last executing test programs: 7.619057804s ago: executing program 0 (id=4116): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000fbffffff000000000300000085000000bc00000085000000110000009500000000000000e5c7c9ddc1d01ab6bc2ab7690fee25a7f90c2fe04df90710740eac45b4267095f69dc3224f74afa9124e53"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"], 0x0}, 0x94) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) socket$kcm(0x10, 0x2, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x39, 0x0, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xf0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 7.213532834s ago: executing program 0 (id=4120): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x17, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x60, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) r4 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x11b, 0x2, &(0x7f0000000900)=r3, 0x4) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000680)=@raw=[@generic={0x8, 0x0, 0x8, 0x8, 0xffffff7f}, @jmp={0x5, 0x0, 0x6, 0x1, 0x0, 0xafb59c99935fb5fa, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @alu={0x4, 0x0, 0xd, 0x6, 0x5, 0x30, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0x9, 0x3, 0x2, 0xfffffffffffffff4, 0xfffffffffffffffc}, @alu={0x4, 0x0, 0xb, 0x4, 0x6, 0x6}], &(0x7f00000006c0)='GPL\x00', 0x80, 0xae, &(0x7f0000000700)=""/174, 0x41100, 0x55, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x5, 0x3, 0x1, 0x2b}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000840)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000880)=[{0x5, 0x5, 0xb, 0x9}], 0x10, 0xf}, 0x94) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000980)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)='%pi6 \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_ext={0x1c, 0x6, &(0x7f00000000c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @exit], &(0x7f0000000100)='syzkaller\x00', 0x1, 0x2a, &(0x7f0000000180)=""/42, 0x1f00, 0x21, '\x00', r1, 0x0, r3, 0x8, &(0x7f0000000600)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x0, 0x6, 0x9, 0x1}, 0x10, 0x243d2, r5, 0x5, &(0x7f0000000ac0)=[r6, r7, 0xffffffffffffffff], &(0x7f0000000b00)=[{0x3, 0x1, 0xe, 0x8}, {0x0, 0x1, 0xf, 0xa}, {0x1, 0x1, 0xd}, {0x2, 0x1, 0xb, 0xb}, {0x4, 0x2, 0x6}], 0x10, 0x7f}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r8, 0x2e}, 0x20) 6.952482766s ago: executing program 0 (id=4122): r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x0, 0x31, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000434b29797fe856c4c00000028000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fed, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={0x0, 0x1}, 0x4005, 0xfff, 0xfffffbff, 0x3, 0x1, 0x2, 0x6, 0x0, 0x800, 0x0, 0xa9e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000240)="b2", 0x1}, {&(0x7f0000000180)="23480d95ed94c4265b88f5532b5a63b5a84615cc674c206880d2eade17b1b60edf2ac4126ba663cce2046c70b60f7f5cfd0c621f48", 0x35}], 0x2}, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r3}, 0x18) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, 'p'}], 0x18}, 0x0) 5.65256446s ago: executing program 0 (id=4132): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x4008}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x0, &(0x7f0000000000), &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0x8b, &(0x7f0000000080)=""/139, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x15, r0, 0x8, &(0x7f0000000180)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0x1, 0x3, 0x176}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[r1], 0x0, 0x10, 0x9}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x7, 0x8, 0x100, 0x1, r1, 0x101, '\x00', 0x0, r0, 0x0, 0x5, 0x4, 0xd}, 0x50) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x5) unlink(&(0x7f0000000400)='./file0\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000700)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0], 0x0, 0x7f, &(0x7f00000007c0)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x8c, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000440)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000480)="0401745bf408237a009e3c5a79d54625ae058be8b062a5e28edcff6e1911e2a29e3ebb7593e981b01c958eaaffdec5fcc4d9bbf476ea5ccd7762b20a6c74ca95855afe9b0af310965af312f150112b7ddc75b725b63d6227d537cd367fda7ead929daea5c06a55cc2d9d74ac9d82005cbe3f7a3851d33b9bc154611aeeaf24e68f965ccb458301a813f23a51215a30aba012ad22483e974cb9ade12901815c8281aecf0844dcc2a89a9529ad3e102b9413acc234b90518b490126fa129ad769c8d31216a64bca3bde2adb8280b79054d20fcc9ed9c", 0xd5}, {&(0x7f0000000580)="0c0dbc842a0be43dda464eaad2f054744c98cf48cb3e70600f2998d46fbb97b50245785fbfbf5e8c143a3006cc20b9913e677119716f52012ebdda486d0520a9596819d101ebcd12596f96d09639d7304fc7fd1cbf0508244b57de4727da0533912f2fd289babc60956a2432", 0x6c}, {&(0x7f0000000600)="304e42ffe466112f94eaab2d8785f48c9b241c6296873181db3c12d5e465e85fade7912b5d4c6bb9c977c3a5804360d9df5c92955801c58fdcd20a661ddbcb182d1fb07fd76048b65b7011371337bc4096152d232c8b0706e5aa70cdf2c6ab341d50ed31a3e132a78f2aa5a7", 0x6c}, {&(0x7f0000000680)="e6d47ea39096c26429384b5eb0bcf9118b61e7a001fba39a5bb87ab1589647b0df536638cd633e47e52d4878bc84b66265fcf3a578464a236f7b1f4e", 0x3c}], 0x4, &(0x7f0000000a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x1a}, @local}}}], 0x20}, 0x4004000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0xc, 0x8, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf618, 0x0, 0x0, 0x0, 0x3}, [@map_idx={0x18, 0x5}, @exit, @cb_func={0x18, 0x5, 0x4, 0x0, 0x4}]}, &(0x7f0000000ac0)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000b00)=""/4096, 0x40f00, 0x15, '\x00', r5, @fallback=0x29, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001b00)={0x3, 0x8, 0x7fffffff, 0xe8c8}, 0x10, r6, r2, 0x0, &(0x7f0000001b40)=[r3], 0x0, 0x10, 0x3}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001c40)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = gettid() r10 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001f00)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001f40)={0xffffffffffffffff}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001f80)={r3, 0xffffffffffffffff}, 0x4) r14 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001fc0)={r4}, 0x4) r15 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002040)={&(0x7f0000002000)='bcache_alloc_fail\x00', r7, 0x0, 0x2}, 0x18) sendmsg$unix(r8, &(0x7f00000021c0)={&(0x7f0000001c80)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001ec0)=[{&(0x7f0000001d00)="a2107c71dd28384d3dcff733b3e482e178ca8d74438b91e0ea1e3181de17dd1b229965bdd3266751a4891f36e62e1091", 0x30}, {&(0x7f0000001d40)="ad1a0e0486e42ee68a0fcaba2a4bb7eefde75245f11ecc4c862fa7b850ccc514f170a77527b052c8f5533278c738e0b19e769990bf1e3b1ab68803bf4a785359aee67a5f136ff8a225a5bdc64ff32858bed9c0b1e57367e7d28fb621fd7bbec8e7e2f7323694e377b7edbda6a5", 0x6d}, {&(0x7f0000001dc0)="f53047fc6c8fd7ba9a807b711c372957fcd2588dc8686565a6074b51f4a79f93f3dde372cda863cbfe35201b386123f1fc86eab45a5adf6e206acd14f7c4559df60de862b1f76bff0cdb77b1ad6f36cf96d11486acf25cd4e9e193cfed2e8667ffb9aadaf23764d43b5a3f1f178b5a8b2dca736fe92d91362f001623cac6a5120630c841f445e711d6fa2462008b9eb9b3e902ed16fc5f5d7f81da51971f73011ad5c1fa3c912b02c0de91f62e188b73abd179eb5807a3c708fe971a35bd4440b2e6", 0xc2}], 0x3, &(0x7f0000002080)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r9, 0xee01, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, 0xee00}}}, @rights={{0x38, 0x1, 0x1, [r3, r0, r10, r11, r7, r2, r1, r3, r0, r2]}}, @rights={{0x38, 0x1, 0x1, [r2, r7, r0, r0, r7, r1, r0, r0, r1, r3]}}, @rights={{0x2c, 0x1, 0x1, [r3, r1, r12, r7, r7, r13, r0]}}, @rights={{0x24, 0x1, 0x1, [r14, r3, r15, r7, r0]}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x140, 0x2040001}, 0x4000040) syz_open_procfs$namespace(r9, &(0x7f0000002200)='ns/pid_for_children\x00') setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000002240)=r14, 0x4) r16 = openat$tun(0xffffffffffffff9c, &(0x7f0000002280), 0x400440, 0x0) ioctl$TUNSETPERSIST(r16, 0x400454cb, 0x1) ioctl$TUNSETCARRIER(r16, 0x400454e2, &(0x7f00000022c0)=0x1) r17 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000002300), 0x2, 0x0) write$cgroup_type(r17, &(0x7f0000002340), 0x9) ioctl$TUNSETIFF(r16, 0x400454ca, &(0x7f0000002380)={'vlan0\x00', 0x2000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002400)={&(0x7f00000023c0)='kvm_ioapic_delayed_eoi_inj\x00', r7, 0x0, 0x8}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000004900)={&(0x7f0000002440)=@llc={0x1a, 0x118, 0x5, 0x1, 0x4, 0x3}, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)="30c44f8eb75fc91680cbce6e14e6da87a58fb69b142c20b3f2da099093f036c224f484c10299590774c0dfb6a3a8fcfedb207c5a81b8d0c98b96d4903626c4e136058343d3bc6d70d93fc4c1da6b4c6a90", 0x51}, {&(0x7f0000002540)="bb508665fe96fab2ee1a66083d72ab569aeae3ec1bf73f5a70df0245801faf9863409759ce86088f6b82bbbfa3fb5468ae04a21ef4d4609cbc07a10963a39aeda725234757f0d4e648297d1a5e2a70420cc39c2d6d3052fc35149135e7c767a2088b1e1af21fd60f0f7a383dfb1464de2d87fbcf76b249b61e669ee7bd7ff21f554cb1fb2d351e99adf65c51d979f16449e87d6e968f070bfea3befb359865c906c9fa6fe8fe8662d2f802f33d465211e69d7ff32f5ae99b54bb5bcd803b311099cd08bab8c8047a76f126795e80c9ab452cdfe8aa70774d48d4098bdef6b6816cfb3a1fd5d9ed17e312c06d0981b1deaf3045b9ed0b0d80d2865bae859015e63757fa86776e5df60d56efcb78395d09e4cb0ab548a33658c33c25e95c1991955b7a6f9f44f6f5c638968c5a9966a379f6a2dd77a05785b0f2aa1efc5746a482a393a9d82063d56c0dd7b4771beea7ee1eea30ff586078b658b3adcd586faebc4c9635cb7acbf33b95e554d3dab4ae008a62cd120af606580ab1eca69b5236c01ea39b968c07b94a89609131d418780044700ce69503dfc3fbab5e3cd635ed3f5714aa4533da83fbc65cd1958d44e3a501181ae4bb686a9c082a4da36b12ce5c440d0ad72e700c0e89e1ecd0e001ddbc45a6fe876c544dce52818f44a92b8a1d2b63ef65298c461c35c81c207815fd34c357a6c1d57865677384dd804087fb95f0690c057afa3016e966d88b72d41fcc45016e7b5145dc71dde8de955b2fd57136057ffc8f5233ca48fafe4adee0db942eb481e35f24ac996f3594687a16c12531c66b680e75e7bbd7b78b5502db89783e10048317e424b0d7594244e9af91633ea54f2f96531266d1bebceb4004c649a7308250c2ba26641a982bd5f2894d124122bc9b98138672dbc6718fa1f0bae4c5c0c28f6aeca375512b69f4d46f06202567b864d669e928ed78c5bd674677f902f341177586d7b80f5792b85df4e7eb3020320d0392777917406749b8d0f1fbe43fdc808978272a7527c8a950d3203309f6a12bbd8beefbc5afd269be9b8fd305a9d186f5309844bff3c351b8dede04febec78ec05bdb376076781ac79398e233705c3c60649584d2443459c7a4e5b99a4ebb274455bf526303613c1525da1a9d15ed296c079f7b9e5286dd419462478f68d457bd4d3b90ab2fa29eea2cf47055768058741bf5ba42336511e517c1c0cf38967bf175da3206c725ba7e46b9762f485a98d2ccabd6a2f7a81904d19a22c316cfc746b7805efaa7f2c43c960344b41e995cf31dc3791dfac3c8d545725d786f98e2f34059b14c05a384e27c5d250a556711c44f1f42db9a461e2c1603c49037bfbbe368c26c9e642a6d6d0cf5714dfd323d040aeb812b03e6039bee900f9f7fd6688842c2b18a06589dc2c8d365a415dd362f9c4eeaa624eca99eabdae7e7b0ee0560782c5fa0908950969b83e01c19a282f62bf7e361ad19e42d95f0dcef3d478bac6c721f65be15155aa5602a5f99d5277c912411d4f3480a679f42067d8d7b17b6b224d544bb72fef33ec9269f352aa9d022b4af1588afe325e5c1e5d9627cfb53a432df211abed8e605e407c13db3e7c0cde6b71ae45c81e953b8ef7bae45eaea0597f4d1a14286fadf66c8d745fa2fecf350ef948e106cdafdbb340a1f87a7d1dbd89b30a94fc6a35fbeb06d7cf2b0c618f0310b8e4a8d3474e09bca5a84fd64d7b6f10198858623f35fabf41387827509cddc04c93a1df6bb1e36930999ca508a7cc7489c9388f356d356cf610f40552bb814ddf3fa2c0cc9e8f9cd5d7ab49f19c43b626ce154ef16a5dcdb29c7638b38313cb63349e7457d87b3004f26a6156da40e23c9f7d1b41e91d41ccbbed104d496e7462e6865e87bd9692100c492b36a8ce9c1a65d07a5f77247af4f1370474ff6e3c9070d2bdcd142c7e466c4ea04ab5a14258ea37776bec7f555369edc5fe92904235574867cccbe7e557d65f73d80204abb7b2172a6c36e560569d7b1f28a813547577f831a5c27f531ab9cb77c2784fc1e362cfa98cf6d11ab8b78fbc3c7951bce96bb35de651f8de904f8e425a14af7f93048c8d3edea0fe425f257ca10ae58e9a9b18a58bd1523c1c4dace39f668c784f78e76b3f9ffd2552d668ce714049ac10b6569ce66b44bc568430281afdd04198178dda969eef34e346e3e03bf5ba0d6a98a0d6af3da35139be4abcc4ea4d0a0e1a0b7f33befd4b1328c2bb000efd0120acd92c0452d3054f2344614c68621ee9fcb2b2ebce07d7ffe37f42f0154330dad4ffcb380df5af79d5474e874ae97745258a3c65fb15fe187e9ba16fc8ebcc23e72d00d679ab6329dc14b49d2088fc3396acf2bddf61d182aa5e1896192f53e04868911e9c9ece380808e63165fc5f0b95572c2e483c62b5c546dda31d79985ce1952df5ab447732787cca0f5a7b6368d6ea13ac26ce1cb9decb9b20c5864dc55b2321b8cdc65bd2910dd5c61057ffa2b30ab6abf86ec69bcf3c6c28ae6fc56956469746f2e0af2dcd53868c0af344311d209c88c1622c8b8190a1b71e0e893640eac528905b94dd331d216b9b15d395b30ad01ca9ecf489b1d5ab59a2aa999daff9772127183de4afcddb62dc8386da593c1e9939bfd9163338a72ccdb6315e9ccd7f416b5addbf9b2d70df33cb79fee013f12585cba83bf01e0ac1ab065cabe3a9e204e13b2ae082dfe28ba0bb285b91026ee9e3bb782f06fc620dfba4fbd2b9e524a0447181edcbd584b154b539c9b0b2c818430793bf7f0c7dd5afa28cdfde4314405ab682df04759183545fc2728469010a7500a7d1204e6b5c9facb0caa13eb6df841c15e30942939d35714e0fdc758f68ae2e2ce95da0267de974cd67aae4b0892b4b89706746fee46860433838ffd38e180da966ad89800fddc7dcafe46b06ee7190026c09c3eab6569d918dc2ce29a3c98e9df402bfce2c4129a06eae6886a16ed6093236a56511e61afa02851b39172e4c6b045d7e4f1bac78944d20e61279dde6165d566b4394fd1f5e48dc67540e30a04e24938b5976893136029fc6b33ed8d7056686bce2e51ea51476b752dd91022c4e43b33deff188b1dbd534cd06c1cce90aab737838da600a8ee8856cd0f2b82c71656d0ec59a0495901ec98beac60de2817906bd93c8bf16e7b25a1ab91f5648def16ab5d55a6f1083b99f953f7ab5d82a73f5d4db9be58bd0476793ec8641559ec04111e8bccc895186787d942c076c6624f233e19c7a488052cec712f8b59e014ec734fa0c5df0cd34dd56f57ed29f4011d37788ea7b4120a39a08072dbc9e59d12794e4b04ca452fcb0e486e77a25613ef1d875de7440cc537965047f103561d87ea2de1371bb8440491c523bf7cd7a3867d3fa5a0ee0b9b16dcd6ed3ebfa6197edf81261a376559f23a19fe459c57d8141c4e6f49c5cd6f90d7fd35d2bdd60c73c3206859fa842b4602e83f4b93010ee118e90cc750f8c350143563071960f3de41a95068091691bb5f4be3c4d95dc1c92ddee09657e847022cab17091b62e8197118f3ecf1bc2cb5c4c2f9a4a813951c15d318615977c14bc0e8f13362e07316057d2d730d15e9a3c9c443107c3436aa5c5d33d62064312493085d7239b2bd5317019913ef7186ea5e3076dbf386d05c458b84e6c207341adde616a7f7a6060604ec428972c0bc1d240d79b49d2715323bb321a218ab43f72305d2515971eceef28565f4331a8774829fe2fca99b5d92f7d873683c4e3cd401c9a7a39a12427c1e7d3d811db909e1c64bbe073ee567b6bd8ae68ff3504285d5d555972f7b980310fe1381e3ccb755194214233351f976ca143fca099bac7dfa935a24114346e5c509a3d35195cbd1b13cd242697f3559937bf8225deda45830a02eedc8bba7f97fc54774aab812446d5f98a57971ca53e7a069de3d3827a2e39dd21c698c4ec8fb15eca37e16ca0d1c2c04c0c30c97aa9a93242e1cfc9d3f70d8f0c6d7938a0796b6fe7c2f2150c9e340683b9b5043292d538d8a826a972796ef26db68e39d7bb99b3275eefda02e6dd591742a9ee66454bdaa9a467637365ced728f0e8a2c2750c77fea383112cad065c54917bcc00f2c0b4c0a7c394773e5b12b3bddbe87d0e1989e5374109b124359b6d0989b3079f4ad24f19327f3a962392687ecdcf7e004088eb1d5231b50ce434cf8ed426bb58b6de6578ea9044ea66133187a50d8e3a3ab4b5a834ea03d421d53d6fcb5cac4256ba992dfecaba7a89f7a91e982fd14dab9952f87b6e0de712fe6cb45a1d0c348ee0e0d411949e942a331567b85e48d7450fa6362697e2a8a23e8651e786d67b107dc3d9c4266df4380341d20b7ead953eafb2d44adb7fd8b549dc923985cb7e5764d556577237c74fa49849d836ab441213f7e47af205be99094ceeefd00b24fd1fc8becb04961165f08f3549db5ece28131b8b02f1901fa9ffeefc344348884849ea04e6955a6d22dd8fefbd50fd711c61f3b7b0224a5a45c8c1fc2ae1acd5c667e615aa92a79f85a01ad779ea23466373697b2504518b7dcedc4af020e339326aba65c181a3f55a095a569d9315d3bf1621a72151e86ee895edcb3d7e3d0bc171388a8bf23a207e9c0ede93e31e84162ecc74ce9ce71f266a6b9775038bb9ec1498980c93cb6b4c7c61547dda4e0c25c6ff1d9f96e632b56c665a874fcaea2b31a03ff0fe678bde448faa9645e337155db2ed26713181b15c29d9c55107d544c0d581be806e79db9416685cb92dc7d2ceaf70e77bc91dc0d9fc3f568d75155aaff7db66e5104f8bcacfd5b3dc5fbc83b757ba1b7be658d1a1fcc00eb484f7f06b04db44e6f89daeb66d5824d4bca3f8201cec19f3338e63b69744f3efe3c2a9e51a1a6122aba94cb37f5025f2ad3688edb6d5efbd7974e89ce2c4c5d03f6f110d17d0dea86a1052a6bfb4edb295efa1310e3d76ee3eaa51beaac6129e95e6987fbdf54b989043819c53c9b3ba8c4685b6b889844d167fbbeba598919b82696665380ef3f9331aa19ee92956f313dc42d721ead9b1a0af900bfb458b2932f4ea8b4fe9bdd4715c45f6f40b58157a059ee0d9d529f4c299511ba44b07329839e1be8ba1b7d0fbcb795a7ac209a6aeb37ea7b950ffcc7781783858707558edbca8b392b105860fe350e641a49d9f64ca14f0e62e63599db27e121cb76c9a57702a47912bd089601e5c2384083ebc49b3a7a34f5fb6b4bfadd77b48a6edf0531418dd86645e51ca83230bf07f8b9f33f5e6a1c9850c76e144a299a25f2021279a56519c81da85ceef6577d22ca0149e57822c981ac27eb814103192f408264aee399b35f4d2d15b6187e19e5817101fb2488c376e1785e2e60c43987eab508042ae6bcc631c2bec9c1fd6c31f72c4d1e5dcdfe06d034574a0d98dd9d94a3a3c4636fd4ce37c7db70ab8ea6298d8a0fce20b0c22613b964369e233c2218995114b76d76b65d7541541356ffa483e15c6ae58be234a3eaef02225e4e1ffd595609ac8074fc5f4bb27b3fdd99cc64ac3550383a7d13247fbb8c55fb730c8f458898ffbc520d71cdad57bf6fdbcb30d4fc16cdddd34b79d120b217a85fd595946819e747d34fdd0153e8b41fde3a5501bb825e2c84e7dd0277f9b6d2f3b56fd00b48ea5de7d307a1cb66d0f727f663b8fddab51be1bb7fdb0dea0916247e0e1251c8ec28707dcf1cb1c66ca7d99c7c8c4da431e46775ff8165fbf181f2692480ae2c99752a6a890c33f3f998b93ce71488719206531bc109590d538f29b88efa", 0x1000}, {&(0x7f0000003540)="2f4a0bf057d65d7478932c79be029dd87453ac3d1ab2808b953b075377e878561b8f16e09dbe9c50635fd75dc05db9", 0x2f}, {&(0x7f0000003580)="0ffb2edc3d12cdaf89bd3c08f3d1390bd173361b9a1b10f1e48e2e971a361f9f21987a56ac7cff92f27ef8db84f9ec3818f16c9480ebc43c298de7e5e2870d5aa5adbef743687ab48b3e59579b31b597efc8898dd848bf54806f007fa00363dde34ca5796b6c3aa7e68fe4dd860e9758953f3e00ac071bed3c8f651cad97f9bfce08a07df247f2c39dbf0830007f2e2d9ec416ddf3ac4156a769d2ae8c43201d6be91b178f3d2132487b82bd8f31094aad5b1b2a982cb188eb2317c00c96b60d7b31f7207e1c94beac3efa8e2ed7acce70c31ef75064d1b2f3bad7e09b62f8b1f733dcd818618ea8d4afdd6ce5368bd3a1d953d0ca", 0xf5}], 0x4, &(0x7f00000036c0)=[{0xa0, 0x0, 0x2, "3ecb1f6189eb498c66c488a02be827d1b9f89d3a7efea7b50b5a66c0cf3fdc06cb812832f9ae858731f2fb8a0aeed6e873ea013b2228207c8ec7fc34bb134cd256a332a327e655c2dffb9d50fec4b71aee120a9a681e386d9bc33c2613e93bd9b88baf3697de51d9c6092c2177603c2efe21b94806060c92c53415c08bab7d14fbcb55a87a277c8217fe1c69ea0631"}, {0xd0, 0x112, 0x0, "1efddd5379a770e4c8f49b0c16ec3cd1ec95d41670fb6c3d04cbaf1c5b874937051bbcb6f128afd214e16b1f66f8bb2e60aa6a7e8a151dfd5ef076448a21653cd54349b8684e4cd0090067884fc0050ca0ccc4d2768113e5a245c03b2a2460fd829dca9e01d2233e4ec14cf10f9f3d28800c812b841b7dc232c5b71bc5d35e15d8578ef346aa312bc74c2d64368da2d84a8a960adb3033dc28f6a1c62627448acfca6fddb62cf19bf37696772a7b9764061d18c4d2f3e991f2f39603"}, {0x1010, 0x108, 0x6150, "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"}, {0x58, 0x11, 0x10, "bf71fce5d04c4f1800cf24d79bf1827769f999ed46ca0951dcb01e29a97eed3572abbb4c89a1654f025af9b8c8430d92ae9257882e9b30031c089a561cba1ef4a2c1e6"}, {0x58, 0x10b, 0x8, "e57a3d6a63571a5f243db16beee4a3cf2df6e17a28fd7a558086bfcccfb22bff7df7d5568c5c6cf3111cf757f7d399b87c4d8d429867ab45b4ea5df8b53559667d63d0f5"}], 0x1230}, 0x8000) r18 = bpf$PROG_LOAD(0x5, &(0x7f0000004a80)={0x1, 0x3, &(0x7f0000004940)=@raw=[@exit, @map_val={0x18, 0xb, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x8}], &(0x7f0000004980)='GPL\x00', 0x8, 0x0, &(0x7f00000049c0), 0x100, 0x40, '\x00', r5, @fallback=0x14, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000004a00)=[{0x3, 0x4, 0xf, 0xc}, {0x0, 0xc3, 0x6, 0x9}, {0x1, 0x4, 0xd, 0x6}, {0x1, 0x5, 0x9, 0x6}, {0x2, 0x5, 0x10, 0x5}, {0x0, 0x5, 0x7, 0xa}, {0x5, 0x5, 0x4, 0x8}], 0x10, 0x401}, 0x94) ioctl$TUNSETSTEERINGEBPF(r16, 0x800454e0, &(0x7f0000004b40)=r18) 5.487367776s ago: executing program 0 (id=4134): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001300)={@fallback, 0xffffffffffffffff, 0x17, 0x1}, 0x20) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x9, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0xb}, 0x80, 0xff, 0xfffffbff, 0x3, 0x2, 0xffffff9a, 0x7, 0x0, 0x0, 0x0, 0x98}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x890c, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0xffffffffffffffff, 0x32800, 0x10}, 0xc) r10 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0xf, &(0x7f00000002c0), 0x4) sendmsg$inet(r10, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x3e, &(0x7f00000001c0)=r11, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x34e966faf4b98168, 0x22, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40fb36b}, @generic={0x80, 0x5, 0x0, 0x5, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x77}, @ringbuf_query, @call={0x85, 0x0, 0x0, 0x2e}, @map_val={0x18, 0x5, 0x2, 0x0, r6}, @map_val={0x18, 0x6, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x7ff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0x401, 0x0, 0x0, 0x40f00, 0x3c, '\x00', r8, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0xd, 0x8, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r9, 0xffffffffffffffff, r11, 0xffffffffffffffff], 0x0, 0x10, 0x70ac}, 0x94) recvmsg(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x7ffff000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) 3.802576612s ago: executing program 0 (id=4141): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000680)={0x3, 0x0, [0x0, 0x0, 0x0]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x99}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) socket$kcm(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) socketpair(0x18, 0x1, 0x1, &(0x7f0000000000)) r2 = socket$kcm(0x10, 0x6, 0x0) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="d8000000240081064e81f782db44b9040a0208000300000000000100f1ffffff020014260360160cac08da30399d11540e120800280024000000a80009001100014003000000036010fab94dcf5c0461c1ff7f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bba", 0x6c}, {&(0x7f0000000000)="88d1ca230241e5e3a5ee9b3d8765733e9b51040f7adbd86ce59a71ed8e9f799031f46179e2ee8b449797ae5b26c7d3265c425be6a476218a15cd6dca268d92a61720e00a701f9719fb978d01e727c8f19f4982e0a7733a356db80457cd5f93b0f21675cf2cf87db990a122f43b507a03efca79a163cb67686b816a4b6dcfecf81c1cc288f780f293c7389b46705e0627541693c5ffc43aa62684639b04e16dd21041a9b922924041591b77a7ba0f16442b493a9b1c2ca4148d04a14136acaea88afaf9c3a3b2431c1f762b400d60d4d44eeb064f738c50e6c8f2e713b90b550ea678eb04b3412aa2b3baff898d62d0ff16bfecfd1727cbe5c378", 0xfa}], 0x2}, 0x4004000) 3.542506875s ago: executing program 3 (id=4143): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0xc2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x5825, 0x2e, 0xfffffbff, 0x3, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0xc8, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x60}}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) r2 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0x2, &(0x7f0000001400), 0x4) 3.054842877s ago: executing program 2 (id=4148): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e, 0x0, 0x0, 0x2}, 0x28) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800190007000200060001c00200bc24eab556a705251e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r1}, 0x10) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r2, 0x27, 0xe, 0x0, &(0x7f0000000080)="f8ad48cc02cb29dcc8007f5b88a8", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="2e0000000000000088a886498d20edf1c93edec34436d97ae4a32fd0f982edad521554bb4baf1fd3d216df8ee2d2830ddb901b551058b69968df04cff25e5ecf4cf46d08e1c63216e9a53de8f9de06c08df1e11c5fba28168edbef15ba99d1fb8e5fd877b57438fb4ee4d58b887f5a0ded0d7828736860e98fb8c0d3c12769998f04ce2cd567839220787a3feccf22c83e8462ac220076781e59dc683040071c005c73e488d7194da93bd09ce7e5925db5780f0ba3498f66b42fb41bae4e58f66d55bef27ebd332019e770218883501240d4fea5b785f09a3b923373956ebd9ba2137ea9b75c60d578c529fe13f8246893cc5a3293652f1a", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) 