (id=2060): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r5}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r8}, 0x38) 6.982639852s ago: executing program 4 (id=3370): r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00'}, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f00000001c0)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62043c00590200000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48", 0x5a}, {&(0x7f0000000a40)}], 0x2}, 0x400c000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r3}, &(0x7f0000000980), &(0x7f0000000b40)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00'}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r4}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002020) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e00073fe6"], 0xfe33) 6.700267796s ago: executing program 5 (id=3374): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20000000000000c8, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0xb) socket$kcm(0x2, 0x5, 0x84) r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="f4dd112c", 0x4}], 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x37, &(0x7f0000000040), 0xcf) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x224c43, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40047451, &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) sendmsg$unix(r4, 0x0, 0x4000011) bpf$LINK_DETACH(0x22, &(0x7f00000007c0), 0x4) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 6.294964573s ago: executing program 3 (id=3376): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="d80000001e0001054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a50254cca9e00360db798262f3d40fad95667e006dcdff11a49b1328d9dd74977efd563951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a9295", 0xe9}], 0x1}, 0x0) (fail_nth: 2) 5.719181691s ago: executing program 3 (id=3377): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"}) 5.433559706s ago: executing program 3 (id=3379): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20000000000000c8, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0xb) socket$kcm(0x2, 0x5, 0x84) r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="f4dd112c", 0x4}], 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x37, &(0x7f0000000040), 0xcf) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x224c43, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40047451, &(0x7f00000002c0)) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000000000000850000007100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0x1d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) sendmsg$unix(r6, 0x0, 0x4000011) bpf$LINK_DETACH(0x22, &(0x7f00000007c0), 0x4) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 5.351725657s ago: executing program 1 (id=3380): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x8000080, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9f03000000000000003a3ba800000000007a"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000000400"/20, @ANYRES16=r0, @ANYBLOB="0000000000000000000000000000000000000200", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed009875f37538e486dd0000000003"], 0xfe1b) r2 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r2, &(0x7f0000000580)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)="ffa8", 0x2}, {&(0x7f0000000400)="3cd9", 0x2}], 0x2}, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) 4.995506823s ago: executing program 4 (id=3382): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd3860800000080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c600000000d7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00913a09b51bcb3cc5a05f0a"], 0xfe33) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8936, &(0x7f0000000000)={r4}) sendmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000500)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140643000000000e000a001000000086419820dd61", 0x2e}], 0x1}, 0x0) r5 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000200000004000000000000001c000000000000000000000008000000", @ANYRES64=r5], 0x68}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000540)=r0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000700)={0xffffffffffffffff, 0x5, 0x8}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={r6, 0xffffffffffffffff}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x1d, 0x8, &(0x7f00000005c0)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r6}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000600)='syzkaller\x00', 0x6, 0x29, &(0x7f0000000640)=""/41, 0x41000, 0x28, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x3, 0x4, 0x8001}, 0x10, 0xffffffffffffffff, r0, 0x1, &(0x7f0000000780)=[r8, 0x1, r6, r6, r9, r6], &(0x7f00000007c0)=[{0x3, 0x1, 0x5, 0x7}], 0x10, 0x28, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r6, &(0x7f0000000380)="49bf149162c361917f87649a51d52b1e3de465cd3f19982b70aae9c16ea9b6dc84a1a100fdf1077cecea14c1df4adbc9583cc1015842fb13afeaa8724b9f40dbcf645031bffaab60ea2310bbc8897b7f5ff54a29e3dcb4c64c5e3b9b3a63d4a743deb0a7e699cc842477aae850afeba4ddb43cf88259358b2f0be552551cf355b6c04e558b83e13bcf72981f9340b695ca45a8ef4d37e27f7920e0c52e1f5beda023ea10b61d96561719553ffcee4ab5640eb1ffffde754dce9ecdab0897998a5d0a0678040af20f22ef6321a22b45b2c3f0561c7cad0646fa78c93a73271c90900274eaaf5cb74791e2c1d9c08e0aad7380e6e3c732bb1c", &(0x7f0000000480)=""/157}, 0x20) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000800), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x1b, 0x10001, 0x4, 0x80000001, 0x201, r10, 0x9, '\x00', 0x0, r11, 0x4, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000638477fbac141716e000000186070403fe80000000000002845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x700}, 0x2c) 4.659988668s ago: executing program 5 (id=3383): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.280306594s ago: executing program 0 (id=3385): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0x700, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.89018865s ago: executing program 5 (id=3386): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x6a2e) 3.758061732s ago: executing program 3 (id=3387): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x89}, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.freeze\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) openat$ppp(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) gettid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088a847", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.683824653s ago: executing program 0 (id=3388): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="d80000001e0001054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a50254cca9e00360db798262f3d40fad95667e006dcdff11a49b1328d9dd74977efd563951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a9295", 0xe9}], 0x1}, 0x0) 1.94124944s ago: executing program 1 (id=3389): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"}) 1.446804748s ago: executing program 4 (id=3390): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000001280), 0x4) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40002002) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000040) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2042) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x0) 1.446489738s ago: executing program 1 (id=3391): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0xe, 0x0, 0x0, 0x0, 0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ff}, 0x0, 0x0, 0xfffffffd, 0x9, 0x0, 0x7}, 0x0, 0xfffffffffffffffb, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, r1, 0xffffffffffffffff, r2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') perf_event_open(&(0x7f0000001080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, r1, 0x0, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000000) socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r4, 0x29, 0x1a, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00f00000088080ffb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) close(0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, 0x0, 0x2000488c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000010140)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2}, 0x80, 0x0}, 0xb80b) 1.445898228s ago: executing program 3 (id=3392): r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00'}, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f00000001c0)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62043c00590200000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48", 0x5a}, {&(0x7f0000000a40)}], 0x2}, 0x400c000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r3}, &(0x7f0000000980), &(0x7f0000000b40)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00'}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r4}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5}, {0x0, [0x61, 0x5f, 0x2e]}}, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002020) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e00073fe6"], 0xfe33) 1.445659778s ago: executing program 0 (id=3393): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x40010) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000ef8000000000000000000000000001000000000b1beeb11bc00000000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014001100b7030000000000698500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000640)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 1.445542798s ago: executing program 5 (id=3394): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) perf_event_open(&(0x7f0000000040)={0xaba9408598d223a4, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x5, @perf_bp={0x0, 0x2}, 0x104141, 0x0, 0x3, 0x3, 0x0, 0xfffffffe, 0x6}, 0x0, 0xd, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0) 1.444887998s ago: executing program 5 (id=3395): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x5, 0x3, 0x0, [{@local}]}]}}}], 0x20}, 0x0) 1.444778888s ago: executing program 0 (id=3396): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff028}, {0x6, 0x7d, 0x9, 0x6}]}) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.360975449s ago: executing program 1 (id=3397): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.255062021s ago: executing program 1 (id=3398): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0x700, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.162665272s ago: executing program 5 (id=3399): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xe, &(0x7f0000000600)=@raw=[@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x46}}, @ldst={0x1, 0x1, 0x6, 0x6, 0x6, 0x80, 0xfffffffffffffff8}, @alu={0x4, 0x0, 0xd, 0x0, 0xb, 0x1}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x6}, @map_val={0x18, 0xd, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x63}], &(0x7f0000000680)='syzkaller\x00', 0x7, 0x8a, &(0x7f0000000ac0)=""/138, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000b80)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000bc0)=[{0x4, 0x1, 0xb, 0xa}, {0x5, 0x3, 0x9, 0x3}, {0x3, 0x3, 0x7}, {0x1, 0x1, 0x7}], 0x10, 0xa13f, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000cc0)=r1, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0xb, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = getpid() r5 = syz_clone(0x2000000, &(0x7f00000002c0)="d20c07ee0252f384a31642d763bb340a247b752ed5aee2f02f81993b79", 0x1d, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="63804fa8fbe465780f68a22ac0ab5f066d072d66585cb4d100a46c8b554472b49b8cbaf92b0e18e84e49f737ae0b28c9a6a845270be367d7c184957f86c4882d3138d64f7fb17b167af604dce0cb28b4066677c88ac2e4251c4685e5fb92a3de1c29d7ea8fa20749bd8fc07b1fbdfdfe5584ec8eb488cb14303366ac1e69290bf27b77398c57ca117b4493ac6fd15d2e13a0c2d2cffd09a3d0872e43aff4ec39caa8a509dbaf063e066116b517ba0e3fb720a1701897c9afe068f2dc394af535") r6 = gettid() r7 = gettid() r8 = getpid() perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r10 = getpid() sendmsg$unix(r9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [r9]}}, @cred={{0x1c, 0x1, 0x2, {r10, 0x0, 0xee00}}}], 0x38, 0x20000900}, 0x0) r11 = getpid() sendmsg$unix(r3, &(0x7f0000000580)={&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000180)="7a3b3900525fa2554c8555d9f29fb48273e58ac79a40075bff3296dd35edb565311856028b3c8dd479136e3e8db215a6be7720fb969886fbd2c76a5c4a55b0d67bc6b0af9396b63f0cbad43e803d565e8dd8fef6c24890301c1e13fcc0d1a34b4f661b32eefb0964f5654d1cbf3a2a9a46be0dcaeb995d34d63a3609f1b118aa3a88", 0x82}, {&(0x7f0000000240)="8753f465cd0cf92a7dbb463fe1540dcea0649671a1a4cc69e127887c450a22656cd16ba36bf55a87099d46a26fff6396c70778", 0x33}], 0x2, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {r4, 0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [r2, r2, r2, r2, r2, 0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xee01, 0xee00}}}, @rights={{0x2c, 0x1, 0x1, [r2, r2, r2, r2, r2, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {r7, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xffffffffffffffff, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r11, 0x0, 0xee00}}}], 0x140, 0x801}, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000004800913a745c7388641f9c0e0a"], 0xfe33) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)=r1}, 0x20) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r14 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r14, 0x1, 0x3e, &(0x7f00000002c0)=r13, 0x161) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x15, &(0x7f0000000dc0)=@raw=[@map_idx={0x18, 0x6}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r12}}, @generic={0x5, 0x4, 0x7, 0x7, 0x2}, @jmp={0x5, 0x0, 0x7, 0x0, 0x4, 0x0, 0xffffffffffffffe0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xe}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r13}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r15) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(r15, 0x8991, &(0x7f0000000740)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OGK\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x00\x00\x00\x00\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\x00\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\x06\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf1\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') socketpair(0x2, 0x80000, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r16) socketpair(0x10, 0x800, 0x0, &(0x7f0000000e80)) 1.062120334s ago: executing program 3 (id=3400): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x8000080, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9f03000000000000003a3ba800000000007a"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000000400"/20, @ANYRES16=r0, @ANYBLOB="0000000000000000000000000000000000000200", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed009875f37538e486dd0000000003"], 0xfe1b) r2 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r2, &(0x7f0000000580)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)="ffa8", 0x2}, {&(0x7f0000000400)="3cd9", 0x2}], 0x2}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) 1.012814305s ago: executing program 1 (id=3401): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2813], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000025c0)={{r1, 0xffffffffffffffff}, &(0x7f0000002540), &(0x7f0000002580)='%pK \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002680)=@bpf_lsm={0x1d, 0xf, &(0x7f00000023c0)=ANY=[@ANYBLOB="fb3000000500000000000000030000000000000000000000000000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000940000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018260000", @ANYRES32=r1, @ANYBLOB="0000000004000000"], &(0x7f0000002440)='syzkaller\x00', 0x1, 0x2c, &(0x7f0000002480)=""/44, 0x40f00, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000024c0)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000002600)=[r1, r2, r1, r1, r1, r1, r1, r1, r1], &(0x7f0000002640)=[{0x3, 0x5, 0x8, 0x7}, {0x1, 0x5, 0xa, 0xd}, {0x3, 0x1, 0x2, 0x4}], 0x10, 0x3, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000005000000356800000900000015"], 0x48) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00000000000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = perf_event_open$cgroup(&(0x7f0000001940)={0x3, 0x80, 0x9, 0x63, 0xa, 0x40, 0x0, 0x8000, 0x2000a, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000001900)}, 0x108, 0x46e, 0x85, 0x7, 0x9, 0x0, 0x7, 0x0, 0x7, 0x0, 0x100}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000019c0)='/!