last executing test programs: 1m19.980043775s ago: executing program 2 (id=1852): socketpair(0x1e, 0x5, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000feff000095000000000000009115d4a6ea50d6c5161d58e6cad9e2c8bcd605cd8a945115754439028af12cbbdcc5b85af53d96a4c8a7dc0d68815b62a30600136cfad41b05860b8b8acba849688c5fd97face1d3d82a79ea9a52598f1c3533ea544105265a65374400000000000000000000000000004ad1a2ba0ff1eb2af2a31d1e7c82857c373f3866bb2b4dd8178c09ea10b45ae4cba00ddc5e4f78bdc5705224cced3794020c0858c3e86e602112055aa5a14e3d80b217d261a5a1892230c4b44f1d1e6f449998903be5d971a4a0b8e5d1cb5eefe9c575b122a66b798eb55deceb711e4f31645c424e1d8bdea07ba8c5608ed2d8278d66053e9e13c951b4695d48383170ec37c0ed277959f4ece6f606c8d13445af08fea8b1e1e8e532f45e4c5b5cf96e2c35949331e211bd01c942d296bf30dd6244e215ec1f69968929ae974f1b5063de2bd7b7531a9e39ebbf798f7bb9d47f907b154e46668818554ecdaea29aa15000157e9e684cdef16982de1fed75b4e588a4943fe98cbcbb5919b503e51dcc17920e604b35d2310ef3e22288d52d58f62b7bdf62a050060be3ab7b71e3b2b080de1cae7127f9ee6cb0aee5a4a9bc463be3876b9a5e80f8951cf836e1b9324273409884e28d34f2096d0936c3a907e24f797e8fee78474789adfd5950633035391235b1f3f5ce65dd6ff348801707f4a2fb9f9b2dac4bcf45910ec1747539755b00b8588e51a2a7b496ea97b89b227fa1dc3ba442de950e53018f5cf1b5ad00def8c570efc28b7a671ac67da3b8751d0c664b25e57f2d97bc090f67d4a589182e1be8aff2ad6398668efa2d64c84e457caf130008382372e93497ac844fe47eb5e39fd951fc6ff5824400000000000000000000000000000000000000000002000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r2}, 0x10) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r4, r3, 0x0, 0xf, &(0x7f00000001c0)='\x00'}, 0x11) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)=r2}, 0x20) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004081) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000000c0)=r8, 0x4) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x2, &(0x7f0000000880)=@raw=[@map_idx={0x18, 0x5, 0x5, 0x0, 0x3}], &(0x7f0000000900)='GPL\x00', 0x8, 0xd7, &(0x7f0000000940)=""/215, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x1, 0xe, 0x1088e765}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff4}, 0x90) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x2, 0x15, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x64c}, [@ldst={0x2, 0x1, 0x4, 0xb, 0x4, 0xffffffffffffffff, 0xffffffffffffffe4}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000740)='syzkaller\x00', 0x6, 0xb4, &(0x7f0000000780)=""/180, 0x40e00, 0x23, '\x00', 0x0, 0x9, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x1, 0x9, 0x1, 0x6}, 0x10, 0xffffffffffffffff, r9, 0x6, &(0x7f0000000b40)=[r10], &(0x7f0000000b80)=[{0x5, 0x4, 0xf, 0xa}, {0x4, 0x1, 0xf, 0x5}, {0x0, 0x5, 0x9, 0x7}, {0x3, 0x3, 0x5, 0x5}, {0x2, 0x1, 0xe, 0x4}, {0x0, 0x5, 0xf, 0x2}], 0x10, 0x100}, 0x90) r11 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r11, &(0x7f0000000000)={&(0x7f0000000080)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e23, 0x2000}}, 0x80, 0x0}, 0x1) 1m7.908981559s ago: executing program 2 (id=1852): socketpair(0x1e, 0x5, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000feff000095000000000000009115d4a6ea50d6c5161d58e6cad9e2c8bcd605cd8a945115754439028af12cbbdcc5b85af53d96a4c8a7dc0d68815b62a30600136cfad41b05860b8b8acba849688c5fd97face1d3d82a79ea9a52598f1c3533ea544105265a65374400000000000000000000000000004ad1a2ba0ff1eb2af2a31d1e7c82857c373f3866bb2b4dd8178c09ea10b45ae4cba00ddc5e4f78bdc5705224cced3794020c0858c3e86e602112055aa5a14e3d80b217d261a5a1892230c4b44f1d1e6f449998903be5d971a4a0b8e5d1cb5eefe9c575b122a66b798eb55deceb711e4f31645c424e1d8bdea07ba8c5608ed2d8278d66053e9e13c951b4695d48383170ec37c0ed277959f4ece6f606c8d13445af08fea8b1e1e8e532f45e4c5b5cf96e2c35949331e211bd01c942d296bf30dd6244e215ec1f69968929ae974f1b5063de2bd7b7531a9e39ebbf798f7bb9d47f907b154e46668818554ecdaea29aa15000157e9e684cdef16982de1fed75b4e588a4943fe98cbcbb5919b503e51dcc17920e604b35d2310ef3e22288d52d58f62b7bdf62a050060be3ab7b71e3b2b080de1cae7127f9ee6cb0aee5a4a9bc463be3876b9a5e80f8951cf836e1b9324273409884e28d34f2096d0936c3a907e24f797e8fee78474789adfd5950633035391235b1f3f5ce65dd6ff348801707f4a2fb9f9b2dac4bcf45910ec1747539755b00b8588e51a2a7b496ea97b89b227fa1dc3ba442de950e53018f5cf1b5ad00def8c570efc28b7a671ac67da3b8751d0c664b25e57f2d97bc090f67d4a589182e1be8aff2ad6398668efa2d64c84e457caf130008382372e93497ac844fe47eb5e39fd951fc6ff5824400000000000000000000000000000000000000000002000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r2}, 0x10) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r4, r3, 0x0, 0xf, &(0x7f00000001c0)='\x00'}, 0x11) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)=r2}, 0x20) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004081) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000000c0)=r8, 0x4) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x2, &(0x7f0000000880)=@raw=[@map_idx={0x18, 0x5, 0x5, 0x0, 0x3}], &(0x7f0000000900)='GPL\x00', 0x8, 0xd7, &(0x7f0000000940)=""/215, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x1, 0xe, 0x1088e765}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff4}, 0x90) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x2, 0x15, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x64c}, [@ldst={0x2, 0x1, 0x4, 0xb, 0x4, 0xffffffffffffffff, 0xffffffffffffffe4}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000740)='syzkaller\x00', 0x6, 0xb4, &(0x7f0000000780)=""/180, 0x40e00, 0x23, '\x00', 0x0, 0x9, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x1, 0x9, 0x1, 0x6}, 0x10, 0xffffffffffffffff, r9, 0x6, &(0x7f0000000b40)=[r10], &(0x7f0000000b80)=[{0x5, 0x4, 0xf, 0xa}, {0x4, 0x1, 0xf, 0x5}, {0x0, 0x5, 0x9, 0x7}, {0x3, 0x3, 0x5, 0x5}, {0x2, 0x1, 0xe, 0x4}, {0x0, 0x5, 0xf, 0x2}], 0x10, 0x100}, 0x90) r11 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r11, &(0x7f0000000000)={&(0x7f0000000080)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e23, 0x2000}}, 0x80, 0x0}, 0x1) 53.665336692s ago: executing program 2 (id=1852): socketpair(0x1e, 0x5, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00'}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r2}, 0x10) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r4, r3, 0x0, 0xf, &(0x7f00000001c0)='\x00'}, 0x11) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)=r2}, 0x20) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004081) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000000c0)=r8, 0x4) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x2, &(0x7f0000000880)=@raw=[@map_idx={0x18, 0x5, 0x5, 0x0, 0x3}], &(0x7f0000000900)='GPL\x00', 0x8, 0xd7, &(0x7f0000000940)=""/215, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x1, 0xe, 0x1088e765}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff4}, 0x90) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x2, 0x15, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x64c}, [@ldst={0x2, 0x1, 0x4, 0xb, 0x4, 0xffffffffffffffff, 0xffffffffffffffe4}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000740)='syzkaller\x00', 0x6, 0xb4, &(0x7f0000000780)=""/180, 0x40e00, 0x23, '\x00', 0x0, 0x9, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x1, 0x9, 0x1, 0x6}, 0x10, 0xffffffffffffffff, r9, 0x6, &(0x7f0000000b40)=[r10], &(0x7f0000000b80)=[{0x5, 0x4, 0xf, 0xa}, {0x4, 0x1, 0xf, 0x5}, {0x0, 0x5, 0x9, 0x7}, {0x3, 0x3, 0x5, 0x5}, {0x2, 0x1, 0xe, 0x4}, {0x0, 0x5, 0xf, 0x2}], 0x10, 0x100}, 0x90) r11 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r11, &(0x7f0000000000)={&(0x7f0000000080)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e23, 0x2000}}, 0x80, 0x0}, 0x1) 38.833513702s ago: executing program 2 (id=1852): socketpair(0x1e, 0x5, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00'}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r2}, 0x10) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r4, r3, 0x0, 0xf, &(0x7f00000001c0)='\x00'}, 0x11) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)=r2}, 0x20) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004081) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000000c0)=r8, 0x4) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x2, &(0x7f0000000880)=@raw=[@map_idx={0x18, 0x5, 0x5, 0x0, 0x3}], &(0x7f0000000900)='GPL\x00', 0x8, 0xd7, &(0x7f0000000940)=""/215, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x1, 0xe, 0x1088e765}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff4}, 