2.847892756s ago: executing program 3 (id=4149): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000fbffffff000000000300000085000000bc00000085000000110000009500000000000000e5c7c9ddc1d01ab6bc2ab7690fee25a7f90c2fe04df90710740eac45b4267095f69dc3224f74afa9124e53"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"], 0x0}, 0x94) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) socket$kcm(0x10, 0x2, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x39, 0x0, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xf0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 2.602921789s ago: executing program 2 (id=4151): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x15, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0xff31, 0x0, 0x41000, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_config_ext={0x9, 0x2}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00'], 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a500000000000018490000fe"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x14, 0x0, &(0x7f0000000180)="020000000000000888f54c6588a837fc58b6c915", 0x0, 0xd00, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40086602, &(0x7f00000002c0)=0x3ff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="1c00000018"], 0xfe33) close(r3) recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYBLOB="3eca0d"], 0x9a) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0x16, &(0x7f0000000f40)=ANY=[@ANYRES32=r0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b}, 0x94) 2.16484465s ago: executing program 3 (id=4153): close(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x28, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x28, 0x6, 0x0, 0x44) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c23003f) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000009", @ANYRES32, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x100, 0x2000000, 0xd384ed8852b2f03d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f3, &(0x7f0000000080)) 2.132127045s ago: executing program 1 (id=4154): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000301000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) 2.07671902s ago: executing program 1 (id=4155): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000800000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) 2.068765196s ago: executing program 4 (id=4156): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0xb}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0x1, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.987091032s ago: executing program 1 (id=4157): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x11, 0x2, 0x0) r2 = syz_clone(0xa0000280, &(0x7f0000001040)="cc885856b2e177de8edf3ca29ea3a385e13e8954044474d99cae1e286665ed7056a0565017d2450bb3616d1f864326f2ade88497c51fe7267cae3dbb9abf6e5819309cd61da409f29a9b6439b6fdf2860c71eb1cc39cce843ac7bb96c5f45d7dee777b58b96734be956fb41f7ac8e2e1f21db851aebf493309b2f786a34d8bf4ded01398e81e188a62bae4271add012c3e4a243f1397e2e0cdb4fa3a345c5fcd4ea9696a9291cd144d8eecd032befa89e6f785369ff84a159afe179f89926701ee19692765a69c0f2a0606e53e086e815969410c9f2ed064020739204478ecdfc01f62bf8e5bba83802f7288332260782bfe9db258704d413a22e1e216686144a542a8fba87311f743b134c29101643820ded716b40568fd8b8a3aa6be905316c305aa4089afa90481c4f45feedb84457e6a1c3305be8e8c0f54eb485fded8a163338865bddb83e7ef9869bdaa79f7ab5feb6d56807809cf3a310553e73bb26eebe1d2c279f2ce7343a6c2a427b3aa8faa8209e5832916cf7bc2933a3678cbcf4ed8245c52ae89b5bf8f45c37ce122e738475dce81dc63b51badb33518761322ee3692d2310461889f239dce647f0110a68201d0b4627330c9a1e0270c08fcb1687dd08ac16df23a11881d57afc8cf92ad06185fc0a7faccfa589e211fb47d805a997a0066cba94fb89f4bc219ae55cee7aee399ffbb6cbd9057924c86731fb14066ee8e4643d90ac8241f79e8e6d3c52c19ffe3cce60042963748bb358d60441daa023b6995a58423de87fc5f79478e994980d573215c21a23247d918ce4682a30e211d4f6d5f8002bca58471381d01acd8129f4b9d4bef101a9334314080c334b7411f38f85798af76d4a3f78ac194ad7535d706edcb6a2262ce280a1524003000d320b8c935c931e8e1197d5c6a79b8d36fea7b39d50663fd4be083eb3a3b17d41e7b728acefd517fe769330bfd1f93d952566f00889b4f5ab963c2c2fdef8721dbbb38e92108a07ec05befefeaefce20cf7f4a0ba0fcec090ec1a53abdae62c09e017dd9315c87df7fb9ff21e0bcca7ed98d9749ab7704b2da801f797ca4785119752bcdcfba4c7c27c50a80fd06a9c69c8e8690587408e0c4a90c50e7c1df9641648a69f52a499d1d86c4a30eb9ae5fb6a26a3af9a88c5cfecb744c5807adfc090e302da4dd5014ba7afc7846728140c0798d9caf9aa3e49ebbedd37dc24355d3bb125d948fa045dc25369678a1a20bcdf525a1f5e222e91c92344aa0859a57b5bf86b0f24c2e16c1bd038e5aa36b4d34d8de4655451e1c3141f756fdceac40382dc5fe21c49ecdbbf65a7b969926852b9ef47c5a092f56d3cea4e579e900669bcc483d74cb4112fee1166d52a77190075fe44fb99cca33b9f6d3bbbe38c7f37c222dd3c0608c32cc8aa2c722f5f6c08e20dde08e4d0a3a14972f1243cef25d510b91f8d14b9ba1813fff208a22267921cdd89efe985b2da434cd0731658479515dfb79cb6afc26387372dbe294c7f7f5020c8435f083e8be3c3b4224685328601d6d138ab248d81f187aca1a40b6919609c99deb3534e36140ee1c2a87d870ce06bd67a678bec25d87a2c098a9dc4339a0a113a02bc7e90112b296da964ca446378aca2619c1a9e57b0c7bd83ace1a2c28e0e3d1947f76efd98b4a11fdb18c6a83463dc75701c3a1a37a1557aaa7bfdf84ca11ee32de3202ec36db3ecb5168a464974b14097f03f9ca596679265e363ea2ba13a7962d103a09f63b6e83a844b0bf281a18ea85ac4c37533e34760b37ddf85b03d9235dd7125075dc033aca143c00aaacdedfcdf2a348a22d32d7a845b3c00b199421a555044302fd10114402345ab6f9a79e171c889323b7f6008654f89b689b75b7730be8deae2f89455466f873db3ee0bccf02a2be5d1bfeeee62cb5f766188b8e6522583f91f76e9291d006c1d6995738b15ca86bc0ec22d34e74fe559715dbaf58836c6ad7898178401ea8c309973de9c8e470c5b6c05088f60346b0728473b276bf7559c764838637d8285d5684c121a939f0eb52d2bc933e7106f720f6d86a3ba07f8e77f7d89bff7a7af2e15fa18f78bb573882af7ce1d71e5dc9058c2e36f39b962e15faeb137e13f5c453ac60d6aceecd3e9851ded9d0dc1d8f067d603607b7ee448d500de0b74465a3f67dc778f118cd6dcb0c762abff5b3307d05b50d35a0c1482d1c16323d4411fcfd7fe4d633a4361bb054a581a24b6119a9709672d1d0135b4ee2f0bdf30376266f29fb01ea40968aa6d0248006e386d6536a8bebf7e399d1d1a0eaf04c373846f038642630e66158601b1a950cb39edf5fd432b36555907572f252a74c9fd2face627fd8d691f6de45ba1e496f3520b5473f87c0d28720ab07da29a3b15621b4c4fc36bc8a96d7f023e1a53917cde1f2fa42b9f6040a7adf087c5a95030d78c35fc76e962d9927214f10a1b4df381b1c05818b697879ce09ce5d46c9851e56e8942ba6efe0d817a2a9ed34ba2eaa3cd6a82440e04c9bc85989a94f90663a6063cdcdd562faa85b6959e5fbb4a096c92fb5e5afa6abf305044809d7c792635a4a7c910f35102f6a1aaea74374697be7cb0fa51511e66ead2d571fd84dc6530b8a34c25a1b1e1e0767998358fbf5d1fbd229494c59d9fd900c67a90bee9442e43082314a59dd9a2b3cfe03779335fff74360855a097c352a6355702d5e97400e55d9077349d0ede9b42c69f2d8fb453b3b96441af3e4be6fa50dcf0073af68a8fcf328fc56c374467ec706c90fd0664e88cc508b9bdee3d569e7927436091e8fb88b527a6b52ac763bcb2a4fa90902620fd93b77c71a9903ffabd188e1d388fc24b3436b544de83f84ca1ee63ccccccec86c08de1caf5632de072c746c935608925b6a45e9193d871b2c453c8d016d328159a53711027937d2613280fa2f1b88aa8f57742761022b88b3c4ebafe6ef2d5fd7aac702d0a65d7f149abbc1875e403a77707bc100b4ad457f36f8a82ae3e2110794f861d20d6395b8a6640f405a75f24ff1c23e72a66a5b18ddd4cae448726136383f80f99ee359591536b5d747fcf5c2445b8eadb250dab8fbf2cfaaf95ab7c56f79451ae44838961c27e6db716cab64924604337a49157632500656353efc677f14f33a5d46171fb1f6154708ad3fc03177bb81403b3684022780eaa7feef8dbd06dfc1e321e82d1dd19c49dcfc317259134d58107749bac91af717f33d44633b043edc6e94475ff3c29792ee8193c5a3c469b2874656c0ac668b3a744903d5156049f3941d8f9786db409a7a309248c83c65aa2a9a87e202e660334a378e2c1bc0eca1300cf9e6fa8e71cd3cd7c28b7d9aa8dae849076d4955e96cc435e95eb850c85dc90d36efcec65ee38b46afdeddf6f20a2d76bd7ab35b04a6098a2ad7ff976d3177abb265f0a5662e3e92eef2456d4faf64b892019c899f30bf120b9ad75642fd5be0a7fa9048b822b6838e791f8a9863214be2bbee181cb7d74495f4b1eb1f01c386b0bf8120e4483a66c12eb1d8f18e659a451b96452c153f4c0ec41b3af3f0aba491a6b160bec1f8fcd7f60007d6cdaa974e5220f6cde1841892768c4cf70bc8b68519ba3cca5fc0f0306d5f91c7b322ec5b4d290392fee0764de4503fa24c88f02ee835e36faac92dd4554f80b2f669cfe8bae730e442fd8a0acdbf8f56feae2a45586ae4bae8306eebd1986f0dd5e0b4d718cc365b3e9c0544ca6a9949fe0dc75034e2b6e84074569053a4a16a06e4e43a7c2c5cc8cb160ca05416eef86c42ffd7effbae8a1f2fb41a814b27f9705cff5e77509f8b565b9e6999ba473ef60de4cd2cbc5d11fe71f98a7c169957f7aaa15fddf239739b05c78b2272815da5c7b703891ffe59762cc99487b7ef5dc66b1e9f8e934b052cbb9b9cf96d31d28f71bff35a514b1c7311340e5320a9e8a641865d8c99810bb71cb0c1466f4521ba15e32d6b7906d23e4d307c25bc917f7255de2cb769c092ff9ebd57b08153cc24fa3a0c0d443f4a9bac1f377f5b0bc1e388be74300fb6cd17a8b8ba925c2f42951852fd068c8379c13f2efc63e10ce86776f8e40e7362fcae2574d227d6d74c7c692714cbdb64c949bf2fcbe88ed34cd0456388fc9a6ef05d89782ba5b3ee95ff23747cc0576cf642fca85469917b992306c9e2dad65be1d457bde1354238c8297c56e55905c16cc82e1e2ae6336322274015511782a6c9d5335a5842cddff62104e1912da4501cfee2b4a66818658b8a1c8431b6e423a4620157a0931e2420d5711d839033fa7943bfaa8de167bde1364803c08fe4f17cdc861dcee6a963a64487e880", 0xbfc, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000200)="89a994c6d1a277b47e4d6b481a34de9b4985c4e736aaff13848d8413a553deef4d53095d43b40d32123042b8") perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x2, 0xcf, 0x7f, 0x9, 0x0, 0xffffffffffffffaf, 0x400, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0x6, 0x1000}, 0x4, 0x1, 0x3, 0x7, 0x2, 0x7, 0x4, 0x0, 0xb, 0x0, 0x4f}, r2, 0x4, r0, 0xa) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xb3) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000001000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r5, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r6}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r7, &(0x7f0000000180), 0x0}, 0x20) r8 = socket$kcm(0x2, 0x1, 0x84) close(r8) write$cgroup_pressure(r3, &(0x7f0000000040)={'full', 0x20, 0x0, 0x20, 0x8000000000000000}, 0x63) syz_clone(0x8001500, 0x0, 0x0, 0x0, 0x0, 0x0) 1.577129111s ago: executing program 2 (id=4158): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0xc2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x5825, 0x2e, 0xfffffbff, 0x3, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0xc8, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x60}}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) r2 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0x2, &(0x7f0000001400), 0x4) 1.548029074s ago: executing program 4 (id=4159): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f0000000440), 0x3d) (async, rerun: 64) r1 = socket$kcm(0xa, 0x2, 0x0) (rerun: 64) setsockopt$sock_attach_bpf(r1, 0x29, 0x14, &(0x7f00000000c0), 0xb9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x1b, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486"], 0xfe1b) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f3, &(0x7f0000000080)) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7", 0x394}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f}, 0x94) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) close(r6) (async) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async, rerun: 64) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@cgroup=r7, 0x2f, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0), 0x0}, 0x40) (rerun: 64) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) (async) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 1.465773343s ago: executing program 3 (id=4160): socket$kcm(0x10, 0x400000002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES8=r0, @ANYBLOB], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffc00, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xe, r1, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, 0x0, 0x400000, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1400000017000b63d25a80648c2594f945a3cb0b", 0x14}], 0x1, 0x0, 0x0, 0x40000000}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x13, 0x0, 0x26) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x5d) socket$kcm(0x10, 0x400000002, 0x0) 1.16216802s ago: executing program 2 (id=4161): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000480)="b9ff0307683a268cb8f8ffff888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 992.071587ms ago: executing program 2 (id=4162): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000fbffffff000000000300000085000000bc00000085000000110000009500000000000000e5c7c9ddc1d01ab6bc2ab7690fee25a7f90c2fe04df90710740eac45b4267095f69dc3224f74afa9124e53"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"], 0x0}, 0x94) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) socket$kcm(0x10, 0x2, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x39, 0x0, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xf0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 865.118502ms ago: executing program 1 (id=4163): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000300"], 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000300"], 0x48) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040), 0x2a, 0x0, 0xffffffffffffffff, 0x37}, 0x24) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x2, 0x200000000000001, 0x106) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa5916b8f67ba24828e8b476090bef25c59e88254f54077f799bf408301000000bf2255d6a0244d35b213bda84cc1722fd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b090121754e90bf0649fae26f7d599a32eef6cb22f84135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f824cf796b07a6ff61c5552417fd703f7f14d8b7897bfca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea132dfba30bd0f6ea508000000a0c548552b571bed5647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90b01fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ecec37e83efceefd7ca2533659edc825e8ed9be8796831aaa48099c75753ebbe05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c7c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c71f4d578455d1d118d372ad6e9326b98ac67658ae791ee8b479a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b700056b5af553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420b75b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20ba2ab083430f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72e65731b7ca661eb5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f715303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce694181a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6812fae0533496b6d58da50ee80a6b9a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3228f52e33e9362fabae396ce087cc5dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33384253af570f4ef9c0254afdd89c73943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b70304669c447c71ca4d54c82395a3958d576c42c08a5e5adfb58306164cc7bb212f36468f40ce185a63c6b05292186095c1f407ce74297d16470988f1647f7b6f6cdc6ab8be3cacc325df963c2cb80cfe07ded6d55f556be0a3dfa85f0aa2b336faa53b8b0a2dafe0840fff03ead2c4a07dbffeb4ae7617c8eed2f8c12883592538aab23f465ce974729aedb4ae550da3f7f180c6f6fd91c653a77e9304b05dd7ada7fcb8277acac71ed37d4ef8a5885a208b34ac5c34d61fbcee2c9be9af7c7685c7d2f302b0601c3672710098d3d9dfc14f346ff7e1f89a3249254edffbd22aec008810fb9fc59f5c39fc7fa52358506d2557e12c8c3e3b0e9d924c50051383a4c9f6a1bb4187c1168d52ce26659325ce4fd7759c4f84d1fd8652cfecc60d590bff108ecef2d51d8fbd095ed7c1688a8898f8bd19ead4be1eb5797e6aef9cf6d9ca92e52106e03d29b669c0096b37c976b5889dc15c7803422a15f54da7901c2f6e894cd48dfe7e82d79a0943fc133d1605303a2a93361400"/2165], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) socket$kcm(0x10, 0x2, 0x10) setsockopt$sock_attach_bpf(r3, 0x10e, 0x2, &(0x7f0000000300)=r2, 0x4) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r5) 811.38885ms ago: executing program 4 (id=4164): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00003542f300"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0xf, &(0x7f00000009c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000089000000bf0900000000000055090100000000009500000000000000bf980000000000005608000000b7000000000000009500000000000000078ec3df8aa16090754012f041fe95ab9a84d95be3d59f552b9b5cfe2fff538d5b697cd08eb645da99ce02c8c62cafd5f9217fbb047e8a089d925744d1552279d46a7b8f778b2b75522dfb080e59b338b52061bb32fbb36b66e46e91182952ad018c80b9b80e3a9f5cc5a5f2091a78ff3178808917f2e052cc78bc885c987c04"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = gettid() (async) r2 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@ax25={{0x3, @default, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f00000004c0)}, 0x0) (async) recvmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/45, 0x2e}, {&(0x7f0000000c40)=""/4093, 0xffd}], 0x2, 0x0, 0x4}, 0x40000022) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000c, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xfffffffffffffca1}, 0x4004890) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="d800000019007b18e00212ba0d8105040a601100fe0f040b067c73a1bc0009001e000500000000001500150005000000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbecbf29d746e7372f2a00001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) recvmsg$unix(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0xff03, 0x0) (async) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x80) close(r4) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x5f0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) (async, rerun: 32) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x2) (async, rerun: 32) recvmsg$unix(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[@ANYRES8=r4, @ANYBLOB="3eca", @ANYRES8=r9], 0x9a) (async, rerun: 64) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xcf}, 0x8500, 0x0, 0x0, 0x0, 0x0, 0x402000a, 0x0, 0x0, 0x0, 0x0, 0x9}, r1, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async, rerun: 64) r11 = perf_event_open(&(0x7f00000012c0)={0x0, 0x80, 0xe, 0xa, 0xfd, 0x6, 0x0, 0x200000, 0x8100, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfb, 0x4, @perf_config_ext={0x3, 0x400}, 0x8046, 0xb44a, 0x9, 0x3, 0x6, 0x100, 0xcac6, 0x0, 0x85a, 0x0, 0x20000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000001240)={0x4, 0x80, 0x3, 0x2, 0x7, 0xe4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xf, 0x0, @perf_bp={&(0x7f0000001200)}, 0x8080, 0x0, 0x6, 0x0, 0x5, 0x7, 0x1, 0x0, 0x66, 0x0, 0x4}, r1, 0xa, r11, 0x0) 810.967527ms ago: executing program 3 (id=4165): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000040000001a"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000008000000000000000100008500000097000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x7000}, 0x80) 697.169143ms ago: executing program 3 (id=4166): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001300)={@fallback, 0xffffffffffffffff, 0x17, 0x1}, 0x20) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x9, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0xb}, 0x80, 0xff, 0xfffffbff, 0x3, 0x2, 0xffffff9a, 0x7, 0x0, 0x0, 0x0, 0x98}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x890c, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0xffffffffffffffff, 0x32800, 0x10}, 0xc) r10 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0xf, &(0x7f00000002c0), 0x4) sendmsg$inet(r10, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x3e, &(0x7f00000001c0)=r11, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x34e966faf4b98168, 0x22, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40fb36b}, @generic={0x80, 0x5, 0x0, 0x5, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x77}, @ringbuf_query, @call={0x85, 0x0, 0x0, 0x2e}, @map_val={0x18, 0x5, 0x2, 0x0, r6}, @map_val={0x18, 0x6, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x7ff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0x401, 0x0, 0x0, 0x40f00, 0x3c, '\x00', r8, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0xd, 0x8, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r9, 0xffffffffffffffff, r11, 0xffffffffffffffff], 0x0, 0x10, 0x70ac}, 0x94) recvmsg(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x7ffff000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) 686.223913ms ago: executing program 2 (id=4167): r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x0, 0x31, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000434b29797fe856c4c00000028000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fed, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={0x0, 0x1}, 0x4005, 0xfff, 0xfffffbff, 0x3, 0x1, 0x2, 0x6, 0x0, 0x800, 0x0, 0xa9e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000240)="b2", 0x1}, {&(0x7f0000000180)="23480d95ed94c4265b88f5532b5a63b5a84615cc674c206880d2eade17b1b60edf2ac4126ba663cce2046c70b60f7f5cfd0c621f48", 0x35}], 0x2}, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r3}, 0x18) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, 'p'}], 0x18}, 0x0) 589.801074ms ago: executing program 4 (id=4168): socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8e0400000000000000c61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b36db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece010000000100000010223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff814f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffff854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e92604e1026e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c36981edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ce852364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b00000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58f0225f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e20280e14700eb4acff907560500ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ad72a89a7f6d74126f327bf7dfa718d3e1e9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d7462c080c159ce40c14089c82759106f425a2554644b2582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e1000000b81b6790062e61cd000000acb1b33c38ddd302e28e8e30b5c180d38bb1cd770195799c541a7481f5d34ca75d74b3833d399371c8f09f6745d0e43d46f7c82ff1b7d6c04467d083fc708348f35ae9bb9b78f2984a0ee55647d4c4a63c4f438fdec726e7d8228eaff2374b2300b9c35f4259e3452b53ee114bb8a6c0ea6fc89a55fef6673013d7dd4597660865423e978dd6e41e201bb3a584d6fe6f24e290613b677271603c558ee2021be29c4a06a057b2acc5bfd34898afac0d839079bbcb3acd43532563367ac8ae6c4379fb5fdcdab5fe55e1a3a521284209871216817338073cbc4ec9903725b788a25b5a6003b579b8f0e20d78be3d885557292971e65f4f1daefad2c5ccbca608b46406ffff25610c3cbae9c3d6d47678f482e2c1f7cdfc5ce2a67c1545c1192f2ac3990f9c850788401469fbca801e73cd9efbcc6ea52ff414cdff5c49e706d699b5bfa75526f700c4e32611b826b2787f99532c02262a9c60e4b07a09377c38747c7f05e38b6db5d8cc625873af8fc5a7d362334c509f6bb4e36e1c9e08949679e0ed9f84e668588b9f1b21069bd5ffe263b191d1a7f5d4e85de1a2a46579d497000000000000000000000000000085890d719cfd2eef4805fc5ebd790e94908d24a9002b0e658d593da7811e099e1c7c5699331e98eda4c706a90e22047fe27cae6994f70772815879c3d6a16e769eb6a745ca0ebcd90d81d109c1569129c0f26bb037806c424ae349391b4a5723afeffdb940ac1de55b1022c7d9aee805706e8fcdfaf3ab14ca4eae5b534fea2565d4dfa5a0fe38d7aa7d9f3c7bc6e895852a9035283b89ddbc41c54dbf9392c8dcc65178726eae650e"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2f, 0x6000004d, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000ac0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", &(0x7f0000000a00), 0x0, 0x700, 0x3000000}, 0x2c) 457.18464ms ago: executing program 1 (id=4169): close(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x28, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x28, 0x6, 0x0, 0x44) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c23003f) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000009", @ANYRES32, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x100, 0x2000000, 0xd384ed8852b2f03d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f3, &(0x7f0000000080)) 413.909683ms ago: executing program 4 (id=4170): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0xc2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x5825, 0x2e, 0xfffffbff, 0x3, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0xc8, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x60}}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x15) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x2, &(0x7f0000001400), 0x4) 109.801203ms ago: executing program 4 (id=4171): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0xffffffffffffffff, 0x100}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0xf5}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x922000000001, 0x106) recvmsg$kcm(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x142) recvmsg(0xffffffffffffffff, 0x0, 0x10000) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="12000000000100000a00b4e2c64bc7bc3b857d8d7ed83100000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x100000004}, 0x0, 0x0, 0x0, 0x8, 0x400, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/179, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x80000000}, 0x10, 0x0, 0xffffffffffffffff, 0xffffff92}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f00000002c0)=r4}, 0x20) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/243, 0xfffffed7}], 0x1}, 0x12) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240), 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5}, 0x38) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5d35, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0xfffffffc, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x7) r9 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r9, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10102) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x0, 0x4, 0x10009, 0x1}], 0x10, 0xfffffff6}, 0x94) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b0ad25a80648c2594f90124fc60100c050000040009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) 0s ago: executing program 1 (id=4172): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x25, 0x0, 0xc) (fail_nth: 1) kernel console output (not intermixed with test programs): ] RAX: ffffffffffffffda RBX: 00007fb6493b5fa0 RCX: 00007fb64918eb69 [ 443.806352][T14825] RDX: ff0f000000004080 RSI: 0000200000000000 RDI: 0000000000000003 [ 443.806365][T14825] RBP: 00007fb649f43090 R08: 0000000000000000 R09: 0000000000000000 [ 443.806376][T14825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.806387][T14825] R13: 0000000000000000 R14: 00007fb6493b5fa0 R15: 00007ffe30abcd48 [ 443.806420][T14825] [ 444.096625][T14674] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 444.129475][T14674] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 444.530222][T14674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.621134][T14674] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.642564][T10453] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.649751][T10453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.716256][T10453] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.723499][T10453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.750141][T14849] net_ratelimit: 78 callbacks suppressed [ 444.750186][T14849] netlink: zone id is out of range [ 444.785764][T14849] netlink: zone id is out of range [ 444.794274][T14849] netlink: zone id is out of range [ 444.822856][T14849] netlink: zone id is out of range [ 444.883363][T14849] netlink: zone id is out of range [ 444.914676][T14849] netlink: zone id is out of range [ 444.950627][T14849] netlink: zone id is out of range [ 444.968615][T14849] netlink: zone id is out of range [ 444.982961][T14849] netlink: zone id is out of range [ 445.006660][T14849] netlink: zone id is out of range [ 445.805256][T14674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.008289][T14674] veth0_vlan: entered promiscuous mode [ 446.042036][T14674] veth1_vlan: entered promiscuous mode [ 446.137875][T14674] veth0_macvtap: entered promiscuous mode [ 446.163158][T14674] veth1_macvtap: entered promiscuous mode [ 446.234985][T14674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.298844][T14674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.344899][T10438] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.375187][T10438] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.434178][T10438] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.458204][T10438] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.534235][T10438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.559473][T10438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.610700][T14896] netlink: 'syz.4.3051': attribute type 11 has an invalid length. [ 446.615087][T10438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.641247][T14896] netlink: 149476 bytes leftover after parsing attributes in process `syz.4.3051'. [ 446.670555][T10438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.998984][T14896] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3051'. [ 447.079036][T14907] netlink: 'syz.0.3054': attribute type 21 has an invalid length. [ 447.132840][T14907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3054'. [ 447.194461][T14895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.646407][T14922] netlink: 'syz.0.3058': attribute type 2 has an invalid length. [ 447.656490][T14922] netlink: 'syz.0.3058': attribute type 1 has an invalid length. [ 447.680925][T14922] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.3058'. [ 447.692602][T14922] nbd: must specify at least one socket [ 448.525737][T14959] netlink: 'syz.1.3069': attribute type 10 has an invalid length. [ 448.557597][T14943] can: request_module (can-proto-0) failed. [ 448.581250][T14959] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3069'. [ 449.666874][T14990] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3082'. [ 449.678811][T14990] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3082'. [ 449.800240][T14993] netlink: 'syz.3.3083': attribute type 10 has an invalid length. [ 449.843981][T14993] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3083'. [ 449.882553][T14993] veth0_vlan: entered allmulticast mode [ 449.891592][T14995] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3084'. [ 449.915706][T14993] bridge0: port 3(veth0_vlan) entered blocking state [ 449.947733][T14993] bridge0: port 3(veth0_vlan) entered disabled state [ 449.995864][T14993] net_ratelimit: 79 callbacks suppressed [ 449.995890][T14993] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 450.908894][T15027] FAULT_INJECTION: forcing a failure. [ 450.908894][T15027] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.956043][T15027] CPU: 0 UID: 0 PID: 15027 Comm: syz.0.3095 Not tainted 6.16.0-syzkaller-gf3af62b6cee8 #0 PREEMPT(full) [ 450.956075][T15027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 450.956086][T15027] Call Trace: [ 450.956095][T15027] [ 450.956104][T15027] dump_stack_lvl+0x189/0x250 [ 450.956133][T15027] ? __pfx____ratelimit+0x10/0x10 [ 450.956154][T15027] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.956175][T15027] ? __pfx__printk+0x10/0x10 [ 450.956213][T15027] should_fail_ex+0x414/0x560 [ 450.956246][T15027] _copy_to_user+0x31/0xb0 [ 450.956273][T15027] simple_read_from_buffer+0xe1/0x170 [ 450.956305][T15027] proc_fail_nth_read+0x1b3/0x220 [ 450.956329][T15027] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 450.956353][T15027] ? rw_verify_area+0x2a6/0x4d0 [ 450.956373][T15027] ? __lock_acquire+0xab9/0xd20 [ 450.956396][T15027] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 450.956417][T15027] vfs_read+0x1fd/0x980 [ 450.956437][T15027] ? fdget_pos+0x247/0x320 [ 450.956467][T15027] ? __pfx___mutex_lock+0x10/0x10 [ 450.956487][T15027] ? __pfx_vfs_read+0x10/0x10 [ 450.956510][T15027] ? __fget_files+0x2a/0x420 [ 450.956539][T15027] ? __fget_files+0x3a0/0x420 [ 450.956562][T15027] ? __fget_files+0x2a/0x420 [ 450.956595][T15027] ksys_read+0x145/0x250 [ 450.956620][T15027] ? __pfx_ksys_read+0x10/0x10 [ 450.956654][T15027] do_syscall_64+0xfa/0x3b0 [ 450.956674][T15027] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.956692][T15027] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 450.956709][T15027] ? clear_bhb_loop+0x60/0xb0 [ 450.956731][T15027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.956748][T15027] RIP: 0033:0x7f37b858d57c [ 450.956766][T15027] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 450.956782][T15027] RSP: 002b:00007f37b944d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 450.956802][T15027] RAX: ffffffffffffffda RBX: 00007f37b87b5fa0 RCX: 00007f37b858d57c [ 450.956815][T15027] RDX: 000000000000000f RSI: 00007f37b944d0a0 RDI: 000000000000000b [ 450.956827][T15027] RBP: 00007f37b944d090 R08: 0000000000000000 R09: 0000000000000000 [ 450.956838][T15027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 450.956849][T15027] R13: 0000000000000000 R14: 00007f37b87b5fa0 R15: 00007ffcfd5ab818 [ 450.956880][T15027] [ 452.454018][T15047] netlink: 'syz.4.3102': attribute type 1 has an invalid length. [ 452.685382][T15052] netlink: 'syz.0.3104': attribute type 10 has an invalid length. [ 452.696179][T15052] batman_adv: batadv0: Adding interface: wlan0 [ 452.705887][T15052] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.747481][T15052] batman_adv: batadv0: Interface activated: wlan0 [ 452.951242][T15073] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.3111'. [ 453.246543][T15077] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.3112'. [ 453.618675][T15092] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 453.753355][T15096] netlink: 'syz.4.3119': attribute type 11 has an invalid length. [ 453.771205][T15096] netlink: 149476 bytes leftover after parsing attributes in process `syz.4.3119'. [ 454.081152][T15095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.661229][T15123] netlink: 'syz.0.3128': attribute type 21 has an invalid length. [ 454.669808][T15123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3128'. [ 454.746426][T15127] netlink: 'syz.2.3129': attribute type 21 has an invalid length. [ 454.760178][T15127] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3129'. [ 455.109457][T15143] IPv6: Can't replace route, no match found [ 455.204618][T15146] netlink: 'syz.0.3137': attribute type 13 has an invalid length. [ 455.213124][T15146] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3137'. [ 455.727186][T15160] netlink: 'syz.2.3143': attribute type 1 has an invalid length. [ 455.837634][T15163] netlink: 'syz.2.3143': attribute type 21 has an invalid length. [ 455.869865][T15163] IPv6: NLM_F_CREATE should be specified when creating new route [ 455.886789][T15163] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 455.894123][T15163] IPv6: NLM_F_CREATE should be set when creating new route [ 455.901462][T15163] IPv6: NLM_F_CREATE should be set when creating new route [ 455.908729][T15163] IPv6: NLM_F_CREATE should be set when creating new route [ 455.998221][T15177] netlink: 'syz.3.3148': attribute type 10 has an invalid length. [ 456.027031][T15177] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.051188][T15177] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.286758][T15177] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.297327][T15177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.309536][T15177] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.318194][T15177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.487050][T15177] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 457.100893][T15210] netlink: 'syz.4.3159': attribute type 1 has an invalid length. [ 457.151879][T15212] netlink: 'syz.0.3158': attribute type 21 has an invalid length. [ 457.201160][T15212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3158'. [ 457.288022][T15206] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 458.600498][T15246] validate_nla: 1 callbacks suppressed [ 458.600523][T15246] netlink: 'syz.0.3173': attribute type 1 has an invalid length. [ 458.655305][T15246] netlink: 'syz.0.3173': attribute type 21 has an invalid length. [ 458.668975][T15246] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 460.187384][T15293] FAULT_INJECTION: forcing a failure. [ 460.187384][T15293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.277511][T15293] CPU: 1 UID: 0 PID: 15293 Comm: syz.3.3188 Not tainted 6.16.0-syzkaller-gf3af62b6cee8 #0 PREEMPT(full) [ 460.277542][T15293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 460.277554][T15293] Call Trace: [ 460.277564][T15293] [ 460.277574][T15293] dump_stack_lvl+0x189/0x250 [ 460.277607][T15293] ? __pfx____ratelimit+0x10/0x10 [ 460.277630][T15293] ? __pfx_dump_stack_lvl+0x10/0x10 [ 460.277655][T15293] ? __pfx__printk+0x10/0x10 [ 460.277683][T15293] ? __might_fault+0xb0/0x130 [ 460.277715][T15293] ? __might_fault+0xb0/0x130 [ 460.277756][T15293] should_fail_ex+0x414/0x560 [ 460.277800][T15293] _copy_from_iter+0x1db/0x16f0 [ 460.277842][T15293] ? rep_movs_alternative+0x4a/0x90 [ 460.277888][T15293] ? __pfx__copy_from_iter+0x10/0x10 [ 460.277906][T15293] ? sock_alloc_send_pskb+0x875/0x990 [ 460.277949][T15293] ? __pfx__copy_from_iter+0x10/0x10 [ 460.277989][T15293] ? page_copy_sane+0x16a/0x280 [ 460.278020][T15293] copy_page_from_iter+0xdd/0x170 [ 460.278058][T15293] skb_copy_datagram_from_iter+0x306/0x720 [ 460.278117][T15293] unix_stream_sendmsg+0x5d1/0xdf0 [ 460.278199][T15293] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 460.278235][T15293] ? perf_trace_run_bpf_submit+0xee/0x170 [ 460.278260][T15293] ? aa_sock_msg_perm+0x94/0x160 [ 460.278291][T15293] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 460.278311][T15293] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 460.278341][T15293] __sock_sendmsg+0x21c/0x270 [ 460.278380][T15293] ____sys_sendmsg+0x505/0x830 [ 460.278422][T15293] ? __pfx_____sys_sendmsg+0x10/0x10 [ 460.278474][T15293] ? import_iovec+0x74/0xa0 [ 460.278511][T15293] ___sys_sendmsg+0x21f/0x2a0 [ 460.278544][T15293] ? __pfx____sys_sendmsg+0x10/0x10 [ 460.278627][T15293] ? __fget_files+0x2a/0x420 [ 460.278689][T15293] ? __fget_files+0x2a/0x420 [ 460.278712][T15293] ? __fget_files+0x3a0/0x420 [ 460.278766][T15293] __x64_sys_sendmsg+0x19b/0x260 [ 460.278798][T15293] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 460.278856][T15293] ? __pfx_ksys_write+0x10/0x10 [ 460.278876][T15293] ? rcu_is_watching+0x15/0xb0 [ 460.278912][T15293] ? do_syscall_64+0xbe/0x3b0 [ 460.278945][T15293] do_syscall_64+0xfa/0x3b0 [ 460.278961][T15293] ? lockdep_hardirqs_on+0x9c/0x150 [ 460.278981][T15293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.279001][T15293] ? clear_bhb_loop+0x60/0xb0 [ 460.279031][T15293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.279049][T15293] RIP: 0033:0x7fa99418eb69 [ 460.279071][T15293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.279086][T15293] RSP: 002b:00007fa994fae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 460.279107][T15293] RAX: ffffffffffffffda RBX: 00007fa9943b5fa0 RCX: 00007fa99418eb69 [ 460.279121][T15293] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000004 [ 460.279132][T15293] RBP: 00007fa994fae090 R08: 0000000000000000 R09: 0000000000000000 [ 460.279143][T15293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 460.279154][T15293] R13: 0000000000000000 R14: 00007fa9943b5fa0 R15: 00007ffc390f7c18 [ 460.279211][T15293] [ 460.670327][T15302] netlink: zone id is out of range [ 460.722484][T15302] netlink: zone id is out of range [ 460.751456][T15302] netlink: zone id is out of range [ 460.756889][T15302] netlink: zone id is out of range [ 460.767413][T15302] netlink: zone id is out of range [ 460.773360][T15302] netlink: zone id is out of range [ 460.778831][T15302] netlink: zone id is out of range [ 460.784278][T15302] netlink: zone id is out of range [ 460.789619][T15302] netlink: zone id is out of range [ 460.794879][T15302] netlink: zone id is out of range [ 461.729437][T15321] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3198'. [ 462.214924][T15336] netlink: 'syz.2.3201': attribute type 10 has an invalid length. [ 462.675112][T15336] bridge0: port 3(netdevsim0) entered blocking state [ 462.698603][T15336] bridge0: port 3(netdevsim0) entered disabled state [ 462.761139][T15336] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 462.849845][T15336] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 462.929203][T15333] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3201'. [ 463.439278][T15359] netlink: 'syz.0.3210': attribute type 11 has an invalid length. [ 463.547832][T15359] netlink: 149476 bytes leftover after parsing attributes in process `syz.0.3210'. [ 463.640095][T15365] FAULT_INJECTION: forcing a failure. [ 463.640095][T15365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.985042][T15365] CPU: 0 UID: 0 PID: 15365 Comm: syz.3.3211 Not tainted 6.16.0-syzkaller-gf3af62b6cee8 #0 PREEMPT(full) [ 463.985072][T15365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 463.985083][T15365] Call Trace: [ 463.985091][T15365] [ 463.985100][T15365] dump_stack_lvl+0x189/0x250 [ 463.985129][T15365] ? __pfx____ratelimit+0x10/0x10 [ 463.985149][T15365] ? __pfx_dump_stack_lvl+0x10/0x10 [ 463.985168][T15365] ? __pfx__printk+0x10/0x10 [ 463.985205][T15365] should_fail_ex+0x414/0x560 [ 463.985238][T15365] _copy_to_user+0x31/0xb0 [ 463.985263][T15365] simple_read_from_buffer+0xe1/0x170 [ 463.985293][T15365] proc_fail_nth_read+0x1b3/0x220 [ 463.985317][T15365] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 463.985340][T15365] ? rw_verify_area+0x2a6/0x4d0 [ 463.985359][T15365] ? __lock_acquire+0xab9/0xd20 [ 463.985381][T15365] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 463.985402][T15365] vfs_read+0x1fd/0x980 [ 463.985432][T15365] ? fdget_pos+0x247/0x320 [ 463.985460][T15365] ? __pfx___mutex_lock+0x10/0x10 [ 463.985480][T15365] ? __pfx_vfs_read+0x10/0x10 [ 463.985503][T15365] ? __fget_files+0x2a/0x420 [ 463.985531][T15365] ? __fget_files+0x3a0/0x420 [ 463.985552][T15365] ? __fget_files+0x2a/0x420 [ 463.985585][T15365] ksys_read+0x145/0x250 [ 463.985608][T15365] ? __pfx_ksys_read+0x10/0x10 [ 463.985642][T15365] do_syscall_64+0xfa/0x3b0 [ 463.985662][T15365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.985679][T15365] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 463.985697][T15365] ? clear_bhb_loop+0x60/0xb0 [ 463.985719][T15365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.985737][T15365] RIP: 0033:0x7fa99418d57c [ 463.985755][T15365] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 463.985770][T15365] RSP: 002b:00007fa994fae030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 463.985790][T15365] RAX: ffffffffffffffda RBX: 00007fa9943b5fa0 RCX: 00007fa99418d57c [ 463.985804][T15365] RDX: 000000000000000f RSI: 00007fa994fae0a0 RDI: 0000000000000008 [ 463.985815][T15365] RBP: 00007fa994fae090 R08: 0000000000000000 R09: 0000000000000000 [ 463.985826][T15365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.985838][T15365] R13: 0000000000000000 R14: 00007fa9943b5fa0 R15: 00007ffc390f7c18 [ 463.985867][T15365] [ 464.613764][T15375] netlink: 'syz.3.3216': attribute type 10 has an invalid length. [ 464.668106][T15375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.692832][T15375] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 464.761767][T15383] netlink: 'syz.1.3218': attribute type 10 has an invalid length. [ 464.781869][T15383] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3218'. [ 464.796742][T15383] veth0_vlan: entered allmulticast mode [ 464.812172][T15383] bridge0: port 3(veth0_vlan) entered blocking state [ 464.831127][T15383] bridge0: port 3(veth0_vlan) entered disabled state [ 465.682399][T15403] netlink: 6955 bytes leftover after parsing attributes in process `syz.1.3226'. [ 465.694889][T15401] netlink: 'syz.3.3224': attribute type 21 has an invalid length. [ 465.704064][T15401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3224'. [ 465.723431][T15403] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.3226'. [ 466.310181][T15425] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3233'. [ 466.325234][T15425] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3233'. [ 466.343347][T15425] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3233'. [ 466.630081][T15360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.342388][T15449] netlink: 'syz.4.3242': attribute type 21 has an invalid length. [ 467.351663][T15449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3242'. [ 468.325065][T15483] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3252'. [ 468.394492][T15479] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3252'. [ 468.437248][T15483] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3252'. [ 469.832839][T15497] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3257'. [ 469.953393][T15497] net_ratelimit: 80 callbacks suppressed [ 469.953419][T15497] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 470.572951][T15512] netlink: 'syz.1.3262': attribute type 10 has an invalid length. [ 470.591438][T15512] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3262'. [ 470.617969][T15512] bridge0: port 3(veth0_vlan) entered blocking state [ 470.648384][T15512] bridge0: port 3(veth0_vlan) entered disabled state [ 470.712676][T15512] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 471.243954][T15520] can: request_module (can-proto-0) failed. [ 471.438605][T15533] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3270'. [ 471.498636][T15536] lo: entered allmulticast mode [ 471.508416][T15540] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3270'. [ 471.527274][T15533] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3270'. [ 471.577422][T15536] lo: entered promiscuous mode [ 471.586632][T15536] lo: left allmulticast mode [ 471.647373][T15536] netlink: 'syz.0.3271': attribute type 21 has an invalid length. [ 471.702342][T15536] netlink: 'syz.0.3271': attribute type 13 has an invalid length. [ 471.710455][T15536] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3271'. [ 471.998675][T15553] netlink: 'syz.3.3277': attribute type 10 has an invalid length. [ 472.018040][T15553] team0: Device ipvlan1 failed to register rx_handler [ 472.414200][T15561] netlink: 'syz.3.3281': attribute type 46 has an invalid length. [ 472.696538][T15565] team0: Port device C removed [ 472.707389][T15565] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 473.221830][T15582] netlink: 'syz.4.3290': attribute type 10 has an invalid length. [ 473.234245][T15583] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3289'. [ 473.509914][T15582] team0: Port device geneve1 added [ 473.581328][T15583] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3289'. [ 473.690883][T15596] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.3292'. [ 