\xb6&') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008804) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b07d25a806f8c6394f90424fc602f0000000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) close(r4) r7 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x80) sendmsg$kcm(r7, &(0x7f00000018c0)={&(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x40}}, 0x0, 0x1, 0x0, 0x3}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000000240)="d46c538fda6b7d16a89731843112cc3353a4c1c08951214075efb21c5c628f61e6dca37f52022497", 0x28}, {&(0x7f0000000280)="a2a1f1f9fc6d1b740bb73bc07d4bacf8e7e2a07d16e41e0e78396aed99d20f95aa3f0a8790175553a83a64cee254a1a83bba426e5d9c0b0aba1febe15c2ac200aa1fd56d6e8c358760408c7746d298a914bf170721b962f7351bce63bf0fcc7425a9694c3851ec70d5c07e4d49d3176781831bfe631120c6608120d308ae0cac8edf074ac788359d547a31e778679f519e10c8cc9c06baff1fe7026a9d1655f629c6ca4a032870adbf6a3b66575867a4bd3531da2f9b504dd5e8e9be4d499201c25ac31e34890e660237bebe9964e1153ba986e4befa9e39616f3982fce8ecdd7215c04af8dd011447a9ca8b7a3a0ae8e8663917494ae4c832", 0xf9}, {&(0x7f0000000380)="f653e88d2aec486ca30966d93150aea0283e41a63c14207effdbb310fe36b225c8980f985ab7206614dc6147618a9d31ed33490235f493261baa9de4d3c26f2b6b34d4d9f568127275910647998e6ba214c71ffbcd3867f8f10d456d3b51d8d69e9ca07b03aeffc86b164576bdef5f44099c6f18f2fa3ccff05b66c591382363", 0x80}, {&(0x7f0000000400)="6dc1180dfe210310924c80f787447dd58a81df305ddd36e755b5849686f630f730e3672bcb", 0x25}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="674317a9c462020ac6d4509592a67e253c734f0a40bee004e9d05a9af204d2e07e6a528ec22eef4856da060faf3436170bfd01e3ca8911dd1b75cb82f9baf8da24824343f3dc4b50b8270dd5c82ea44a2e49d0831d561c90d54de63b2d4f0fde968e875b762d9e21ee9d933b6b6be179c04f20ce07d2085b9ce47a26cdcd25be546765ca69aba3bf2c5838d74263ebb11725020912eb395f38d7ce3cac557396cb630a99145643eb10fe5087fe46f20e454e384cfdcaedd3a984734b601495cdfc4bc6621ecf979eb82f7a36b1b14b", 0xcf}, {&(0x7f0000001540)="e1f09d16877431a34938baf947a4f2b835c0b46cc34bea1eb50e22d690fd5f13d903b7208878608c05312ebdd0be85b2c617d9ec0dd19ce15fd447023c8344d57926c67f2876c4a9a67b4db7f0f274e12e333153204e337ce65e0228c3d1b5dab01b765b134dc9611c2f96154453e8fbf85a568c1004a8e15ed141bdd9d90f626c6a8e2b559ebfa73936a640feb9126ffca1590866729d09af8e79768eb7a44ac5da0a834846e1e02bd50c155591cd5e9ee4f4a8e8e120ecebb9e011e9d4d1d8507ae3816564ac4a92db2031892c55095763619e481d45", 0xd7}, {&(0x7f0000001640)="ff831f7c0e898aff1bf1c8fa1b633fbcd40a3ee03d1b1c3ba38493729bdee2891de12e33cdfe251cbc8a3473fe36d2117e28e64c389815710aa895c958ccb5ebcdf2b0b44614fade0e8e20a8f0ebd0b2d0c4db42333b04da3c9d12202be3441105cd2dbf0a2bd639029245878389e5125a544ee6bd46de9aceff3bea562b20ae2f43e037f59c3c03a088320959812a1b4864b5491455be81d7698319cd347998376b5378370b6d4262e6bdc4873ed43ee6058d", 0xb3}], 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="e0000000000000008800000002000000dd24653a2d62793d60390c4f42f8a3a1924b560c22f7d98709f9cb9e21e8f0e40a422c618ece42696e05860457eb6fe474d8eb0d57151b43562fd21d8bb9205a09c57bb876258d74b97e2e1d6a2c970e030f61b60a96e4012db913b798ae9faa27b583ff305dea230dabdf30571604b057429f839a33c98fc7604961cc370d15756adafe723aa1285c4407cea02708624041887c1750ae0f34527930a64072cff8c3d220906b8802a52970bba59f2fa5259b9b2a0ad18ef5089931fdb6fdbf97c4a6dd34be9f367bb055730000000000"], 0xe0}, 0x20000000) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="d80000001e0001054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a50254cca9e00360db798262f3d40fad95667e006dcdff11a49b1328d9dd74977efd563951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a9295", 0xe9}], 0x1}, 0x0) 994.310675ms ago: executing program 0 (id=3402): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00913a09b51bcb3cc5a05f0a"], 0xfe33) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8936, &(0x7f0000000000)={r4}) sendmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000500)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140643000000000e000a001000000086419820dd61", 0x2e}], 0x1}, 0x0) r5 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000200000004000000000000001c000000000000000000000008000000", @ANYRES64=r5], 0x68}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000540)=r0}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000700)={0xffffffffffffffff, 0x5, 0x8}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={r6, 0xffffffffffffffff}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x1d, 0x8, &(0x7f00000005c0)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r6}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000600)='syzkaller\x00', 0x6, 0x29, &(0x7f0000000640)=""/41, 0x41000, 0x28, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x3, 0x4, 0x8001}, 0x10, 0xffffffffffffffff, r0, 0x1, &(0x7f0000000780)=[r6, 0x1, r6, r6, r8, r6], &(0x7f00000007c0)=[{0x3, 0x1, 0x5, 0x7}], 0x10, 0x28, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r6, &(0x7f0000000380)="49bf149162c361917f87649a51d52b1e3de465cd3f19982b70aae9c16ea9b6dc84a1a100fdf1077cecea14c1df4adbc9583cc1015842fb13afeaa8724b9f40dbcf645031bffaab60ea2310bbc8897b7f5ff54a29e3dcb4c64c5e3b9b3a63d4a743deb0a7e699cc842477aae850afeba4ddb43cf88259358b2f0be552551cf355b6c04e558b83e13bcf72981f9340b695ca45a8ef4d37e27f7920e0c52e1f5beda023ea10b61d96561719553ffcee4ab5640eb1ffffde754dce9ecdab0897998a5d0a0678040af20f22ef6321a22b45b2c3f0561c7cad0646fa78c93a73271c90900274eaaf5cb74791e2c1d9c08e0aad7380e6e3c732bb1c", &(0x7f0000000480)=""/157}, 0x20) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000800), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x1b, 0x10001, 0x4, 0x80000001, 0x201, r9, 0x9, '\x00', 0x0, r10, 0x4, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000638477fbac141716e000000186070403fe80000000000002845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x700}, 0x2c) 626.944461ms ago: executing program 4 (id=3403): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x891a, 0x0) 376.391775ms ago: executing program 4 (id=3404): r0 = socket$kcm(0x2, 0x3, 0x84) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000100)) 255.107237ms ago: executing program 0 (id=3405): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) write$cgroup_subtree(r0, 0x0, 0x6a2e) 0s ago: executing program 4 (id=3406): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x89}, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.freeze\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) kernel console output (not intermixed with test programs): 819][T12460] RAX: ffffffffffffffda RBX: 00007fb1f81b5fa0 RCX: 00007fb1f7f8e929 [ 845.650103][T12460] RDX: 0000200000000000 RSI: 0000000000008b18 RDI: 0000000000000007 [ 845.658114][T12460] RBP: 00007fb1f8e44090 R08: 0000000000000000 R09: 0000000000000000 [ 845.667527][T12460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 845.677290][T12460] R13: 0000000000000000 R14: 00007fb1f81b5fa0 R15: 00007ffd95b33a78 [ 845.686310][T12460] [ 845.751624][T12460] netlink: 14601 bytes leftover after parsing attributes in process `syz.5.2691'. [ 845.831890][T12468] validate_nla: 3 callbacks suppressed [ 845.831927][T12468] netlink: 'syz.3.2694': attribute type 10 has an invalid length. [ 845.930050][T12470] IPv6: NLM_F_CREATE should be specified when creating new route [ 845.985005][T12474] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 845.992999][T12474] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 846.029112][T12470] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.2695'. [ 846.215975][T12477] netlink: 'syz.4.2698': attribute type 25 has an invalid length. [ 846.339657][T12481] netlink: 'syz.3.2699': attribute type 25 has an invalid length. [ 846.613007][T12488] netlink: 'syz.4.2702': attribute type 10 has an invalid length. [ 846.910045][T12499] netlink: 'syz.1.2704': attribute type 10 has an invalid length. [ 846.928641][T12499] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2704'. [ 846.949369][T12499] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 847.148718][T12502] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2707'. [ 847.159667][T12504] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.2708'. [ 847.168038][T12504] netlink: 'syz.5.2708': attribute type 4 has an invalid length. [ 847.181949][T12504] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2708'. [ 847.242925][T12506] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2709'. [ 847.315244][T12508] netlink: 'syz.4.2710': attribute type 10 has an invalid length. [ 847.449874][T12513] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2711'. [ 847.752916][T12523] FAULT_INJECTION: forcing a failure. [ 847.752916][T12523] name failslab, interval 1, probability 0, space 0, times 0 [ 847.775290][T12523] CPU: 1 PID: 12523 Comm: syz.3.2715 Not tainted 6.1.141-syzkaller #0 [ 847.784148][T12523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 847.795387][T12523] Call Trace: [ 847.799252][T12523] [ 847.803455][T12523] dump_stack_lvl+0x168/0x22e [ 847.810326][T12523] ? show_regs_print_info+0x12/0x12 [ 847.817171][T12523] ? load_image+0x3b0/0x3b0 [ 847.823550][T12523] ? __might_sleep+0xd0/0xd0 [ 847.828989][T12523] ? __lock_acquire+0x7c50/0x7c50 [ 847.836455][T12523] should_fail_ex+0x399/0x4d0 [ 847.841345][T12523] should_failslab+0x5/0x20 [ 847.846153][T12523] slab_pre_alloc_hook+0x59/0x310 [ 847.852761][T12523] kmem_cache_alloc_node+0x5a/0x320 [ 847.858962][T12523] ? __alloc_skb+0xfc/0x7e0 [ 847.864821][T12523] __alloc_skb+0xfc/0x7e0 [ 847.869211][T12523] alloc_skb_with_frags+0xa7/0x710 [ 847.875653][T12523] ? __lock_acquire+0x12e5/0x7c50 [ 847.880900][T12523] sock_alloc_send_pskb+0x853/0x980 [ 847.887028][T12523] ? sock_kzfree_s+0x50/0x50 [ 847.892917][T12523] ? verify_lock_unused+0x140/0x140 [ 847.900317][T12523] ? ipv6_dev_get_saddr+0x140/0xb60 [ 847.907406][T12523] __ip6_append_data+0x2e4b/0x41a0 [ 847.913219][T12523] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 847.920736][T12523] ? ip6_mtu+0x79/0x3f0 [ 847.925061][T12523] ? ip6_setup_cork+0x1060/0x1060 [ 847.930573][T12523] ? ip6_setup_cork+0xa76/0x1060 [ 847.935837][T12523] ip6_make_skb+0x399/0x4a0 [ 847.940499][T12523] ? __xfrm_sk_clone_policy+0x8e0/0x8e0 [ 847.946111][T12523] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 847.951201][T12523] ? __ip6_flush_pending_frames+0x3a0/0x3a0 [ 847.957234][T12523] udpv6_sendmsg+0x1bf9/0x2540 [ 847.962871][T12523] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 847.967859][T12523] ? udp_v6_early_demux+0xf50/0xf50 [ 847.973087][T12523] ? ct_irq_exit_irqson+0xfa/0x160 [ 847.979198][T12523] ? lock_chain_count+0x20/0x20 [ 847.984096][T12523] ? _local_bh_enable+0xa0/0xa0 [ 847.989101][T12523] ? ip6_datagram_release_cb+0x3b6/0x540 [ 847.995993][T12523] ? release_sock+0xa9/0x1b0 [ 848.000609][T12523] ? inet_send_prepare+0x1af/0x260 [ 848.005768][T12523] ? inet_send_prepare+0x1af/0x260 [ 848.011820][T12523] ? inet6_sendmsg+0x5b/0xd0 [ 848.016972][T12523] ? inet6_compat_ioctl+0x380/0x380 [ 848.022929][T12523] ____sys_sendmsg+0x59b/0x970 [ 848.028354][T12523] ? __lock_acquire+0x7c50/0x7c50 [ 848.033506][T12523] ? __sys_sendmsg_sock+0x30/0x30 [ 848.038821][T12523] ? __import_iovec+0x315/0x500 [ 848.043875][T12523] ? import_iovec+0x6f/0xa0 [ 848.048488][T12523] ___sys_sendmsg+0x21c/0x290 [ 848.055386][T12523] ? __sys_sendmsg+0x270/0x270 [ 848.060392][T12523] ? __lock_acquire+0x7c50/0x7c50 [ 848.066057][T12523] ? __fdget+0x17c/0x200 [ 848.070575][T12523] __se_sys_sendmsg+0x19e/0x270 [ 848.075959][T12523] ? __x64_sys_sendmsg+0x80/0x80 [ 848.081122][T12523] ? lockdep_hardirqs_on+0x94/0x140 [ 848.086990][T12523] do_syscall_64+0x4c/0xa0 [ 848.091634][T12523] ? clear_bhb_loop+0x60/0xb0 [ 848.096793][T12523] ? clear_bhb_loop+0x60/0xb0 [ 848.101635][T12523] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 848.107756][T12523] RIP: 0033:0x7f203918e929 [ 848.112319][T12523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 848.133434][T12523] RSP: 002b:00007f203a048038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 848.142023][T12523] RAX: ffffffffffffffda RBX: 00007f20393b6080 RCX: 00007f203918e929 [ 848.150906][T12523] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 848.159879][T12523] RBP: 00007f203a048090 R08: 0000000000000000 R09: 0000000000000000 [ 848.169216][T12523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 848.178728][T12523] R13: 0000000000000000 R14: 00007f20393b6080 R15: 00007fff74fcc6c8 [ 848.188423][T12523] [ 848.264282][T12518] netlink: 'syz.4.2714': attribute type 25 has an invalid length. [ 848.363954][T12520] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2715'. [ 848.757348][T12541] netlink: 'syz.4.2721': attribute type 10 has an invalid length. [ 849.163660][T12551] netlink: 'syz.1.2724': attribute type 10 has an invalid length. [ 849.210457][T12554] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 849.325431][T12562] FAULT_INJECTION: forcing a failure. [ 849.325431][T12562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 849.344721][T12564] FAULT_INJECTION: forcing a failure. [ 849.344721][T12564] name failslab, interval 1, probability 0, space 0, times 0 [ 849.364354][T12564] CPU: 1 PID: 12564 Comm: syz.4.2728 Not tainted 6.1.141-syzkaller #0 [ 849.372661][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 849.383534][T12564] Call Trace: [ 849.386943][T12564] [ 849.390451][T12564] dump_stack_lvl+0x168/0x22e [ 849.395878][T12564] ? show_regs_print_info+0x12/0x12 [ 849.401486][T12564] ? load_image+0x3b0/0x3b0 [ 849.406314][T12564] ? __might_sleep+0xd0/0xd0 [ 849.411279][T12564] ? __lock_acquire+0x7c50/0x7c50 [ 849.416460][T12564] should_fail_ex+0x399/0x4d0 [ 849.421185][T12564] should_failslab+0x5/0x20 [ 849.426537][T12564] slab_pre_alloc_hook+0x59/0x310 [ 849.432028][T12564] ? prepend_path+0xa6b/0xc20 [ 849.437788][T12564] ? tomoyo_encode+0x27e/0x540 [ 849.442677][T12564] __kmem_cache_alloc_node+0x4f/0x260 [ 849.448700][T12564] ? tomoyo_encode+0x27e/0x540 [ 849.454036][T12564] __kmalloc+0xa0/0x240 [ 849.458604][T12564] tomoyo_encode+0x27e/0x540 [ 849.463367][T12564] tomoyo_realpath_from_path+0x58e/0x5d0 [ 849.469186][T12564] tomoyo_path_number_perm+0x1e3/0x600 [ 849.475313][T12564] ? tomoyo_path_number_perm+0x1b6/0x600 [ 849.482243][T12564] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 849.488663][T12564] ? ksys_write+0x1bd/0x240 [ 849.494009][T12564] ? common_file_perm+0x171/0x1c0 [ 849.499792][T12564] ? __fget_files+0x28/0x4d0 [ 849.505442][T12564] security_file_ioctl+0x6c/0xa0 [ 849.510914][T12564] __se_sys_ioctl+0x48/0x170 [ 849.515826][T12564] do_syscall_64+0x4c/0xa0 [ 849.520899][T12564] ? clear_bhb_loop+0x60/0xb0 [ 849.527120][T12564] ? clear_bhb_loop+0x60/0xb0 [ 849.533585][T12564] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 849.540043][T12564] RIP: 0033:0x7fc64c58e929 [ 849.545881][T12564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 849.567120][T12564] RSP: 002b:00007fc64d436038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 849.577482][T12564] RAX: ffffffffffffffda RBX: 00007fc64c7b5fa0 RCX: 00007fc64c58e929 [ 849.585784][T12564] RDX: 0000000000000000 RSI: 0000000040047440 RDI: 0000000000000003 [ 849.595348][T12564] RBP: 00007fc64d436090 R08: 0000000000000000 R09: 0000000000000000 [ 849.604258][T12564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 849.612708][T12564] R13: 0000000000000000 R14: 00007fc64c7b5fa0 R15: 00007ffd52e57238 [ 849.621371][T12564] [ 849.645363][T12562] CPU: 1 PID: 12562 Comm: syz.5.2729 Not tainted 6.1.141-syzkaller #0 [ 849.653888][T12562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 849.664525][T12562] Call Trace: [ 849.668071][T12562] [ 849.671123][T12562] dump_stack_lvl+0x168/0x22e [ 849.675392][T12564] ERROR: Out of memory at tomoyo_realpath_from_path. [ 849.676016][T12562] ? show_regs_print_info+0x12/0x12 [ 849.691463][T12562] ? load_image+0x3b0/0x3b0 [ 849.699078][T12562] ? __might_fault+0xa6/0x120 [ 849.704719][T12562] should_fail_ex+0x399/0x4d0 [ 849.712057][T12562] copyin+0x1b/0x120 [ 849.717482][T12562] _copy_from_iter+0x45a/0x10c0 [ 849.723419][T12562] ? copyout_mc+0x110/0x110 [ 849.729870][T12562] ? __virt_addr_valid+0x188/0x540 [ 849.737014][T12562] ? __virt_addr_valid+0x188/0x540 [ 849.743785][T12562] ? __virt_addr_valid+0x465/0x540 [ 849.750655][T12562] ? __check_object_size+0x500/0xa40 [ 849.756555][T12562] netlink_sendmsg+0x746/0xbc0 [ 849.764044][T12562] ? netlink_getsockopt+0x540/0x540 [ 849.769734][T12562] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 849.776522][T12562] ? security_socket_sendmsg+0x7c/0xa0 [ 849.783886][T12562] ? netlink_getsockopt+0x540/0x540 [ 849.790091][T12562] ____sys_sendmsg+0x59b/0x970 [ 849.795085][T12562] ? __sys_sendmsg_sock+0x30/0x30 [ 849.802233][T12562] ? __import_iovec+0x315/0x500 [ 849.807740][T12562] ? import_iovec+0x6f/0xa0 [ 849.813240][T12562] ___sys_sendmsg+0x21c/0x290 [ 849.819537][T12562] ? __sys_sendmsg+0x270/0x270 [ 849.825004][T12562] ? ktime_get_real_ts64+0x420/0x420 [ 849.831662][T12562] ? __fdget+0x17c/0x200 [ 849.837304][T12562] __se_sys_sendmsg+0x19e/0x270 [ 849.843490][T12562] ? perf_trace_preemptirq_template+0x287/0x330 [ 849.850272][T12562] ? __x64_sys_sendmsg+0x80/0x80 [ 849.856324][T12562] ? lockdep_hardirqs_on+0x94/0x140 [ 849.862371][T12562] do_syscall_64+0x4c/0xa0 [ 849.868345][T12562] ? clear_bhb_loop+0x60/0xb0 [ 849.874752][T12562] ? clear_bhb_loop+0x60/0xb0 [ 849.880267][T12562] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 849.886207][T12562] RIP: 0033:0x7fb1f7f8e929 [ 849.890759][T12562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 849.911559][T12562] RSP: 002b:00007fb1f8e44038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 849.920016][T12562] RAX: ffffffffffffffda RBX: 00007fb1f81b5fa0 RCX: 00007fb1f7f8e929 [ 849.928988][T12562] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 849.937167][T12562] RBP: 00007fb1f8e44090 R08: 0000000000000000 R09: 0000000000000000 [ 849.945347][T12562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 849.953516][T12562] R13: 0000000000000000 R14: 00007fb1f81b5fa0 R15: 00007ffd95b33a78 [ 849.961602][T12562] [ 850.780955][T12583] FAULT_INJECTION: forcing a failure. [ 850.780955][T12583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 850.876343][T12583] CPU: 1 PID: 12583 Comm: syz.0.2737 Not tainted 6.1.141-syzkaller #0 [ 850.885464][T12583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 850.896745][T12583] Call Trace: [ 850.900347][T12583] [ 850.905522][T12583] dump_stack_lvl+0x168/0x22e [ 850.910800][T12583] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 850.917443][T12583] ? show_regs_print_info+0x12/0x12 [ 850.923129][T12583] ? load_image+0x3b0/0x3b0 [ 850.928017][T12583] should_fail_ex+0x399/0x4d0 [ 850.933368][T12583] copyin+0x1b/0x120 [ 850.937858][T12583] _copy_from_iter+0x45a/0x10c0 [ 850.944337][T12583] ? copyout_mc+0x110/0x110 [ 850.949669][T12583] ? __virt_addr_valid+0x188/0x540 [ 850.955331][T12583] ? __virt_addr_valid+0x188/0x540 [ 850.960939][T12583] ? __virt_addr_valid+0x465/0x540 [ 