0x90) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x2, 0x15, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x64c}, [@ldst={0x2, 0x1, 0x4, 0xb, 0x4, 0xffffffffffffffff, 0xffffffffffffffe4}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000740)='syzkaller\x00', 0x6, 0xb4, &(0x7f0000000780)=""/180, 0x40e00, 0x23, '\x00', 0x0, 0x9, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x1, 0x9, 0x1, 0x6}, 0x10, 0xffffffffffffffff, r9, 0x6, &(0x7f0000000b40)=[r10], &(0x7f0000000b80)=[{0x5, 0x4, 0xf, 0xa}, {0x4, 0x1, 0xf, 0x5}, {0x0, 0x5, 0x9, 0x7}, {0x3, 0x3, 0x5, 0x5}, {0x2, 0x1, 0xe, 0x4}, {0x0, 0x5, 0xf, 0x2}], 0x10, 0x100}, 0x90) r11 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r11, &(0x7f0000000000)={&(0x7f0000000080)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e23, 0x2000}}, 0x80, 0x0}, 0x1) 19.794570575s ago: executing program 2 (id=1852): socketpair(0x1e, 0x5, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000feff000095000000000000009115d4a6ea50d6c5161d58e6cad9e2c8bcd605cd8a945115754439028af12cbbdcc5b85af53d96a4c8a7dc0d68815b62a30600136cfad41b05860b8b8acba849688c5fd97face1d3d82a79ea9a52598f1c3533ea544105265a65374400000000000000000000000000004ad1a2ba0ff1eb2af2a31d1e7c82857c373f3866bb2b4dd8178c09ea10b45ae4cba00ddc5e4f78bdc5705224cced3794020c0858c3e86e602112055aa5a14e3d80b217d261a5a1892230c4b44f1d1e6f449998903be5d971a4a0b8e5d1cb5eefe9c575b122a66b798eb55deceb711e4f31645c424e1d8bdea07ba8c5608ed2d8278d66053e9e13c951b4695d48383170ec37c0ed277959f4ece6f606c8d13445af08fea8b1e1e8e532f45e4c5b5cf96e2c35949331e211bd01c942d296bf30dd6244e215ec1f69968929ae974f1b5063de2bd7b7531a9e39ebbf798f7bb9d47f907b154e46668818554ecdaea29aa15000157e9e684cdef16982de1fed75b4e588a4943fe98cbcbb5919b503e51dcc17920e604b35d2310ef3e22288d52d58f62b7bdf62a050060be3ab7b71e3b2b080de1cae7127f9ee6cb0aee5a4a9bc463be3876b9a5e80f8951cf836e1b9324273409884e28d34f2096d0936c3a907e24f797e8fee78474789adfd5950633035391235b1f3f5ce65dd6ff348801707f4a2fb9f9b2dac4bcf45910ec1747539755b00b8588e51a2a7b496ea97b89b227fa1dc3ba442de950e53018f5cf1b5ad00def8c570efc28b7a671ac67da3b8751d0c664b25e57f2d97bc090f67d4a589182e1be8aff2ad6398668efa2d64c84e457caf130008382372e93497ac844fe47eb5e39fd951fc6ff5824400000000000000000000000000000000000000000002000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r2}, 0x10) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r4, r3, 0x0, 0xf, &(0x7f00000001c0)='\x00'}, 0x11) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)=r2}, 0x20) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004081) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000000c0)=r8, 0x4) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x2, &(0x7f0000000880)=@raw=[@map_idx={0x18, 0x5, 0x5, 0x0, 0x3}], &(0x7f0000000900)='GPL\x00', 0x8, 0xd7, &(0x7f0000000940)=""/215, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x1, 0xe, 0x1088e765}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff4}, 0x90) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x2, 0x15, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x64c}, [@ldst={0x2, 0x1, 0x4, 0xb, 0x4, 0xffffffffffffffff, 0xffffffffffffffe4}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000740)='syzkaller\x00', 0x6, 0xb4, &(0x7f0000000780)=""/180, 0x40e00, 0x23, '\x00', 0x0, 0x9, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x1, 0x9, 0x1, 0x6}, 0x10, 0xffffffffffffffff, r9, 0x6, &(0x7f0000000b40)=[r10], &(0x7f0000000b80)=[{0x5, 0x4, 0xf, 0xa}, {0x4, 0x1, 0xf, 0x5}, {0x0, 0x5, 0x9, 0x7}, {0x3, 0x3, 0x5, 0x5}, {0x2, 0x1, 0xe, 0x4}, {0x0, 0x5, 0xf, 0x2}], 0x10, 0x100}, 0x90) r11 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r11, &(0x7f0000000000)={&(0x7f0000000080)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e23, 0x2000}}, 0x80, 0x0}, 0x1) 13.192694584s ago: executing program 4 (id=2640): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x90) 13.011076228s ago: executing program 4 (id=2642): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x80) 12.874497849s ago: executing program 4 (id=2643): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0xf}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27030202590400200000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33311e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0xfeb9}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9", 0x1a1}, {&(0x7f0000000540)="6fe4dd9eeb85271de1b87ef9440284", 0xf}], 0x4}, 0x200400c4) (fail_nth: 15) 12.415437667s ago: executing program 4 (id=2646): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x18, 0x0, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) close(0x4) 12.286345007s ago: executing program 4 (id=2647): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0xffffffffffffffff, 0x6, 0x8}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@generic={&(0x7f0000000040)='./file0\x00', r1}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x2, [{0x0, 0x5}, {}]}, @ptr]}}, &(0x7f0000000200)=""/224, 0x42, 0x89, 0x1}, 0x20) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@fwd={0x8}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @typedef={0x8, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f00000004c0)=""/204, 0x46, 0xcc, 0x1}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xffffffffffffffe0}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x78, 0x6}, 0x10000, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(r5, 0x5460, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x48}, {}]}) ioctl$SIOCSIFHWADDR(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0200002000"}) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00910069cdfb5cc682e02e0a"], 0xfe33) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4020000000000007911280000000000850000002e00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10}, 0x28) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000340)={'gretap0\x00', @random="eb45fffc573a"}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 11.76568195s ago: executing program 4 (id=2651): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x40, 0x0, 0x7, 0x0, 0x0, 0x802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8}, 0x11c88, 0x80007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup, r0, 0x12, 0x0, 0x0, @prog_id}, 0x20) (async) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36b31fa7e35ce95d04"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_clone(0x24084200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)={0x1be}, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000080), 0x12) 3.327895239s ago: executing program 3 (id=2697): bpf$PROG_LOAD(0x23, &(0x7f00000054c0)={0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x6002, 0x47c}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001b80)=ANY=[@ANYRESHEX=r1], 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x2, 0xa, 0x5, &(0x7f0000000080)) perf_event_open(&(0x7f0000000880)={0x0, 0x80, 0x0, 0xff, 0xfd, 0x0, 0x0, 0x8, 0x80100, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x8000000000, 0x2}, 0x4010, 0x7, 0xfffffffd, 0x1, 0x4, 0x0, 0x2, 0x0, 0x2, 0x0, 0x212e}, 0x0, 0x9, r0, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x7fe2, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x40, 0x0, 0xfc, 0x0, 0x0, 0x1, 0x210, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x219a, 0xfffffffffffffffc, 0x101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0xffffffffffffffff, 0xb7ffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000040)=""/99, 0x63}}, 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8923, &(0x7f0000000680)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00'}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r2}, 0x10) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r4, r3, 0x0, 0xf, &(0x7f00000001c0)='\x00'}, 0x11) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)=r2}, 0x20) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004081) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000000c0)=r8, 0x4) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x2, &(0x7f0000000880)=@raw=[@map_idx={0x18, 0x5, 0x5, 0x0, 0x3}], &(0x7f0000000900)='GPL\x00', 0x8, 0xd7, &(0x7f0000000940)=""/215, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x1, 0xe, 0x1088e765}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff4}, 0x90) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x2, 