473.773088][T15596] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 473.805495][T15587] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3289'. [ 474.528906][T15619] netlink: 'syz.4.3302': attribute type 10 has an invalid length. [ 474.536982][T15619] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3302'. [ 474.536990][T15620] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3303'. [ 474.537010][T15620] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3303'. [ 474.592512][T15622] FAULT_INJECTION: forcing a failure. [ 474.592512][T15622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 474.615456][T15622] CPU: 1 UID: 0 PID: 15622 Comm: syz.3.3304 Not tainted 6.16.0-syzkaller-gf3af62b6cee8 #0 PREEMPT(full) [ 474.615494][T15622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 474.615506][T15622] Call Trace: [ 474.615513][T15622] [ 474.615522][T15622] dump_stack_lvl+0x189/0x250 [ 474.615551][T15622] ? __pfx____ratelimit+0x10/0x10 [ 474.615571][T15622] ? __pfx_dump_stack_lvl+0x10/0x10 [ 474.615591][T15622] ? __pfx__printk+0x10/0x10 [ 474.615615][T15622] ? __might_fault+0xb0/0x130 [ 474.615650][T15622] should_fail_ex+0x414/0x560 [ 474.615683][T15622] _copy_from_user+0x2d/0xb0 [ 474.615707][T15622] bpf_obj_get_info_by_fd+0x49c/0x2fa0 [ 474.615750][T15622] ? __pfx_bpf_obj_get_info_by_fd+0x10/0x10 [ 474.615774][T15622] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 474.615810][T15622] ? rcu_is_watching+0x15/0xb0 [ 474.615828][T15622] ? trace_irq_disable+0x37/0x110 [ 474.615849][T15622] ? preempt_schedule_irq+0xde/0x150 [ 474.615901][T15622] ? security_bpf+0xb1/0x300 [ 474.615923][T15622] ? security_bpf+0x29d/0x300 [ 474.615944][T15622] ? security_bpf+0x7e/0x300 [ 474.615965][T15622] __sys_bpf+0x5d1/0x870 [ 474.615988][T15622] ? __pfx___sys_bpf+0x10/0x10 [ 474.616026][T15622] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 474.616049][T15622] ? __pfx_ksys_write+0x10/0x10 [ 474.616067][T15622] ? rcu_is_watching+0x15/0xb0 [ 474.616090][T15622] __x64_sys_bpf+0x7c/0x90 [ 474.616112][T15622] do_syscall_64+0xfa/0x3b0 [ 474.616129][T15622] ? lockdep_hardirqs_on+0x9c/0x150 [ 474.616146][T15622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.616164][T15622] ? clear_bhb_loop+0x60/0xb0 [ 474.616186][T15622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.616203][T15622] RIP: 0033:0x7fa99418eb69 [ 474.616220][T15622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.616237][T15622] RSP: 002b:00007fa994fae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 474.616257][T15622] RAX: ffffffffffffffda RBX: 00007fa9943b5fa0 RCX: 00007fa99418eb69 [ 474.616271][T15622] RDX: 0000000000000010 RSI: 0000200000000580 RDI: 000000000000000f [ 474.616283][T15622] RBP: 00007fa994fae090 R08: 0000000000000000 R09: 0000000000000000 [ 474.616294][T15622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.616305][T15622] R13: 0000000000000000 R14: 00007fa9943b5fa0 R15: 00007ffc390f7c18 [ 474.616334][T15622] [ 474.956819][T15629] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3307'. [ 474.969766][T15629] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3307'. [ 474.987362][T15629] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3307'. [ 475.781150][T15653] netlink: 'syz.1.3313': attribute type 12 has an invalid length. [ 475.990463][T15664] FAULT_INJECTION: forcing a failure. [ 475.990463][T15664] name failslab, interval 1, probability 0, space 0, times 0 [ 476.009075][T15664] CPU: 1 UID: 0 PID: 15664 Comm: syz.3.3321 Not tainted 6.16.0-syzkaller-gf3af62b6cee8 #0 PREEMPT(full) [ 476.009105][T15664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 476.009116][T15664] Call Trace: [ 476.009126][T15664] [ 476.009136][T15664] dump_stack_lvl+0x189/0x250 [ 476.009163][T15664] ? __pfx____ratelimit+0x10/0x10 [ 476.009180][T15664] ? __pfx_dump_stack_lvl+0x10/0x10 [ 476.009199][T15664] ? __pfx__printk+0x10/0x10 [ 476.009234][T15664] ? __pfx___might_resched+0x10/0x10 [ 476.009248][T15664] ? fs_reclaim_acquire+0x7d/0x100 [ 476.009276][T15664] should_fail_ex+0x414/0x560 [ 476.009306][T15664] should_failslab+0xa8/0x100 [ 476.009330][T15664] __kmalloc_noprof+0xcb/0x4f0 [ 476.009350][T15664] ? bpf_test_init+0xc2/0x170 [ 476.009371][T15664] bpf_test_init+0xc2/0x170 [ 476.009392][T15664] bpf_prog_test_run_skb+0x1e9/0x1560 [ 476.009406][T15664] ? lockdep_hardirqs_on+0x9c/0x150 [ 476.009439][T15664] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 476.009457][T15664] bpf_prog_test_run+0x2c4/0x340 [ 476.009484][T15664] __sys_bpf+0x581/0x870 [ 476.009506][T15664] ? __pfx___sys_bpf+0x10/0x10 [ 476.009543][T15664] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 476.009578][T15664] __x64_sys_bpf+0x7c/0x90 [ 476.009597][T15664] do_syscall_64+0xfa/0x3b0 [ 476.009616][T15664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.009630][T15664] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 476.009645][T15664] ? clear_bhb_loop+0x60/0xb0 [ 476.009665][T15664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.009681][T15664] RIP: 0033:0x7fa99418eb69 [ 476.009697][T15664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 476.009711][T15664] RSP: 002b:00007fa994fae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 476.009729][T15664] RAX: ffffffffffffffda RBX: 00007fa9943b5fa0 RCX: 00007fa99418eb69 [ 476.009741][T15664] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 476.009750][T15664] RBP: 00007fa994fae090 R08: 0000000000000000 R09: 0000000000000000 [ 476.009760][T15664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.009769][T15664] R13: 0000000000000000 R14: 00007fa9943b5fa0 R15: 00007ffc390f7c18 [ 476.009799][T15664] [ 476.024275][T15667] netlink: 'syz.4.3322': attribute type 10 has an invalid length. [ 480.126906][T15674] wg1: mtu less than device minimum [ 480.133692][T15696] __nla_validate_parse: 2 callbacks suppressed [ 480.133713][T15696] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3331'. [ 480.158402][T15703] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 480.220013][T15706] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3334'. [ 480.283150][T15706] batadv_slave_1: entered promiscuous mode [ 480.621662][T15726] netlink: 'syz.4.3340': attribute type 21 has an invalid length. [ 480.662345][T15726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3340'. [ 480.783584][T15725] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3342'. [ 480.796017][T15729] netlink: 'syz.2.3344': attribute type 21 has an invalid length. [ 480.820113][T15729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3344'. [ 481.014642][T15739] netlink: 'syz.1.3346': attribute type 10 has an invalid length. [ 481.092819][T15739] team0: Device ipvlan1 failed to register rx_handler [ 482.130163][T15755] netlink: 'syz.3.3352': attribute type 13 has an invalid length. [ 482.143509][T15755] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3352'. [ 482.383642][T15760] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3355'. [ 482.783773][T15765] netlink: 'syz.1.3357': attribute type 21 has an invalid length. [ 485.616369][T15775] netlink: 'syz.0.3361': attribute type 11 has an invalid length. [ 485.632425][T15775] netlink: 149476 bytes leftover after parsing attributes in process `syz.0.3361'. [ 486.023184][T15773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 486.194938][T10449] bond0 (unregistering): (slave c@ÿ): Releasing backup interface [ 486.228560][T10449] @ÿ: left promiscuous mode [ 486.234005][T10449] @ÿ: left allmulticast mode [ 486.251931][T10449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.291488][T10449] bond_slave_1: left promiscuous mode [ 486.310613][T10449] bond_slave_1: left allmulticast mode [ 486.338761][T10449] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 486.391889][T10449] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 486.398840][T10449] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 486.425628][T10449] bond0 (unregistering): Released all slaves [ 486.610285][T15755] bond0: entered promiscuous mode [ 486.621059][T15755] bond_slave_0: entered promiscuous mode [ 486.626993][T15755] bond_slave_1: entered promiscuous mode [ 486.659675][T15755] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 486.670637][T15755] bridge0: entered promiscuous mode [ 486.701376][T15755] batadv0: entered promiscuous mode [ 486.707008][T15755] bond0: entered allmulticast mode [ 486.718149][T15787] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3365'. [ 486.725858][T15755] bond_slave_0: entered allmulticast mode [ 486.740279][T15755] bond_slave_1: entered allmulticast mode [ 486.749259][T15755] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 486.757126][T15755] bridge0: entered allmulticast mode [ 486.768539][T15755] batadv0: entered allmulticast mode [ 486.784420][T15765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3357'. [ 487.193299][T15801] netlink: 'syz.0.3366': attribute type 10 has an invalid length. [ 487.227381][T15801] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3366'. [ 489.847232][T15801] bridge0: port 1(veth0_vlan) entered blocking state [ 489.908812][T15801] bridge0: port 1(veth0_vlan) entered disabled state [ 489.919374][T15818] netlink: 'syz.2.3375': attribute type 11 has an invalid length. [ 489.937647][T15801] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 489.957049][T15818] netlink: 149476 bytes leftover after parsing attributes in process `syz.2.3375'. [ 490.251911][T15816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.450092][T15825] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3377'. [ 490.694370][T15829] netlink: 'syz.3.3379': attribute type 10 has an invalid length. [ 490.721219][T15829] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3379'. [ 491.076882][T15829] bridge0: port 3(veth0_vlan) entered blocking state [ 491.102364][T15829] bridge0: port 3(veth0_vlan) entered disabled state [ 491.220296][T15829] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 492.268283][T15856] IPv6: Can't replace route, no match found [ 492.269468][T15855] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3389'. [ 492.381473][T15855] netlink: zone id is out of range [ 492.406609][T15855] netlink: zone id is out of range [ 492.423845][T15855] netlink: zone id is out of range [ 492.429110][T15855] netlink: zone id is out of range [ 492.574804][T15855] netlink: zone id is out of range [ 492.580326][T15855] netlink: zone id is out of range [ 492.635816][T15855] netlink: zone id is out of range [ 492.662498][T15855] netlink: zone id is out of range [ 493.045496][T10449] hsr_slave_0: left promiscuous mode [ 493.071410][T10449] hsr_slave_1: left promiscuous mode [ 493.084202][T10449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 493.105712][T10449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.145387][T10449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 493.182914][T10449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.213990][T10449] veth1_vlan: left promiscuous mode [ 494.826026][T15899] netlink: 'syz.0.3402': attribute type 21 has an invalid length. [ 494.936932][T15901] netlink: 'syz.4.3403': attribute type 11 has an invalid length. [ 494.981284][T15901] netlink: 149476 bytes leftover after parsing attributes in process `syz.4.3403'. [ 495.082259][T15900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.239816][T15906] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3405'. [ 495.336645][T10449] team_slave_1 (unregistering): left promiscuous mode [ 495.345422][T10449] team_slave_1 (unregistering): left allmulticast mode [ 495.355013][T10449] team0 (unregistering): Port device team_slave_1 removed [ 495.414710][T10449] C (unregistering): left promiscuous mode [ 495.420639][T10449] C (unregistering): left allmulticast mode [ 495.427946][T10449] team0 (unregistering): Port device C removed [ 495.851409][T15899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3402'. [ 496.051252][T15918] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3407'. [ 496.077159][T15918] net_ratelimit: 74 callbacks suppressed [ 496.077195][T15918] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 496.120773][T15918] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 496.151691][T15917] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 496.240197][T15924] netlink: zone id is out of range [ 496.264583][T15924] netlink: zone id is out of range [ 496.269856][T15924] netlink: zone id is out of range [ 496.286048][T15924] netlink: zone id is out of range [ 496.346582][T15924] netlink: zone id is out of range [ 496.397620][T15924] netlink: zone id is out of range [ 496.469485][T15924] netlink: zone id is out of range [ 496.736042][T15942] FAULT_INJECTION: forcing a failure. [ 496.736042][T15942] name failslab, interval 1, probability 0, space 0, times 0 [ 496.784000][T15942] CPU: 0 UID: 0 PID: 15942 Comm: syz.2.3416 Not tainted 6.16.0-syzkaller-gf3af62b6cee8 #0 PREEMPT(full) [ 496.784030][T15942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 496.784042][T15942] Call Trace: [ 496.784051][T15942] [ 496.784061][T15942] dump_stack_lvl+0x189/0x250 [ 496.784092][T15942] ? __pfx____ratelimit+0x10/0x10 [ 496.784113][T15942] ? __pfx_dump_stack_lvl+0x10/0x10 [ 496.784135][T15942] ? __pfx__printk+0x10/0x10 [ 496.784170][T15942] ? __pfx___might_resched+0x10/0x10 [ 496.784187][T15942] ? fs_reclaim_acquire+0x7d/0x100 [ 496.784221][T15942] should_fail_ex+0x414/0x560 [ 496.784257][T15942] should_failslab+0xa8/0x100 [ 496.784287][T15942] __kmalloc_cache_noprof+0x70/0x3d0 [ 496.784310][T15942] ? rtnl_newlink+0xed/0x1c70 [ 496.784328][T15942] ? kasan_save_free_info+0x46/0x50 [ 496.784352][T15942] rtnl_newlink+0xed/0x1c70 [ 496.784370][T15942] ? netlink_sendmsg+0x805/0xb30 [ 496.784387][T15942] ? __sock_sendmsg+0x21c/0x270 [ 496.784411][T15942] ? ____sys_sendmsg+0x505/0x830 [ 496.784428][T15942] ? ___sys_sendmsg+0x21f/0x2a0 [ 496.784446][T15942] ? __x64_sys_sendmsg+0x19b/0x260 [ 496.784464][T15942] ? do_syscall_64+0xfa/0x3b0 [ 496.784482][T15942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.784510][T15942] ? __pfx_rtnl_newlink+0x10/0x10 [ 496.784563][T15942] ? kasan_quarantine_put+0xdd/0x220 [ 496.784585][T15942] ? lockdep_hardirqs_on+0x9c/0x150 [ 496.784610][T15942] ? nlmon_xmit+0xb0/0x100 [ 496.784629][T15942] ? kmem_cache_free+0x18f/0x400 [ 496.784663][T15942] ? __local_bh_enable_ip+0x12d/0x1c0 [ 496.784682][T15942] ? lockdep_hardirqs_on+0x9c/0x150 [ 496.784702][T15942] ? __local_bh_enable_ip+0x12d/0x1c0 [ 496.784720][T15942] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 496.784745][T15942] ? perf_trace_lock_acquire+0xf5/0x410 [ 496.784789][T15942] ? __lock_acquire+0xab9/0xd20 [ 496.784847][T15942] ? __pfx_rtnl_newlink+0x10/0x10 [ 496.784864][T15942] rtnetlink_rcv_msg+0x7cf/0xb70 [ 496.784889][T15942] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 496.784905][T15942] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 496.784921][T15942] ? ref_tracker_free+0x63a/0x7d0 [ 496.784940][T15942] ? __asan_memcpy+0x40/0x70 [ 496.784959][T15942] ? __pfx_ref_tracker_free+0x10/0x10 [ 496.784975][T15942] ? __skb_clone+0x63/0x7a0 [ 496.785013][T15942] netlink_rcv_skb+0x208/0x470 [ 496.785035][T15942] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 496.785057][T15942] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 496.785094][T15942] ? netlink_deliver_tap+0x2e/0x1b0 [ 496.785123][T15942] netlink_unicast+0x82c/0x9e0 [ 496.785162][T15942] ? __pfx_netlink_unicast+0x10/0x10 [ 496.785190][T15942] ? netlink_sendmsg+0x642/0xb30 [ 496.785204][T15942] ? skb_put+0x11b/0x210 [ 496.785230][T15942] netlink_sendmsg+0x805/0xb30 [ 496.785260][T15942] ? __pfx_netlink_sendmsg+0x10/0x10 [ 496.785283][T15942] ? aa_sock_msg_perm+0x94/0x160 [ 496.785308][T15942] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 496.785328][T15942] ? __pfx_netlink_sendmsg+0x10/0x10 [ 496.785348][T15942] __sock_sendmsg+0x21c/0x270 [ 496.785377][T15942] ____sys_sendmsg+0x505/0x830 [ 496.785408][T15942] ? __pfx_____sys_sendmsg+0x10/0x10 [ 496.785442][T15942] ? import_iovec+0x74/0xa0 [ 496.785473][T15942] ___sys_sendmsg+0x21f/0x2a0 [ 496.785499][T15942] ? __pfx____sys_sendmsg+0x10/0x10 [ 496.785575][T15942] ? __fget_files+0x2a/0x420 [ 496.785598][T15942] ? __fget_files+0x3a0/0x420 [ 496.785637][T15942] __x64_sys_sendmsg+0x19b/0x260 [ 496.785663][T15942] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 496.785700][T15942] ? __pfx_ksys_write+0x10/0x10 [ 496.785720][T15942] ? rcu_is_watching+0x15/0xb0 [ 496.785745][T15942] ? do_syscall_64+0xbe/0x3b0 [ 496.785779][T15942] do_syscall_64+0xfa/0x3b0 [ 496.785795][T15942] ? lockdep_hardirqs_on+0x9c/0x150 [ 496.785813][T15942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.785831][T15942] ? clear_bhb_loop+0x60/0xb0 [ 496.785855][T15942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.785872][T15942] RIP: 0033:0x7f093dd8eb69 [ 496.785891][T15942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.785906][T15942] RSP: 002b:00007f093eca0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 496.785928][T15942] RAX: ffffffffffffffda RBX: 00007f093dfb5fa0 RCX: 00007f093dd8eb69 [ 496.785941][T15942] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 496.785953][T15942] RBP: 00007f093eca0090 R08: 0000000000000000 R09: 0000000000000000 [ 496.785965][T15942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.785976][T15942] R13: 0000000000000000 R14: 00007f093dfb5fa0 R15: 00007ffe3c1eeb48 [ 496.786013][T15942] [ 498.213238][T15960] netlink: 'syz.4.3422': attribute type 28 has an invalid length. [ 498.613516][T15960] netlink: 147608 bytes leftover after parsing attributes in process `syz.4.3422'. [ 498.742887][T15960] netlink: 62239 bytes leftover after parsing attributes in process `syz.4.3422'. [ 506.295731][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.302440][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.043753][ T9677] sched: DL replenish lagged too much [ 508.434983][T15998] netlink: 'syz.0.3432': attribute type 10 has an invalid length. [ 508.463779][T15998] team0: Device ipvlan1 failed to register rx_handler [ 508.611414][T16002] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3434'. [ 508.640903][T16002] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3434'. [ 508.668014][T16002] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3434'. [ 508.819898][T16007] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3435'. [ 508.945300][T16004] netlink: 'syz.2.3435': attribute type 10 has an invalid length. [ 512.557750][T16067] netlink: 'syz.2.3456': attribute type 10 has an invalid length. [ 512.627210][T16067] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 512.647316][T16067] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 512.659848][T16067] bridge0: port 3(netdevsim0) entered disabled state [ 512.751532][T16067] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 513.667038][T16093] netlink: 'syz.0.3464': attribute type 3 has an invalid length. [ 513.689643][T16093] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3464'. [ 514.372310][T16117] netlink: 'syz.3.3474': attribute type 10 has an invalid length. [ 514.380188][T16117] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3474'. [ 514.449832][T16117] bridge0: port 3(veth0_vlan) entered blocking state [ 514.461361][T16117] bridge0: port 3(veth0_vlan) entered disabled state [ 514.479485][T16117] net_ratelimit: 81 callbacks suppressed [ 514.479505][T16117] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 514.980094][T16137] FAULT_INJECTION: forcing a failure. [ 514.980094][T16137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 515.011843][T16137] CPU: 1 UID: 0 PID: 16137 Comm: syz.1.3483 Not tainted 6.16.0-syzkaller-gf3af62b6cee8 #0 PREEMPT(full) [ 515.011874][T16137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 515.011885][T16137] Call Trace: [ 515.011892][T16137] [ 515.011901][T16137] dump_stack_lvl+0x189/0x250 [ 515.011929][T16137] ? __pfx____ratelimit+0x10/0x10 [ 515.011948][T16137] ? __pfx_dump_stack_lvl+0x10/0x10 [ 515.011969][T16137] ? __pfx__printk+0x10/0x10 [ 515.012005][T16137] should_fail_ex+0x414/0x560 [ 515.012038][T16137] _copy_from_user+0x2d/0xb0 [ 515.012063][T16137] __copy_msghdr+0x3c5/0x5b0 [ 515.012090][T16137] ___sys_sendmsg+0x1a5/0x2a0 [ 515.012113][T16137] ? __pfx____sys_sendmsg+0x10/0x10 [ 515.012172][T16137] ? __fget_files+0x2a/0x420 [ 515.012197][T16137] ? __fget_files+0x3a0/0x420 [ 515.012231][T16137] __x64_sys_sendmsg+0x19b/0x260 [ 515.012256][T16137] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 515.012286][T16137] ? __pfx_ksys_write+0x10/0x10 [ 515.012315][T16137] ? do_syscall_64+0xbe/0x3b0 [ 515.012338][T16137] do_syscall_64+0xfa/0x3b0 [ 515.012357][T16137] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.012374][T16137] ? asm_sysvec_call_function_single+0x1a/0x20 [ 515.012392][T16137] ? clear_bhb_loop+0x60/0xb0 [ 515.012413][T16137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.012429][T16137] RIP: 0033:0x7fb64918eb69 [ 515.012447][T16137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.012462][T16137] RSP: 002b:00007fb649f43038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 515.012484][T16137] RAX: ffffffffffffffda RBX: 00007fb6493b5fa0 RCX: 00007fb64918eb69 [ 515.012498][T16137] RDX: 0000000030004001 RSI: 0000200000000080 RDI: 0000000000000005 [ 515.012509][T16137] RBP: 00007fb649f43090 R08: 0000000000000000 R09: 0000000000000000 [ 515.012522][T16137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.012533][T16137] R13: 0000000000000000 R14: 00007fb6493b5fa0 R15: 00007ffe30abcd48 [ 515.012569][T16137] [ 515.366695][T16145] netlink: 'syz.1.3487': attribute type 11 has an invalid length. [ 515.399528][T16145] netlink: 149476 bytes leftover after parsing attributes in process `syz.1.3487'. [ 515.424091][T16152] netlink: 'syz.2.3489': attribute type 1 has an invalid length. [ 515.488328][T16152] netlink: 'syz.2.3489': attribute type 21 has an invalid length. [ 515.501185][T16152] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 515.508638][T16152] IPv6: NLM_F_CREATE should be set when creating new route [ 515.516090][T16152] IPv6: NLM_F_CREATE should be set when creating new route [ 515.523408][T16152] IPv6: NLM_F_CREATE should be set when creating new route [ 515.575826][T16142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 515.950133][T16183] netlink: 'syz.4.3500': attribute type 33 has an invalid length. [ 515.976950][T16183] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3500'. [ 516.059860][T16190] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3502'. [ 516.127057][T16190] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.3502'. [ 516.176319][T16194] netlink: 'syz.4.3504': attribute type 9 has an invalid length. [ 516.185004][T16194] netlink: 204732 bytes leftover after parsing attributes in process `syz.4.3504'. [ 516.225302][T16192] netlink: 'syz.1.3503': attribute type 1 has an invalid length. [ 516.227641][T16194] netlink: 'syz.4.3504': attribute type 21 has an invalid length. [ 516.262757][T16197] netlink: 'syz.3.3505': attribute type 46 has an invalid length. [ 516.299728][T16197] FAULT_INJECTION: forcing a failure. [ 516.299728][T16197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 516.329837][T16197] CPU: 0 UID: 0 PID: 