850.966556][T12583] ? __check_object_size+0x500/0xa40 [ 850.972594][T12583] netlink_sendmsg+0x746/0xbc0 [ 850.978676][T12583] ? netlink_getsockopt+0x540/0x540 [ 850.984809][T12583] ? aa_sock_msg_perm+0x94/0x150 [ 850.990240][T12583] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 850.995918][T12583] ? security_socket_sendmsg+0x7c/0xa0 [ 851.001598][T12583] ? netlink_getsockopt+0x540/0x540 [ 851.007015][T12583] ____sys_sendmsg+0x59b/0x970 [ 851.012126][T12583] ? __sys_sendmsg_sock+0x30/0x30 [ 851.017591][T12583] ? __import_iovec+0x315/0x500 [ 851.022813][T12583] ? import_iovec+0x6f/0xa0 [ 851.028562][T12583] ___sys_sendmsg+0x21c/0x290 [ 851.034236][T12583] ? __sys_sendmsg+0x270/0x270 [ 851.039084][T12583] ? ktime_get_real_ts64+0x420/0x420 [ 851.045065][T12583] ? __fdget+0x17c/0x200 [ 851.050147][T12583] __se_sys_sendmsg+0x19e/0x270 [ 851.055056][T12583] ? __x64_sys_sendmsg+0x80/0x80 [ 851.060331][T12583] ? lockdep_hardirqs_on+0x94/0x140 [ 851.066032][T12583] do_syscall_64+0x4c/0xa0 [ 851.070517][T12583] ? clear_bhb_loop+0x60/0xb0 [ 851.075607][T12583] ? clear_bhb_loop+0x60/0xb0 [ 851.080632][T12583] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 851.087632][T12583] RIP: 0033:0x7fa3ce98e929 [ 851.092274][T12583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 851.114733][T12583] RSP: 002b:00007fa3cf7e8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 851.124569][T12583] RAX: ffffffffffffffda RBX: 00007fa3cebb5fa0 RCX: 00007fa3ce98e929 [ 851.134249][T12583] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000c [ 851.143433][T12583] RBP: 00007fa3cf7e8090 R08: 0000000000000000 R09: 0000000000000000 [ 851.151542][T12583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 851.159845][T12583] R13: 0000000000000000 R14: 00007fa3cebb5fa0 R15: 00007ffd63dbbbb8 [ 851.169102][T12583] [ 851.180308][T12588] validate_nla: 2 callbacks suppressed [ 851.180348][T12588] netlink: 'syz.4.2739': attribute type 10 has an invalid length. [ 851.309638][T12591] netlink: 'syz.5.2740': attribute type 10 has an invalid length. [ 851.811865][T12603] netlink: 'syz.4.2743': attribute type 10 has an invalid length. [ 851.834709][T12600] netlink: 'syz.0.2741': attribute type 1 has an invalid length. [ 851.867429][T12603] __nla_validate_parse: 1 callbacks suppressed [ 851.867466][T12603] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2743'. [ 851.893606][T12600] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.2741'. [ 851.940784][T12602] netlink: 'syz.3.2744': attribute type 25 has an invalid length. [ 852.458451][T12611] pim6reg: tun_chr_ioctl cmd 2147767521 [ 852.467425][T12615] FAULT_INJECTION: forcing a failure. [ 852.467425][T12615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 852.506886][T12613] netlink: 'syz.0.2746': attribute type 25 has an invalid length. [ 852.533303][T12615] CPU: 0 PID: 12615 Comm: syz.1.2748 Not tainted 6.1.141-syzkaller #0 [ 852.543452][T12615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 852.554083][T12615] Call Trace: [ 852.557676][T12615] [ 852.561315][T12615] dump_stack_lvl+0x168/0x22e [ 852.567361][T12615] ? show_regs_print_info+0x12/0x12 [ 852.573692][T12615] ? load_image+0x3b0/0x3b0 [ 852.578269][T12615] ? __lock_acquire+0x7c50/0x7c50 [ 852.584689][T12615] ? snprintf+0xd7/0x120 [ 852.591013][T12615] should_fail_ex+0x399/0x4d0 [ 852.596479][T12615] _copy_to_user+0x2c/0x130 [ 852.601948][T12615] simple_read_from_buffer+0xe3/0x150 [ 852.608008][T12615] proc_fail_nth_read+0x19a/0x210 [ 852.613292][T12615] ? proc_fault_inject_write+0x2f0/0x2f0 [ 852.619826][T12615] ? fsnotify_perm+0x248/0x550 [ 852.625265][T12615] ? proc_fault_inject_write+0x2f0/0x2f0 [ 852.631587][T12615] vfs_read+0x2c0/0x920 [ 852.636448][T12615] ? kernel_read+0x1e0/0x1e0 [ 852.641358][T12615] ? __fget_files+0x28/0x4d0 [ 852.646271][T12615] ? __fget_files+0x44a/0x4d0 [ 852.651310][T12615] ? __fdget_pos+0x2ae/0x360 [ 852.657540][T12615] ? ksys_read+0x71/0x240 [ 852.661939][T12615] ksys_read+0x143/0x240 [ 852.666312][T12615] ? vfs_write+0x960/0x960 [ 852.670881][T12615] ? lockdep_hardirqs_on+0x94/0x140 [ 852.676588][T12615] do_syscall_64+0x4c/0xa0 [ 852.681107][T12615] ? clear_bhb_loop+0x60/0xb0 [ 852.686485][T12615] ? clear_bhb_loop+0x60/0xb0 [ 852.691300][T12615] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 852.697351][T12615] RIP: 0033:0x7f6d80d8d33c [ 852.701810][T12615] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 852.722816][T12615] RSP: 002b:00007f6d81beb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 852.732582][T12615] RAX: ffffffffffffffda RBX: 00007f6d80fb5fa0 RCX: 00007f6d80d8d33c [ 852.741662][T12615] RDX: 000000000000000f RSI: 00007f6d81beb0a0 RDI: 0000000000000004 [ 852.750039][T12615] RBP: 00007f6d81beb090 R08: 0000000000000000 R09: 0000000000000000 [ 852.758060][T12615] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 852.766967][T12615] R13: 0000000000000000 R14: 00007f6d80fb5fa0 R15: 00007fffc64cea68 [ 852.775709][T12615] [ 852.841748][T12611] pim6reg: tun_chr_ioctl cmd 35108 [ 852.898644][T12614] netlink: 'syz.3.2747': attribute type 10 has an invalid length. [ 852.996514][T12614] team0: Device hsr_slave_0 failed to register rx_handler [ 853.163552][T12621] netlink: 'syz.0.2751': attribute type 4 has an invalid length. [ 853.200316][T12621] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2751'. [ 853.240723][T12621] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 853.373002][T12629] netlink: 'syz.0.2751': attribute type 19 has an invalid length. [ 853.391819][T12629] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2751'. [ 853.403050][T12631] netlink: 'syz.5.2752': attribute type 10 has an invalid length. [ 853.879135][T12639] device wg2 left promiscuous mode [ 854.079400][T12653] FAULT_INJECTION: forcing a failure. [ 854.079400][T12653] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 854.122629][T12653] CPU: 0 PID: 12653 Comm: syz.4.2760 Not tainted 6.1.141-syzkaller #0 [ 854.132363][T12653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 854.143713][T12653] Call Trace: [ 854.147206][T12653] [ 854.150729][T12653] dump_stack_lvl+0x168/0x22e [ 854.155728][T12653] ? show_regs_print_info+0x12/0x12 [ 854.161255][T12653] ? load_image+0x3b0/0x3b0 [ 854.166442][T12653] ? __lock_acquire+0x7c50/0x7c50 [ 854.172123][T12653] ? slab_post_alloc_hook+0x4b/0x480 [ 854.178135][T12653] should_fail_ex+0x399/0x4d0 [ 854.183118][T12653] prepare_alloc_pages+0x1e2/0x5f0 [ 854.188636][T12653] __alloc_pages+0x123/0x4e0 [ 854.193486][T12653] ? trace_event_raw_event_lock+0x230/0x230 [ 854.199967][T12653] ? zone_statistics+0x170/0x170 [ 854.206149][T12653] ? alloc_pages+0x4d8/0x740 [ 854.211096][T12653] __get_free_pages+0x8/0x30 [ 854.216594][T12653] kasan_populate_vmalloc_pte+0x31/0xf0 [ 854.222262][T12653] ? __apply_to_page_range+0x953/0xc80 [ 854.227927][T12653] __apply_to_page_range+0x962/0xc80 [ 854.233260][T12653] ? kasan_populate_vmalloc+0x70/0x70 [ 854.239202][T12653] alloc_vmap_area+0x1754/0x1880 [ 854.244554][T12653] ? vm_map_ram+0xab0/0xab0 [ 854.250320][T12653] ? rcu_is_watching+0x11/0xa0 [ 854.255259][T12653] __get_vm_area_node+0x158/0x330 [ 854.261651][T12653] __vmalloc_node_range+0x357/0x1390 [ 854.267659][T12653] ? sock_hash_alloc+0x297/0x510 [ 854.273028][T12653] ? free_vm_area+0x50/0x50 [ 854.278116][T12653] ? __kmem_cache_alloc_node+0x140/0x260 [ 854.284232][T12653] ? rcu_is_watching+0x11/0xa0 [ 854.289151][T12653] ? bpf_map_area_alloc+0x47/0xe0 [ 854.294855][T12653] bpf_map_area_alloc+0xd4/0xe0 [ 854.300165][T12653] ? sock_hash_alloc+0x297/0x510 [ 854.305577][T12653] sock_hash_alloc+0x297/0x510 [ 854.310601][T12653] map_create+0x51f/0xe20 [ 854.314979][T12653] ? bpf_lsm_bpf+0x5/0x10 [ 854.319492][T12653] __sys_bpf+0x2f3/0x6d0 [ 854.325255][T12653] ? bpf_link_show_fdinfo+0x310/0x310 [ 854.330760][T12653] ? lock_chain_count+0x20/0x20 [ 854.335757][T12653] __x64_sys_bpf+0x78/0x90 [ 854.340456][T12653] do_syscall_64+0x4c/0xa0 [ 854.345784][T12653] ? clear_bhb_loop+0x60/0xb0 [ 854.350485][T12653] ? clear_bhb_loop+0x60/0xb0 [ 854.355632][T12653] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 854.361814][T12653] RIP: 0033:0x7fc64c58e929 [ 854.366254][T12653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 854.386456][T12653] RSP: 002b:00007fc64d436038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 854.395310][T12653] RAX: ffffffffffffffda RBX: 00007fc64c7b5fa0 RCX: 00007fc64c58e929 [ 854.403487][T12653] RDX: 0000000000000050 RSI: 0000200000000100 RDI: 0000000000000000 [ 854.411649][T12653] RBP: 00007fc64d436090 R08: 0000000000000000 R09: 0000000000000000 [ 854.419729][T12653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 854.428264][T12653] R13: 0000000000000001 R14: 00007fc64c7b5fa0 R15: 00007ffd52e57238 [ 854.436405][T12653] [ 854.547785][T12661] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2761'. [ 854.615620][T12661] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 855.424804][T12688] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2773'. [ 855.495657][T12692] device wg2 entered promiscuous mode [ 855.918046][T12700] FAULT_INJECTION: forcing a failure. [ 855.918046][T12700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 855.942978][T12700] CPU: 0 PID: 12700 Comm: syz.1.2779 Not tainted 6.1.141-syzkaller #0 [ 855.951748][T12700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 855.961940][T12700] Call Trace: [ 855.965451][T12700] [ 855.968416][T12700] dump_stack_lvl+0x168/0x22e [ 855.973155][T12700] ? show_regs_print_info+0x12/0x12 [ 855.978763][T12700] ? load_image+0x3b0/0x3b0 [ 855.983327][T12700] ? __lock_acquire+0x7c50/0x7c50 [ 855.989291][T12700] ? verify_lock_unused+0x140/0x140 [ 855.994908][T12700] ? perf_trace_lock+0xf3/0x370 [ 856.000130][T12700] should_fail_ex+0x399/0x4d0 [ 856.005227][T12700] _copy_from_user+0x2c/0x170 [ 856.010064][T12700] ___sys_sendmsg+0x155/0x290 [ 856.014819][T12700] ? __sys_sendmsg+0x270/0x270 [ 856.019675][T12700] ? __lock_acquire+0x7c50/0x7c50 [ 856.025334][T12700] ? __fdget+0x17c/0x200 [ 856.029999][T12700] __se_sys_sendmsg+0x19e/0x270 [ 856.035619][T12700] ? __x64_sys_sendmsg+0x80/0x80 [ 856.040656][T12700] ? lockdep_hardirqs_on+0x94/0x140 [ 856.045750][T12707] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2781'. [ 856.045979][T12700] do_syscall_64+0x4c/0xa0 [ 856.046017][T12700] ? clear_bhb_loop+0x60/0xb0 [ 856.046040][T12700] ? clear_bhb_loop+0x60/0xb0 [ 856.046065][T12700] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 856.073394][T12707] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 856.077193][T12700] RIP: 0033:0x7f6d80d8e929 [ 856.077224][T12700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 856.077243][T12700] RSP: 002b:00007f6d81beb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 856.077267][T12700] RAX: ffffffffffffffda RBX: 00007f6d80fb5fa0 RCX: 00007f6d80d8e929 [ 856.077283][T12700] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 856.077297][T12700] RBP: 00007f6d81beb090 R08: 0000000000000000 R09: 0000000000000000 [ 856.077311][T12700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 856.077325][T12700] R13: 0000000000000000 R14: 00007f6d80fb5fa0 R15: 00007fffc64cea68 [ 856.077357][T12700] [ 856.228272][T12708] validate_nla: 12 callbacks suppressed [ 856.228310][T12708] netlink: 'syz.3.2782': attribute type 10 has an invalid length. [ 856.480152][T12716] netlink: 'syz.5.2785': attribute type 10 has an invalid length. [ 856.501620][T12716] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.573587][T12716] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.601676][T12716] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.616151][T12716] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.896549][T12724] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2789'. [ 856.961308][T12726] netlink: 'syz.3.2790': attribute type 25 has an invalid length. [ 857.044820][T12730] netlink: 'syz.5.2791': attribute type 25 has an invalid length. [ 857.096958][T12731] netlink: 'syz.0.2792': attribute type 10 has an invalid length. [ 857.432084][T12736] netlink: 'syz.1.2793': attribute type 10 has an invalid length. [ 857.443262][T12736] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2793'. [ 857.469370][T12736] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 857.503970][T12735] netlink: 'syz.3.2795': attribute type 25 has an invalid length. [ 857.552959][T12738] netlink: 'syz.5.2794': attribute type 25 has an invalid length. [ 857.740218][T12745] netlink: 'syz.0.2797': attribute type 10 has an invalid length. [ 858.199796][T12758] netlink: 'syz.5.2802': attribute type 10 has an invalid length. [ 858.228117][T12758] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2802'. [ 858.713218][T12766] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2806'. [ 859.937891][T12802] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2819'. [ 860.308132][T12804] team0: Port device netdevsim0 added [ 860.514409][T12813] team0: Port device netdevsim0 removed [ 860.528222][T12813] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 860.539122][T12814] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2822'. [ 861.440151][T12847] validate_nla: 17 callbacks suppressed [ 861.440175][T12847] netlink: 'syz.3.2833': attribute type 10 has an invalid length. [ 861.477176][T12847] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.533559][T12847] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.543352][T12847] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.555285][T12847] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.613253][T12848] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2834'. [ 861.926208][T12851] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.2835'. [ 861.986734][T12855] netlink: 'syz.3.2837': attribute type 25 has an invalid length. [ 862.135859][T12857] netlink: 'syz.1.2838': attribute type 10 has an invalid length. [ 862.471043][T12864] netlink: 'syz.3.2841': attribute type 10 has an invalid length. [ 862.480085][T12864] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2841'. [ 862.542984][T12867] netlink: 'syz.5.2842': attribute type 25 has an invalid length. [ 862.763260][T12869] netlink: 'syz.5.2844': attribute type 10 has an invalid length. [ 863.184957][T12881] netlink: 'syz.5.2848': attribute type 10 has an invalid length. [ 863.437565][T12887] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2850'. [ 863.596731][T12892] netlink: 'syz.4.2852': attribute type 25 has an invalid length. [ 863.618621][T12889] netlink: 14719 bytes leftover after parsing attributes in process `syz.5.2851'. [ 863.856756][T12896] netlink: 'syz.3.2854': attribute type 25 has an invalid length. [ 863.948285][T12900] netlink: 'syz.0.2855': attribute type 10 has an invalid length. [ 864.927200][T12912] device netdevsim0 left promiscuous mode [ 864.945021][ T4302] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 864.964278][ T4302] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 864.974518][ T4302] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 864.985694][ T4302] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 864.995990][ T4302] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 865.007581][T12912] bridge0: port 3(netdevsim0) entered disabled state [ 865.038716][ T4302] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 865.252068][T12912] team0: Port device netdevsim0 added [ 865.401431][T12917] team0: Port device netdevsim0 removed [ 865.425216][T12917] device netdevsim0 entered promiscuous mode [ 865.438887][T12917] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 865.469037][T12919] netlink: 830 bytes leftover after parsing attributes in process `syz.5.2864'. [ 865.866893][T12934] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2867'. [ 866.089772][T12913] chnl_net:caif_netlink_parms(): no params data found [ 866.267608][T12944] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.2870'. [ 866.292123][T12913] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.308998][T12913] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.329326][T12913] device bridge_slave_0 entered promiscuous mode [ 866.340421][T12913] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.355115][T12913] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.367287][T12913] device bridge_slave_1 entered promiscuous mode [ 866.377598][T12944] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2870'. [ 866.407299][T12944] wlan1: mtu less than device minimum [ 866.419165][T12944] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 866.494549][T12913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 866.524171][T12913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 866.650685][T12913] team0: Port device team_slave_0 added [ 866.687059][T12913] team0: Port device team_slave_1 added [ 866.696596][T12955] validate_nla: 8 callbacks suppressed [ 866.696618][T12955] netlink: 'syz.5.2874': attribute type 10 has an invalid length. [ 866.790500][T12953] netlink: 'syz.1.2873': attribute type 25 has an invalid length. [ 866.805799][T12913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 866.823552][T12913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 866.956303][T12913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 867.009936][T12913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 867.056044][T12913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 867.113787][T10408] Bluetooth: hci2: command 0x0409 tx timeout [ 867.182042][T12913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 867.272894][T12966] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2879'. [ 867.331384][T12969] netlink: 'syz.0.2880': attribute type 10 has an invalid length. [ 