0x15, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x64c}, [@ldst={0x2, 0x1, 0x4, 0xb, 0x4, 0xffffffffffffffff, 0xffffffffffffffe4}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000740)='syzkaller\x00', 0x6, 0xb4, &(0x7f0000000780)=""/180, 0x40e00, 0x23, '\x00', 0x0, 0x9, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x1, 0x9, 0x1, 0x6}, 0x10, 0xffffffffffffffff, r9, 0x6, &(0x7f0000000b40)=[r10], &(0x7f0000000b80)=[{0x5, 0x4, 0xf, 0xa}, {0x4, 0x1, 0xf, 0x5}, {0x0, 0x5, 0x9, 0x7}, {0x3, 0x3, 0x5, 0x5}, {0x2, 0x1, 0xe, 0x4}, {0x0, 0x5, 0xf, 0x2}], 0x10, 0x100}, 0x90) r11 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r11, &(0x7f0000000000)={&(0x7f0000000080)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e23, 0x2000}}, 0x80, 0x0}, 0x1) 1.940142252s ago: executing program 0 (id=2698): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) close(0x4) 1.938990952s ago: executing program 3 (id=2699): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0xa, 0x300) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x38, 0x1, 0xfd, 0x6, 0x0, 0x0, 0x19406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x909e, 0x0, 0x0, 0x9, 0x7, 0x800000, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec472db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc626b424da1e8c825357861aa50054686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf4d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b0100000000000000b0255f347160ac83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237b0afd08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff7020000eea2ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072913152c845cf572cf39310dd31a538b69fc0add522a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8abafe4f0f6ea508000000a0c548552b571bed5647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e5251aae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b6588f6008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a061a1e7b5580001dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda3453602f5050e25dac5bb472e28db333bf00000fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bf8d9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420b75b6522c0e21c882c66f4f25ffb652020000000000004f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="131000002c0091bcd8b8fa9f53812e4ca67e9aa648"], 0xfe33) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xb80b}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x541b, 0x0) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000a80)="29449531f7297677606c4b1afae8d2d7ad78e208fc05af480190753da80b0b50320a56b8d9317ad50b6a160dc6598de41e205ddf12394965e13db957967cf9c7c97df948b915c44e3d5ca5b6529e3ad8837ace40adf58516c1ae3f52befb5fadfc5033e8f95bc7a575748cca1c7af909ea473efec8d18b00e945e560d4a4c5ed14ec9aed9369217398daad26a96c46c18df9ff59e9e0e1b6cb9e97067f8149f2a33ab5016e7a8a122e2758dfdd04927def494931b42a3da3451f5dddf8548abbe3839fea31a5514858cb1c762e1ed35f4d6d6cfcdb20c540b97b4300e91bfadd", 0xe0}], 0x1, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], 0x1220}, 0x80) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) perf_event_open(&(0x7f0000000040)={0x1, 0xa7, 0xa8, 0xf, 0x0, 0x0, 0x0, 0xffffffffffff8000, 0x2099, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x4, 0xdffffffffffff800}, 0x4000, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x86, 0x0, 0x58ef8352}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.702949811s ago: executing program 0 (id=2700): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030036000b03d25a80648c2594f90c24fc600400034002020000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.633018157s ago: executing program 3 (id=2702): socket$kcm(0x2b, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000d80)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x0, 0x4, 0x4, 0x4}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) ioctl$TUNGETIFF(r3, 0x800454d2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, &(0x7f0000000740)=""/235, &(0x7f0000000300)="305322a06cb17946a08504725d123a4e9ba5e67de97fc58d69764a781d5185bd12cc39ef5d65c20ee084434b062e1b59f32871e454d4cb9299a6c48a958100d6d63e722ec06446c312a22ad2f55755705f84d8ce5b78cf70a9a47f6e4f83be04bb27be9a28ff", &(0x7f0000000380)="d003259669bafb5896f3006313fa7275d2170a0ee4fe11d5b167d34a9219", 0x22b8, r2}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x5, 0x3, 0x10, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0xffffffff, 0x0, 0x5}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0xffff, 0x0, r0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r4, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000840)=[0x0, 0x0], &(0x7f0000000880)=[0x0], 0x0, 0xb1, &(0x7f00000008c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0x60, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x8, [@enum={0x4, 0x4, 0x0, 0x6, 0x4, [{0x2, 0x3}, {0x4, 0x8}, {0x4, 0x1200}, {0x8, 0x2}]}, @fwd={0x2}, @ptr={0xf, 0x0, 0x0, 0x2, 0x3}, @volatile={0x8}]}, {0x0, [0x0, 0x2e, 0x5f, 0x2e, 0x0, 0x0]}}, &(0x7f0000000b80)=""/210, 0x70, 0xd2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=@bloom_filter={0x1e, 0x200, 0xff, 0x2, 0x2, r5, 0x9, '\x00', r6, r7, 0x5, 0x0, 0x2, 0xb}, 0x48) 1.374930667s ago: executing program 1 (id=2703): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 1.355904399s ago: executing program 0 (id=2704): bpf$PROG_LOAD(0x23, &(0x7f00000054c0)={0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x6002, 0x47c}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001b80)=ANY=[@ANYRESHEX=r1], 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x2, 0xa, 0x5, &(0x7f0000000080)) perf_event_open(&(0x7f0000000880)={0x0, 0x80, 0x0, 0xff, 0xfd, 0x0, 0x0, 0x8, 0x80100, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x8000000000, 0x2}, 0x4010, 0x7, 0xfffffffd, 0x1, 0x4, 0x0, 0x2, 0x0, 0x2, 0x0, 0x212e}, 0x0, 0x9, r0, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x7fe2, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x40, 0x0, 0xfc, 0x0, 0x0, 0x1, 0x210, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x219a, 0xfffffffffffffffc, 0x101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0xffffffffffffffff, 0xb7ffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000040)=""/99, 0x63}}, 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8923, &(0x7f0000000680)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x12, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0xffffffffffffffff) (async) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r6}, 0x10) (async) close(0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff}, 0x48) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC=r5, @ANYRESHEX=r1, @ANYBLOB="000000000075a156b7842573938a52c3000000b7020000"], &(0x7f0000001dc0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2c, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) 1.164607845s ago: executing program 1 (id=2706): perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x80, 0x0, 0x409, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0xffffffff, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xfddfffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'virt_wifi0\x00', 0x11}) r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdac, 0x0, 0x0, 0x0}, 0x90) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="600000004e007f049e", 0x9}, {0x0}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="020000000010"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x5b, 0x0}, 0x100) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) close(0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r3, @ANYRES32, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x36, 0xffffffffffffffff, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x16, 0xc, &(0x7f0000000980)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES8=r1, @ANYBLOB="67a5075995e4bd35a18a82c082a11063f68164c4f755998abc948aebc6ec43f6d8e9920b9392087120a651e18c1c1ed075ab5d194ee302d94d8e6315e71f843c8408fcad82a60a0e8aec5b655ebd7369bdd4423dabb5f28960ffaf668b", @ANYBLOB="9b0f01529f2c1085076e03f2a44953d4228dd02ea6f69e93a85a4e9b609ebc918072b65489e09eb63d46b71e3c6a4e22af629e149c260a0de52488bf30351eff849a3587e40aa678b44fdc654aeb0b375be3e80168ec061dc3f9c18ad91a7196470689116dddb66e3efe7be33d87f21ec8674133855f64ff52b51712ff2f3f9a3d0a96214ba9d82d5b65d5a50fd640f11dc7e037a0280ffaa3afc541c61e9318e246f1aa0878011caab025429de2b1732a9e41098edef8ebdb1fd4387cc247c5139843de7b837600e63087d5a1baac747412d0dd"], &(0x7f0000000240)='GPL\x00', 