16197 Comm: syz.3.3505 Not tainted 6.16.0-syzkaller-gf3af62b6cee8 #0 PREEMPT(full) [ 516.329871][T16197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 516.329883][T16197] Call Trace: [ 516.329892][T16197] [ 516.329901][T16197] dump_stack_lvl+0x189/0x250 [ 516.329932][T16197] ? __pfx____ratelimit+0x10/0x10 [ 516.329953][T16197] ? __pfx_dump_stack_lvl+0x10/0x10 [ 516.329975][T16197] ? __pfx__printk+0x10/0x10 [ 516.330007][T16197] ? __might_fault+0xb0/0x130 [ 516.330042][T16197] should_fail_ex+0x414/0x560 [ 516.330079][T16197] _copy_to_user+0x31/0xb0 [ 516.330108][T16197] simple_read_from_buffer+0xe1/0x170 [ 516.330151][T16197] proc_fail_nth_read+0x1b3/0x220 [ 516.330178][T16197] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 516.330202][T16197] ? rw_verify_area+0x2a6/0x4d0 [ 516.330226][T16197] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 516.330249][T16197] vfs_read+0x1fd/0x980 [ 516.330271][T16197] ? fdget_pos+0x247/0x320 [ 516.330303][T16197] ? __pfx___mutex_lock+0x10/0x10 [ 516.330324][T16197] ? __pfx_vfs_read+0x10/0x10 [ 516.330351][T16197] ? __fget_files+0x2a/0x420 [ 516.330382][T16197] ? __fget_files+0x3a0/0x420 [ 516.330405][T16197] ? __fget_files+0x2a/0x420 [ 516.330445][T16197] ksys_read+0x145/0x250 [ 516.330473][T16197] ? __pfx_ksys_read+0x10/0x10 [ 516.330491][T16197] ? rcu_is_watching+0x15/0xb0 [ 516.330519][T16197] ? do_syscall_64+0xbe/0x3b0 [ 516.330546][T16197] do_syscall_64+0xfa/0x3b0 [ 516.330563][T16197] ? lockdep_hardirqs_on+0x9c/0x150 [ 516.330581][T16197] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.330599][T16197] ? clear_bhb_loop+0x60/0xb0 [ 516.330625][T16197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.330642][T16197] RIP: 0033:0x7fa99418d57c [ 516.330661][T16197] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 516.330677][T16197] RSP: 002b:00007fa994fae030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 516.330701][T16197] RAX: ffffffffffffffda RBX: 00007fa9943b5fa0 RCX: 00007fa99418d57c [ 516.330714][T16197] RDX: 000000000000000f RSI: 00007fa994fae0a0 RDI: 0000000000000005 [ 516.330726][T16197] RBP: 00007fa994fae090 R08: 0000000000000000 R09: 0000000000000000 [ 516.330737][T16197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 516.330748][T16197] R13: 0000000000000000 R14: 00007fa9943b5fa0 R15: 00007ffc390f7c18 [ 516.330788][T16197] [ 516.777313][T16192] netlink: 'syz.1.3503': attribute type 21 has an invalid length. [ 516.785659][T16192] IPv6: NLM_F_CREATE should be specified when creating new route [ 516.794930][T16192] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 516.802210][T16192] IPv6: NLM_F_CREATE should be set when creating new route [ 516.809630][T16192] IPv6: NLM_F_CREATE should be set when creating new route [ 516.816951][T16192] IPv6: NLM_F_CREATE should be set when creating new route [ 519.306334][T16226] netlink: 'syz.3.3511': attribute type 11 has an invalid length. [ 519.315858][T16226] netlink: 149476 bytes leftover after parsing attributes in process `syz.3.3511'. [ 519.482913][T16223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.629115][T16236] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.3516'. [ 519.849961][T16248] netlink: 'syz.3.3519': attribute type 11 has an invalid length. [ 519.901147][T16248] netlink: 149476 bytes leftover after parsing attributes in process `syz.3.3519'. [ 520.098652][T16247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.274904][T16263] netlink: 'syz.3.3525': attribute type 13 has an invalid length. [ 520.287409][T16263] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3525'. [ 520.534661][T16265] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3526'. [ 520.843089][T16277] netlink: 'syz.0.3530': attribute type 11 has an invalid length. [ 520.854481][T16277] netlink: 149476 bytes leftover after parsing attributes in process `syz.0.3530'. [ 521.558976][T16273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.149618][T16286] netlink: 'syz.1.3533': attribute type 6 has an invalid length. [ 522.414136][T16301] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 522.542758][T16311] netlink: 'syz.0.3542': attribute type 1 has an invalid length. [ 522.769003][T16307] netlink: 'syz.0.3542': attribute type 21 has an invalid length. [ 522.816096][T16307] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 522.823487][T16307] IPv6: NLM_F_CREATE should be set when creating new route [ 522.830754][T16307] IPv6: NLM_F_CREATE should be set when creating new route [ 522.838163][T16307] IPv6: NLM_F_CREATE should be set when creating new route [ 523.036065][T16319] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3545'. [ 523.160023][T16325] netlink: 'syz.0.3549': attribute type 10 has an invalid length. [ 523.212737][T16325] team0: Device ipvlan1 failed to register rx_handler [ 523.484547][T16339] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3552'. [ 523.580472][T16347] netlink: 'syz.3.3557': attribute type 10 has an invalid length. [ 523.588674][T16347] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3557'. [ 523.616862][T16348] netlink: 'syz.2.3556': attribute type 4 has an invalid length. [ 523.641894][T16348] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3556'. [ 523.707670][T16356] netlink: 'syz.1.3559': attribute type 46 has an invalid length. [ 523.825437][T16359] netlink: 'syz.3.3561': attribute type 27 has an invalid length. [ 524.098844][T16367] netlink: 'syz.0.3563': attribute type 10 has an invalid length. [ 524.137067][T16367] team0: Device ipvlan1 failed to register rx_handler [ 524.464457][T16380] FAULT_INJECTION: forcing a failure. [ 524.464457][T16380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 524.477795][T16380] CPU: 1 UID: 0 PID: 16380 Comm: syz.2.3568 Not tainted 6.16.0-syzkaller-gf3af62b6cee8 #0 PREEMPT(full) [ 524.477824][T16380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 524.477836][T16380] Call Trace: [ 524.477844][T16380] [ 524.477852][T16380] dump_stack_lvl+0x189/0x250 [ 524.477883][T16380] ? __pfx____ratelimit+0x10/0x10 [ 524.477902][T16380] ? __pfx_dump_stack_lvl+0x10/0x10 [ 524.477922][T16380] ? __pfx__printk+0x10/0x10 [ 524.477960][T16380] should_fail_ex+0x414/0x560 [ 524.477992][T16380] _copy_to_user+0x31/0xb0 [ 524.478018][T16380] bpf_obj_get_info_by_fd+0x2881/0x2fa0 [ 524.478061][T16380] ? __pfx_bpf_obj_get_info_by_fd+0x10/0x10 [ 524.478094][T16380] ? get_pid_task+0x20/0x1f0 [ 524.478158][T16380] ? bpf_lsm_bpf+0x9/0x20 [ 524.478187][T16380] ? security_bpf+0x7e/0x300 [ 524.478212][T16380] __sys_bpf+0x5d1/0x870 [ 524.478235][T16380] ? __pfx___sys_bpf+0x10/0x10 [ 524.478273][T16380] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 524.478298][T16380] ? __pfx_ksys_write+0x10/0x10 [ 524.478329][T16380] __x64_sys_bpf+0x7c/0x90 [ 524.478350][T16380] do_syscall_64+0xfa/0x3b0 [ 524.478367][T16380] ? lockdep_hardirqs_on+0x9c/0x150 [ 524.478385][T16380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.478403][T16380] ? clear_bhb_loop+0x60/0xb0 [ 524.478423][T16380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.478438][T16380] RIP: 0033:0x7f093dd8eb69 [ 524.478455][T16380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.478468][T16380] RSP: 002b:00007f093ec7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 524.478488][T16380] RAX: ffffffffffffffda RBX: 00007f093dfb6080 RCX: 00007f093dd8eb69 [ 524.478500][T16380] RDX: 0000000000000010 RSI: 0000200000000580 RDI: 000000000000000f [ 524.478511][T16380] RBP: 00007f093ec7f090 R08: 0000000000000000 R09: 0000000000000000 [ 524.478522][T16380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.478532][T16380] R13: 0000000000000000 R14: 00007f093dfb6080 R15: 00007ffe3c1eeb48 [ 524.478551][T16380] [ 524.843989][T16390] netlink: 'syz.1.3572': attribute type 11 has an invalid length. [ 524.852096][T16390] __nla_validate_parse: 2 callbacks suppressed [ 524.852142][T16390] netlink: 149476 bytes leftover after parsing attributes in process `syz.1.3572'. [ 525.070015][T16388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 525.139659][T16398] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3575'. [ 525.150264][T16398] hsr_slave_0: left promiscuous mode [ 525.162077][T16398] hsr_slave_1: left promiscuous mode [ 525.627024][T16416] netlink: 'syz.4.3583': attribute type 1 has an invalid length. [ 525.686299][T16416] netlink: 'syz.4.3583': attribute type 21 has an invalid length. [ 525.714412][T16416] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 525.721729][T16416] IPv6: NLM_F_CREATE should be set when creating new route [ 525.729019][T16416] IPv6: NLM_F_CREATE should be set when creating new route [ 525.736364][T16416] IPv6: NLM_F_CREATE should be set when creating new route [ 525.876604][T16433] IPv6: Can't replace route, no match found [ 526.132585][ T5181] Bluetooth: hci3: unexpected event 0x01 length: 151 > 1 [ 526.140174][T16446] netlink: 'syz.3.3590': attribute type 21 has an invalid length. [ 526.212280][T16446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3590'. [ 526.319329][T16455] netlink: 'syz.0.3594': attribute type 21 has an invalid length. [ 526.548422][T16465] netlink: 'syz.4.3598': attribute type 1 has an invalid length. [ 526.590125][T16465] netlink: 'syz.4.3598': attribute type 21 has an invalid length. [ 526.603592][T16465] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.756499][T16477] netlink: 'syz.1.3604': attribute type 3 has an invalid length. [ 526.774488][T16477] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3604'. [ 526.847700][T16481] netlink: 'syz.4.3606': attribute type 11 has an invalid length. [ 526.861863][T16481] netlink: 149476 bytes leftover after parsing attributes in process `syz.4.3606'. [ 527.180564][T16479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 527.282431][T16490] FAULT_INJECTION: forcing a failure. [ 527.282431][T16490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 527.295859][T16490] CPU: 1 UID: 0 PID: 16490 Comm: syz.4.3609 Not tainted 6.16.0-syzkaller-gf3af62b6cee8 #0 PREEMPT(full) [ 527.295888][T16490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 527.295900][T16490] Call Trace: [ 527.295910][T16490] [ 527.295921][T16490] dump_stack_lvl+0x189/0x250 [ 527.295957][T16490] ? __pfx____ratelimit+0x10/0x10 [ 527.295986][T16490] ? __pfx_dump_stack_lvl+0x10/0x10 [ 527.296014][T16490] ? __pfx__printk+0x10/0x10 [ 527.296063][T16490] ? __might_fault+0xb0/0x130 [ 527.296130][T16490] should_fail_ex+0x414/0x560 [ 527.296192][T16490] _copy_to_user+0x31/0xb0 [ 527.296235][T16490] simple_read_from_buffer+0xe1/0x170 [ 527.296292][T16490] proc_fail_nth_read+0x1b3/0x220 [ 527.296335][T16490] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 527.296381][T16490] ? rw_verify_area+0x2a6/0x4d0 [ 527.296408][T16490] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 527.296445][T16490] vfs_read+0x1fd/0x980 [ 527.296473][T16490] ? fdget_pos+0x247/0x320 [ 527.296522][T16490] ? __pfx___mutex_lock+0x10/0x10 [ 527.296550][T16490] ? __pfx_vfs_read+0x10/0x10 [ 527.296590][T16490] ? __fget_files+0x2a/0x420 [ 527.296642][T16490] ? __fget_files+0x3a0/0x420 [ 527.296667][T16490] ? __fget_files+0x2a/0x420 [ 527.296742][T16490] ksys_read+0x145/0x250 [ 527.296787][T16490] ? __pfx_ksys_read+0x10/0x10 [ 527.296806][T16490] ? rcu_is_watching+0x15/0xb0 [ 527.296866][T16490] ? do_syscall_64+0xbe/0x3b0 [ 527.296912][T16490] do_syscall_64+0xfa/0x3b0 [ 527.296930][T16490] ? lockdep_hardirqs_on+0x9c/0x150 [ 527.296954][T16490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.296976][T16490] ? clear_bhb_loop+0x60/0xb0 [ 527.297016][T16490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.297036][T16490] RIP: 0033:0x7ff943f8d57c [ 527.297059][T16490] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 527.297073][T16490] RSP: 002b:00007ff944dbf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 527.297094][T16490] RAX: ffffffffffffffda RBX: 00007ff9441b5fa0 RCX: 00007ff943f8d57c [ 527.297108][T16490] RDX: 000000000000000f RSI: 00007ff944dbf0a0 RDI: 0000000000000006 [ 527.297119][T16490] RBP: 00007ff944dbf090 R08: 0000000000000000 R09: 0000000000000000 [ 527.297130][T16490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.297141][T16490] R13: 0000000000000000 R14: 00007ff9441b5fa0 R15: 00007ffd07adacd8 [ 527.297235][T16490] [ 527.686941][T16491] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 527.707493][T16494] FAULT_INJECTION: forcing a failure. [ 527.707493][T16494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 527.725420][T16494] CPU: 1 UID: 0 PID: 16494 Comm: syz.3.3610 Not tainted 6.16.0-syzkaller-gf3af62b6cee8 #0 PREEMPT(full) [ 527.725450][T16494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 527.725462][T16494] Call Trace: [ 527.725471][T16494] [ 527.725481][T16494] dump_stack_lvl+0x189/0x250 [ 527.725511][T16494] ? __pfx____ratelimit+0x10/0x10 [ 527.725534][T16494] ? __pfx_dump_stack_lvl+0x10/0x10 [ 527.725556][T16494] ? __pfx__printk+0x10/0x10 [ 527.725584][T16494] ? __might_fault+0xb0/0x130 [ 527.725615][T16494] ? __might_fault+0xb0/0x130 [ 527.725649][T16494] should_fail_ex+0x414/0x560 [ 527.725688][T16494] _copy_from_iter+0x1db/0x16f0 [ 527.725718][T16494] ? rep_movs_alternative+0x4a/0x90 [ 527.725765][T16494] ? __pfx__copy_from_iter+0x10/0x10 [ 527.725781][T16494] ? sock_alloc_send_pskb+0x875/0x990 [ 527.725823][T16494] ? __pfx__copy_from_iter+0x10/0x10 [ 527.725856][T16494] ? page_copy_sane+0x16a/0x280 [ 527.725886][T16494] copy_page_from_iter+0xdd/0x170 [ 527.725924][T16494] skb_copy_datagram_from_iter+0x306/0x720 [ 527.725980][T16494] unix_stream_sendmsg+0x5d1/0xdf0 [ 527.726062][T16494] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 527.726091][T16494] ? perf_trace_run_bpf_submit+0xee/0x170 [ 527.726110][T16494] ? aa_sock_msg_perm+0x94/0x160 [ 527.726134][T16494] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 527.726150][T16494] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 527.726173][T16494] __sock_sendmsg+0x21c/0x270 [ 527.726204][T16494] ____sys_sendmsg+0x505/0x830 [ 527.726235][T16494] ? __pfx_____sys_sendmsg+0x10/0x10 [ 527.726273][T16494] ? import_iovec+0x74/0xa0 [ 527.726302][T16494] ___sys_sendmsg+0x21f/0x2a0 [ 527.726327][T16494] ? __pfx____sys_sendmsg+0x10/0x10 [ 527.726388][T16494] ? __fget_files+0x2a/0x420 [ 527.726436][T16494] ? __fget_files+0x2a/0x420 [ 527.726455][T16494] ? __fget_files+0x3a0/0x420 [ 527.726497][T16494] __x64_sys_sendmsg+0x19b/0x260 [ 527.726522][T16494] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 527.726561][T16494] ? __pfx_ksys_write+0x10/0x10 [ 527.726577][T16494] ? rcu_is_watching+0x15/0xb0 [ 527.726604][T16494] ? do_syscall_64+0xbe/0x3b0 [ 527.726628][T16494] do_syscall_64+0xfa/0x3b0 [ 527.726641][T16494] ? lockdep_hardirqs_on+0x9c/0x150 [ 527.726656][T16494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.726671][T16494] ? clear_bhb_loop+0x60/0xb0 [ 527.726693][T16494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.726707][T16494] RIP: 0033:0x7fa99418eb69 [ 527.726723][T16494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 527.726736][T16494] RSP: 002b:00007fa994fae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 527.726752][T16494] RAX: ffffffffffffffda RBX: 00007fa9943b5fa0 RCX: 00007fa99418eb69 [ 527.726763][T16494] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000004 [ 527.726772][T16494] RBP: 00007fa994fae090 R08: 0000000000000000 R09: 0000000000000000 [ 527.726782][T16494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 527.726790][T16494] R13: 0000000000000000 R14: 00007fa9943b5fa0 R15: 00007ffc390f7c18 [ 527.726833][T16494] [ 528.417542][T16506] netlink: 'syz.4.3613': attribute type 1 has an invalid length. [ 528.497976][T16506] netlink: 'syz.4.3613': attribute type 21 has an invalid length. [ 528.506334][T16506] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 528.670742][T16511] delete_channel: no stack [ 528.826268][T16517] netlink: 'syz.0.3618': attribute type 11 has an invalid length. [ 528.857858][T16517] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3618'. [ 528.980661][T16513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 529.408836][T16538] netlink: 'syz.0.3628': attribute type 29 has an invalid length. [ 529.523030][T16536] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 529.692196][T16553] netlink: 'syz.0.3634': attribute type 11 has an invalid length. [ 529.718329][T16553] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3634'. [ 529.730081][T16552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 532.727232][T16574] FAULT_INJECTION: forcing a failure. [ 532.727232][T16574] name failslab, interval 1, probability 0, space 0, times 0 [ 532.759653][T16574] CPU: 0 UID: 0 PID: 16574 Comm: syz.4.3642 Not tainted 6.16.0-syzkaller-gf3af62b6cee8 #0 PREEMPT(full) [ 532.759683][T16574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 532.759694][T16574] Call Trace: [ 532.759704][T16574] [ 532.759715][T16574] dump_stack_lvl+0x189/0x250 [ 532.759748][T16574] ? __pfx____ratelimit+0x10/0x10 [ 532.759771][T16574] ? __pfx_dump_stack_lvl+0x10/0x10 [ 532.759796][T16574] ? __pfx__printk+0x10/0x10 [ 532.759842][T16574] ? __pfx___might_resched+0x10/0x10 [ 532.759881][T16574] should_fail_ex+0x414/0x560 [ 532.759927][T16574] should_failslab+0xa8/0x100 [ 532.759961][T16574] __kmalloc_noprof+0xcb/0x4f0 [ 532.759984][T16574] ? kfree+0x4d/0x440 [ 532.760001][T16574] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 532.760044][T16574] tomoyo_realpath_from_path+0xe3/0x5d0 [ 532.760076][T16574] ? tomoyo_domain+0xd9/0x130 [ 532.760120][T16574] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 532.760145][T16574] tomoyo_path_number_perm+0x1e8/0x5a0 [ 532.760179][T16574] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 532.760204][T16574] ? perf_trace_run_bpf_submit+0xee/0x170 [ 532.760337][T16574] ? __fget_files+0x2a/0x420 [ 532.760375][T16574] ? __fget_files+0x2a/0x420 [ 532.760399][T16574] ? __fget_files+0x3a0/0x420 [ 532.760422][T16574] ? __fget_files+0x2a/0x420 [ 532.760461][T16574] security_file_ioctl+0xcb/0x2d0 [ 532.760492][T16574] __se_sys_ioctl+0x47/0x170 [ 532.760525][T16574] do_syscall_64+0xfa/0x3b0 [ 532.760543][T16574] ? lockdep_hardirqs_on+0x9c/0x150 [ 532.760562][T16574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.760581][T16574] ? clear_bhb_loop+0x60/0xb0 [ 532.760611][T16574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.760630][T16574] RIP: 0033:0x7ff943f8eb69 [ 532.760650][T16574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.760666][T16574] RSP: 002b:00007ff944dbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 532.760687][T16574] RAX: ffffffffffffffda RBX: 00007ff9441b5fa0 RCX: 00007ff943f8eb69 [ 532.760700][T16574] RDX: 0000200000000080 RSI: 00000000000089f2 RDI: 000000000000000d [ 532.760712][T16574] RBP: 00007ff944dbf090 R08: 0000000000000000 R09: 0000000000000000 [ 532.760732][T16574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.760743][T16574] R13: 0000000000000000 R14: 00007ff9441b5fa0 R15: 00007ffd07adacd8 [ 532.760802][T16574] [ 532.760810][T16574] ERROR: Out of memory at tomoyo_realpath_from_path. [ 533.462981][T16598] validate_nla: 3 callbacks suppressed [ 533.463004][T16598] netlink: 'syz.1.3650': attribute type 39 has an invalid length. [ 533.775193][T16606] netlink: 'syz.1.3653': attribute type 10 has an invalid length. [ 533.783108][T16608] netlink: 'syz.0.3654': attribute type 10 has an invalid length. [ 533.791917][T16608] veth1_vlan: entered allmulticast mode [ 533.791993][T16606] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3653'. [ 533.828593][T16608] team0: Device veth1_vlan failed to register rx_handler [ 533.880818][T16606] bridge0: port 3(veth0_vlan) entered blocking state [ 533.903621][T16606] bridge0: port 3(veth0_vlan) entered disabled state [ 533.957646][T16606] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 534.010753][T16611] netlink: 'syz.3.3655': attribute type 21 has an invalid length. [ 534.114902][T16611] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3655'. [ 534.182155][T16614] netlink: 'syz.2.3656': attribute type 9 has an invalid length. [ 534.208341][T16614] netlink: 40451 bytes leftover after parsing attributes in process `syz.2.3656'. [ 534.571220][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 534.628339][T16643] netlink: 'syz.1.3667': attribute type 11 has an invalid length. [ 534.641310][T16643] netlink: 149476 bytes leftover after parsing attributes in process `syz.1.3667'. [ 535.074082][T16642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 535.193917][T16660] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3674'. [ 535.368759][T16667] FAULT_INJECTION: forcing a failure. [ 535.368759][T16667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 535.392667][T16667] CPU: 0 UID: 0 PID: 16667 Comm: syz.1.3677 Not tainted 6.16.0-syzkaller-gf3af62b6cee8 #0 PREEMPT(full) [ 535.392700][T16667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 535.392712][T16667] Call Trace: [ 535.392721][T16667] [ 535.392730][T16667] dump_stack_lvl+0x189/0x250 [ 535.392762][T16667] ? __pfx____ratelimit+0x10/0x10 [ 535.392782][T16667] ? __pfx_dump_stack_lvl+0x10/0x10 [ 535.392804][T16667] ? __pfx__printk+0x10/0x10 [ 535.392830][T16667] ? __might_fault+0xb0/0x130 [ 535.392870][T16667] should_fail_ex+0x414/0x560 [ 535.392907][T16667] _copy_from_iter+0x1db/0x16f0 [ 535.392947][T16667] ? __pfx__copy_from_iter+0x10/0x10 [ 535.392974][T16667] ? rcu_is_watching+0x15/0xb0 [ 535.392994][T16667] ? trace_kmalloc+0x1f/0xd0 [ 535.393016][T16667] ? kernfs_fop_write_iter+0x158/0x4f0 [ 535.393049][T16667] kernfs_fop_write_iter+0x19f/0x4f0 [ 535.393083][T16667] vfs_write+0x54b/0xa90 [ 535.393120][T16667] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 535.393146][T16667] ? __pfx_vfs_write+0x10/0x10 [ 535.393183][T16667] ? __fget_files+0x2a/0x420 [ 535.393233][T16667] ksys_write+0x145/0x250 [ 535.393260][T16667] ? __pfx_ksys_write+0x10/0x10 [ 535.393279][T16667] ? rcu_is_watching+0x15/0xb0 [ 535.393318][T16667] ? do_syscall_64+0xbe/0x3b0 [ 535.393348][T16667] do_syscall_64+0xfa/0x3b0 [ 535.393365][T16667] ? lockdep_hardirqs_on+0x9c/0x150 [ 535.393383][T16667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.393401][T16667] ? clear_bhb_loop+0x60/0xb0 [ 535.393426][T16667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.393443][T16667] RIP: 0033:0x7fb64918eb69 [ 535.393462][T16667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.393477][T16667] RSP: 002b:00007fb649f43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 535.393498][T16667] RAX: ffffffffffffffda RBX: 00007fb6493b5fa0 RCX: 00007fb64918eb69 [ 535.393517][T16667] RDX: 0000000000000008 RSI: 0000200000000480 RDI: 0000000000000005 [ 535.393528][T16667] RBP: 00007fb649f43090 R08: 0000000000000000 R09: 0000000000000000 [ 535.393539][T16667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.393550][T16667] R13: 0000000000000000 R14: 00007fb6493b5fa0 R15: 00007ffe30abcd48 [ 535.393585][T16667] [ 535.478006][T16651] netlink: 'syz.3.3669': attribute type 5 has an invalid length. [ 535.774056][T16651] netlink: 130080 bytes leftover after parsing attributes in process `syz.3.3669'. [ 536.418525][T16692] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3686'. [ 536.472445][T16688] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3686'. [ 