867.353238][T12969] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2880'. [ 867.413416][T12969] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 867.457440][T12913] device hsr_slave_0 entered promiscuous mode [ 867.471105][T12913] device hsr_slave_1 entered promiscuous mode [ 867.494577][T12913] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 867.517857][T12913] Cannot create hsr debugfs directory [ 867.779867][T12975] netlink: 'syz.1.2882': attribute type 25 has an invalid length. [ 867.959163][T12981] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.2886'. [ 867.978460][T12981] netlink: 'syz.4.2886': attribute type 4 has an invalid length. [ 867.988101][T12981] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2886'. [ 868.019333][T12981] wlan1: mtu less than device minimum [ 868.028588][T12981] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 868.634227][T12995] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2892'. [ 868.727889][T12913] device netdevsim0 left promiscuous mode [ 868.742769][T12913] bridge0: port 3(netdevsim0) entered disabled state [ 868.844863][T13001] netlink: 'syz.5.2893': attribute type 25 has an invalid length. [ 869.151706][T13006] netlink: 'syz.4.2895': attribute type 25 has an invalid length. [ 869.192853][T13009] netlink: 'syz.5.2897': attribute type 10 has an invalid length. [ 869.203869][T10408] Bluetooth: hci2: command 0x041b tx timeout [ 869.309405][T12913] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 869.380158][T12913] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 869.463611][T12913] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 869.515808][T12913] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 869.552475][T13018] netlink: 'syz.0.2898': attribute type 10 has an invalid length. [ 869.660104][T13023] pim6reg: tun_chr_ioctl cmd 2147767521 [ 869.718186][T13023] pim6reg: tun_chr_ioctl cmd 35108 [ 869.788837][T13023] netlink: 'syz.4.2904': attribute type 10 has an invalid length. [ 869.909481][T13023] team0: Device hsr_slave_0 failed to register rx_handler [ 869.989153][T13026] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2905'. [ 870.118328][T13034] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2907'. [ 870.157613][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.166380][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.212049][T12913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 870.280719][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 870.295012][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 870.325412][T12913] 8021q: adding VLAN 0 to HW filter on device team0 [ 870.344854][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 870.356065][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 870.366110][ T7095] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.374843][ T7095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 870.401641][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 870.411468][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 870.431801][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 870.442392][ T7095] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.452813][ T7095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 870.469513][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 870.504713][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 870.526493][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 870.561752][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 870.584686][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 870.605495][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 870.665075][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 870.694909][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 870.724644][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 870.746506][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 870.770899][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 870.806338][T12913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 871.276085][T10408] Bluetooth: hci2: command 0x040f tx timeout [ 871.395934][T13060] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2917'. [ 871.709045][T13070] validate_nla: 9 callbacks suppressed [ 871.709078][T13070] netlink: 'syz.1.2921': attribute type 10 has an invalid length. [ 871.782764][T12913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 871.818488][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 871.853771][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 871.894824][T13074] netlink: 'syz.4.2923': attribute type 10 has an invalid length. [ 871.941322][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 871.966153][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 872.000947][T12913] device veth0_vlan entered promiscuous mode [ 872.024212][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 872.061151][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 872.088803][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 872.118043][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 872.128926][T13073] netlink: 'syz.0.2922': attribute type 10 has an invalid length. [ 872.145275][T13083] netlink: 'syz.5.2924': attribute type 10 has an invalid length. [ 872.163089][T13084] netlink: 'syz.1.2925': attribute type 10 has an invalid length. [ 872.183098][T12913] device veth1_vlan entered promiscuous mode [ 872.254961][T13082] netlink: 'syz.4.2926': attribute type 25 has an invalid length. [ 872.314630][T12913] device veth0_macvtap entered promiscuous mode [ 872.330630][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 872.364584][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 872.381859][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 872.411177][T12913] device veth1_macvtap entered promiscuous mode [ 872.440743][T13087] netlink: 'syz.0.2927': attribute type 10 has an invalid length. [ 872.490009][T12913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 872.549976][T12913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.582707][T12913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 872.601086][T12913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.611769][T12913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 872.642337][T12913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.669743][T12913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 872.698460][T13095] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2930'. [ 872.719632][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 872.753485][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 872.770718][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 872.817660][T12913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 872.835915][T12913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.847604][T12913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 872.860681][T12913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.874247][T12913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 872.886113][T12913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.898719][T12913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 872.935411][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 872.966342][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 872.988623][T12913] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.053606][T12913] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.073575][T12913] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.121882][T12913] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.164920][T13100] netlink: 'syz.4.2941': attribute type 10 has an invalid length. [ 873.261346][T13104] netlink: 'syz.0.2940': attribute type 1 has an invalid length. [ 873.300859][T13104] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.2940'. [ 873.355016][T10408] Bluetooth: hci2: command 0x0419 tx timeout [ 873.537900][T13106] netlink: 'syz.1.2932': attribute type 25 has an invalid length. [ 873.701844][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 873.753690][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 873.793235][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 873.850851][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 873.903538][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 873.935059][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 874.269948][T13128] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2942'. [ 874.470860][T13134] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2859'. [ 874.528285][T13134] batman_adv: batadv0: Adding interface: vlan1 [ 874.579526][T13134] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 874.693973][T13134] batman_adv: batadv0: Interface activated: vlan1 [ 876.087138][T13164] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2954'. [ 876.295135][T13163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 876.384611][T13163] team0: Port device batadv0 added [ 876.416868][T13169] netlink: 830 bytes leftover after parsing attributes in process `syz.5.2956'. [ 876.501727][T13174] FAULT_INJECTION: forcing a failure. [ 876.501727][T13174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 876.543134][T13174] CPU: 1 PID: 13174 Comm: syz.1.2957 Not tainted 6.1.141-syzkaller #0 [ 876.552614][T13174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 876.563860][T13174] Call Trace: [ 876.567474][T13174] [ 876.570624][T13174] dump_stack_lvl+0x168/0x22e [ 876.575374][T13174] ? show_regs_print_info+0x12/0x12 [ 876.580833][T13174] ? load_image+0x3b0/0x3b0 [ 876.585503][T13174] ? __might_fault+0xa6/0x120 [ 876.590976][T13174] should_fail_ex+0x399/0x4d0 [ 876.595730][T13174] copyin+0x1b/0x120 [ 876.600861][T13174] _copy_from_iter+0x45a/0x10c0 [ 876.606146][T13174] ? copyout_mc+0x110/0x110 [ 876.610702][T13174] ? __virt_addr_valid+0x188/0x540 [ 876.616240][T13174] ? __virt_addr_valid+0x188/0x540 [ 876.622505][T13174] ? __virt_addr_valid+0x465/0x540 [ 876.629243][T13174] ? __check_object_size+0x500/0xa40 [ 876.635279][T13174] netlink_sendmsg+0x746/0xbc0 [ 876.640128][T13174] ? netlink_getsockopt+0x540/0x540 [ 876.646076][T13174] ? aa_sock_msg_perm+0x94/0x150 [ 876.652187][T13174] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 876.658293][T13174] ? security_socket_sendmsg+0x7c/0xa0 [ 876.664383][T13174] ? netlink_getsockopt+0x540/0x540 [ 876.669713][T13174] ____sys_sendmsg+0x59b/0x970 [ 876.674818][T13174] ? __sys_sendmsg_sock+0x30/0x30 [ 876.680201][T13174] ? __import_iovec+0x315/0x500 [ 876.685268][T13174] ? import_iovec+0x6f/0xa0 [ 876.690527][T13174] ___sys_sendmsg+0x21c/0x290 [ 876.695242][T13174] ? __sys_sendmsg+0x270/0x270 [ 876.700046][T13174] ? __lock_acquire+0x7c50/0x7c50 [ 876.705136][T13174] ? __fdget+0x17c/0x200 [ 876.710380][T13174] __se_sys_sendmsg+0x19e/0x270 [ 876.715369][T13174] ? __x64_sys_sendmsg+0x80/0x80 [ 876.722140][T13174] ? lockdep_hardirqs_on+0x94/0x140 [ 876.727675][T13174] do_syscall_64+0x4c/0xa0 [ 876.732306][T13174] ? clear_bhb_loop+0x60/0xb0 [ 876.737310][T13174] ? clear_bhb_loop+0x60/0xb0 [ 876.742024][T13174] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 876.748370][T13174] RIP: 0033:0x7f6d80d8e929 [ 876.752933][T13174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 876.776224][T13174] RSP: 002b:00007f6d81beb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 876.786925][T13174] RAX: ffffffffffffffda RBX: 00007f6d80fb5fa0 RCX: 00007f6d80d8e929 [ 876.796279][T13174] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 876.805441][T13174] RBP: 00007f6d81beb090 R08: 0000000000000000 R09: 0000000000000000 [ 876.814477][T13174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 876.822939][T13174] R13: 0000000000000000 R14: 00007f6d80fb5fa0 R15: 00007fffc64cea68 [ 876.831803][T13174] [ 877.252312][T13186] validate_nla: 6 callbacks suppressed [ 877.252353][T13186] netlink: 'syz.1.2960': attribute type 10 has an invalid length. [ 877.285431][T13186] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2960'. [ 877.317269][T13186] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 877.381569][T13185] netlink: 'syz.5.2962': attribute type 10 has an invalid length. [ 877.531887][T13193] netlink: 'syz.4.2965': attribute type 1 has an invalid length. [ 877.551833][T13193] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.2965'. [ 877.782304][T13200] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2967'. [ 877.801450][T13200] device bond_slave_0 entered promiscuous mode [ 877.807961][T13200] device bond_slave_1 entered promiscuous mode [ 877.919234][T13203] netlink: 'syz.0.2969': attribute type 10 has an invalid length. [ 878.276814][T13212] FAULT_INJECTION: forcing a failure. [ 878.276814][T13212] name failslab, interval 1, probability 0, space 0, times 0 [ 878.329084][T13212] CPU: 0 PID: 13212 Comm: syz.0.2973 Not tainted 6.1.141-syzkaller #0 [ 878.338733][T13212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 878.349022][T13212] Call Trace: [ 878.352552][T13212] [ 878.355544][T13212] dump_stack_lvl+0x168/0x22e [ 878.361245][T13212] ? show_regs_print_info+0x12/0x12 [ 878.366958][T13212] ? load_image+0x3b0/0x3b0 [ 878.371626][T13212] ? __might_sleep+0xd0/0xd0 [ 878.376730][T13212] ? __lock_acquire+0x7c50/0x7c50 [ 878.382655][T13212] should_fail_ex+0x399/0x4d0 [ 878.387567][T13212] should_failslab+0x5/0x20 [ 878.392742][T13212] slab_pre_alloc_hook+0x59/0x310 [ 878.398188][T13212] ? __request_module+0x30c/0x9a0 [ 878.403908][T13212] __kmem_cache_alloc_node+0x4f/0x260 [ 878.409967][T13212] ? __request_module+0x30c/0x9a0 [ 878.416385][T13212] __kmalloc_node_track_caller+0x9e/0x230 [ 878.422713][T13212] kstrdup+0x37/0x70 [ 878.426855][T13212] __request_module+0x30c/0x9a0 [ 878.432282][T13212] ? do_vfs_ioctl+0xcb5/0x1d10 [ 878.438777][T13212] ? umd_cleanup+0x110/0x110 [ 878.443966][T13212] ? aa_get_newest_label+0xf4/0x5c0 [ 878.450452][T13212] ? end_current_label_crit_section+0x170/0x170 [ 878.456975][T13212] ? apparmor_capable+0x12c/0x190 [ 878.462331][T13212] ? bpf_lsm_capable+0x5/0x10 [ 878.467061][T13212] ? security_capable+0x85/0xb0 [ 878.472489][T13212] ? dev_load+0x1d/0x1e0 [ 878.477451][T13212] dev_load+0x187/0x1e0 [ 878.481972][T13212] dev_ioctl+0x480/0xea0 [ 878.486271][T13212] sock_do_ioctl+0x222/0x2f0 [ 878.491193][T13212] ? sock_show_fdinfo+0xb0/0xb0 [ 878.496554][T13212] sock_ioctl+0x4ed/0x6e0 [ 878.501118][T13212] ? sock_poll+0x3f0/0x3f0 [ 878.505685][T13212] ? bpf_lsm_file_ioctl+0x5/0x10 [ 878.511035][T13212] ? security_file_ioctl+0x7c/0xa0 [ 878.516567][T13212] ? sock_poll+0x3f0/0x3f0 [ 878.521213][T13212] __se_sys_ioctl+0xfa/0x170 [ 878.526278][T13212] do_syscall_64+0x4c/0xa0 [ 878.531017][T13212] ? clear_bhb_loop+0x60/0xb0 [ 878.535925][T13212] ? clear_bhb_loop+0x60/0xb0 [ 878.540916][T13212] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 878.546983][T13212] RIP: 0033:0x7fa3ce98e929 [ 878.551473][T13212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 878.571651][T13212] RSP: 002b:00007fa3cf7e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 878.580204][T13212] RAX: ffffffffffffffda RBX: 00007fa3cebb5fa0 RCX: 00007fa3ce98e929 [ 878.588232][T13212] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 878.596779][T13212] RBP: 00007fa3cf7e8090 R08: 0000000000000000 R09: 0000000000000000 [ 878.605045][T13212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 878.613332][T13212] R13: 0000000000000000 R14: 00007fa3cebb5fa0 R15: 00007ffd63dbbbb8 [ 878.621452][T13212] [ 878.817866][ T4302] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 878.829335][ T4302] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 878.840694][ T4302] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 878.858548][ T4302] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 878.868182][ T4302] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 878.877160][ T4302] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 879.547846][T13218] chnl_net:caif_netlink_parms(): no params data found [ 879.611141][T13234] netlink: 'syz.0.2979': attribute type 10 has an invalid length. [ 879.843003][T13218] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.881968][T13218] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.904776][T13218] device bridge_slave_0 entered promiscuous mode [ 879.942497][T13218] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.958766][T13218] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.970468][T13218] device bridge_slave_1 entered promiscuous mode [ 880.003985][T13241] netlink: 'syz.3.2981': attribute type 10 has an invalid length. [ 880.038308][T13241] device erspan0 entered promiscuous mode [ 880.100976][T13241] bond0: (slave erspan0): Enslaving as an active interface with an up link [ 880.196863][T13218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 880.272446][T13252] netlink: 'syz.4.2983': attribute type 10 has an invalid length. [ 880.289493][T13253] netlink: 'syz.5.2980': attribute type 10 has an invalid length. [ 880.320998][T13218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 880.411240][T13218] team0: Port device team_slave_0 added [ 880.463946][T13218] team0: Port device team_slave_1 added [ 880.773174][T13218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 880.815736][T13218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 880.961934][T10408] Bluetooth: hci4: command 0x0409 tx timeout [ 881.133361][T13218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 881.512036][T13218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 881.552787][T13218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 881.716535][T13218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 882.420239][T13218] device hsr_slave_0 entered promiscuous mode [ 882.454211][T13218] device hsr_slave_1 entered