0x10002, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x90) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8912, &(0x7f0000000040)={'wg2\x00', @random="095f5f2f9aa7"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000000), 0x0}, 0x20) r5 = socket$kcm(0xa, 0x5, 0x0) recvmsg(r5, &(0x7f0000002180)={0x0, 0x0, 0x0}, 0x2002) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 895.830457ms ago: executing program 3 (id=2707): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x45, 0x0, 0x3, 0xff9f0000}, {}, {}, {}, {0x6}]}) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x59, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0884765e0ffff00122c2f631177fbac14030a44079f03fe8000ff80000000000000000008ffff3a050b038da1880b251810a59d943be3f4aed50ea5a6b8686731cb89ef77523c899b699eeaa0ea", 0x0, 0xfe, 0x60000000, 0x7, 0x0, &(0x7f0000000380)="b101000000353b", &(0x7f0000000000), 0x0, 0x700}, 0x50) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0xfffffffb}, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890c, &(0x7f0000000100)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x23, 0x5, 0x0) recvmsg$kcm(r6, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000001c0)={r7, &(0x7f0000000100), 0x0}, 0x20) 848.58959ms ago: executing program 1 (id=2708): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000200000000000000000850000009e00"], &(0x7f0000000100)='GPL\x00', 0x2, 0xfe, &(0x7f00000003c0)=""/254}, 0x90) (async, rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x5, 0x0, 0x0}, 0x90) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000000)={'virt_wifi0\x00', @random="00ffffff8d0a"}) socketpair(0xa, 0x0, 0x258, &(0x7f0000000040)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x19, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x80, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000080)="3a173357f297c605804ab3828443", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, r0, 0x7, r3, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 746.553499ms ago: executing program 0 (id=2709): bpf$PROG_LOAD(0x23, &(0x7f00000054c0)={0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x6002, 0x47c}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001b80)=ANY=[@ANYRESHEX=r1], 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x2, 0xa, 0x5, &(0x7f0000000080)) perf_event_open(&(0x7f0000000880)={0x0, 0x80, 0x0, 0xff, 0xfd, 0x0, 0x0, 0x8, 0x80100, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x8000000000, 0x2}, 0x4010, 0x7, 0xfffffffd, 0x1, 0x4, 0x0, 0x2, 0x0, 0x2, 0x0, 0x212e}, 0x0, 0x9, r0, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x7fe2, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x40, 0x0, 0xfc, 0x0, 0x0, 0x1, 0x210, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x219a, 0xfffffffffffffffc, 0x101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0xffffffffffffffff, 0xb7ffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000040)=""/99, 0x63}}, 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8923, &(0x7f0000000680)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5 [ 262.564913][ T9812] dump_stack_lvl+0x1e3/0x2d0 [ 262.569609][ T9812] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 262.575263][ T9812] ? panic+0x860/0x860 [ 262.579349][ T9812] ? validate_chain+0x112/0x5930 [ 262.584301][ T9812] ? validate_chain+0x112/0x5930 [ 262.589259][ T9812] should_fail+0x38a/0x4c0 [ 262.593706][ T9812] _copy_from_user+0x2d/0x170 [ 262.598414][ T9812] __copy_msghdr_from_user+0x587/0x7c0 [ 262.603913][ T9812] ? __ia32_sys_shutdown+0x60/0x60 [ 262.609070][ T9812] ___sys_sendmsg+0x166/0x2e0 [ 262.613784][ T9812] ? __sys_sendmsg+0x260/0x260 [ 262.618613][ T9812] ? __fdget+0x191/0x220 [ 262.622881][ T9812] __se_sys_sendmsg+0x19a/0x260 [ 262.627759][ T9812] ? __x64_sys_sendmsg+0x80/0x80 [ 262.632824][ T9812] ? syscall_enter_from_user_mode+0x2e/0x240 [ 262.638826][ T9812] ? lockdep_hardirqs_on+0x94/0x130 [ 262.644042][ T9812] ? syscall_enter_from_user_mode+0x2e/0x240 [ 262.650041][ T9812] do_syscall_64+0x3b/0xb0 [ 262.654476][ T9812] ? clear_bhb_loop+0x15/0x70 [ 262.659167][ T9812] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 262.665106][ T9812] RIP: 0033:0x7f2138185e79 [ 262.669535][ T9812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.689150][ T9812] RSP: 002b:00007f2136602038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.697583][ T9812] RAX: ffffffffffffffda RBX: 00007f2138321f80 RCX: 00007f2138185e79 [ 262.705586][ T9812] RDX: 0000000000000000 RSI: 0000000020007940 RDI: 0000000000000007 [ 262.713569][ T9812] RBP: 00007f2136602090 R08: 0000000000000000 R09: 0000000000000000 [ 262.721683][ T9812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.729699][ T9812] R13: 0000000000000000 R14: 00007f2138321f80 R15: 00007ffd287f0948 [ 262.737709][ T9812] [ 263.133932][ T9825] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2035'. [ 263.147998][ T9823] device veth1_macvtap left promiscuous mode [ 263.279621][ T9634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.365963][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 263.383973][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 263.406532][ T9634] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.441370][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 263.457060][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 263.477230][ T3612] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.484374][ T3612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.786038][ T5415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 263.805408][ T5415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 263.816728][ T5415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 263.936688][ T5415] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.943951][ T5415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.013081][ T5415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 264.224548][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 264.295365][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 264.412841][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 264.687357][ T5427] Bluetooth: hci2: command 0x0419 tx timeout [ 264.724207][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 264.764623][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 264.857624][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 265.002534][ T9634] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 265.114189][ T9634] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 265.188954][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 265.202163][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 265.237616][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 265.295229][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 265.844333][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 265.869920][ T9866] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2045'. [ 265.884339][ T9866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2045'. [ 265.903169][ T9866] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2045'. [ 265.913458][ T9866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2045'. [ 265.930382][ T9866] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2045'. [ 265.940005][ T9866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2045'. [ 265.955921][ T9866] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2045'. [ 266.238289][ T9889] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.2055'. [ 266.262274][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 266.295330][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 266.351801][ T9889] netlink: zone id is out of range [ 266.372966][ T9634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.417781][ T9889] netlink: zone id is out of range [ 266.624626][ T9889] netlink: del zone limit has 4 unknown bytes [ 266.706899][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 266.739793][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 266.858192][ T1493] device hsr_slave_0 left promiscuous mode [ 266.894728][ T1493] device hsr_slave_1 left promiscuous mode [ 266.902354][ T1493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.933659][ T1493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.987524][ T1493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.013558][ T1493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.186865][ T1493] device bridge_slave_1 left promiscuous mode [ 267.193214][ T1493] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.240617][ T1493] device bridge_slave_0 left promiscuous mode [ 267.257184][ T1493] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.293523][ T1493] device veth1_macvtap left promiscuous mode [ 267.306784][ T1493] device veth0_macvtap left promiscuous mode [ 267.319883][ T1493] device veth1_vlan left promiscuous mode [ 267.330422][ T1493] device veth0_vlan left promiscuous mode [ 267.806091][ T1493] team0 (unregistering): Port device team_slave_1 removed [ 267.852810][ T1493] team0 (unregistering): Port device team_slave_0 removed [ 267.870035][ T1493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.884113][ T5427] Bluetooth: hci1: command 0x0406 tx timeout [ 267.891345][ T1493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.966969][ T1493] bond0 (unregistering): Released all slaves [ 268.120138][ T5427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 268.138538][ T5427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 268.157838][ T9634] device veth0_vlan entered promiscuous mode [ 268.194098][ T5473] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 268.202111][ T5473] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 268.248073][ T9634] device veth1_vlan entered promiscuous mode [ 268.372230][ T5427] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 268.382387][ T5427] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 268.392418][ T5427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 268.401983][ T5427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 268.411670][ T9927] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.425122][ T9927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.515760][ T9927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.559439][ T9936] netlink: 131088 bytes leftover after parsing attributes in process `syz.1.2067'. [ 268.574427][ T9927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.816323][ T9927] batman_adv: batadv0: Removing interface: virt_wifi0 [ 268.979560][ T9634] device veth0_macvtap entered promiscuous mode [ 269.019494][ T9634] device veth1_macvtap entered promiscuous mode [ 269.081111][ T5473] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 269.109489][ T5473] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 269.208836][ T9634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.260065][ T9948] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2071'. [ 269.278274][ T9634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.284160][ T9952] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2070'. [ 269.292254][ T9634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.315930][ T9952] netlink: zone id is out of range [ 269.318562][ T9948] netlink: zone id is out of range [ 269.325943][ T9952] netlink: zone id is out of range [ 269.331029][ T9634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.350439][ T9634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.361386][ T9634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.371469][ T9948] netlink: zone id is out of range [ 269.377401][ T9952] netlink: del zone limit has 4 unknown bytes [ 269.391754][ T9948] netlink: del zone limit has 4 unknown bytes [ 269.407475][ T9634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.426346][ T9634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.457553][ T9634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.473431][ T9634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.492301][ T9634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.513098][ T9634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.548727][ T9634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.559432][ T9634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.570413][ T9634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.580334][ T9634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.590830][ T9634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.603175][ T9634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.623173][ T5424] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 269.633309][ T5424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 269.682646][ T5424] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 269.713200][ T5424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 269.729190][ T9634] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.738985][ T9634] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.749021][ T9634] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.757893][ T9634] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.769535][ T9957] netlink: 'syz.1.2072': attribute type 21 has an invalid length. [ 269.815182][ T9957] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2072'. [ 270.062262][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.084262][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.107810][ T9976] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2079'. [ 270.118038][ T5427] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 270.134088][ T9976] netlink: zone id is out of range [ 270.221827][ T4731] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.363521][ T4731] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.381760][ T5473] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 270.431355][ T9983] netlink: 1703 bytes leftover after parsing attributes in process `syz.0.2082'. [ 270.959394][ T4731] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 270.964742][ T9996] sctp: [Deprecated]: syz.0.2085 (pid 9996) Use of int in maxseg socket option. [ 270.964742][ T9996] Use struct sctp_assoc_value instead [ 271.370336][T10004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.434685][T10004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.503754][T10004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.572600][T10004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.619826][T10011] netlink: 'syz.3.2088': attribute type 6 has an invalid length. [ 271.674586][T10011] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2088'. [ 272.501334][T10030] netlink: 17251 bytes leftover after parsing attributes in process `syz.3.2096'. [ 272.709381][T10008] chnl_net:caif_netlink_parms(): no params data found [ 273.158392][T10008] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.182132][T10008] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.267663][T10008] device bridge_slave_0 entered promiscuous mode [ 273.316384][T10008] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.323477][T10008] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.433856][T10008] device bridge_slave_1 entered promiscuous mode [ 273.531499][T10082] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2110'. [ 273.550684][T10008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.571999][T10082] net_ratelimit: 2 callbacks suppressed [ 273.572022][T10082] netlink: zone id is out of range [ 273.594564][T10008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.610210][T10082] netlink: zone id is out of range [ 273.646644][ T1075] Bluetooth: hci2: command 0x0409 tx timeout [ 273.655196][T10082] netlink: del zone limit has 4 unknown bytes [ 273.736267][T10008] team0: Port device team_slave_0 added [ 273.752996][T10008] team0: Port device team_slave_1 added [ 273.773182][T10086] netlink: 'syz.4.2112': attribute type 21 has an invalid length. [ 273.800341][T10086] netlink: 'syz.4.2112': attribute type 6 has an invalid length. [ 273.826293][T10086] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2112'. [ 273.962565][T10008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.974523][T10008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.074020][T10008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.106609][T10008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.115104][T10008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.183967][T10008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.476041][T10106] netlink: 