536.484991][T16693] netlink: 'syz.2.3687': attribute type 11 has an invalid length. [ 536.545404][T16693] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3687'. [ 536.561368][T16688] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3686'. [ 536.632297][T16690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 536.987744][T16682] delete_channel: no stack [ 537.302775][T16710] netlink: 'syz.4.3691': attribute type 29 has an invalid length. [ 537.325611][T16710] netlink: 'syz.4.3691': attribute type 29 has an invalid length. [ 537.388631][T16713] netlink: 'syz.1.3693': attribute type 2 has an invalid length. [ 537.403508][T16713] nbd: must specify at least one socket [ 537.511747][T16715] netlink: 'syz.2.3694': attribute type 10 has an invalid length. [ 537.541613][T16715] bridge0: port 3(veth0_vlan) entered blocking state [ 537.548539][T16715] bridge0: port 3(veth0_vlan) entered disabled state [ 537.565922][T16715] veth0_vlan: entered allmulticast mode [ 537.605246][T16715] veth0_vlan: left allmulticast mode [ 537.620576][T16715] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 537.864315][T16728] netlink: 'syz.1.3699': attribute type 11 has an invalid length. [ 537.891962][T16726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 538.141578][T16738] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 538.148902][T16738] IPv6: NLM_F_CREATE should be set when creating new route [ 538.156271][T16738] IPv6: NLM_F_CREATE should be set when creating new route [ 538.163797][T16738] IPv6: NLM_F_CREATE should be set when creating new route [ 538.327689][T16745] netlink: 'syz.1.3705': attribute type 11 has an invalid length. [ 538.347473][T16743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 538.373891][T16744] team0: Device ipvlan1 failed to register rx_handler [ 538.382898][T16752] netlink: zone id is out of range [ 538.388195][T16752] netlink: zone id is out of range [ 538.423925][T16752] netlink: zone id is out of range [ 538.429749][T16752] netlink: zone id is out of range [ 538.441510][T16752] netlink: zone id is out of range [ 538.446808][T16752] netlink: zone id is out of range [ 538.488377][T16752] netlink: zone id is out of range [ 538.497670][T16752] netlink: zone id is out of range [ 538.644030][T16764] validate_nla: 3 callbacks suppressed [ 538.644050][T16764] netlink: 'syz.1.3712': attribute type 13 has an invalid length. [ 538.820439][T16771] netlink: 'syz.1.3715': attribute type 11 has an invalid length. [ 538.844373][T16771] __nla_validate_parse: 8 callbacks suppressed [ 538.844413][T16771] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3715'. [ 538.857526][T16770] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3714'. [ 538.892568][T16770] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3714'. [ 538.904761][T16768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 538.949368][T16770] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3714'. [ 539.042520][T16777] netlink: 'syz.4.3717': attribute type 1 has an invalid length. [ 539.065542][T16780] IPv6: Can't replace route, no match found [ 539.133876][T16777] netlink: 'syz.4.3717': attribute type 21 has an invalid length. [ 539.148796][T16777] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 539.467035][T16791] netlink: 'syz.4.3723': attribute type 13 has an invalid length. [ 539.475503][T16791] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3723'. [ 539.579520][T16793] net_ratelimit: 80 callbacks suppressed [ 539.579565][T16793] netlink: zone id is out of range [ 539.620295][T16793] netlink: zone id is out of range [ 539.629721][T16793] netlink: zone id is out of range [ 539.654999][T16793] netlink: zone id is out of range [ 539.671328][T16793] netlink: zone id is out of range [ 539.676617][T16793] netlink: zone id is out of range [ 539.688601][T16793] netlink: zone id is out of range [ 539.694875][T16793] netlink: zone id is out of range [ 539.700719][T16793] netlink: zone id is out of range [ 539.706535][T16793] netlink: zone id is out of range [ 540.147234][T16810] FAULT_INJECTION: forcing a failure. [ 540.147234][T16810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.219533][T16808] : port 1(bond0) entered blocking state [ 540.251706][T16808] : port 1(bond0) entered disabled state [ 540.261128][T16810] CPU: 1 UID: 0 PID: 16810 Comm: syz.0.3729 Not tainted 6.16.0-syzkaller-gf3af62b6cee8 #0 PREEMPT(full) [ 540.261154][T16810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 540.261166][T16810] Call Trace: [ 540.261180][T16810] [ 540.261191][T16810] dump_stack_lvl+0x189/0x250 [ 540.261228][T16810] ? __pfx____ratelimit+0x10/0x10 [ 540.261256][T16810] ? __pfx_dump_stack_lvl+0x10/0x10 [ 540.261284][T16810] ? __pfx__printk+0x10/0x10 [ 540.261335][T16810] ? __might_fault+0xb0/0x130 [ 540.261411][T16810] should_fail_ex+0x414/0x560 [ 540.261472][T16810] _copy_from_user+0x2d/0xb0 [ 540.261508][T16810] get_user_ifreq+0x6c/0x180 [ 540.261557][T16810] sock_ioctl+0x6dd/0x790 [ 540.261601][T16810] ? __pfx_sock_ioctl+0x10/0x10 [ 540.261645][T16810] ? __fget_files+0x3a0/0x420 [ 540.261672][T16810] ? __fget_files+0x2a/0x420 [ 540.261720][T16810] ? bpf_lsm_file_ioctl+0x9/0x20 [ 540.261748][T16810] ? __pfx_sock_ioctl+0x10/0x10 [ 540.261780][T16810] __se_sys_ioctl+0xf9/0x170 [ 540.261822][T16810] do_syscall_64+0xfa/0x3b0 [ 540.261842][T16810] ? lockdep_hardirqs_on+0x9c/0x150 [ 540.261865][T16810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.261886][T16810] ? clear_bhb_loop+0x60/0xb0 [ 540.261926][T16810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.261944][T16810] RIP: 0033:0x7f37b858eb69 [ 540.261968][T16810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 540.261983][T16810] RSP: 002b:00007f37b940b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 540.262003][T16810] RAX: ffffffffffffffda RBX: 00007f37b87b6160 RCX: 00007f37b858eb69 [ 540.262017][T16810] RDX: 0000200000000080 RSI: 00000000000089f2 RDI: 000000000000000d [ 540.262029][T16810] RBP: 00007f37b940b090 R08: 0000000000000000 R09: 0000000000000000 [ 540.262040][T16810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.262051][T16810] R13: 0000000000000001 R14: 00007f37b87b6160 R15: 00007ffcfd5ab818 [ 540.262142][T16810] [ 540.723594][T16816] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3732'. [ 540.744385][T10453] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 540.754041][T10453] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 540.793269][T16812] netlink: 'syz.4.3730': attribute type 28 has an invalid length. [ 540.878225][T16812] netlink: 147608 bytes leftover after parsing attributes in process `syz.4.3730'. [ 540.926914][T16812] netlink: 61827 bytes leftover after parsing attributes in process `syz.4.3730'. [ 541.013397][T16827] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3736'. [ 541.068455][T16827] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3736'. [ 541.336648][T16843] netlink: 'syz.2.3742': attribute type 10 has an invalid length. [ 541.348055][T16843] veth0_vlan: entered allmulticast mode [ 541.355105][T16843] bridge0: port 3(veth0_vlan) entered blocking state [ 541.376896][T16843] bridge0: port 3(veth0_vlan) entered disabled state [ 541.715185][T16855] netlink: 'syz.1.3747': attribute type 21 has an invalid length. [ 541.723645][T16855] netlink: 'syz.1.3747': attribute type 4 has an invalid length. [ 541.826027][T16861] netlink: 'syz.4.3749': attribute type 10 has an invalid length. [ 541.899265][T16867] netlink: 'syz.3.3751': attribute type 46 has an invalid length. [ 542.875127][ T5181] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 542.875162][ T5181] Bluetooth: unknown link type 56 [ 542.892230][ T5181] Bluetooth: hci0: connection err: -111 [ 542.953253][T16913] netlink: 'syz.4.3770': attribute type 11 has an invalid length. [ 542.964385][T16912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 543.037667][T16899] delete_channel: no stack [ 543.590584][T16944] netlink: 'syz.4.3784': attribute type 11 has an invalid length. [ 543.615913][T16943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 543.743513][T16950] FAULT_INJECTION: forcing a failure. [ 543.743513][T16950] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 543.770335][T16950] CPU: 1 UID: 0 PID: 16950 Comm: syz.2.3787 Not tainted 6.16.0-syzkaller-gf3af62b6cee8 #0 PREEMPT(full) [ 543.770363][T16950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 543.770375][T16950] Call Trace: [ 543.770383][T16950] [ 543.770391][T16950] dump_stack_lvl+0x189/0x250 [ 543.770418][T16950] ? __pfx____ratelimit+0x10/0x10 [ 543.770438][T16950] ? __pfx_dump_stack_lvl+0x10/0x10 [ 543.770460][T16950] ? __pfx__printk+0x10/0x10 [ 543.770485][T16950] ? __might_fault+0xb0/0x130 [ 543.770512][T16950] ? __might_fault+0xb0/0x130 [ 543.770541][T16950] should_fail_ex+0x414/0x560 [ 543.770573][T16950] _copy_from_user+0x2d/0xb0 [ 543.770599][T16950] __sys_bpf+0x1ed/0x870 [ 543.770627][T16950] ? __pfx___sys_bpf+0x10/0x10 [ 543.770669][T16950] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 543.770709][T16950] __x64_sys_bpf+0x7c/0x90 [ 543.770730][T16950] do_syscall_64+0xfa/0x3b0 [ 543.770748][T16950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.770764][T16950] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 543.770781][T16950] ? clear_bhb_loop+0x60/0xb0 [ 543.770801][T16950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.770817][T16950] RIP: 0033:0x7f093dd8eb69 [ 543.770834][T16950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 543.770850][T16950] RSP: 002b:00007f093eca0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 543.770869][T16950] RAX: ffffffffffffffda RBX: 00007f093dfb5fa0 RCX: 00007f093dd8eb69 [ 543.770883][T16950] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 543.770894][T16950] RBP: 00007f093eca0090 R08: 0000000000000000 R09: 0000000000000000 [ 543.770906][T16950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.770916][T16950] R13: 0000000000000000 R14: 00007f093dfb5fa0 R15: 00007ffe3c1eeb48 [ 543.770948][T16950] [ 543.983880][T16957] __nla_validate_parse: 14 callbacks suppressed [ 543.983934][T16957] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.3788'. [ 544.180665][T16964] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3791'. [ 544.198283][T16964] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3791'. [ 544.967529][T16975] ref_ctr_offset mismatch. inode: 0x346 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 545.029761][T16977] validate_nla: 3 callbacks suppressed [ 545.040286][T16977] netlink: 'syz.2.3793': attribute type 29 has an invalid length. [ 545.395247][T16991] netlink: 'syz.0.3798': attribute type 11 has an invalid length. [ 545.406094][T16991] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3798'. [ 545.438974][T16990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 546.152833][T17005] netlink: 65027 bytes leftover after parsing attributes in process `syz.3.3803'. [ 546.395056][T17016] syzkaller0: entered promiscuous mode [ 546.409095][T17016] syzkaller0: entered allmulticast mode [ 546.687355][T17037] FAULT_INJECTION: forcing a failure. [ 546.687355][T17037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 546.688879][T17035] netlink: 'syz.1.3812': attribute type 11 has an invalid length. [ 546.717827][T17037] CPU: 0 UID: 0 PID: 17037 Comm: syz.3.3811 Not tainted 6.16.0-syzkaller-gf3af62b6cee8 #0 PREEMPT(full) [ 546.717857][T17037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 546.717870][T17037] Call Trace: [ 546.717879][T17037] [ 546.717888][T17037] dump_stack_lvl+0x189/0x250 [ 546.717917][T17037] ? __pfx____ratelimit+0x10/0x10 [ 546.717938][T17037] ? __pfx_dump_stack_lvl+0x10/0x10 [ 546.717959][T17037] ? __pfx__printk+0x10/0x10 [ 546.717984][T17037] ? __might_fault+0xb0/0x130 [ 546.718011][T17037] ? __might_fault+0xb0/0x130 [ 546.718041][T17037] should_fail_ex+0x414/0x560 [ 546.718076][T17037] _copy_from_user+0x2d/0xb0 [ 546.718101][T17037] ip_tunnel_parm_from_user+0xa2/0x380 [ 546.718130][T17037] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 546.718157][T17037] ? __pfx_ip_tunnel_parm_from_user+0x10/0x10 [ 546.718188][T17037] ? rcu_is_watching+0x15/0xb0 [ 546.718221][T17037] ip_tunnel_siocdevprivate+0x99/0x180 [ 546.718251][T17037] ? __pfx_ip_tunnel_siocdevprivate+0x10/0x10 [ 546.718288][T17037] ? netdev_name_node_lookup+0xdf/0x120 [ 546.718330][T17037] dev_ifsioc+0xb54/0xf00 [ 546.718364][T17037] dev_ioctl+0x84c/0x1150 [ 546.718389][T17037] sock_ioctl+0x719/0x790 [ 546.718419][T17037] ? __pfx_sock_ioctl+0x10/0x10 [ 546.718446][T17037] ? __fget_files+0x3a0/0x420 [ 546.718471][T17037] ? __fget_files+0x2a/0x420 [ 546.718508][T17037] ? bpf_lsm_file_ioctl+0x9/0x20 [ 546.718530][T17037] ? __pfx_sock_ioctl+0x10/0x10 [ 546.718554][T17037] __se_sys_ioctl+0xf9/0x170 [ 546.718580][T17037] do_syscall_64+0xfa/0x3b0 [ 546.718598][T17037] ? lockdep_hardirqs_on+0x9c/0x150 [ 546.718616][T17037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.718635][T17037] ? clear_bhb_loop+0x60/0xb0 [ 546.718659][T17037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.718676][T17037] RIP: 0033:0x7fa99418eb69 [ 546.718695][T17037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.718711][T17037] RSP: 002b:00007fa994f8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 546.718731][T17037] RAX: ffffffffffffffda RBX: 00007fa9943b6080 RCX: 00007fa99418eb69 [ 546.718744][T17037] RDX: 0000200000000080 RSI: 00000000000089f2 RDI: 000000000000000d [ 546.718755][T17037] RBP: 00007fa994f8d090 R08: 0000000000000000 R09: 0000000000000000 [ 546.718766][T17037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.718777][T17037] R13: 0000000000000001 R14: 00007fa9943b6080 R15: 00007ffc390f7c18 [ 546.718811][T17037] [ 546.739045][T17035] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3812'. [ 547.024096][T17034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 547.678742][T17070] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3823'. [ 548.158799][T17086] netlink: 147608 bytes leftover after parsing attributes in process `syz.4.3829'. [ 548.168720][T17086] netlink: 61827 bytes leftover after parsing attributes in process `syz.4.3829'. [ 549.755776][T17064] netlink: 'syz.3.3818': attribute type 1 has an invalid length. [ 549.932443][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 549.958504][T17099] FAULT_INJECTION: forcing a failure. [ 549.958504][T17099] name failslab, interval 1, probability 0, space 0, times 0 [ 549.975145][T17099] CPU: 0 UID: 0 PID: 17099 Comm: syz.4.3836 Not tainted 6.16.0-syzkaller-gf3af62b6cee8 #0 PREEMPT(full) [ 549.975172][T17099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 549.975183][T17099] Call Trace: [ 549.975192][T17099] [ 549.975201][T17099] dump_stack_lvl+0x189/0x250 [ 549.975237][T17099] ? __pfx____ratelimit+0x10/0x10 [ 549.975258][T17099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 549.975279][T17099] ? __pfx__printk+0x10/0x10 [ 549.975309][T17099] ? __pfx___might_resched+0x10/0x10 [ 549.975326][T17099] ? fs_reclaim_acquire+0x7d/0x100 [ 549.975358][T17099] should_fail_ex+0x414/0x560 [ 549.975392][T17099] should_failslab+0xa8/0x100 [ 549.975419][T17099] __kmalloc_noprof+0xcb/0x4f0 [ 549.975441][T17099] ? kfree+0x4d/0x440 [ 549.975458][T17099] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 549.975488][T17099] tomoyo_realpath_from_path+0xe3/0x5d0 [ 549.975514][T17099] ? tomoyo_domain+0xd9/0x130 [ 549.975543][T17099] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 549.975566][T17099] tomoyo_path_number_perm+0x1e8/0x5a0 [ 549.975591][T17099] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 549.975630][T17099] ? __lock_acquire+0xab9/0xd20 [ 549.975677][T17099] ? __fget_files+0x2a/0x420 [ 549.975707][T17099] ? __fget_files+0x2a/0x420 [ 549.975730][T17099] ? __fget_files+0x3a0/0x420 [ 549.975754][T17099] ? __fget_files+0x2a/0x420 [ 549.975782][T17099] security_file_ioctl+0xcb/0x2d0 [ 549.975806][T17099] __se_sys_ioctl+0x47/0x170 [ 549.975832][T17099] do_syscall_64+0xfa/0x3b0 [ 549.975851][T17099] ? lockdep_hardirqs_on+0x9c/0x150 [ 549.975868][T17099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.975887][T17099] ? clear_bhb_loop+0x60/0xb0 [ 549.975911][T17099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.975929][T17099] RIP: 0033:0x7ff943f8eb69 [ 549.975947][T17099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 549.975962][T17099] RSP: 002b:00007ff944dbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 549.975983][T17099] RAX: ffffffffffffffda RBX: 00007ff9441b5fa0 RCX: 00007ff943f8eb69 [ 549.975997][T17099] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000006 [ 549.976009][T17099] RBP: 00007ff944dbf090 R08: 0000000000000000 R09: 0000000000000000 [ 549.976021][T17099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.976032][T17099] R13: 0000000000000000 R14: 00007ff9441b5fa0 R15: 00007ffd07adacd8 [ 549.976063][T17099] [ 549.976072][T17099] ERROR: Out of memory at tomoyo_realpath_from_path. [ 550.048169][T17100] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3835'. [ 550.263427][T17100] net_ratelimit: 79 callbacks suppressed [ 550.263457][T17100] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 550.307106][T17100] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 550.944346][T17130] netlink: 'syz.3.3844': attribute type 10 has an invalid length. [ 551.142864][T17137] netlink: 'syz.4.3847': attribute type 39 has an invalid length. [ 551.317911][T17130] veth0_vlan: left allmulticast mode [ 551.460028][T17130] veth0_vlan: left promiscuous mode [ 551.474446][T17130] veth0_vlan: entered promiscuous mode [ 551.508335][T17130] team0: Device veth0_vlan failed to register rx_handler [ 551.590950][T17134] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3844'. [ 551.625120][T17134] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 552.276981][T17169] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3855'. [ 552.492142][T17172] netlink: 'syz.2.3857': attribute type 10 has an invalid length. [ 552.519331][T17172] team0: Device ipvlan1 failed to register rx_handler [ 552.905005][T17178] netlink: 'syz.3.3860': attribute type 11 has an invalid length. [ 553.001800][T17178] netlink: 149476 bytes leftover after parsing attributes in process `syz.3.3860'. [ 553.107263][T17177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 553.413475][T17197] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 553.420774][T17197] IPv6: NLM_F_CREATE should be set when creating new route [ 553.428392][T17197] IPv6: NLM_F_CREATE should be set when creating new route [ 553.435721][T17197] IPv6: NLM_F_CREATE should be set when creating new route [ 553.481910][T17184] netlink: 1053 bytes leftover after parsing attributes in process `syz.1.3859'. [ 553.919700][T17202] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3866'. [ 554.360348][T17213] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3869'. [ 554.901895][T17203] delete_channel: no stack [ 556.079654][T17229] netlink: 'syz.3.3874': attribute type 2 has an invalid length. [ 556.130155][T17233] netlink: 'syz.0.3875': attribute type 11 has an invalid length. [ 556.167527][T17233] netlink: 149476 bytes leftover after parsing attributes in process `syz.0.3875'. [ 556.191631][T17232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 556.276541][T17242] netlink: zone id is out of range [ 556.300791][T17242] netlink: zone id is out of range [ 556.306410][T17242] netlink: zone id is out of range [ 556.327258][T17242] netlink: zone id is out of range [ 556.341896][T17244] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3879'. [ 556.361285][T17242] netlink: zone id is out of range [ 556.366541][T17242] netlink: zone id is out of range [ 556.374198][T17244] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3879'. [ 556.385132][T17242] netlink: zone id is out of range [ 556.390423][T17242] netlink: zone id is out of range [ 556.423533][T17242] netlink: zone id is out of range [ 556.430246][T17242] netlink: zone id is out of range [ 556.456996][T17250] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3879'. [ 556.521333][T17245] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3876'. [ 556.560218][T17249] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3881'. [ 556.597355][T17240] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3876'. [ 557.112422][T17259] IPv6: Can't replace route, no match found [ 557.607998][T17285] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3891'. [ 557.638304][T17280] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3891'. [ 557.649198][T17285] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3891'. [ 558.535146][T17300] FAULT_INJECTION: forcing a failure. [ 558.535146][T17300] name failslab, interval 1, probability 0, space 0, times 0 [ 558.575815][T17300] CPU: 0 UID: 0 PID: 17300 Comm: syz.0.3897 Not tainted 6.16.0-syzkaller-gf3af62b6cee8 #0 PREEMPT(full) [ 558.575841][T17300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 558.575854][T17300] Call Trace: [ 558.575863][T17300] [ 558.575873][T17300] dump_stack_lvl+0x189/0x250 [ 558.575903][T17300] ? __pfx____ratelimit+0x10/0x10 [ 558.575926][T17300] ? __pfx_dump_stack_lvl+0x10/0x10 [ 558.575951][T17300] ? __pfx__printk+0x10/0x10 [ 558.575996][T17300] ? __pfx___might_resched+0x10/0x10 [ 558.576030][T17300] should_fail_ex+0x414/0x560 [ 558.576074][T17300] should_failslab+0xa8/0x100 [ 558.576107][T17300] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 558.576134][T17300] ? __alloc_skb+0x112/0x2d0 [ 558.576172][T17300] __alloc_skb+0x112/0x2d0 [ 558.576207][T17300] inet6_ifmcaddr_notify+0xeb/0x1d0 [ 558.576235][T17300] ? __pfx_inet6_ifmcaddr_notify+0x10/0x10 [ 558.576308][T17300] __ipv6_dev_mc_dec+0x2dc/0x330 [ 558.576361][T17300] ipv6_mc_destroy_dev+0x33c/0x5a0 [ 558.576385][T17300] ? addrconf_ifdown+0x1396/0x1880 [ 558.576431][T17300] addrconf_ifdown+0x139e/0x1880 [ 558.576487][T17300] ? tls_dev_event+0x717/0xec0 [ 558.576509][T17300] ? __pfx_addrconf_ifdown+0x10/0x10 [ 558.576578][T17300] addrconf_notify+0x1bc/0x1010 [ 558.576622][T17300] notifier_call_chain+0x1b3/0x3e0 [ 558.576668][T17300] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 558.576735][T17300] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 558.576776][T17300] ? aa_get_newest_label+0xf7/0x5d0 [ 558.576812][T17300] ? __pfx_aa_get_newest_label+0x10/0x10 [ 558.576861][T17300] unregister_netdevice_queue+0x33c/0x380 [ 558.576898][T17300] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 558.576928][T17300] ? bpf_lsm_capable+0x9/0x20 [ 558.576979][T17300] ip_tunnel_ctl+0x217/0xc30 [ 558.577019][T17300] vti_tunnel_ctl+0x3b9/0x500 [ 558.577057][T17300] ? __pfx_vti_tunnel_ctl+0x10/0x10 [ 558.577070][T17300] ? rcu_is_watching+0x15/0xb0 [ 558.577092][T17300] ? trace_contention_end+0x39/0x120 [ 558.577134][T17300] ip_tunnel_siocdevprivate+0xf5/0x180 [ 558.577171][T17300] ? __pfx_ip_tunnel_siocdevprivate+0x10/0x10 [ 558.577226][T17300] ? netdev_name_node_lookup+0xdf/0x120 [ 558.577272][T17300] dev_ifsioc+0xb54/0xf00 [ 558.577317][T17300] dev_ioctl+0x84c/0x1150 [ 558.577351][T17300] sock_ioctl+0x719/0x790 [ 558.577388][T17300] ? __pfx_sock_ioctl+0x10/0x10 [ 558.577422][T17300] ? __fget_files+0x3a0/0x420 [ 558.577447][T17300] ? __fget_files+0x2a/0x420 [ 