promiscuous mode [ 882.479885][T13218] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 882.499075][T13218] Cannot create hsr debugfs directory [ 883.044610][T10408] Bluetooth: hci4: command 0x041b tx timeout [ 883.144198][T13308] netlink: 'syz.3.2997': attribute type 10 has an invalid length. [ 883.239038][T13309] netlink: 'syz.0.2996': attribute type 10 has an invalid length. [ 883.349921][T13312] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2999'. [ 883.727982][T13318] netlink: 'syz.0.3001': attribute type 10 has an invalid length. [ 883.963186][T13325] netlink: 'syz.3.3002': attribute type 10 has an invalid length. [ 884.017224][T13325] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3002'. [ 884.281352][T13218] bond0: (slave netdevsim0): Releasing backup interface [ 884.584554][T13343] netlink: 'syz.4.3007': attribute type 10 has an invalid length. [ 884.623702][ T4341] device hsr_slave_0 left promiscuous mode [ 884.632005][ T4341] device hsr_slave_1 left promiscuous mode [ 884.658519][ T4341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 884.666981][ T4341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 884.682271][ T4341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 884.692279][ T4341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 884.708460][ T4341] batman_adv: batadv0: Interface deactivated: vlan1 [ 884.737507][ T4341] batman_adv: batadv0: Removing interface: vlan1 [ 884.789491][ T4341] device bridge_slave_1 left promiscuous mode [ 884.815244][ T4341] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.843371][ T4341] device bridge_slave_0 left promiscuous mode [ 884.860187][ T4341] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.930336][ T4341] device veth1_macvtap left promiscuous mode [ 884.951768][ T4341] device veth1_vlan left promiscuous mode [ 884.966454][ T4341] device veth0_vlan left promiscuous mode [ 885.113842][T10408] Bluetooth: hci4: command 0x040f tx timeout [ 885.400911][ T4341] team0 (unregistering): Port device geneve1 removed [ 885.640467][ T4341] team0 (unregistering): Port device macvlan0 removed [ 886.109964][ T4341] team0 (unregistering): Port device team_slave_1 removed [ 886.181095][ T4341] team0 (unregistering): Port device team_slave_0 removed [ 886.247927][ T4341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 886.310891][ T4341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 886.524555][ T4341] team0 (unregistering): Port device batadv0 removed [ 886.835939][ T4341] bond0 (unregistering): Released all slaves [ 886.951524][T13354] netlink: 'syz.4.3011': attribute type 25 has an invalid length. [ 887.013886][T13358] netlink: 'syz.5.3012': attribute type 10 has an invalid length. [ 887.061308][T13358] device erspan0 entered promiscuous mode [ 887.115557][T13358] bond0: (slave erspan0): Enslaving as an active interface with an up link [ 887.193527][ T4302] Bluetooth: hci4: command 0x0419 tx timeout [ 887.233726][T13363] netlink: 'syz.3.3022': attribute type 10 has an invalid length. [ 887.265091][T13363] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3022'. [ 887.341499][T13367] netlink: 'syz.4.3013': attribute type 10 has an invalid length. [ 887.361487][T13366] netlink: 'syz.0.3014': attribute type 10 has an invalid length. [ 887.373352][T13218] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 887.391461][T13218] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 887.439078][T13218] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 887.497239][T13218] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 887.852309][T13218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 888.106189][T13218] 8021q: adding VLAN 0 to HW filter on device team0 [ 888.136185][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 888.184447][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 888.214284][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 888.234664][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 888.268008][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.275828][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 888.320027][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 888.338173][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 888.355237][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.362471][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 888.402939][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 888.509548][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 888.569131][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 888.581327][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 888.593236][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 888.606710][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 888.630501][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 888.670292][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 888.742297][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 888.807872][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 888.847294][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 888.859442][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 888.874908][T13218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 888.886479][T13391] netlink: 'syz.5.3023': attribute type 25 has an invalid length. [ 889.301207][T13407] netlink: 'syz.4.3027': attribute type 10 has an invalid length. [ 889.461418][T13409] netlink: 'syz.0.3028': attribute type 10 has an invalid length. [ 889.481494][T13409] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3028'. [ 889.493225][T13409] device team0 entered promiscuous mode [ 889.500839][T13409] device team_slave_0 entered promiscuous mode [ 889.526185][T13409] device team_slave_1 entered promiscuous mode [ 889.544012][T13409] device macvlan0 entered promiscuous mode [ 889.563954][T13409] device geneve1 entered promiscuous mode [ 889.580361][T13409] bridge0: port 3(team0) entered blocking state [ 889.590626][T13409] bridge0: port 3(team0) entered disabled state [ 889.602754][T13409] bridge0: port 3(team0) entered blocking state [ 889.611429][T13409] bridge0: port 3(team0) entered forwarding state [ 889.631798][T13413] netlink: 'syz.3.3030': attribute type 10 has an invalid length. [ 889.740073][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 889.765687][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 889.801358][T13218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 889.920837][T13422] netlink: 830 bytes leftover after parsing attributes in process `syz.5.3032'. [ 889.976353][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 890.006585][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 890.017597][T13424] netlink: 'syz.3.3033': attribute type 10 has an invalid length. [ 890.110821][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 890.166142][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 890.205987][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 890.267606][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 890.317236][T13428] netlink: 'syz.4.3036': attribute type 25 has an invalid length. [ 890.349135][T13218] device veth0_vlan entered promiscuous mode [ 890.404754][T13218] device veth1_vlan entered promiscuous mode [ 890.608934][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 890.654174][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 890.731655][T13218] device veth0_macvtap entered promiscuous mode [ 890.782758][T13218] device veth1_macvtap entered promiscuous mode [ 890.860825][T13218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 890.874202][T13218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.885611][T13218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 890.899393][T13218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.950400][T13218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 890.968791][T13218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.004478][T13218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 891.020067][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 891.047880][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 891.069132][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 891.082361][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 891.099337][T13218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 891.172317][T13218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.191269][T13218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 891.215242][T13218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.232950][T13218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 891.248966][T13218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.263938][T13218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 891.288214][T13444] netlink: 'syz.4.3041': attribute type 10 has an invalid length. [ 891.302442][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 891.325700][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 891.384676][T13218] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.517011][T13218] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.545879][T13218] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.557613][T13218] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.600594][T13452] netlink: 'syz.4.3042': attribute type 10 has an invalid length. [ 891.641970][T13450] netlink: 'syz.3.3043': attribute type 10 has an invalid length. [ 891.819542][ T4389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 891.857430][ T4389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 891.897360][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 891.940304][ T4389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 891.967019][ T4389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 891.996625][T13461] netlink: 'syz.4.3047': attribute type 25 has an invalid length. [ 892.021438][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 892.920523][T13482] team0: Port device geneve1 added [ 892.950045][T13484] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.3054'. [ 893.046270][T13487] netlink: 16098 bytes leftover after parsing attributes in process `syz.5.3055'. [ 893.427572][T13490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 893.523188][T13490] team0: Port device batadv0 added [ 893.572013][T13493] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3057'. [ 893.765746][ T4302] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 893.778365][ T4302] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 893.790040][ T4302] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 893.803055][ T4302] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 893.812434][ T4302] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 893.820998][ T4302] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 894.341787][T13511] validate_nla: 6 callbacks suppressed [ 894.341808][T13511] netlink: 'syz.1.3063': attribute type 10 has an invalid length. [ 894.538976][ T7095] bond0: (slave netdevsim0): Releasing backup interface [ 894.892934][T13526] netlink: 'syz.1.3069': attribute type 1 has an invalid length. [ 894.986197][T13526] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.3069'. [ 895.016857][T13500] chnl_net:caif_netlink_parms(): no params data found [ 895.309439][T13539] netlink: 'syz.4.3071': attribute type 1 has an invalid length. [ 895.336938][T13539] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.3071'. [ 895.579362][T13545] netlink: 'syz.5.3072': attribute type 10 has an invalid length. [ 895.913817][ T4302] Bluetooth: hci0: command 0x0409 tx timeout [ 895.933113][T13560] delete_channel: no stack [ 895.938311][T13560] delete_channel: no stack [ 896.155498][T13500] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.162793][T13500] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.231152][T13500] device bridge_slave_0 entered promiscuous mode [ 896.360564][T13500] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.402167][T13500] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.440818][T13500] device bridge_slave_1 entered promiscuous mode [ 896.826009][T13500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 897.106453][T13500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 897.159762][T13578] netlink: 'syz.3.3079': attribute type 10 has an invalid length. [ 897.207586][T13500] team0: Port device team_slave_0 added [ 897.351637][T13500] team0: Port device team_slave_1 added [ 897.496526][T13589] device wg2 entered promiscuous mode [ 897.510366][T13590] netlink: 'syz.5.3082': attribute type 10 has an invalid length. [ 897.558101][T13500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 897.597701][T13500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 897.663019][T13500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 897.776540][ T7095] bond0: (slave wlan1): Releasing backup interface [ 897.815485][T13593] netlink: 'syz.3.3083': attribute type 25 has an invalid length. [ 897.852385][T13594] netlink: 'syz.1.3084': attribute type 1 has an invalid length. [ 897.865713][T13594] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.3084'. [ 897.876949][T13500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 897.885292][T13500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 897.924346][T13500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 897.965953][T13603] netlink: 'syz.4.3085': attribute type 10 has an invalid length. [ 897.994457][ T4302] Bluetooth: hci0: command 0x041b tx timeout [ 898.254265][T13500] device hsr_slave_0 entered promiscuous mode [ 898.282874][T13500] device hsr_slave_1 entered promiscuous mode [ 898.322948][ T7095] device hsr_slave_0 left promiscuous mode [ 898.360326][ T7095] device hsr_slave_1 left promiscuous mode [ 898.415543][ T7095] bridge0: port 3(team0) entered disabled state [ 898.444819][ T7095] device bridge_slave_1 left promiscuous mode [ 898.451968][ T7095] bridge0: port 2(bridge_slave_1) entered disabled state [ 899.097155][ T7095] device bridge_slave_0 left promiscuous mode [ 899.111536][ T7095] bridge0: port 1(bridge_slave_0) entered disabled state [ 899.236250][ T7095] device veth1_macvtap left promiscuous mode [ 899.250915][ T7095] device veth1_vlan left promiscuous mode [ 899.261293][ T7095] device veth0_vlan left promiscuous mode [ 899.587038][ T7095] device geneve1 left promiscuous mode [ 899.611158][ T7095] team0 (unregistering): Port device geneve1 removed [ 899.772317][ T7095] device macvlan0 left promiscuous mode [ 899.782504][ T7095] team0 (unregistering): Port device macvlan0 removed [ 900.073855][ T4302] Bluetooth: hci0: command 0x040f tx timeout [ 900.112887][ T7095] device team_slave_1 left promiscuous mode [ 900.121570][ T7095] team0 (unregistering): Port device team_slave_1 removed [ 900.170264][ T7095] device team_slave_0 left promiscuous mode [ 900.180918][ T7095] team0 (unregistering): Port device team_slave_0 removed [ 900.228034][ T7095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 900.276932][ T7095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 900.789451][ T7095] bond0 (unregistering): Released all slaves [ 900.888280][T13617] netlink: 'syz.4.3090': attribute type 1 has an invalid length. [ 900.900676][T13617] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.3090'. [ 900.917154][T13619] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3091'. [ 900.930781][T13619] device bond_slave_0 entered promiscuous mode [ 900.939101][T13619] device bond_slave_1 entered promiscuous mode [ 900.954655][T13634] netlink: 'syz.5.3092': attribute type 10 has an invalid length. [ 901.929746][T13660] netlink: 'syz.1.3097': attribute type 10 has an invalid length. [ 902.156394][ T4302] Bluetooth: hci0: command 0x0419 tx timeout [ 902.174112][T13668] netlink: 'syz.4.3099': attribute type 22 has an invalid length. [ 902.182459][T13668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3099'. [ 902.404560][T13674] netlink: 'syz.1.3100': attribute type 1 has an invalid length. [ 902.443735][T13674] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.3100'. [ 902.855780][T13500] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 902.933227][T13500] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 903.017618][T13500] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 903.059049][T13500] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 903.437431][T13500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 903.498861][ T4583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 903.540434][ T4583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 903.572477][T13500] 8021q: adding VLAN 0 to HW filter on device team0 [ 903.607963][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 903.694663][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 903.741136][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.750574][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 903.886947][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 903.910790][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 903.922729][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 903.939132][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.946600][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 903.964057][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 903.988366][T13712] FAULT_INJECTION: forcing a failure. [ 903.988366][T13712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 904.018769][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 904.033819][T13712] CPU: 1 PID: 13712 Comm: syz.1.3109 Not tainted 6.1.141-syzkaller #0 [ 904.043176][T13712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 904.053768][T13712] Call Trace: [ 904.058222][T13712] [ 