'syz.0.2120': attribute type 10 has an invalid length. [ 274.588306][T10110] netlink: 1703 bytes leftover after parsing attributes in process `syz.3.2122'. [ 274.643215][T10106] team0: Device ipvlan1 failed to register rx_handler [ 274.793249][T10008] device hsr_slave_0 entered promiscuous mode [ 274.810275][T10008] device hsr_slave_1 entered promiscuous mode [ 274.826788][T10008] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.846063][T10008] Cannot create hsr debugfs directory [ 274.959455][T10125] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.2124'. [ 274.973874][T10125] netlink: zone id is out of range [ 274.985049][T10106] syz.0.2120 (10106) used greatest stack depth: 18048 bytes left [ 275.003967][T10125] netlink: zone id is out of range [ 275.018869][T10125] netlink: del zone limit has 4 unknown bytes [ 275.598552][T10008] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.671764][T10152] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2135'. [ 275.731540][T10152] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2135'. [ 275.772438][ T1075] Bluetooth: hci2: command 0x041b tx timeout [ 275.813403][T10158] netlink: 1703 bytes leftover after parsing attributes in process `syz.3.2137'. [ 275.832357][T10008] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.864027][T10156] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2135'. [ 275.889061][T10162] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2135'. [ 275.958961][T10152] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2135'. [ 276.029673][T10167] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.2138'. [ 276.066800][T10008] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.069891][T10167] netlink: zone id is out of range [ 276.106959][T10167] netlink: zone id is out of range [ 276.168380][T10167] netlink: del zone limit has 4 unknown bytes [ 276.202108][T10008] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.669790][T10188] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 276.704619][T10008] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 276.718857][T10192] netlink: 'syz.3.2147': attribute type 27 has an invalid length. [ 276.754985][T10008] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 276.788355][T10008] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 276.831720][T10008] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 277.310076][T10008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.364724][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 277.373589][T10215] FAULT_INJECTION: forcing a failure. [ 277.373589][T10215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.404488][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 277.416457][T10008] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.462346][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 277.474487][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 277.504091][T10215] CPU: 0 PID: 10215 Comm: syz.0.2157 Not tainted 5.15.164-syzkaller #0 [ 277.512378][T10215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 277.522445][T10215] Call Trace: [ 277.525729][T10215] [ 277.528656][T10215] dump_stack_lvl+0x1e3/0x2d0 [ 277.533335][T10215] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 277.538972][T10215] ? panic+0x860/0x860 [ 277.543047][T10215] ? snprintf+0xd6/0x120 [ 277.547293][T10215] should_fail+0x38a/0x4c0 [ 277.551717][T10215] _copy_to_user+0x2d/0x130 [ 277.556220][T10215] simple_read_from_buffer+0xc6/0x150 [ 277.561601][T10215] proc_fail_nth_read+0x1a3/0x210 [ 277.566637][T10215] ? proc_fault_inject_write+0x390/0x390 [ 277.572286][T10215] ? fsnotify_perm+0x442/0x590 [ 277.577144][T10215] ? proc_fault_inject_write+0x390/0x390 [ 277.582789][T10215] vfs_read+0x2fc/0xe10 [ 277.586965][T10215] ? kernel_read+0x1f0/0x1f0 [ 277.591567][T10215] ? __fget_files+0x413/0x480 [ 277.596269][T10215] ? mutex_lock_nested+0x17/0x20 [ 277.601206][T10215] ? __fdget_pos+0x2cb/0x380 [ 277.605793][T10215] ? ksys_read+0x77/0x2c0 [ 277.610126][T10215] ksys_read+0x1a2/0x2c0 [ 277.614371][T10215] ? print_irqtrace_events+0x210/0x210 [ 277.619834][T10215] ? vfs_write+0xe50/0xe50 [ 277.624256][T10215] ? syscall_enter_from_user_mode+0x2e/0x240 [ 277.630239][T10215] ? lockdep_hardirqs_on+0x94/0x130 [ 277.635436][T10215] ? syscall_enter_from_user_mode+0x2e/0x240 [ 277.641427][T10215] do_syscall_64+0x3b/0xb0 [ 277.645845][T10215] ? clear_bhb_loop+0x15/0x70 [ 277.650528][T10215] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 277.656421][T10215] RIP: 0033:0x7f9d254b18bc [ 277.660836][T10215] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 277.680438][T10215] RSP: 002b:00007f9d2392f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 277.688883][T10215] RAX: ffffffffffffffda RBX: 00007f9d2564ef80 RCX: 00007f9d254b18bc [ 277.696868][T10215] RDX: 000000000000000f RSI: 00007f9d2392f0a0 RDI: 0000000000000009 [ 277.704848][T10215] RBP: 00007f9d2392f090 R08: 0000000000000000 R09: 0000000000000000 [ 277.712820][T10215] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 277.720793][T10215] R13: 0000000000000000 R14: 00007f9d2564ef80 R15: 00007fff6e449ae8 [ 277.728788][T10215] [ 277.739650][ T3614] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.746784][ T3614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.774301][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 277.783590][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 277.802648][ T3614] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.809774][ T3614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.824151][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 277.860882][ T3649] Bluetooth: hci2: command 0x040f tx timeout [ 277.902947][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 277.913360][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 277.930919][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 277.965831][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 277.985034][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 278.002851][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 278.014634][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 278.027959][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 278.075563][T10008] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 278.132819][T10008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 278.192735][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 278.226731][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 278.249287][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 278.683996][ T154] wlan1: Trigger new scan to find an IBSS to join [ 278.838256][ T1493] device hsr_slave_0 left promiscuous mode [ 278.854083][ T1493] device hsr_slave_1 left promiscuous mode [ 278.873463][ T1493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.882630][ T1493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.897953][ T1493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.908434][ T1493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.921995][ T1493] device bridge_slave_1 left promiscuous mode [ 278.931824][ T1493] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.942262][ T1493] device bridge_slave_0 left promiscuous mode [ 278.949037][ T1493] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.971521][ T1493] device veth1_macvtap left promiscuous mode [ 278.978157][ T1493] device veth0_macvtap left promiscuous mode [ 278.984618][ T1493] device veth1_vlan left promiscuous mode [ 278.990522][ T1493] device veth0_vlan left promiscuous mode [ 279.293013][ T1493] team0 (unregistering): Port device team_slave_1 removed [ 279.334980][ T1493] team0 (unregistering): Port device team_slave_0 removed [ 279.357790][ T1493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.382402][ T1493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.535516][ T1493] bond0 (unregistering): Released all slaves [ 279.614033][T10257] __nla_validate_parse: 5 callbacks suppressed [ 279.614075][T10257] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2169'. [ 279.752942][T10008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.796754][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 279.827393][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 279.894512][ T3614] Bluetooth: hci2: command 0x0419 tx