558.577484][T17300] ? bpf_lsm_file_ioctl+0x9/0x20 [ 558.577508][T17300] ? __pfx_sock_ioctl+0x10/0x10 [ 558.577534][T17300] __se_sys_ioctl+0xf9/0x170 [ 558.577567][T17300] do_syscall_64+0xfa/0x3b0 [ 558.577585][T17300] ? lockdep_hardirqs_on+0x9c/0x150 [ 558.577605][T17300] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.577624][T17300] ? clear_bhb_loop+0x60/0xb0 [ 558.577654][T17300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.577671][T17300] RIP: 0033:0x7f37b858eb69 [ 558.577691][T17300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 558.577706][T17300] RSP: 002b:00007f37b944d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 558.577725][T17300] RAX: ffffffffffffffda RBX: 00007f37b87b5fa0 RCX: 00007f37b858eb69 [ 558.577738][T17300] RDX: 0000200000000080 RSI: 00000000000089f2 RDI: 000000000000000d [ 558.577749][T17300] RBP: 00007f37b944d090 R08: 0000000000000000 R09: 0000000000000000 [ 558.577760][T17300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 558.577771][T17300] R13: 0000000000000000 R14: 00007f37b87b5fa0 R15: 00007ffcfd5ab818 [ 558.577829][T17300] [ 559.117523][T17307] netlink: 'syz.3.3900': attribute type 1 has an invalid length. [ 559.148346][T17307] netlink: 'syz.3.3900': attribute type 21 has an invalid length. [ 559.156426][T17307] IPv6: NLM_F_CREATE should be specified when creating new route [ 559.165927][T17307] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 559.173219][T17307] IPv6: NLM_F_CREATE should be set when creating new route [ 559.180565][T17307] IPv6: NLM_F_CREATE should be set when creating new route [ 559.187855][T17307] IPv6: NLM_F_CREATE should be set when creating new route [ 559.280203][T17314] netlink: 'syz.3.3904': attribute type 11 has an invalid length. [ 559.290392][T17312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 559.845410][T17343] netlink: 'syz.4.3914': attribute type 10 has an invalid length. [ 559.938659][T17331] can: request_module (can-proto-0) failed. [ 560.171278][ T5181] Bluetooth: hci3: command 0x0406 tx timeout [ 562.209636][T17415] netlink: 'syz.1.3939': attribute type 1 has an invalid length. [ 562.254776][T17415] netlink: 'syz.1.3939': attribute type 21 has an invalid length. [ 562.269936][T17415] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 562.368359][T17418] netlink: 'syz.3.3941': attribute type 2 has an invalid length. [ 562.409110][T17418] netlink: 'syz.3.3941': attribute type 1 has an invalid length. [ 562.450307][T17418] __nla_validate_parse: 12 callbacks suppressed [ 562.450359][T17418] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.3941'. [ 562.497807][T17418] block nbd5: not configured, cannot reconfigure [ 562.832918][T17434] netlink: 'syz.0.3945': attribute type 46 has an invalid length. [ 563.246566][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.253018][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.257404][T17436] can: request_module (can-proto-0) failed. [ 564.620563][T17462] netlink: 'syz.3.3952': attribute type 1 has an invalid length. [ 564.707796][T17454] netlink: 'syz.3.3952': attribute type 21 has an invalid length. [ 564.725419][T17454] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 564.848509][T17468] netlink: 'syz.1.3957': attribute type 39 has an invalid length. [ 565.109966][T17473] netlink: 147608 bytes leftover after parsing attributes in process `syz.2.3959'. [ 565.149331][T17473] netlink: 61827 bytes leftover after parsing attributes in process `syz.2.3959'. [ 565.970196][T17509] netlink: 'syz.1.3970': attribute type 1 has an invalid length. [ 566.112122][T17507] netlink: 'syz.1.3970': attribute type 21 has an invalid length. [ 566.142145][T17507] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 566.307937][T17516] netlink: 147608 bytes leftover after parsing attributes in process `syz.3.3974'. [ 566.320966][T17516] netlink: 61827 bytes leftover after parsing attributes in process `syz.3.3974'. [ 568.942748][T17544] delete_channel: no stack [ 569.219999][T17551] netlink: 'syz.3.3986': attribute type 1 has an invalid length. [ 569.248643][T17551] netlink: 'syz.3.3986': attribute type 21 has an invalid length. [ 569.257193][T17551] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 569.459364][T17555] netlink: 147608 bytes leftover after parsing attributes in process `syz.2.3988'. [ 569.472130][ T8454] bond0: (slave syz_tun): Releasing backup interface [ 569.491833][T17555] netlink: 61827 bytes leftover after parsing attributes in process `syz.2.3988'. [ 569.503132][ T8454] syz_tun (unregistering): left allmulticast mode [ 569.554625][T17559] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3989'. [ 569.572202][ T5181] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 569.584956][ T5181] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 569.598536][ T5181] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 569.646992][ T5181] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 569.674140][ T5181] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 569.697678][T10460] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.886079][T10460] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.808380][T10460] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.035450][T10460] netdevsim netdevsim4 ªªªªªª (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.066793][T17565] chnl_net:caif_netlink_parms(): no params data found [ 571.157642][T17590] netlink: 'syz.2.3998': attribute type 1 has an invalid length. [ 571.206576][T17594] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4000'. [ 571.228133][T17594] net_ratelimit: 254 callbacks suppressed [ 571.228181][T17594] netlink: zone id is out of range [ 571.252966][T17594] netlink: zone id is out of range [ 571.258487][T17594] netlink: zone id is out of range [ 571.264212][T17594] netlink: zone id is out of range [ 571.269873][T17594] netlink: zone id is out of range [ 571.271902][T17590] netlink: 'syz.2.3998': attribute type 21 has an invalid length. [ 571.276714][T17594] netlink: zone id is out of range [ 571.298307][T17594] netlink: zone id is out of range [ 571.312069][T17594] netlink: zone id is out of range [ 571.317963][T17590] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 571.327621][T17594] netlink: zone id is out of range [ 571.341125][T17594] netlink: zone id is out of range [ 571.349326][T17600] netlink: 147608 bytes leftover after parsing attributes in process `syz.3.4001'. [ 571.367755][T17600] netlink: 61827 bytes leftover after parsing attributes in process `syz.3.4001'. [ 571.422111][T17565] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.439685][T17565] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.450680][T17565] bridge_slave_0: entered allmulticast mode [ 571.466470][T17565] bridge_slave_0: entered promiscuous mode [ 571.475677][T17565] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.483137][T17565] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.491320][T17565] bridge_slave_1: entered allmulticast mode [ 571.499389][T17565] bridge_slave_1: entered promiscuous mode [ 571.508715][T17610] netlink: 180 bytes leftover after parsing attributes in process `syz.3.4004'. [ 571.715727][T17565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.775413][ T5181] Bluetooth: hci2: command tx timeout [ 571.828257][T10460] erspan0: left allmulticast mode [ 571.834046][T10460] erspan0: left promiscuous mode [ 571.839476][T10460] Ÿë: port 1(erspan0) entered disabled state [ 571.899886][T17622] netlink: 'syz.3.4007': attribute type 10 has an invalid length. [ 571.911048][T17622] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4007'. [ 572.369418][T17625] delete_channel: no stack [ 572.704773][T10460] team0: Port device geneve1 removed [ 572.912340][T10460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.922211][T10460] bond_slave_0: left promiscuous mode [ 572.927720][T10460] bond_slave_0: left allmulticast mode [ 572.935325][T10460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 572.944638][T10460] bond_slave_1: left promiscuous mode [ 572.950197][T10460] bond_slave_1: left allmulticast mode [ 572.957945][T10460] bond0 (unregistering): Released all slaves [ 572.973267][T17565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 573.050227][T17622] : port 1(bond0) entered disabled state [ 573.059326][T17622] bridge0: port 3(bond0) entered blocking state [ 573.067125][T17622] bridge0: port 3(bond0) entered disabled state [ 573.093405][T17565] team0: Port device team_slave_0 added [ 573.134978][T17565] team0: Port device team_slave_1 added [ 573.270536][T17565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 573.311255][T17565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 573.338349][T17565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 573.376991][T17565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 573.393813][T17565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 573.445326][T17565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 573.766466][T17565] hsr_slave_0: entered promiscuous mode [ 573.789103][T17565] hsr_slave_1: entered promiscuous mode [ 573.853620][ T5181] Bluetooth: hci2: command tx timeout [ 573.868713][T17650] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.4018'. [ 574.689374][T17663] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4023'. [ 575.193832][T10460] team0 (unregistering): Port device team_slave_1 removed [ 575.709306][T17680] netlink: 'syz.1.4028': attribute type 10 has an invalid length. [ 575.819277][T17680] team0: Device ip6_vti0 is of different type [ 575.964523][ T5181] Bluetooth: hci2: command tx timeout [ 576.017180][T17685] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4031'. [ 577.284563][T17706] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4036'. [ 577.329365][T17706] netlink: 6 bytes leftover after parsing attributes in process `syz.3.4036'. [ 577.433230][T17710] netlink: 'syz.2.4038': attribute type 10 has an invalid length. [ 577.463694][T17710] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4038'. [ 577.615211][T17710] bridge0: port 3(veth0_vlan) entered blocking state [ 577.634118][T17710] bridge0: port 3(veth0_vlan) entered disabled state [ 577.659567][T17710] net_ratelimit: 162 callbacks suppressed [ 577.659588][T17710] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 578.025969][ T5181] Bluetooth: hci2: command tx timeout [ 578.145555][T17565] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 578.179056][T17565] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 578.243026][T17727] netlink: 'syz.1.4044': attribute type 10 has an invalid length. [ 578.243913][T17723] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4042'. [ 578.360118][T17727] veth0_vlan: left promiscuous mode [ 578.373894][T17727] veth0_vlan: entered promiscuous mode [ 578.389756][T17727] team0: Device veth0_vlan failed to register rx_handler [ 578.446072][T17565] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 579.152544][T17565] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 579.565189][T17741] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4048'. [ 579.579134][T17743] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4048'. [ 579.590590][T17744] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4048'. [ 579.709553][T17565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 579.770424][T17565] 8021q: adding VLAN 0 to HW filter on device team0 [ 579.810235][T10460] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.817455][T10460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 579.848329][T10460] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.855582][T10460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.892326][T17761] netlink: 'syz.1.4052': attribute type 11 has an invalid length. [ 579.925616][T17761] netlink: 149476 bytes leftover after parsing attributes in process `syz.1.4052'. [ 579.985945][T17760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 579.995312][T17768] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4055'. [ 580.117290][T17766] syzkaller0: entered promiscuous mode [ 580.127391][T17766] syzkaller0: entered allmulticast mode [ 580.161109][T17774] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4056'. [ 582.609723][T17793] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4063'. [ 582.638335][T17791] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4062'. [ 582.650213][T17791] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4062'. [ 582.667551][T17791] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4062'. [ 582.701211][T17793] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4063'. [ 582.777654][T17565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 586.292814][T17814] FAULT_INJECTION: forcing a failure. [ 586.292814][T17814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 586.362996][T17814] CPU: 1 UID: 0 PID: 17814 Comm: syz.0.4067 Not tainted 6.16.0-syzkaller-gf3af62b6cee8 #0 PREEMPT(full) [ 586.363024][T17814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 586.363035][T17814] Call Trace: [ 586.363045][T17814] [ 586.363055][T17814] dump_stack_lvl+0x189/0x250 [ 586.363085][T17814] ? __pfx____ratelimit+0x10/0x10 [ 586.363108][T17814] ? __pfx_dump_stack_lvl+0x10/0x10 [ 586.363132][T17814] ? __pfx__printk+0x10/0x10 [ 586.363161][T17814] ? __might_fault+0xb0/0x130 [ 586.363196][T17814] ? __might_fault+0xb0/0x130 [ 586.363237][T17814] should_fail_ex+0x414/0x560 [ 586.363282][T17814] _copy_from_iter+0x1db/0x16f0 [ 586.363314][T17814] ? rep_movs_alternative+0x4a/0x90 [ 586.363362][T17814] ? __pfx__copy_from_iter+0x10/0x10 [ 586.363380][T17814] ? sock_alloc_send_pskb+0x875/0x990 [ 586.363424][T17814] ? __pfx__copy_from_iter+0x10/0x10 [ 586.363458][T17814] ? page_copy_sane+0x16a/0x280 [ 586.363489][T17814] copy_page_from_iter+0xdd/0x170 [ 586.363527][T17814] skb_copy_datagram_from_iter+0x306/0x720 [ 586.363588][T17814] unix_stream_sendmsg+0x5d1/0xdf0 [ 586.363671][T17814] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 586.363708][T17814] ? perf_trace_run_bpf_submit+0xee/0x170 [ 586.363733][T17814] ? aa_sock_msg_perm+0x94/0x160 [ 586.363774][T17814] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 586.363795][T17814] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 586.363825][T17814] __sock_sendmsg+0x21c/0x270 [ 586.363865][T17814] ____sys_sendmsg+0x505/0x830 [ 586.363913][T17814] ? __pfx_____sys_sendmsg+0x10/0x10 [ 586.363966][T17814] ? import_iovec+0x74/0xa0 [ 586.364002][T17814] ___sys_sendmsg+0x21f/0x2a0 [ 586.364030][T17814] ? __pfx____sys_sendmsg+0x10/0x10 [ 586.364110][T17814] ? __fget_files+0x2a/0x420 [ 586.364168][T17814] ? __fget_files+0x2a/0x420 [ 586.364191][T17814] ? __fget_files+0x3a0/0x420 [ 586.364248][T17814] __x64_sys_sendmsg+0x19b/0x260 [ 586.364278][T17814] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 586.364331][T17814] ? __pfx_ksys_write+0x10/0x10 [ 586.364352][T17814] ? rcu_is_watching+0x15/0xb0 [ 586.364388][T17814] ? do_syscall_64+0xbe/0x3b0 [ 586.364420][T17814] do_syscall_64+0xfa/0x3b0 [ 586.364438][T17814] ? lockdep_hardirqs_on+0x9c/0x150 [ 586.364458][T17814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.364477][T17814] ? clear_bhb_loop+0x60/0xb0 [ 586.364509][T17814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.364527][T17814] RIP: 0033:0x7f37b858eb69 [ 586.364546][T17814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.364561][T17814] RSP: 002b:00007f37b944d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 586.364580][T17814] RAX: ffffffffffffffda RBX: 00007f37b87b5fa0 RCX: 00007f37b858eb69 [ 586.364592][T17814] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000004 [ 586.364604][T17814] RBP: 00007f37b944d090 R08: 0000000000000000 R09: 0000000000000000 [ 586.364614][T17814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 586.364624][T17814] R13: 0000000000000000 R14: 00007f37b87b5fa0 R15: 00007ffcfd5ab818 [ 586.364677][T17814] [ 586.682971][T17821] FAULT_INJECTION: forcing a failure. [ 586.682971][T17821] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 586.696741][T17821] CPU: 1 UID: 0 PID: 17821 Comm: syz.1.4069 Not tainted 6.16.0-syzkaller-gf3af62b6cee8 #0 PREEMPT(full) [ 586.696766][T17821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 586.696776][T17821] Call Trace: [ 586.696784][T17821] [ 586.696792][T17821] dump_stack_lvl+0x189/0x250 [ 586.696818][T17821] ? __pfx____ratelimit+0x10/0x10 [ 586.696835][T17821] ? __pfx_dump_stack_lvl+0x10/0x10 [ 586.696856][T17821] ? __pfx__printk+0x10/0x10 [ 586.696881][T17821] ? fs_reclaim_acquire+0x7d/0x100 [ 586.696916][T17821] should_fail_ex+0x414/0x560 [ 586.696947][T17821] prepare_alloc_pages+0x213/0x610 [ 586.696987][T17821] __alloc_frozen_pages_noprof+0x123/0x370 [ 586.697005][T17821] ? tracing_gen_ctx_irq_test+0xc6/0x160 [ 586.697027][T17821] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 586.697049][T17821] ? __pfx_perf_swevent_event+0x10/0x10 [ 586.697072][T17821] ? policy_nodemask+0x27c/0x720 [ 586.697093][T17821] ? __lock_acquire+0xab9/0xd20 [ 586.697123][T17821] alloc_pages_mpol+0x232/0x4a0 [ 586.697152][T17821] vma_alloc_folio_noprof+0xe4/0x200 [ 586.697180][T17821] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 586.697215][T17821] folio_prealloc+0x30/0x180 [ 586.697240][T17821] __handle_mm_fault+0x2ab9/0x5440 [ 586.697280][T17821] ? __pfx___handle_mm_fault+0x10/0x10 [ 586.697325][T17821] ? find_vma+0xe7/0x160 [ 586.697347][T17821] ? __pfx_find_vma+0x10/0x10 [ 586.697371][T17821] handle_mm_fault+0x40a/0x8e0 [ 586.697405][T17821] do_user_addr_fault+0x764/0x1390 [ 586.697449][T17821] exc_page_fault+0x76/0xf0 [ 586.697470][T17821] asm_exc_page_fault+0x26/0x30 [ 586.697487][T17821] RIP: 0010:__put_user_4+0xd/0x20 [ 586.697505][T17821] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 586.697521][T17821] RSP: 0018:ffffc9000d6579f8 EFLAGS: 00050202 [ 586.697538][T17821] RAX: 000000000000001f RBX: 0000000000000000 RCX: 0000200000001640 [ 586.697551][T17821] RDX: 0000000000000000 RSI: ffffffff8dba01c6 RDI: ffffffff8be2fd00 [ 586.697563][T17821] RBP: ffffc9000d657d30 R08: 0000000000000000 R09: ffffffff820b5aa0 [ 586.697576][T17821] R10: dffffc0000000000 R11: ffffed10036d1f21 R12: 0000000000000000 [ 586.697588][T17821] R13: dffffc0000000000 R14: 1ffff92001acaf54 R15: 0000200000001640 [ 586.697609][T17821] ? __might_fault+0xb0/0x130 [ 586.697641][T17821] bpf_obj_get_info_by_fd+0x2335/0x2fa0 [ 586.697665][T17821] ? tracing_gen_ctx_irq_test+0xc6/0x160 [ 586.697700][T17821] ? __pfx_bpf_obj_get_info_by_fd+0x10/0x10 [ 586.697728][T17821] ? perf_tp_event+0x664/0x1380 [ 586.697799][T17821] ? bpf_lsm_bpf+0x9/0x20 [ 586.697819][T17821] ? security_bpf+0x7e/0x300 [ 586.697844][T17821] __sys_bpf+0x5d1/0x870 [ 586.697869][T17821] ? __pfx___sys_bpf+0x10/0x10 [ 586.697909][T17821] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 586.697934][T17821] ? __pfx_ksys_write+0x10/0x10 [ 586.697961][T17821] ? rcu_is_watching+0x15/0xb0 [ 586.697988][T17821] __x64_sys_bpf+0x7c/0x90 [ 586.698010][T17821] do_syscall_64+0xfa/0x3b0 [ 586.698027][T17821] ? lockdep_hardirqs_on+0x9c/0x150 [ 586.698044][T17821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.698060][T17821] ? clear_bhb_loop+0x60/0xb0 [ 586.698082][T17821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.698099][T17821] RIP: 0033:0x7fb64918eb69 [ 586.698116][T17821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.698131][T17821] RSP: 002b:00007fb649f43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 586.698148][T17821] RAX: ffffffffffffffda RBX: 00007fb6493b5fa0 RCX: 00007fb64918eb69 [ 586.698161][T17821] RDX: 0000000000000010 RSI: 00002000000003c0 RDI: 000000000000000f [ 586.698173][T17821] RBP: 00007fb649f43090 R08: 0000000000000000 R09: 0000000000000000 [ 586.698184][T17821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.698195][T17821] R13: 0000000000000000 R14: 00007fb6493b5fa0 R15: 00007ffe30abcd48 [ 586.698225][T17821] [ 587.129606][T17565] veth0_vlan: entered promiscuous mode [ 587.201050][T17565] veth1_vlan: entered promiscuous mode [ 587.249240][T17565] veth0_macvtap: entered promiscuous mode [ 587.260163][T17565] veth1_macvtap: entered promiscuous mode [ 587.283006][T17565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 587.295775][T17565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 587.382982][T10460] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.408722][T10460] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.482095][T10460] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.493980][T10460] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.592268][T10451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.601491][T10451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.816171][T10443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.831851][T10443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.920318][T17844] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4077'. [ 587.948881][T17843] netlink: 147608 bytes leftover after parsing attributes in process `syz.0.4078'. [ 587.977787][T17843] netlink: 61827 bytes leftover after parsing attributes in process `syz.0.4078'. [ 588.001684][T17849] IPv6: Can't replace route, no match found [ 588.006562][T17850] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4077'. [ 588.028054][T17844] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4077'. [ 588.098670][T17851] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 588.108429][T17851] syzkaller1: linktype set to 769 [ 588.398780][T17853] netlink: 'syz.1.4080': attribute type 10 has an invalid length. [ 588.419142][T17853] team0: Device ipvlan1 failed to register rx_handler [ 588.528536][T17855] netlink: 'syz.0.4081': attribute type 21 has an invalid length. [ 588.542619][T17855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4081'. [ 588.598468][T17859] netlink: zone id is out of range [ 588.613491][T17859] netlink: zone id is out of range [ 588.632220][T17859] netlink: zone id is out of range [ 588.647048][T17859] netlink: zone id is out of range [ 588.667217][T17859] netlink: zone id is out of range [ 588.686695][T17859] netlink: zone id is out of range [ 588.727851][T17859] netlink: zone id is out of range [ 588.765854][T17859] netlink: zone id is out of range [ 588.778443][T17859] netlink: zone id is out of range [ 588.796254][T17859] netlink: zone id is out of range [ 588.944749][T17874] netlink: 'syz.3.4089': attribute type 10 has an invalid length. [ 588.954574][T17874] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4089'. [ 588.965474][T17874] veth0_vlan: left promiscuous mode [ 588.970862][T17874] veth0_vlan: entered promiscuous mode [ 589.009017][T17874] veth0_vlan: entered allmulticast mode [ 589.028798][T17874] bridge0: port 3(veth0_vlan) entered blocking state [ 589.066793][T17874] bridge0: port 3(veth0_vlan) entered disabled state [ 589.068934][T17878] netlink: 147608 bytes leftover after parsing attributes in process `syz.4.4091'. [ 589.089805][T17878] netlink: 61827 bytes leftover after parsing attributes in process `syz.4.4091'. [ 589.133060][T17881] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4092'. [ 589.369281][T17893] netlink: 'syz.4.4095': attribute type 3 has an invalid length. [ 589.410244][T17893] netlink: 'syz.4.4095': attribute type 1 has an invalid length. [ 589.434562][T17895] netlink: 'syz.3.4094': attribute type 21 has an invalid length. [ 593.588137][T17973] __nla_validate_parse: 11 callbacks suppressed [ 593.588174][T17973] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.4124'. [ 594.181890][T17986] IPv6: Can't replace route, no match found [ 594.925975][T18007] netlink: 147608 bytes leftover after parsing attributes in process `syz.3.4135'. [ 594.935940][T18007] netlink: 61827 bytes leftover after parsing attributes in process `syz.3.4135'. [ 595.522097][T18019] can: request_module (can-proto-0) failed. [ 597.456775][T18049] netlink: 'syz.4.4146': attribute type 11 has an invalid length. [ 597.493565][T18049] netlink: 149476 bytes leftover after parsing attributes in process `syz.4.4146'. [ 597.533007][T18043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 597.807062][T18058] netlink: 'syz.4.4152': attribute type 2 has an invalid length. [ 597.821265][T18058] netlink: 119 bytes leftover after parsing attributes in process `syz.4.4152'. [ 597.857738][T18058] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4152'. [ 597.944796][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 597.955641][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 597.965208][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 597.979012][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 597.987231][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 598.775025][T10458] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.142328][T18090] netlink: 'syz.2.4161': attribute type 11 has an invalid length. [ 599.150744][T18090] netlink: 149476 bytes leftover after parsing attributes in process `syz.2.4161'. [ 599.165582][T18089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 599.435693][T10458] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.534936][T10458] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.680357][T10458] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.736098][T18061] chnl_net:caif_netlink_parms(): no params data found [ 600.021302][ T5181] Bluetooth: hci4: command tx timeout [ 600.297049][T18061] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.334987][T18126] netlink: 'syz.4.4171': attribute type 5 has an invalid length. [ 600.347116][T18061] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.362889][T18126] netlink: 'syz.4.4171': attribute type 1 has an invalid length. [ 600.384998][T18061] bridge_slave_0: entered allmulticast mode [ 600.391485][T18126] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.4171'. [ 600.421784][T18061] bridge_slave_0: entered promiscuous mode [ 600.435891][T18128] FAULT_INJECTION: forcing a failure. [ 600.435891][T18128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 600.436828][T18128] [ 600.436837][T18128] ====================================================== [ 600.436845][T18128] WARNING: possible circular locking dependency detected [ 600.436858][T18128] 6.16.0-syzkaller-gf3af62b6cee8 #0 Not tainted [ 600.436868][T18128] ------------------------------------------------------ [ 600.436875][T18128] syz.1.4172/18128 is trying to acquire lock: [ 600.436884][T18128] ffffffff8e12e0a0 (console_owner){-...