904.061464][T13712] dump_stack_lvl+0x168/0x22e [ 904.066514][T13712] ? show_regs_print_info+0x12/0x12 [ 904.073912][T13712] ? load_image+0x3b0/0x3b0 [ 904.080600][T13712] ? __lock_acquire+0x7c50/0x7c50 [ 904.086677][T13712] should_fail_ex+0x399/0x4d0 [ 904.091443][T13712] _copy_from_user+0x2c/0x170 [ 904.097977][T13712] iovec_from_user+0x143/0x360 [ 904.104605][T13712] __import_iovec+0x6d/0x500 [ 904.110771][T13712] ? __might_fault+0xa6/0x120 [ 904.115825][T13712] import_iovec+0x6f/0xa0 [ 904.120593][T13712] ___sys_sendmsg+0x1e4/0x290 [ 904.126144][T13712] ? __sys_sendmsg+0x270/0x270 [ 904.131223][T13712] ? __lock_acquire+0x7c50/0x7c50 [ 904.136471][T13712] ? __fdget+0x17c/0x200 [ 904.140784][T13712] __se_sys_sendmsg+0x19e/0x270 [ 904.145993][T13712] ? __x64_sys_sendmsg+0x80/0x80 [ 904.151936][T13712] ? lockdep_hardirqs_on+0x94/0x140 [ 904.157719][T13712] do_syscall_64+0x4c/0xa0 [ 904.162459][T13712] ? clear_bhb_loop+0x60/0xb0 [ 904.167368][T13712] ? clear_bhb_loop+0x60/0xb0 [ 904.172203][T13712] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 904.178443][T13712] RIP: 0033:0x7f02a3b8e929 [ 904.183723][T13712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 904.205039][T13712] RSP: 002b:00007f02a4a9e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 904.213858][T13712] RAX: ffffffffffffffda RBX: 00007f02a3db5fa0 RCX: 00007f02a3b8e929 [ 904.222126][T13712] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000006 [ 904.230407][T13712] RBP: 00007f02a4a9e090 R08: 0000000000000000 R09: 0000000000000000 [ 904.238802][T13712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 904.247070][T13712] R13: 0000000000000000 R14: 00007f02a3db5fa0 R15: 00007ffc595fcbc8 [ 904.255240][T13712] [ 904.303877][T13711] netlink: 'syz.5.3108': attribute type 25 has an invalid length. [ 904.378051][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 904.389934][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 904.410121][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 904.431594][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 904.441443][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 904.458661][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 904.489462][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 904.523307][T13500] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 904.583786][T13500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 904.593745][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 904.622009][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 904.653807][T13718] netlink: 'syz.3.3110': attribute type 10 has an invalid length. [ 904.754693][T13718] device wlan1 entered promiscuous mode [ 904.763368][T13718] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 905.036002][T13730] netlink: 'syz.4.3116': attribute type 10 has an invalid length. [ 905.497986][T13745] netlink: 'syz.4.3118': attribute type 10 has an invalid length. [ 905.571714][T13745] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3118'. [ 905.754609][T13751] netlink: 'syz.1.3119': attribute type 10 has an invalid length. [ 905.804142][T13751] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3119'. [ 905.850590][T13751] device team0 entered promiscuous mode [ 905.944640][T13751] device team_slave_0 entered promiscuous mode [ 905.999275][T13751] device team_slave_1 entered promiscuous mode [ 906.030202][T13751] device geneve1 entered promiscuous mode [ 906.049819][T13751] device batadv0 entered promiscuous mode [ 906.069342][T13751] bridge0: port 3(team0) entered blocking state [ 906.087932][T13751] bridge0: port 3(team0) entered disabled state [ 906.152514][T13751] bridge0: port 3(team0) entered blocking state [ 906.160084][T13751] bridge0: port 3(team0) entered forwarding state [ 906.262872][T13500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 906.271822][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 906.291518][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 906.378904][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 906.415879][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 906.462179][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 906.474896][ T4341] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 906.479964][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 906.486818][ T4341] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 906.581406][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 906.632800][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 906.680345][T13770] device wg2 entered promiscuous mode [ 906.708043][T13774] netlink: 'syz.4.3122': attribute type 10 has an invalid length. [ 906.728627][T13775] netlink: 'syz.1.3123': attribute type 25 has an invalid length. [ 906.758279][T13500] device veth0_vlan entered promiscuous mode [ 906.790824][T13500] device veth1_vlan entered promiscuous mode [ 906.912192][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 906.931556][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 906.975319][T13500] device veth0_macvtap entered promiscuous mode [ 906.989476][T13785] FAULT_INJECTION: forcing a failure. [ 906.989476][T13785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 907.012240][T13500] device veth1_macvtap entered promiscuous mode [ 907.062929][T13785] CPU: 0 PID: 13785 Comm: syz.5.3127 Not tainted 6.1.141-syzkaller #0 [ 907.071266][T13785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 907.081678][T13785] Call Trace: [ 907.085275][T13785] [ 907.088339][T13785] dump_stack_lvl+0x168/0x22e [ 907.094019][T13785] ? show_regs_print_info+0x12/0x12 [ 907.100703][T13785] ? load_image+0x3b0/0x3b0 [ 907.107111][T13785] ? __might_fault+0xa6/0x120 [ 907.112485][T13785] should_fail_ex+0x399/0x4d0 [ 907.117320][T13785] copyin+0x1b/0x120 [ 907.121459][T13785] _copy_from_iter+0x45a/0x10c0 [ 907.126855][T13785] ? copyout_mc+0x110/0x110 [ 907.132101][T13785] ? __virt_addr_valid+0x188/0x540 [ 907.138378][T13785] ? __virt_addr_valid+0x188/0x540 [ 907.145560][T13785] ? __virt_addr_valid+0x465/0x540 [ 907.151009][T13785] ? __check_object_size+0x500/0xa40 [ 907.156491][T13785] netlink_sendmsg+0x746/0xbc0 [ 907.162320][T13785] ? netlink_getsockopt+0x540/0x540 [ 907.168088][T13785] ? aa_sock_msg_perm+0x94/0x150 [ 907.173794][T13785] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 907.175713][T13500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 907.179209][T13785] ? security_socket_sendmsg+0x7c/0xa0 [ 907.179243][T13785] ? netlink_getsockopt+0x540/0x540 [ 907.202256][T13785] ____sys_sendmsg+0x59b/0x970 [ 907.207718][T13785] ? __sys_sendmsg_sock+0x30/0x30 [ 907.213185][T13785] ? __import_iovec+0x315/0x500 [ 907.218850][T13785] ? import_iovec+0x6f/0xa0 [ 907.223451][T13785] ___sys_sendmsg+0x21c/0x290 [ 907.228929][T13785] ? __sys_sendmsg+0x270/0x270 [ 907.235718][T13785] ? __lock_acquire+0x7c50/0x7c50 [ 907.241046][T13785] ? __fdget+0x17c/0x200 [ 907.245752][T13785] __se_sys_sendmsg+0x19e/0x270 [ 907.251204][T13785] ? __x64_sys_sendmsg+0x80/0x80 [ 907.251415][T13500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.257359][T13785] ? lockdep_hardirqs_on+0x94/0x140 [ 907.257399][T13785] do_syscall_64+0x4c/0xa0 [ 907.257429][T13785] ? clear_bhb_loop+0x60/0xb0 [ 907.257451][T13785] ? clear_bhb_loop+0x60/0xb0 [ 907.257474][T13785] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 907.257508][T13785] RIP: 0033:0x7fb1f7f8e929 [ 907.257530][T13785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 907.257556][T13785] RSP: 002b:00007fb1f8e44038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 907.331196][T13785] RAX: ffffffffffffffda RBX: 00007fb1f81b5fa0 RCX: 00007fb1f7f8e929 [ 907.339514][T13785] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 907.344838][T13500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 907.347739][T13785] RBP: 00007fb1f8e44090 R08: 0000000000000000 R09: 0000000000000000 [ 907.347758][T13785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 907.347773][T13785] R13: 0000000000000000 R14: 00007fb1f81b5fa0 R15: 00007ffd95b33a78 [ 907.347807][T13785] [ 907.390837][T13500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.401726][T13500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 907.424255][T13500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.446263][T13500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 907.469932][T13500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.490167][T13500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 907.508354][T13787] netlink: 'syz.1.3128': attribute type 10 has an invalid length. [ 907.544031][T13787] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3128'. [ 907.606461][T13787] batman_adv: batadv0: Adding interface: vlan1 [ 907.644079][T13787] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 907.710420][T13787] batman_adv: batadv0: Interface activated: vlan1 [ 907.735854][T13788] netlink: 'syz.3.3135': attribute type 1 has an invalid length. [ 907.752832][T13788] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.3135'. [ 907.782206][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 907.805104][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 907.820638][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 907.842512][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 907.863857][T13792] netlink: 'syz.5.3129': attribute type 10 has an invalid length. [ 907.961431][T13500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 908.020352][T13500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.039202][T13500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 908.069664][T13500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.086090][T13500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 908.097298][T13500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.114520][T13500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 908.133159][T13500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.145735][T13500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 908.155906][T13279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 908.179733][T13279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 908.194230][T13500] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.203365][T13500] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.220928][T13500] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.232314][T13500] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.267512][T13799] netlink: 'syz.5.3130': attribute type 10 has an invalid length. [ 908.693778][ T4389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 908.702064][ T4389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 908.771919][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 908.847805][T13279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 908.847880][T13817] netlink: 'syz.3.3134': attribute type 10 has an invalid length. [ 908.869295][T13821] FAULT_INJECTION: forcing a failure. [ 908.869295][T13821] name failslab, interval 1, probability 0, space 0, times 0 [ 908.918148][T13279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 908.935537][T13821] CPU: 1 PID: 13821 Comm: syz.1.3133 Not tainted 6.1.141-syzkaller #0 [ 908.943876][T13821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 908.953975][T13821] Call Trace: [ 908.957292][T13821] [ 908.960268][T13821] dump_stack_lvl+0x168/0x22e [ 908.965016][T13821] ? show_regs_print_info+0x12/0x12 [ 908.970364][T13821] ? load_image+0x3b0/0x3b0 [ 908.975016][T13821] ? __might_sleep+0xd0/0xd0 [ 908.980102][T13821] ? __lock_acquire+0x7c50/0x7c50 [ 908.984752][T13279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 908.985250][T13821] ? __might_sleep+0xd0/0xd0 [ 908.985293][T13821] should_fail_ex+0x399/0x4d0 [ 909.003056][T13821] should_failslab+0x5/0x20 [ 909.007783][T13821] slab_pre_alloc_hook+0x59/0x310 [ 909.012908][T13821] kmem_cache_alloc_lru+0x49/0x2e0 [ 909.018683][T13821] ? sock_alloc_inode+0x24/0xc0 [ 909.023595][T13821] sock_alloc_inode+0x24/0xc0 [ 909.028778][T13821] ? sockfs_init_fs_context+0xa0/0xa0 [ 909.034594][T13821] new_inode_pseudo+0x5f/0x1c0 [ 909.040028][T13821] __sock_create+0x129/0x940 [ 909.044708][T13821] __sys_socketpair+0x232/0x540 [ 909.049828][T13821] __x64_sys_socketpair+0x97/0xb0 [ 909.055006][T13821] do_syscall_64+0x4c/0xa0 [ 909.060008][T13821] ? clear_bhb_loop+0x60/0xb0 [ 909.064918][T13821] ? clear_bhb_loop+0x60/0xb0 [ 909.069659][T13821] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 909.075787][T13821] RIP: 0033:0x7f02a3b8e929 [ 909.080468][T13821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 909.103362][T13821] RSP: 002b:00007f02a4a7d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 909.112285][T13821] RAX: ffffffffffffffda RBX: 00007f02a3db6080 RCX: 00007f02a3b8e929 [ 909.120823][T13821] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000001e [ 909.129181][T13821] RBP: 00007f02a4a7d090 R08: 0000000000000000 R09: 0000000000000000 [ 909.137364][T13821] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 909.145717][T13821] R13: 0000000000000000 R14: 00007f02a3db6080 R15: 00007ffc595fcbc8 [ 909.155614][T13821] [ 909.313312][T13821] socket: no more sockets [ 909.644209][T13840] netlink: 'syz.5.3139': attribute type 40 has an invalid length. [ 909.652814][T13843] FAULT_INJECTION: forcing a failure. [ 909.652814][T13843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 909.680152][T13843] CPU: 0 PID: 13843 Comm: syz.3.3141 Not tainted 6.1.141-syzkaller #0 [ 909.687189][T13840] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3139'. [ 909.689258][T13843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 909.709304][T13843] Call Trace: [ 909.712616][T13843] [ 909.715587][T13843] dump_stack_lvl+0x168/0x22e [ 909.720545][T13843] ? show_regs_print_info+0x12/0x12 [ 909.725798][T13843] ? load_image+0x3b0/0x3b0 [ 909.730348][T13843] ? __lock_acquire+0x7c50/0x7c50 [ 909.735862][T13843] should_fail_ex+0x399/0x4d0 [ 909.741121][T13843] _copy_from_user+0x2c/0x170 [ 909.745919][T13843] __sys_bpf+0x265/0x6d0 [ 909.750297][T13843] ? bpf_link_show_fdinfo+0x310/0x310 [ 909.755728][T13843] ? lock_chain_count+0x20/0x20 [ 909.760633][T13843] __x64_sys_bpf+0x78/0x90 [ 909.765081][T13843] do_syscall_64+0x4c/0xa0 [ 909.769542][T13843] ? clear_bhb_loop+0x60/0xb0 [ 909.774360][T13843] ? clear_bhb_loop+0x60/0xb0 [ 909.779058][T13843] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 909.784980][T13843] RIP: 0033:0x7fbfd4b8e929 [ 909.789599][T13843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 909.810893][T13843] RSP: 002b:00007fbfd59b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 909.820646][T13843] RAX: ffffffffffffffda RBX: 00007fbfd4db5fa0 RCX: 00007fbfd4b8e929 [ 909.828640][T13843] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 909.837256][T13843] RBP: 00007fbfd59b7090 R08: 0000000000000000 R09: 0000000000000000 [ 909.845426][T13843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 909.854045][T13843] R13: 0000000000000000 R14: 00007fbfd4db5fa0 R15: 00007ffeb7c78068 [ 909.862646][T13843] [ 909.868259][T13844] netlink: 'syz.1.3140': attribute type 10 has an invalid length. [ 910.231148][T13849] netlink: 'syz.0.3142': attribute type 1 has an invalid length. [ 910.275280][T13849] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.3142'. [ 910.904303][T13866] device wg2 entered promiscuous mode [ 911.279839][T10408] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 911.292052][T10408] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 911.302682][T10408] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 911.314832][ T4300] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 911.331517][ T4300] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 911.341503][ T4300] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 911.354540][T13882] FAULT_INJECTION: forcing a failure. [ 911.354540][T13882] name failslab, interval 1, probability 0, space 0, times 0 [ 911.384843][T13882] CPU: 0 PID: 13882 Comm: syz.1.3152 Not tainted 6.1.141-syzkaller #0 [ 911.393619][T13882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 911.404072][T13882] Call Trace: [ 911.407950][T13882] [ 911.411014][T13882] dump_stack_lvl+0x168/0x22e [ 911.416289][T13882] ? show_regs_print_info+0x12/0x12 [ 911.421773][T13882] ? load_image+0x3b0/0x3b0 [ 911.426614][T13882] ? __might_sleep+0xd0/0xd0 [ 911.431892][T13882] ? __lock_acquire+0x7c50/0x7c50 [ 911.437001][T13882] should_fail_ex+0x399/0x4d0 [ 911.441729][T13882] should_failslab+0x5/0x20 [ 911.446419][T13882] slab_pre_alloc_hook+0x59/0x310 [ 911.451702][T13882] ? apparmor_sk_alloc_security+0x74/0x100 [ 911.457566][T13882] __kmem_cache_alloc_node+0x4f/0x260 [ 911.463900][T13882] ? apparmor_sk_alloc_security+0x74/0x100 [ 911.470109][T13882] kmalloc_trace+0x26/0xe0 [ 911.474969][T13882] apparmor_sk_alloc_security+0x74/0x100 [ 911.481444][T13882] security_sk_alloc+0x6a/0xa0 [ 911.486873][T13882] sk_prot_alloc+0x101/0x210 [ 911.491559][T13882] ? sk_alloc+0x20/0x340 [ 911.495954][T13882] sk_alloc+0x36/0x340 [ 911.500063][T13882] ? bpf_ctx_init+0x163/0x1a0 [ 911.504813][T13882] ? bpf_prog_test_run_skb+0x267/0x11b0 [ 911.510595][T13882] bpf_prog_test_run_skb+0x350/0x11b0 [ 911.517412][T13882] ? __fget_files+0x28/0x4d0 [ 911.522765][T13882] ? __fget_files+0x44a/0x4d0 [ 911.527877][T13882] ? cpu_online+0xa0/0xa0 [ 911.532807][T13882] bpf_prog_test_run+0x31e/0x390 [ 911.538156][T13882] __sys_bpf+0x593/0x6d0 [ 911.542446][T13882] ? bpf_link_show_fdinfo+0x310/0x310 [ 911.548643][T13882] ? lock_chain_count+0x20/0x20 [ 911.553744][T13882] __x64_sys_bpf+0x78/0x90 [ 911.558224][T13882] do_syscall_64+0x4c/0xa0 [ 911.563508][T13882] ? clear_bhb_loop+0x60/0xb0 [ 911.568596][T13882] ? clear_bhb_loop+0x60/0xb0 [ 