}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 600.436932][T18128] [ 600.436932][T18128] but task is already holding lock: [ 600.436938][T18128] ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 600.436981][T18128] [ 600.436981][T18128] which lock already depends on the new lock. [ 600.436981][T18128] [ 600.436988][T18128] [ 600.436988][T18128] the existing dependency chain (in reverse order) is: [ 600.436994][T18128] [ 600.436994][T18128] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 600.437015][T18128] lock_acquire+0x120/0x360 [ 600.437036][T18128] _raw_spin_lock_nested+0x32/0x50 [ 600.437052][T18128] raw_spin_rq_lock_nested+0x2a/0x140 [ 600.437071][T18128] task_rq_lock+0xbc/0x470 [ 600.437090][T18128] cgroup_move_task+0x92/0x2a0 [ 600.437104][T18128] css_set_move_task+0x658/0x9e0 [ 600.437122][T18128] cgroup_post_fork+0x1ef/0x790 [ 600.437137][T18128] copy_process+0x3862/0x3c00 [ 600.437153][T18128] kernel_clone+0x21e/0x840 [ 600.437169][T18128] user_mode_thread+0xdd/0x140 [ 600.437185][T18128] rest_init+0x23/0x300 [ 600.437202][T18128] start_kernel+0x3a9/0x410 [ 600.437219][T18128] x86_64_start_reservations+0x24/0x30 [ 600.437240][T18128] x86_64_start_kernel+0x143/0x1c0 [ 600.437260][T18128] common_startup_64+0x13e/0x147 [ 600.437282][T18128] [ 600.437282][T18128] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 600.437304][T18128] lock_acquire+0x120/0x360 [ 600.437323][T18128] _raw_spin_lock_irqsave+0xa7/0xf0 [ 600.437344][T18128] try_to_wake_up+0x67/0x12b0 [ 600.437361][T18128] __wake_up_common_lock+0x137/0x1f0 [ 600.437380][T18128] tty_port_default_wakeup+0xa2/0xf0 [ 600.437401][T18128] serial8250_tx_chars+0x72e/0x970 [ 600.437418][T18128] serial8250_handle_irq+0x633/0xbb0 [ 600.437434][T18128] serial8250_default_handle_irq+0xbf/0x1e0 [ 600.437459][T18128] serial8250_interrupt+0x8a/0x160 [ 600.437480][T18128] __handle_irq_event_percpu+0x289/0x980 [ 600.437496][T18128] handle_irq_event+0x8b/0x1e0 [ 600.437509][T18128] handle_edge_irq+0x23b/0xa10 [ 600.437523][T18128] __common_interrupt+0x143/0x250 [ 600.437551][T18128] common_interrupt+0xb6/0xe0 [ 600.437568][T18128] asm_common_interrupt+0x26/0x40 [ 600.437581][T18128] __sanitizer_cov_trace_pc+0x11/0x70 [ 600.437598][T18128] smp_call_function_many_cond+0xd4b/0x12d0 [ 600.437613][T18128] on_each_cpu_cond_mask+0x3f/0x80 [ 600.437624][T18128] smp_text_poke_batch_finish+0x5f9/0x1130 [ 600.437643][T18128] arch_jump_label_transform_apply+0x1c/0x30 [ 600.437666][T18128] static_key_enable_cpuslocked+0x128/0x250 [ 600.437688][T18128] static_key_enable+0x1a/0x20 [ 600.437704][T18128] toggle_allocation_gate+0xad/0x240 [ 600.437723][T18128] process_scheduled_works+0xade/0x17b0 [ 600.437747][T18128] worker_thread+0x8a0/0xda0 [ 600.437759][T18128] kthread+0x711/0x8a0 [ 600.437776][T18128] ret_from_fork+0x3f9/0x770 [ 600.437790][T18128] ret_from_fork_asm+0x1a/0x30 [ 600.437811][T18128] [ 600.437811][T18128] -> #2 (&tty->write_wait){-...}-{3:3}: [ 600.437835][T18128] lock_acquire+0x120/0x360 [ 600.437853][T18128] _raw_spin_lock_irqsave+0xa7/0xf0 [ 600.437874][T18128] __wake_up_common_lock+0x2f/0x1f0 [ 600.437892][T18128] tty_port_default_wakeup+0xa2/0xf0 [ 600.437911][T18128] serial8250_tx_chars+0x72e/0x970 [ 600.437928][T18128] serial8250_handle_irq+0x633/0xbb0 [ 600.437945][T18128] serial8250_default_handle_irq+0xbf/0x1e0 [ 600.437965][T18128] serial8250_interrupt+0x8a/0x160 [ 600.437987][T18128] __handle_irq_event_percpu+0x289/0x980 [ 600.438005][T18128] handle_irq_event+0x8b/0x1e0 [ 600.438022][T18128] handle_edge_irq+0x23b/0xa10 [ 600.438038][T18128] __common_interrupt+0x143/0x250 [ 600.438059][T18128] common_interrupt+0xb6/0xe0 [ 600.438077][T18128] asm_common_interrupt+0x26/0x40 [ 600.438093][T18128] __sanitizer_cov_trace_pc+0x11/0x70 [ 600.438109][T18128] smp_call_function_many_cond+0xd4b/0x12d0 [ 600.438124][T18128] on_each_cpu_cond_mask+0x3f/0x80 [ 600.438139][T18128] smp_text_poke_batch_finish+0x5f9/0x1130 [ 600.438159][T18128] arch_jump_label_transform_apply+0x1c/0x30 [ 600.438182][T18128] static_key_enable_cpuslocked+0x128/0x250 [ 600.438203][T18128] static_key_enable+0x1a/0x20 [ 600.438222][T18128] toggle_allocation_gate+0xad/0x240 [ 600.438241][T18128] process_scheduled_works+0xade/0x17b0 [ 600.438264][T18128] worker_thread+0x8a0/0xda0 [ 600.438279][T18128] kthread+0x711/0x8a0 [ 600.438294][T18128] ret_from_fork+0x3f9/0x770 [ 600.438309][T18128] ret_from_fork_asm+0x1a/0x30 [ 600.438327][T18128] [ 600.438327][T18128] -> #1 (&port_lock_key){-...}-{3:3}: [ 600.438351][T18128] lock_acquire+0x120/0x360 [ 600.438370][T18128] _raw_spin_lock_irqsave+0xa7/0xf0 [ 600.438391][T18128] serial8250_console_write+0x17e/0x1ba0 [ 600.438409][T18128] console_flush_all+0x728/0xc40 [ 600.438426][T18128] console_unlock+0xc4/0x270 [ 600.438441][T18128] vprintk_emit+0x5b7/0x7a0 [ 600.438456][T18128] _printk+0xcf/0x120 [ 600.438475][T18128] register_console+0xa8b/0xf90 [ 600.438492][T18128] univ8250_console_init+0x3a/0x70 [ 600.438513][T18128] console_init+0x10e/0x430 [ 600.438532][T18128] start_kernel+0x254/0x410 [ 600.438556][T18128] x86_64_start_reservations+0x24/0x30 [ 600.438576][T18128] x86_64_start_kernel+0x143/0x1c0 [ 600.438596][T18128] common_startup_64+0x13e/0x147 [ 600.438617][T18128] [ 600.438617][T18128] -> #0 (console_owner){-...}-{0:0}: [ 600.438639][T18128] validate_chain+0xb9b/0x2140 [ 600.438654][T18128] __lock_acquire+0xab9/0xd20 [ 600.438674][T18128] lock_acquire+0x120/0x360 [ 600.438694][T18128] console_flush_all+0x6d2/0xc40 [ 600.438710][T18128] console_unlock+0xc4/0x270 [ 600.438725][T18128] vprintk_emit+0x5b7/0x7a0 [ 600.438740][T18128] _printk+0xcf/0x120 [ 600.438759][T18128] should_fail_ex+0x3f5/0x560 [ 600.438780][T18128] strncpy_from_user+0x36/0x290 [ 600.438801][T18128] strncpy_from_user_nofault+0x72/0x150 [ 600.438819][T18128] bpf_probe_read_user_str+0x2a/0x70 [ 600.438842][T18128] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 600.438856][T18128] bpf_trace_run4+0x28e/0x4a0 [ 600.438874][T18128] __bpf_trace_sched_switch+0x17a/0x1e0 [ 600.438893][T18128] __traceiter_sched_switch+0x9a/0xd0 [ 600.438911][T18128] __schedule+0x238f/0x4cc0 [ 600.438932][T18128] schedule+0x165/0x360 [ 600.438952][T18128] schedule_preempt_disabled+0x13/0x30 [ 600.438974][T18128] __mutex_lock+0x7e6/0x1360 [ 600.438989][T18128] do_ip_setsockopt+0xeee/0x2d00 [ 600.439011][T18128] ip_setsockopt+0x66/0x110 [ 600.439032][T18128] do_sock_setsockopt+0x17c/0x1b0 [ 600.439050][T18128] __x64_sys_setsockopt+0x13f/0x1b0 [ 600.439066][T18128] do_syscall_64+0xfa/0x3b0 [ 600.439081][T18128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.439097][T18128] [ 600.439097][T18128] other info that might help us debug this: [ 600.439097][T18128] [ 600.439103][T18128] Chain exists of: [ 600.439103][T18128] console_owner --> &p->pi_lock --> &rq->__lock [ 600.439103][T18128] [ 600.439131][T18128] Possible unsafe locking scenario: [ 600.439131][T18128] [ 600.439136][T18128] CPU0 CPU1 [ 600.439142][T18128] ---- ---- [ 600.439147][T18128] lock(&rq->__lock); [ 600.439158][T18128] lock(&p->pi_lock); [ 600.439171][T18128] lock(&rq->__lock); [ 600.439181][T18128] lock(console_owner); [ 600.439191][T18128] [ 600.439191][T18128] *** DEADLOCK *** [ 600.439191][T18128] [ 600.439196][T18128] 5 locks held by syz.1.4172/18128: [ 600.439205][T18128] #0: ffffffff8f5327c8 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_setsockopt+0xeee/0x2d00 [ 600.439249][T18128] #1: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 600.439291][T18128] #2: ffffffff8e139e60 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x19c/0x4a0 [ 600.439329][T18128] #3: ffffffff8e12e100 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 600.439367][T18128] #4: ffffffff8e0159d0 (console_srcu){....}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 600.439404][T18128] [ 600.439404][T18128] stack backtrace: [ 600.439412][T18128] CPU: 1 UID: 0 PID: 18128 Comm: syz.1.4172 Not tainted 6.16.0-syzkaller-gf3af62b6cee8 #0 PREEMPT(full) [ 600.439432][T18128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 600.439442][T18128] Call Trace: [ 600.439449][T18128] [ 600.439456][T18128] dump_stack_lvl+0x189/0x250 [ 600.439478][T18128] ? __pfx_dump_stack_lvl+0x10/0x10 [ 600.439496][T18128] ? __pfx__printk+0x10/0x10 [ 600.439519][T18128] ? print_lock_name+0xde/0x100 [ 600.439562][T18128] print_circular_bug+0x2ee/0x310 [ 600.439584][T18128] check_noncircular+0x134/0x160 [ 600.439605][T18128] validate_chain+0xb9b/0x2140 [ 600.439637][T18128] __lock_acquire+0xab9/0xd20 [ 600.439665][T18128] ? console_flush_all+0x13a/0xc40 [ 600.439682][T18128] lock_acquire+0x120/0x360 [ 600.439702][T18128] ? console_flush_all+0x13a/0xc40 [ 600.439726][T18128] ? do_raw_spin_unlock+0x122/0x240 [ 600.439745][T18128] ? console_flush_all+0x13a/0xc40 [ 600.439765][T18128] console_flush_all+0x6d2/0xc40 [ 600.439783][T18128] ? console_flush_all+0x13a/0xc40 [ 600.439803][T18128] ? console_flush_all+0x13a/0xc40 [ 600.439824][T18128] ? __pfx_console_flush_all+0x10/0x10 [ 600.439849][T18128] ? is_printk_cpu_sync_owner+0x32/0x40 [ 600.439872][T18128] console_unlock+0xc4/0x270 [ 600.439891][T18128] ? __pfx_console_unlock+0x10/0x10 [ 600.439910][T18128] ? is_printk_cpu_sync_owner+0x32/0x40 [ 600.439934][T18128] vprintk_emit+0x5b7/0x7a0 [ 600.439953][T18128] ? __pfx_vprintk_emit+0x10/0x10 [ 600.439971][T18128] ? ima_match_policy+0x10b/0x2150 [ 600.440001][T18128] ? perf_trace_lock+0xec/0x3b0 [ 600.440021][T18128] _printk+0xcf/0x120 [ 600.440041][T18128] ? __pfx____ratelimit+0x10/0x10 [ 600.440060][T18128] ? __pfx__printk+0x10/0x10 [ 600.440091][T18128] should_fail_ex+0x3f5/0x560 [ 600.440118][T18128] strncpy_from_user+0x36/0x290 [ 600.440144][T18128] strncpy_from_user_nofault+0x72/0x150 [ 600.440165][T18128] bpf_probe_read_user_str+0x2a/0x70 [ 600.440191][T18128] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 600.440207][T18128] bpf_trace_run4+0x28e/0x4a0 [ 600.440226][T18128] ? bpf_trace_run4+0x19c/0x4a0 [ 600.440246][T18128] ? __pfx_bpf_trace_run4+0x10/0x10 [ 600.440273][T18128] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 600.440296][T18128] __bpf_trace_sched_switch+0x17a/0x1e0 [ 600.440318][T18128] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 600.440340][T18128] ? psi_group_change+0xab8/0x1050 [ 600.440356][T18128] ? __schedule+0x22e9/0x4cc0 [ 600.440388][T18128] ? __schedule+0x22e9/0x4cc0 [ 600.440412][T18128] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 600.440434][T18128] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 600.440455][T18128] __traceiter_sched_switch+0x9a/0xd0 [ 600.440478][T18128] __schedule+0x238f/0x4cc0 [ 600.440519][T18128] ? __pfx___schedule+0x10/0x10 [ 600.440557][T18128] ? schedule+0x91/0x360 [ 600.440582][T18128] schedule+0x165/0x360 [ 600.440607][T18128] schedule_preempt_disabled+0x13/0x30 [ 600.440630][T18128] __mutex_lock+0x7e6/0x1360 [ 600.440650][T18128] ? __mutex_lock+0x5b6/0x1360 [ 600.440671][T18128] ? do_ip_setsockopt+0xeee/0x2d00 [ 600.440697][T18128] ? __pfx___mutex_lock+0x10/0x10 [ 600.440719][T18128] ? vfs_write+0x8d8/0xa90 [ 600.440740][T18128] ? ksys_write+0x1cb/0x250 [ 600.440763][T18128] do_ip_setsockopt+0xeee/0x2d00 [ 600.440791][T18128] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 600.440817][T18128] ? aa_sk_perm+0x81e/0x950 [ 600.440840][T18128] ? __pfx_aa_sk_perm+0x10/0x10 [ 600.440861][T18128] ? __fget_files+0x2a/0x420 [ 600.440888][T18128] ip_setsockopt+0x66/0x110 [ 600.440909][T18128] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 600.440928][T18128] do_sock_setsockopt+0x17c/0x1b0 [ 600.440951][T18128] __x64_sys_setsockopt+0x13f/0x1b0 [ 600.440980][T18128] do_syscall_64+0xfa/0x3b0 [ 600.440996][T18128] ? lockdep_hardirqs_on+0x9c/0x150 [ 600.441010][T18128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.441025][T18128] ? clear_bhb_loop+0x60/0xb0 [ 600.441043][T18128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.441059][T18128] RIP: 0033:0x7fb64918eb69 [ 600.441075][T18128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 600.441095][T18128] RSP: 002b:00007fb649f43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 600.441113][T18128] RAX: ffffffffffffffda RBX: 00007fb6493b5fa0 RCX: 00007fb64918eb69 [ 600.441126][T18128] RDX: 0000000000000025 RSI: 0000000000000000 RDI: 0000000000000003 [ 600.441136][T18128] RBP: 00007fb649f43090 R08: 000000000000000c R09: 0000000000000000 [ 600.441147][T18128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.441155][T18128] R13: 0000000000000000 R14: 00007fb6493b5fa0 R15: 00007ffe30abcd48 [ 600.441181][T18128] [ 601.755186][T18128] CPU: 1 UID: 0 PID: 18128 Comm: syz.1.4172 Not tainted 6.16.0-syzkaller-gf3af62b6cee8 #0 PREEMPT(full) [ 601.755203][T18128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 601.755217][T18128] Call Trace: [ 601.755227][T18128] [ 601.755234][T18128] dump_stack_lvl+0x189/0x250 [ 601.755252][T18128] ? __pfx____ratelimit+0x10/0x10 [ 601.755263][T18128] ? __pfx_dump_stack_lvl+0x10/0x10 [ 601.755274][T18128] ? __pfx__printk+0x10/0x10 [ 601.755292][T18128] should_fail_ex+0x414/0x560 [ 601.755309][T18128] strncpy_from_user+0x36/0x290 [ 601.755324][T18128] strncpy_from_user_nofault+0x72/0x150 [ 601.755338][T18128] bpf_probe_read_user_str+0x2a/0x70 [ 601.755355][T18128] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 601.755365][T18128] bpf_trace_run4+0x28e/0x4a0 [ 601.755377][T18128] ? bpf_trace_run4+0x19c/0x4a0 [ 601.755388][T18128] ? __pfx_bpf_trace_run4+0x10/0x10 [ 601.755402][T18128] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 601.755418][T18128] __bpf_trace_sched_switch+0x17a/0x1e0 [ 601.755433][T18128] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 601.755447][T18128] ? psi_group_change+0xab8/0x1050 [ 601.755456][T18128] ? __schedule+0x22e9/0x4cc0 [ 601.755472][T18128] ? __schedule+0x22e9/0x4cc0 [ 601.755486][T18128] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 601.755498][T18128] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 601.755510][T18128] __traceiter_sched_switch+0x9a/0xd0 [ 601.755524][T18128] __schedule+0x238f/0x4cc0 [ 601.755552][T18128] ? __pfx___schedule+0x10/0x10 [ 601.755573][T18128] ? schedule+0x91/0x360 [ 601.755586][T18128] schedule+0x165/0x360 [ 601.755599][T18128] schedule_preempt_disabled+0x13/0x30 [ 601.755612][T18128] __mutex_lock+0x7e6/0x1360 [ 601.755624][T18128] ? __mutex_lock+0x5b6/0x1360 [ 601.755635][T18128] ? do_ip_setsockopt+0xeee/0x2d00 [ 601.755650][T18128] ? __pfx___mutex_lock+0x10/0x10 [ 601.755662][T18128] ? vfs_write+0x8d8/0xa90 [ 601.755675][T18128] ? ksys_write+0x1cb/0x250 [ 601.755687][T18128] do_ip_setsockopt+0xeee/0x2d00 [ 601.755709][T18128] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 601.755724][T18128] ? aa_sk_perm+0x81e/0x950 [ 601.755741][T18128] ? __pfx_aa_sk_perm+0x10/0x10 [ 601.755752][T18128] ? __fget_files+0x2a/0x420 [ 601.755768][T18128] ip_setsockopt+0x66/0x110 [ 601.755781][T18128] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 601.755792][T18128] do_sock_setsockopt+0x17c/0x1b0 [ 601.755807][T18128] __x64_sys_setsockopt+0x13f/0x1b0 [ 601.755820][T18128] do_syscall_64+0xfa/0x3b0 [ 601.755832][T18128] ? lockdep_hardirqs_on+0x9c/0x150 [ 601.755840][T18128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.755850][T18128] ? clear_bhb_loop+0x60/0xb0 [ 601.755862][T18128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.755872][T18128] RIP: 0033:0x7fb64918eb69 [ 601.755884][T18128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 601.755892][T18128] RSP: 002b:00007fb649f43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 601.755904][T18128] RAX: ffffffffffffffda RBX: 00007fb6493b5fa0 RCX: 00007fb64918eb69 [ 601.755912][T18128] RDX: 0000000000000025 RSI: 0000000000000000 RDI: 0000000000000003 [ 601.755918][T18128] RBP: 00007fb649f43090 R08: 000000000000000c R09: 0000000000000000 [ 601.755925][T18128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.755931][T18128] R13: 0000000000000000 R14: 00007fb6493b5fa0 R15: 00007ffe30abcd48 [ 601.755943][T18128] [ 602.097039][T10458] bridge_slave_1: left allmulticast mode [ 602.102761][T10458] bridge_slave_1: left promiscuous mode [ 602.108486][T10458] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.117643][ T5181] Bluetooth: hci4: command tx timeout [ 602.306971][T18061] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.314263][T18061] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.321507][T18061] bridge_slave_1: entered allmulticast mode [ 602.328030][T18061] bridge_slave_1: entered promiscuous mode [ 602.375199][T18061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.386451][T18061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.412449][T18061] team0: Port device team_slave_0 added [ 602.419371][T18061] team0: Port device team_slave_1 added [ 602.436503][T18061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 602.443572][T18061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.469749][T18061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.484490][T18061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.491756][T18061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.517869][T18061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.554305][T18061] hsr_slave_0: entered promiscuous mode [ 602.560460][T18061] hsr_slave_1: entered promiscuous mode [ 602.566847][T18061] debugfs: 'hsr0' already exists in 'hsr' [ 602.573557][T18061] Cannot create hsr debugfs directory [ 602.602307][T10458] batman_adv: batadv0: Interface deactivated: wlan0 [ 602.619765][T10458] batman_adv: batadv0: Removing interface: wlan0 [ 602.676282][T10458] hsr_slave_0: left promiscuous mode [ 602.685777][T10458] hsr_slave_1: left promiscuous mode [ 602.691701][T10458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 602.699104][T10458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 602.707158][T10458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 602.714605][T10458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 602.873173][T10458] team0 (unregistering): Port device team_slave_1 removed [ 602.896123][T10458] team0 (unregistering): Port device C removed [ 603.261222][T18061] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 603.269756][T18061] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 603.279730][T18061] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 603.288349][T18061] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 603.343100][T18061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.360628][T18061] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.371912][T10458] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.379028][T10458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.390502][T10453] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.397685][T10453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 603.504919][T18061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 603.534465][T18061] veth0_vlan: entered promiscuous mode [ 603.543859][T18061] veth1_vlan: entered promiscuous mode [ 603.561840][T18061] veth0_macvtap: entered promiscuous mode [ 603.570091][T18061] veth1_macvtap: entered promiscuous mode [ 603.584611][T18061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 603.597734][T18061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 603.610389][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.619538][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.629135][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.639918][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.661634][T18061] ieee80211 phy42: Selected rate control algorithm 'minstrel_ht' [ 603.678117][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.679386][T18061] ieee80211 phy43: Selected rate control algorithm 'minstrel_ht' [ 603.694819][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.712906][T10443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.720866][T10443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.171801][ T5181] Bluetooth: hci4: command tx timeout [ 606.261258][ T5181] Bluetooth: hci4: command tx timeout