911.573690][T13882] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 911.580194][T13882] RIP: 0033:0x7f02a3b8e929 [ 911.585730][T13882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 911.608006][T13882] RSP: 002b:00007f02a4a9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 911.616482][T13882] RAX: ffffffffffffffda RBX: 00007f02a3db5fa0 RCX: 00007f02a3b8e929 [ 911.624502][T13882] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 911.632970][T13882] RBP: 00007f02a4a9e090 R08: 0000000000000000 R09: 0000000000000000 [ 911.641638][T13882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 911.650013][T13882] R13: 0000000000000000 R14: 00007f02a3db5fa0 R15: 00007ffc595fcbc8 [ 911.658145][T13882] [ 911.740354][T13880] validate_nla: 1 callbacks suppressed [ 911.740400][T13880] netlink: 'syz.3.3150': attribute type 10 has an invalid length. [ 911.801090][T13880] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3150'. [ 911.946223][T13886] netlink: 'syz.1.3153': attribute type 10 has an invalid length. [ 912.524422][T13279] bond0: (slave netdevsim0): Releasing backup interface [ 913.116423][T13917] netlink: 'syz.0.3160': attribute type 25 has an invalid length. [ 913.437146][ T4300] Bluetooth: hci1: command 0x0409 tx timeout [ 913.544082][T13927] netlink: 'syz.3.3162': attribute type 10 has an invalid length. [ 913.617642][T13934] FAULT_INJECTION: forcing a failure. [ 913.617642][T13934] name failslab, interval 1, probability 0, space 0, times 0 [ 913.660778][T13927] team0: Port device geneve1 added [ 913.672704][T13928] netlink: 'syz.0.3163': attribute type 40 has an invalid length. [ 913.689289][T13934] CPU: 0 PID: 13934 Comm: syz.5.3165 Not tainted 6.1.141-syzkaller #0 [ 913.697641][T13934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 913.708815][T13934] Call Trace: [ 913.712258][T13934] [ 913.715497][T13934] dump_stack_lvl+0x168/0x22e [ 913.721129][T13934] ? show_regs_print_info+0x12/0x12 [ 913.726576][T13934] ? load_image+0x3b0/0x3b0 [ 913.731273][T13934] ? __might_sleep+0xd0/0xd0 [ 913.735933][T13934] ? __lock_acquire+0x7c50/0x7c50 [ 913.741710][T13934] should_fail_ex+0x399/0x4d0 [ 913.746458][T13934] should_failslab+0x5/0x20 [ 913.751362][T13934] slab_pre_alloc_hook+0x59/0x310 [ 913.757684][T13934] ? apparmor_sk_alloc_security+0x74/0x100 [ 913.763808][T13934] __kmem_cache_alloc_node+0x4f/0x260 [ 913.769354][T13934] ? apparmor_sk_alloc_security+0x74/0x100 [ 913.775219][T13934] kmalloc_trace+0x26/0xe0 [ 913.779809][T13934] apparmor_sk_alloc_security+0x74/0x100 [ 913.787675][T13934] security_sk_alloc+0x6a/0xa0 [ 913.793141][T13934] sk_prot_alloc+0x101/0x210 [ 913.797987][T13934] ? sk_alloc+0x20/0x340 [ 913.802329][T13934] sk_alloc+0x36/0x340 [ 913.806974][T13934] ? bpf_ctx_init+0x163/0x1a0 [ 913.811888][T13934] ? bpf_prog_test_run_skb+0x267/0x11b0 [ 913.818461][T13934] bpf_prog_test_run_skb+0x350/0x11b0 [ 913.823894][T13934] ? __fget_files+0x28/0x4d0 [ 913.828540][T13934] ? __fget_files+0x44a/0x4d0 [ 913.833916][T13934] ? cpu_online+0xa0/0xa0 [ 913.838660][T13934] bpf_prog_test_run+0x31e/0x390 [ 913.843671][T13934] __sys_bpf+0x593/0x6d0 [ 913.848299][T13934] ? bpf_link_show_fdinfo+0x310/0x310 [ 913.853961][T13934] ? lock_chain_count+0x20/0x20 [ 913.858887][T13934] __x64_sys_bpf+0x78/0x90 [ 913.863705][T13934] do_syscall_64+0x4c/0xa0 [ 913.868356][T13934] ? clear_bhb_loop+0x60/0xb0 [ 913.874484][T13934] ? clear_bhb_loop+0x60/0xb0 [ 913.879334][T13934] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 913.885817][T13934] RIP: 0033:0x7fb1f7f8e929 [ 913.891073][T13934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 913.915122][T13934] RSP: 002b:00007fb1f8e44038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 913.924894][T13934] RAX: ffffffffffffffda RBX: 00007fb1f81b5fa0 RCX: 00007fb1f7f8e929 [ 913.933997][T13934] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 913.942711][T13934] RBP: 00007fb1f8e44090 R08: 0000000000000000 R09: 0000000000000000 [ 913.950994][T13934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 913.959733][T13934] R13: 0000000000000000 R14: 00007fb1f81b5fa0 R15: 00007ffd95b33a78 [ 913.967864][T13934] [ 913.986841][T13930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3163'. [ 914.162352][T13875] chnl_net:caif_netlink_parms(): no params data found [ 914.489337][T13950] netlink: 'syz.3.3168': attribute type 10 has an invalid length. [ 914.507094][T13950] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3168'. [ 914.527259][T13951] netlink: 'syz.0.3169': attribute type 10 has an invalid length. [ 914.766771][T13951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 914.800083][T13951] team0: Port device batadv0 added [ 914.960467][T13875] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.975279][T13875] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.015262][T13875] device bridge_slave_0 entered promiscuous mode [ 915.094001][T13875] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.126318][T13875] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.150322][T13875] device bridge_slave_1 entered promiscuous mode [ 915.195841][T13968] netlink: 'syz.0.3172': attribute type 25 has an invalid length. [ 915.534581][ T4300] Bluetooth: hci1: command 0x041b tx timeout [ 915.583977][T13978] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3175'. [ 915.709984][T13983] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3175'. [ 915.852160][T13875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 915.958143][T13875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 916.191614][T13991] netlink: 'syz.3.3179': attribute type 40 has an invalid length. [ 916.233655][T13993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3179'. [ 916.285719][T13875] team0: Port device team_slave_0 added [ 916.407852][T13279] bond0: (slave wlan1): Releasing backup interface [ 916.801023][T13875] team0: Port device team_slave_1 added [ 916.813144][T14000] netlink: 'syz.1.3182': attribute type 3 has an invalid length. [ 916.838210][T14000] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.3182'. [ 917.567646][T13875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 917.594117][ T4300] Bluetooth: hci1: command 0x040f tx timeout [ 917.610471][T13875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 917.750036][T13875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 917.772604][T13875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 917.780504][T13875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 917.813177][T13875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 917.825855][T14020] netlink: 'syz.3.3185': attribute type 10 has an invalid length. [ 917.842024][T14020] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3185'. [ 917.986996][T13279] device hsr_slave_0 left promiscuous mode [ 918.012898][T13279] device hsr_slave_1 left promiscuous mode [ 918.067320][T13279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 918.080511][T13279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 918.118023][T13279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 918.136196][T13279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 918.168225][T13279] batman_adv: batadv0: Interface deactivated: vlan1 [ 918.188422][T13279] batman_adv: batadv0: Removing interface: vlan1 [ 918.216219][T13279] device bridge_slave_1 left promiscuous mode [ 918.242113][T13279] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.270718][T13279] device bridge_slave_0 left promiscuous mode [ 918.291095][T13279] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.333908][T13279] device veth1_macvtap left promiscuous mode [ 918.342267][T13279] device veth1_vlan left promiscuous mode [ 918.448689][T13279] device veth0_vlan left promiscuous mode [ 918.713136][T13279] team0 (unregistering): Port device geneve1 removed [ 919.161492][T13279] team0 (unregistering): Port device team_slave_1 removed [ 919.210034][T13279] team0 (unregistering): Port device team_slave_0 removed [ 919.262034][T13279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 919.315381][T13279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 919.545994][T13279] team0 (unregistering): Port device batadv0 removed [ 919.587445][T13279] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 919.683820][ T4300] Bluetooth: hci1: command 0x0419 tx timeout [ 919.883744][T13279] bond0 (unregistering): Released all slaves [ 919.972333][T13875] device hsr_slave_0 entered promiscuous mode [ 919.980090][T13875] device hsr_slave_1 entered promiscuous mode [ 919.987517][T13875] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 919.995987][T13875] Cannot create hsr debugfs directory [ 920.505911][T14061] netlink: 'syz.1.3196': attribute type 10 has an invalid length. [ 921.663230][T14088] netlink: 'syz.0.3204': attribute type 10 has an invalid length. [ 921.695741][T14088] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3204'. [ 921.731130][T14088] batman_adv: batadv0: Adding interface: vlan1 [ 921.748647][T14088] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 921.777712][T14088] batman_adv: batadv0: Interface activated: vlan1 [ 921.843090][T14090] netlink: 'syz.3.3205': attribute type 25 has an invalid length. [ 921.987888][T13875] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 922.031326][T13875] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 922.056995][T14101] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3209'. [ 922.087610][T13875] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 922.126908][T13875] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 922.148239][T14104] netlink: 'syz.5.3210': attribute type 10 has an invalid length. [ 922.749285][T13875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 922.801166][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 922.825075][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 922.893817][T13875] 8021q: adding VLAN 0 to HW filter on device team0 [ 922.923995][T14118] netlink: 'syz.5.3214': attribute type 3 has an invalid length. [ 922.964153][T14118] netlink: 114680 bytes leftover after parsing attributes in process `syz.5.3214'. [ 923.082427][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 923.113264][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 923.145769][ T4389] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.153076][ T4389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 923.251589][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 923.301504][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 923.337520][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 923.382950][ T4389] bridge0: port 2(bridge_slave_1) entered blocking state [ 923.390655][ T4389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 923.445152][T14133] netlink: 'syz.1.3217': attribute type 10 has an invalid length. [ 923.480639][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 923.552135][T13279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 923.596025][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 923.635191][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 923.663756][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 923.701979][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 923.729310][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 923.764705][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 923.788935][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 923.813846][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 923.834142][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 923.860635][T13875] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 924.523817][T14159] netlink: 'syz.1.3223': attribute type 10 has an invalid length. [ 924.866208][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 924.899515][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 924.981344][T13875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 926.608419][T14197] netlink: 'syz.0.3234': attribute type 10 has an invalid length. [ 926.650267][T14197] team0: Port device geneve1 added [ 926.909076][T14211] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3235'. [ 926.970689][T14214] netlink: 'syz.0.3236': attribute type 25 has an invalid length. [ 927.036634][T14216] netlink: 'syz.3.3237': attribute type 25 has an invalid length. [ 927.351489][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 927.376570][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 927.440638][T14223] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3239'. [ 927.471751][T14223] device bond_slave_0 entered promiscuous mode [ 927.478640][T14223] device bond_slave_1 entered promiscuous mode [ 927.562555][T14226] netlink: 'syz.1.3240': attribute type 10 has an invalid length. [ 927.588186][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 927.613014][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 927.633096][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 927.651077][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 927.668690][T13875] device veth0_vlan entered promiscuous mode [ 927.755120][T13875] device veth1_vlan entered promiscuous mode [ 927.912473][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 927.954075][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 928.007125][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 928.049827][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 928.071059][T13875] device veth0_macvtap entered promiscuous mode [ 928.099604][T14238] netlink: 763 bytes leftover after parsing attributes in process `syz.0.3244'. [ 928.125846][T13875] device veth1_macvtap entered promiscuous mode [ 928.162406][T14240] netlink: 'syz.3.3246': attribute type 2 has an invalid length. [ 928.192291][T13875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 928.204919][T13875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.215523][T13875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 928.226338][T13875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.259330][T13875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 928.281954][T13875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.293039][T13875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 928.304261][T13875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.318374][T13875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 928.336500][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 928.357189][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 928.382081][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 928.432031][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 928.508966][T13875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 928.529414][T13875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.542315][T13875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 928.589753][T13875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.617398][T13875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 928.632028][T13875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.651509][T13875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 928.688389][T13875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.710779][T13875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 928.730081][T13279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 928.746380][T13279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 928.781157][T14248] netlink: 'syz.3.3248': attribute type 25 has an invalid length. [ 928.811273][T13875] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.858151][T13875] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.891226][T13875] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.972172][T13875] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.421477][T14264] netlink: 'syz.5.3253': attribute type 10 has an invalid length. [ 929.433142][T14264] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3253'. [ 929.515476][ T4341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 929.547476][ T4341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 929.547528][T14266] netlink: 'syz.3.3254': attribute type 10 has an invalid length. [ 929.598565][T13279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 929.776663][T14269] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3255'. [ 929.803820][ T7095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 929.831356][ T7095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 929.862438][T13279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 930.611904][T14287] netlink: 'syz.1.3261': attribute type 10 has an invalid length. [ 930.638958][T14287] device batadv0 left promiscuous mode [ 930.654109][T14287] team0: Port device batadv0 removed [ 930.663848][T14287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 930.689915][T14291] netlink: 'syz.1.3261': attribute type 2 has an invalid length. [ 930.696673][T14287] device batadv0 entered promiscuous mode [ 930.720201][T14291] netlink: 'syz.1.3261': attribute type 1 has an invalid length. [ 930.751135][T14291] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3261'. [ 930.789220][T14287] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 930.859929][T14292] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3261'. [ 930.956007][T14292] bond0: (slave batadv0): Releasing backup interface [ 931.010919][T14292] bridge0: port 4(batadv0) entered blocking state [ 931.036372][T14292] bridge0: port 4(batadv0) entered disabled state [ 931.251202][T14300] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3264'. [ 931.340241][T14302] device wg2 entered promiscuous mode [ 931.599573][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.606473][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.663932][T14306] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3268'. [ 932.512106][T14329] validate_nla: 4 callbacks suppressed [ 932.512168][T14329] netlink: 'syz.5.3279': attribute type 25 has an invalid length. [ 932.642585][T14333] device wg2 left promiscuous mode [ 932.744105][T14339] netlink: 'syz.1.3283': attribute type 10 has an invalid length. [ 932.830147][T14339] device batadv0 left promiscuous mode [ 932.864009][T14339] bridge0: port 4(batadv0) entered disabled state [ 933.251311][T14339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 933.285501][T14339] device batadv0 entered promiscuous mode [ 933.292683][T14339] team0: Port device batadv0 added [ 933.326388][T14347] netlink: 'syz.0.3285': attribute type 10 has an invalid length. [ 933.366222][T14347] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3285'. [ 934.198451][T14374] netlink: 15999 bytes leftover after parsing attributes in process `syz.5.3297'. [ 934.217862][T14372] device wg2 entered promiscuous mode [ 934.278159][T14372] netlink: 'syz.3.3295': attribute type 25 has an invalid length. [ 934.298450][T14375] netlink: 'syz.1.3298': attribute type 10 has an invalid length. [ 934.924295][T14393] netlink: 'syz.1.3304': attribute type 10 has an invalid length. [ 934.945525][T14393] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3304'. [ 935.250074][T14399] netlink: 763 bytes leftover after parsing attributes in process `syz.4.3307'. [ 935.791382][T14407] netlink: 'syz.3.3310': attribute type 25 has an invalid length. [ 936.070163][T14416] netlink: 'syz.3.3313': attribute type 10 has an invalid length. [ 936.120128][T14418] netlink: 'syz.3.3313': attribute type 2 has an invalid length. [ 936.132549][T14418] netlink: 'syz.3.3313': attribute type 1 has an invalid length. [ 936.144408][T14418] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3313'. [ 936.197816][T14416] team0: Port device batadv0 removed [ 936.211987][T14416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 936.221119][T14416] device batadv0 entered promiscuous mode [ 936.235497][T14416] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 936.257908][T14418] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3313'. [ 936.288317][T14418] bond0: (slave batadv0): Releasing backup interface [ 936.326611][T14418] bridge0: port 3(batadv0) entered blocking state [ 936.345049][T14418] bridge0: port 3(batadv0) entered disabled state [ 936.773495][ T11] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 936.784843][ T11] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 936.983209][T14435] FAULT_INJECTION: forcing a failure. [ 936.983209][T14435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 937.031414][T14435] CPU: 1 PID: 14435 Comm: syz.0.3319 Not tainted 6.1.141-syzkaller #0 [ 937.040197][T14435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 937.052043][T14435] Call Trace: [ 937.057036][T14435] [ 937.060084][T14435] dump_stack_lvl+0x168/0x22e [ 937.065075][T14435] ? show_regs_print_info+0x12/0x12 [ 937.070537][T14435] ? load_image+0x3b0/0x3b0 [ 937.075095][T14435] ? __lock_acquire+0x7c50/0x7c50 [ 937.081097][T14435] ? verify_lock_unused+0x140/0x140 [ 937.087340][T14435] should_fail_ex+0x399/0x4d0 [ 937.092878][T14435] _copy_from_user+0x2c/0x170 [ 937.098052][T14435] ___sys_sendmsg+0x155/0x290 [ 937.103306][T14435] ? __sys_sendmsg+0x270/0x270 [ 937.110046][T14435] ? __lock_acquire+0x7c50/0x7c50 [ 937.115616][T14435] ? __fdget+0x17c/0x200 [ 937.120625][T14435] __se_sys_sendmsg+0x19e/0x270 [ 937.128163][T14435] ? __x64_sys_sendmsg+0x80/0x80 [ 937.133449][T14435] ? lockdep_hardirqs_on+0x94/0x140 [ 937.139087][T14435] do_syscall_64+0x4c/0xa0 [ 937.144577][T14435] ? clear_bhb_loop+0x60/0xb0 [ 937.151413][T14435] ? clear_bhb_loop+0x60/0xb0 [ 937.157189][T14435] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 937.164703][T14435] RIP: 0033:0x7f877bf8e929 [ 937.169818][T14435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 937.196388][T14435] RSP: 002b:00007f877cd41038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 937.205819][T14435] RAX: ffffffffffffffda RBX: 00007f877c1b5fa0 RCX: 00007f877bf8e929 [ 937.215255][T14435] RDX: 00000000000012cd RSI: 0000200000000040 RDI: 0000000000000003 [ 937.225345][T14435] RBP: 00007f877cd41090 R08: 0000000000000000 R09: 0000000000000000 [ 937.234922][T14435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 937.243721][T14435] R13: 0000000000000000 R14: 00007f877c1b5fa0 R15: 00007ffe88207858 [ 937.252725][T14435] [ 938.280881][T14451] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3327'. [ 938.376309][T14453] validate_nla: 2 callbacks suppressed [ 938.376332][T14453] netlink: 'syz.4.3329': attribute type 1 has an invalid length. [ 938.469866][T14453] netlink: 15231 bytes leftover after parsing attributes in process `syz.4.3329'. [ 938.843720][T14462] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3331'. [ 938.964585][T14465] netlink: 'syz.4.3333': attribute type 10 has an invalid length. [ 939.289497][T14465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 939.477662][T14465] team0: Port device batadv0 added [ 940.096465][T14491] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3342'. [ 940.142553][T14497] device wg2 left promiscuous mode [ 940.160988][T14499] netlink: 'syz.5.3343': attribute type 1 has an invalid length. [ 940.298334][T14499] netlink: 15231 bytes leftover after parsing attributes in process `syz.5.3343'. [ 940.921671][T14507] netlink: 'syz.4.3347': attribute type 10 has an invalid length. [ 941.003340][T14507] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3347'. [ 941.083598][T14507] batman_adv: batadv0: Adding interface: vlan1 [ 941.124720][T14507] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 941.251184][T14507] batman_adv: batadv0: Interface activated: vlan1 [ 941.793502][T14514] netlink: 'syz.0.3351': attribute type 10 has an invalid length. [ 942.543996][T14535] netlink: 'syz.1.3354': attribute type 10 has an invalid length. [ 942.575979][T14534] netlink: 'syz.5.3357': attribute type 10 has an invalid length. [ 942.588585][T14534] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3357'. [ 942.639524][T14540] netlink: 'syz.3.3360': attribute type 1 has an invalid length. [ 942.683609][T14540] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.3360'. [ 942.818651][T14543] netlink: 'syz.0.3358': attribute type 10 has an invalid length. [ 942.834170][T14543] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3358'. [ 942.857214][T14542] netlink: 'syz.4.3359': attribute type 25 has an invalid length. [ 943.062420][T14548] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3371'. [ 944.091223][T14567] netlink: 'syz.1.3366': attribute type 10 has an invalid length. [ 944.469026][T14577] netlink: 'syz.1.3372': attribute type 21 has an invalid length. [ 944.628207][T14580] netlink: 'syz.3.3373': attribute type 25 has an invalid length. [ 945.132994][T14591] FAULT_INJECTION: forcing a failure. [ 945.132994][T14591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 945.203531][T14591] CPU: 0 PID: 14591 Comm: syz.3.3376 Not tainted 6.1.141-syzkaller #0 [ 945.214397][T14591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 945.227118][T14591] Call Trace: [ 945.231497][T14591] [ 945.235492][T14591] dump_stack_lvl+0x168/0x22e [ 945.241070][T14591] ? show_regs_print_info+0x12/0x12 [ 945.246915][T14591] ? load_image+0x3b0/0x3b0 [ 945.252286][T14591] ? __lock_acquire+0x7c50/0x7c50 [ 945.257908][T14591] should_fail_ex+0x399/0x4d0 [ 945.264230][T14591] _copy_from_user+0x2c/0x170 [ 945.269836][T14591] iovec_from_user+0x143/0x360 [ 945.274738][T14591] __import_iovec+0x6d/0x500 [ 945.281196][T14591] ? __might_fault+0xa6/0x120 [ 945.287438][T14591] import_iovec+0x6f/0xa0 [ 945.291831][T14591] ___sys_sendmsg+0x1e4/0x290 [ 945.297481][T14591] ? __sys_sendmsg+0x270/0x270 [ 945.303715][T14591] ? __lock_acquire+0x7c50/0x7c50 [ 945.308825][T14591] ? __fdget+0x17c/0x200 [ 945.314200][T14591] __se_sys_sendmsg+0x19e/0x270 [ 945.321200][T14591] ? __x64_sys_sendmsg+0x80/0x80 [ 945.327445][T14591] ? lockdep_hardirqs_on+0x94/0x140 [ 945.334052][T14591] do_syscall_64+0x4c/0xa0 [ 945.339724][T14591] ? clear_bhb_loop+0x60/0xb0 [ 945.344691][T14591] ? clear_bhb_loop+0x60/0xb0 [ 945.349592][T14591] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 945.356408][T14591] RIP: 0033:0x7fbfd4b8e929 [ 945.361224][T14591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 945.382287][T14591] RSP: 002b:00007fbfd59b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 945.391185][T14591] RAX: ffffffffffffffda RBX: 00007fbfd4db5fa0 RCX: 00007fbfd4b8e929 [ 945.399811][T14591] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 945.408255][T14591] RBP: 00007fbfd59b7090 R08: 0000000000000000 R09: 0000000000000000 [ 945.418700][T14591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 945.428114][T14591] R13: 0000000000000000 R14: 00007fbfd4db5fa0 R15: 00007ffeb7c78068 [ 945.437280][T14591] [ 945.756083][ T75] bond0: (slave wlan1): Releasing backup interface [ 945.801872][T14584] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3375'. [ 947.316526][ T75] device hsr_slave_0 left promiscuous mode [ 947.349092][ T75] device hsr_slave_1 left promiscuous mode [ 947.425074][ T75] device bridge_slave_1 left promiscuous mode [ 947.431433][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.524247][ T75] device bridge_slave_0 left promiscuous mode [ 947.531416][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.660388][ T75] device veth1_macvtap left promiscuous mode [ 947.667400][ T75] device veth1_vlan left promiscuous mode [ 947.674933][ T75] device veth0_vlan left promiscuous mode [ 947.936918][ T75] team0 (unregistering): Port device geneve1 removed [ 948.493297][ T75] team0 (unregistering): Port device team_slave_1 removed [ 948.548699][ T75] team0 (unregistering): Port device team_slave_0 removed [ 948.602887][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 948.653357][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 948.901614][ T75] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 949.209788][ T75] bond0 (unregistering): Released all slaves [ 949.298854][T14612] netlink: 'syz.4.3382': attribute type 10 has an invalid length. [ 949.348327][T14625] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3388'. [ 949.672963][T14638] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3391'. [ 950.462318][T14669] netlink: 'syz.0.3402': attribute type 10 has an invalid length. [ 951.076932][ T4341] ------------[ cut here ]------------ [ 951.083624][ T4341] intf 08:02:11:00:00:01 [link=0]: bad STA 00:00:00:00:00:80 bandwidth 20 MHz (0) > channel config 1 MHz (8) [ 951.128547][T14672] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3401'. [ 951.234375][ T4341] WARNING: CPU: 0 PID: 4341 at drivers/net/wireless/mac80211_hwsim.c:2433 mac80211_hwsim_sta_rc_update+0x541/0x6e0 [ 951.247336][ T4341] Modules linked in: [ 951.251294][ T4341] CPU: 0 PID: 4341 Comm: kworker/u4:5 Not tainted 6.1.141-syzkaller #0 [ 951.260315][ T4341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 951.271287][ T4341] Workqueue: phy25 ieee80211_iface_work [ 951.279464][ T4341] RIP: 0010:mac80211_hwsim_sta_rc_update+0x541/0x6e0 [ 951.287057][ T4341] Code: e8 c4 0a 00 00 48 c7 c7 80 b3 07 8b 48 8b 74 24 28 89 ea 48 8b 4c 24 10 41 89 d8 45 89 e1 41 57 50 e8 93 82 60 fb 48 83 c4 10 <0f> 0b e9 8b fe ff ff e8 d3 6f 94 fb 0f 0b e9 7f fe ff ff e8 c7 6f [ 951.308935][ T4341] RSP: 0018:ffffc900049277f8 EFLAGS: 00010282 [ 951.316142][ T4341] RAX: ed83d62f4fa2e500 RBX: 0000000000000014 RCX: ffff88802bba5940 [ 951.324624][ T4341] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 951.333202][ T4341] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffff52000924e9d [ 951.341499][ T4341] R10: fffff52000924e9d R11: 1ffff92000924e9c R12: 0000000000000000 [ 951.350963][ T4341] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000008 [ 951.359943][ T4341] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 951.369626][ T4341] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 951.376835][ T4341] CR2: 00007f877c1b7bac CR3: 0000000064a29000 CR4: 00000000003506f0 [ 951.385134][ T4341] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 951.394470][ T4341] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 951.404102][ T4341] Call Trace: [ 951.407438][ T4341] [ 951.410436][ T4341] ? mac80211_hwsim_sta_rc_update+0x53/0x6e0 [ 951.417263][ T4341] mac80211_hwsim_sta_add+0x92/0x280 [ 951.422982][ T4341] ? mac80211_hwsim_sw_scan_complete+0xd0/0xd0 [ 951.429609][ T4341] drv_sta_state+0x62a/0x1280 [ 951.434629][ T4341] sta_info_insert_rcu+0xc1e/0x1550 [ 951.440102][ T4341] ? sta_info_insert_rcu+0x1b0/0x1550 [ 951.446378][ T4341] ieee80211_ibss_finish_sta+0x27f/0x350 [ 951.452821][ T4341] ? ieee80211_ibss_work+0x10b0/0x10b0 [ 951.458458][ T4341] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 951.464656][ T4341] ieee80211_ibss_work+0x234/0x10b0 [ 951.469940][ T4341] ? lockdep_hardirqs_on+0x94/0x140 [ 951.476030][ T4341] ? _raw_spin_unlock+0x40/0x40 [ 951.481818][ T4341] ? ieee80211_ibss_rx_queued_mgmt+0x2b10/0x2b10 [ 951.488980][ T4341] ? skb_dequeue+0x10a/0x140 [ 951.494717][ T4341] ? ieee80211_iface_work+0x97c/0xc80 [ 951.500457][ T4341] ? ieee80211_iface_work+0xb98/0xc80 [ 951.506121][ T4341] ? _raw_spin_unlock_irq+0x1f/0x40 [ 951.511502][ T4341] ? process_one_work+0x7a1/0x1160 [ 951.516778][ T4341] process_one_work+0x898/0x1160 [ 951.521975][ T4341] ? worker_detach_from_pool+0x240/0x240 [ 951.528074][ T4341] ? _raw_spin_lock_irq+0x7a/0xe0 [ 951.533782][ T4341] ? _raw_spin_lock_irq+0xab/0xe0 [ 951.539080][ T4341] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 951.544630][ T4341] ? kthread_data+0x4b/0xc0 [ 951.549220][ T4341] worker_thread+0xaa2/0x1250 [ 951.554434][ T4341] kthread+0x29d/0x330 [ 951.558803][ T4341] ? worker_clr_flags+0x1a0/0x1a0 [ 951.564243][ T4341] ? kthread_blkcg+0xd0/0xd0 [ 951.569277][ T4341] ret_from_fork+0x1f/0x30 [ 951.574024][ T4341] [ 951.577748][ T4341] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 951.585331][ T4341] CPU: 0 PID: 4341 Comm: kworker/u4:5 Not tainted 6.1.141-syzkaller #0 [ 951.594280][ T4341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 951.604785][ T4341] Workqueue: phy25 ieee80211_iface_work [ 951.611107][ T4341] Call Trace: [ 951.614697][ T4341] [ 951.617779][ T4341] dump_stack_lvl+0x168/0x22e [ 951.622609][ T4341] ? memcpy+0x3c/0x60 [ 951.626877][ T4341] ? show_regs_print_info+0x12/0x12 [ 951.632332][ T4341] ? load_image+0x3b0/0x3b0 [ 951.638144][ T4341] panic+0x2c9/0x710 [ 951.642065][ T4341] ? asm_sysvec_call_function_single+0x16/0x20 [ 951.648706][ T4341] ? bpf_jit_dump+0xd0/0xd0 [ 951.653339][ T4341] ? show_trace_log_lvl+0x538/0x550 [ 951.658954][ T4341] __warn+0x2f8/0x4f0 [ 951.663410][ T4341] ? mac80211_hwsim_sta_rc_update+0x541/0x6e0 [ 951.669827][ T4341] ? mac80211_hwsim_sta_rc_update+0x541/0x6e0 [ 951.676394][ T4341] report_bug+0x2ba/0x4f0 [ 951.681018][ T4341] ? mac80211_hwsim_sta_rc_update+0x541/0x6e0 [ 951.687387][ T4341] handle_bug+0x3a/0x70 [ 951.691765][ T4341] exc_invalid_op+0x16/0x40 [ 951.696424][ T4341] asm_exc_invalid_op+0x16/0x20 [ 951.701753][ T4341] RIP: 0010:mac80211_hwsim_sta_rc_update+0x541/0x6e0 [ 951.708473][ T4341] Code: e8 c4 0a 00 00 48 c7 c7 80 b3 07 8b 48 8b 74 24 28 89 ea 48 8b 4c 24 10 41 89 d8 45 89 e1 41 57 50 e8 93 82 60 fb 48 83 c4 10 <0f> 0b e9 8b fe ff ff e8 d3 6f 94 fb 0f 0b e9 7f fe ff ff e8 c7 6f [ 951.728371][ T4341] RSP: 0018:ffffc900049277f8 EFLAGS: 00010282 [ 951.734484][ T4341] RAX: ed83d62f4fa2e500 RBX: 0000000000000014 RCX: ffff88802bba5940 [ 951.742608][ T4341] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 951.750599][ T4341] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffff52000924e9d [ 951.759688][ T4341] R10: fffff52000924e9d R11: 1ffff92000924e9c R12: 0000000000000000 [ 951.768531][ T4341] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000008 [ 951.777096][ T4341] ? mac80211_hwsim_sta_rc_update+0x53/0x6e0 [ 951.784080][ T4341] mac80211_hwsim_sta_add+0x92/0x280 [ 951.789588][ T4341] ? mac80211_hwsim_sw_scan_complete+0xd0/0xd0 [ 951.796062][ T4341] drv_sta_state+0x62a/0x1280 [ 951.800902][ T4341] sta_info_insert_rcu+0xc1e/0x1550 [ 951.806339][ T4341] ? sta_info_insert_rcu+0x1b0/0x1550 [ 951.811766][ T4341] ieee80211_ibss_finish_sta+0x27f/0x350 [ 951.817518][ T4341] ? ieee80211_ibss_work+0x10b0/0x10b0 [ 951.823103][ T4341] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 951.829511][ T4341] ieee80211_ibss_work+0x234/0x10b0 [ 951.835242][ T4341] ? lockdep_hardirqs_on+0x94/0x140 [ 951.840663][ T4341] ? _raw_spin_unlock+0x40/0x40 [ 951.845610][ T4341] ? ieee80211_ibss_rx_queued_mgmt+0x2b10/0x2b10 [ 951.852084][ T4341] ? skb_dequeue+0x10a/0x140 [ 951.856812][ T4341] ? ieee80211_iface_work+0x97c/0xc80 [ 951.863116][ T4341] ? ieee80211_iface_work+0xb98/0xc80 [ 951.869835][ T4341] ? _raw_spin_unlock_irq+0x1f/0x40 [ 951.875084][ T4341] ? process_one_work+0x7a1/0x1160 [ 951.880436][ T4341] process_one_work+0x898/0x1160 [ 951.887247][ T4341] ? worker_detach_from_pool+0x240/0x240 [ 951.894050][ T4341] ? _raw_spin_lock_irq+0x7a/0xe0 [ 951.899745][ T4341] ? _raw_spin_lock_irq+0xab/0xe0 [ 951.905815][ T4341] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 951.912309][ T4341] ? kthread_data+0x4b/0xc0 [ 951.917074][ T4341] worker_thread+0xaa2/0x1250 [ 951.921908][ T4341] kthread+0x29d/0x330 [ 951.926105][ T4341] ? worker_clr_flags+0x1a0/0x1a0 [ 951.931235][ T4341] ? kthread_blkcg+0xd0/0xd0 [ 951.935995][ T4341] ret_from_fork+0x1f/0x30 [ 951.941039][ T4341] [ 951.944397][ T4341] Kernel Offset: disabled [ 951.949816][ T4341] Rebooting in 86400 seconds..