timeout [ 279.913142][T10273] netlink: 1703 bytes leftover after parsing attributes in process `syz.1.2173'. [ 279.926002][T10274] netlink: 'syz.4.2172': attribute type 27 has an invalid length. [ 280.003230][T10274] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.2172'. [ 280.021286][T10269] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 280.115300][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 280.142335][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 280.191581][T10008] device veth0_vlan entered promiscuous mode [ 280.297242][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 280.327196][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 280.366370][T10008] device veth1_vlan entered promiscuous mode [ 280.431092][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 280.448989][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 280.472032][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 280.490847][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 280.539611][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 280.554859][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 280.593294][T10008] device veth0_macvtap entered promiscuous mode [ 280.642291][T10008] device veth1_macvtap entered promiscuous mode [ 280.684056][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 280.692270][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 280.862249][T10008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.988506][T10008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.046652][T10008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.090130][T10008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.133207][T10008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.178180][T10315] netlink: 1703 bytes leftover after parsing attributes in process `syz.0.2192'. [ 281.190226][T10008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.228114][T10008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.270883][T10308] netlink: 'syz.1.2189': attribute type 10 has an invalid length. [ 281.311085][T10308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.365486][T10308] team0: Port device batadv0 added [ 281.379614][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 281.392246][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 281.414647][T10008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.432933][T10008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.461209][T10008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.473403][T10008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.494278][T10008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.510631][T10008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.540085][T10008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.564562][ T5424] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 281.604846][ T5424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 281.627960][T10008] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.663000][T10008] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.693503][T10008] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.713072][T10008] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.731151][ T9] wlan1: Trigger new scan to find an IBSS to join [ 282.036440][ T6861] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.059324][ T6861] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.121508][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 282.190114][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.199875][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.232843][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 282.523605][T10352] device batadv_slave_0 entered promiscuous mode [ 282.680639][T10358] netlink: 1703 bytes leftover after parsing attributes in process `syz.3.2206'. [ 282.703723][ T144] wlan1: Trigger new scan to find an IBSS to join [ 282.729374][T10364] netlink: 'syz.0.2208': attribute type 27 has an invalid length. [ 282.763154][T10361] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 282.810305][T10364] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.2208'. [ 282.943357][T10368] netlink: 'syz.1.2210': attribute type 11 has an invalid length. [ 283.082213][T10368] device wg2 entered promiscuous mode [ 284.169870][T10409] netlink: 1703 bytes leftover after parsing attributes in process `syz.1.2221'. [ 284.217382][T10412] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 284.711348][T10441] netlink: 17251 bytes leftover after parsing attributes in process `syz.1.2228'. [ 284.764409][ T6861] wlan1: Trigger new scan to find an IBSS to join [ 284.773814][ T4731] wlan1: Trigger new scan to find an IBSS to join [ 284.916694][T10404] chnl_net:caif_netlink_parms(): no params data found [ 285.370840][T10465] netlink: 'syz.0.2243': attribute type 11 has an invalid length. [ 285.507796][T10476] netlink: 4079 bytes leftover after parsing attributes in process `syz.4.2239'. [ 285.539328][T10404] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.547361][T10404] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.559581][T10404] device bridge_slave_0 entered promiscuous mode [ 285.574304][T10465] device wg2 entered promiscuous mode [ 285.608474][T10474] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 285.637912][T10404] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.647382][T10404] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.673560][T10404] device bridge_slave_1 entered promiscuous mode [ 285.751312][T10404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.777243][ T6861] wlan1: Creating new IBSS network, BSSID 00:0b:07:00:00:00 [ 285.799635][T10480] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2240'. [ 285.818049][T10404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.838947][T10480] netlink: zone id is out of range [ 285.873591][T10480] netlink: zone id is out of range [ 285.989447][T10480] netlink: del zone limit has 4 unknown bytes [ 286.021523][T10404] team0: Port device team_slave_0 added [ 286.043636][T10404] team0: Port device team_slave_1 added [ 286.124115][ T3649] Bluetooth: hci2: command 0x0409 tx timeout [ 286.228694][T10498] FAULT_INJECTION: forcing a failure. [ 286.228694][T10498] name failslab, interval 1, probability 0, space 0, times 0 [ 286.249717][T10404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.265586][T10404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.292989][T10498] CPU: 1 PID: 10498 Comm: syz.4.2247 Not tainted 5.15.164-syzkaller #0 [ 286.293019][T10498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 286.293031][T10498] Call Trace: [ 286.293043][T10498] [ 286.293052][T10498] dump_stack_lvl+0x1e3/0x2d0 [ 286.293082][T10498] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 286.293105][T10498] ? panic+0x860/0x860 [ 286.293136][T10498] ? aa_get_newest_label+0xf9/0x6c0 [ 286.293163][T10498] should_fail+0x38a/0x4c0 [ 286.293192][T10498] should_failslab+0x5/0x20 [ 286.293213][T10498] slab_pre_alloc_hook+0x53/0xc0 [ 286.293240][T10498] kmem_cache_alloc_trace+0x49/0x290 [ 286.293262][T10498] ? btf_new_fd+0x107/0x920 [ 286.293291][T10498] btf_new_fd+0x107/0x920 [ 286.293320][T10498] __sys_bpf+0x486/0x670 [ 286.338645][T10404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.341856][T10498] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 286.341910][T10498] ? syscall_enter_from_user_mode+0x2e/0x240 [ 286.391536][T10498] ? lockdep_hardirqs_on+0x94/0x130 [ 286.396767][T10498] __x64_sys_bpf+0x78/0x90 [ 286.401209][T10498] do_syscall_64+0x3b/0xb0 [ 286.405645][T10498] ? clear_bhb_loop+0x15/0x70 [ 286.410350][T10498] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 286.416259][T10498] RIP: 0033:0x7f2714ab9e79 [ 286.420690][T10498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.440310][T10498] RSP: 002b:00007f2712f36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 286.448748][T10498] RAX: ffffffffffffffda RBX: 00007f2714c55f80 RCX: 00007f2714ab9e79 [ 286.456736][T10498] RDX: 0000000000000020 RSI: 0000000020000280 RDI: 0000000000000012 [ 286.464721][T10498] RBP: 00007f2712f36090 R08: 0000000000000000 R09: 0000000000000000 [ 286.472824][T10498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.480811][T10498] R13: 0000000000000001 R14: 00007f2714c55f80 R15: 00007ffd7e87ebf8 [ 286.488818][T10498] [ 286.577997][ T1493] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.609584][T10404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.627088][T10404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.678651][T10404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.689544][ T4731] wlan1: Trigger new scan to find an IBSS to join [ 286.728793][ T1493] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.797222][T10404] device hsr_slave_0 entered promiscuous mode [ 286.807019][T10404] device hsr_slave_1 entered promiscuous mode [ 286.848170][ T1493] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.481536][ T1493] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.550184][T10522] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 287.729304][T10534] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2256'. [ 287.804357][T10534] netlink: zone id is out of range [ 287.809611][T10534] netlink: zone id is out of range [ 287.854381][T10534] netlink: del zone limit has 4 unknown bytes [ 288.214461][ T1075] Bluetooth: hci2: command 0x041b tx timeout [ 288.826730][T10560] delete_channel: no stack [ 289.009496][T10578] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 289.124402][T10589] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2273'. [ 289.134087][T10589] netlink: zone id is out of range [ 289.139218][T10589] netlink: zone id is out of range [ 289.148968][T10589] netlink: del zone limit has 4 unknown bytes [ 289.328625][T10404] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 289.441761][T10404] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 289.579788][T10404] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 289.712823][T10404] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 289.843555][ T6861] wlan1: Trigger new scan to find an IBSS to join [ 289.850528][ T6855] wlan1: Trigger new scan to find an IBSS to join [ 289.857162][ T4731] wlan1: Trigger new scan to find an IBSS to join [ 290.296302][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 290.581742][T10404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.661435][ T1493] device hsr_slave_0 left promiscuous mode [ 290.677929][ T1493] device hsr_slave_1 left promiscuous mode [ 290.704013][ T1493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.739171][ T1493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.788491][ T1493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.796012][ T1493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.817457][ T1493] device bridge_slave_1 left promiscuous mode [ 290.827843][ T1493] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.904302][ T1493] device bridge_slave_0 left promiscuous mode [ 290.913517][ T1493] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.915761][ T4731] wlan1: Creating new IBSS network, BSSID 32:3d:19:87:69:49 [ 290.934653][ T1493] device veth1_macvtap left promiscuous mode [ 290.940823][ T1493] device veth0_macvtap left promiscuous mode [ 290.971212][ T1493] device veth1_vlan left promiscuous mode [ 290.985650][ T1493] device veth0_vlan left promiscuous mode [ 291.586940][ T1493] team0 (unregistering): Port device team_slave_1 removed [ 291.638058][ T1493] team0 (unregistering): Port device team_slave_0 removed [ 291.661640][ T1493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.714130][ T1493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.730700][ T144] wlan1: Trigger new scan to find an IBSS to join [ 291.906693][ T1493] bond0 (unregistering): Released all slaves [ 292.043347][T10638] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 292.068408][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 292.103609][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 292.127544][T10404] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.176187][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 292.205237][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 292.212859][T10676] netlink: 1703 bytes leftover after parsing attributes in process `syz.0.2296'. [ 292.298796][ T3614] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.305918][ T3614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.314351][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 292.323211][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 292.332762][ T3614] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.339903][ T3614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.364117][ T1075] Bluetooth: hci2: command 0x0419 tx timeout [ 292.391062][T10679] netlink: 17251 bytes leftover after parsing attributes in process `syz.3.2299'. [ 292.412222][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 292.441232][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 292.473264][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 292.527613][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 292.550238][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 292.621142][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 292.691178][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 292.700670][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 292.720657][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 292.731399][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 292.787903][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 292.834351][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 292.858685][T10404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 293.050176][T10697] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 293.151767][T10702] netlink: 'syz.3.2307': attribute type 27 has an invalid length. [ 293.248932][T10702] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.2307'. [ 293.604117][T10716] netlink: 1703 bytes leftover after parsing attributes in process `syz.0.2311'. [ 293.643560][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 293.675469][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 293.722763][T10720] netlink: 17251 bytes leftover after parsing attributes in process `syz.4.2312'. [ 293.742116][ T6855] wlan1: Trigger new scan to find an IBSS to join [ 293.797520][T10404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.939744][T10724] netlink: 'syz.4.2314': attribute type 6 has an invalid length. [ 294.033842][T10724] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2314'. [ 294.166943][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 294.180686][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 294.212744][T10732] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 294.241320][T10734] netlink: 'syz.0.2316': attribute type 27 has an invalid length. [ 294.293826][T10734] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.2316'. [ 294.332113][T10728] device syzkaller0 entered promiscuous mode [ 294.353302][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 294.380262][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 294.426290][T10404] device veth0_vlan entered promiscuous mode [ 294.570091][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 294.598465][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 294.668673][T10404] device veth1_vlan entered promiscuous mode [ 294.735179][T10742] FAULT_INJECTION: forcing a failure. [ 294.735179][T10742] name failslab, interval 1, probability 0, space 0, times 0 [ 294.757136][ T6855] wlan1: Creating new IBSS network, BSSID f2:0a:2c:64:3b:fe [ 294.781777][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 294.804925][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 294.838327][T10404] device veth0_macvtap entered promiscuous mode [ 294.874686][T10742] CPU: 1 PID: 10742 Comm: syz.3.2319 Not tainted 5.15.164-syzkaller #0 [ 294.883085][T10742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 294.893169][T10742] Call Trace: [ 294.896479][T10742] [ 294.899437][T10742] dump_stack_lvl+0x1e3/0x2d0 [ 294.904182][T10742] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 294.909849][T10742] ? panic+0x860/0x860 [ 294.913976][T10742] ? __might_sleep+0xc0/0xc0 [ 294.918634][T10742] should_fail+0x38a/0x4c0 [ 294.923110][T10742] should_failslab+0x5/0x20 [ 294.927642][T10742] slab_pre_alloc_hook+0x53/0xc0 [ 294.932624][T10742] ? skb_clone+0x1bb/0x350 [ 294.937080][T10742] kmem_cache_alloc+0x3f/0x280 [ 294.941944][T10742] skb_clone+0x1bb/0x350 [ 294.946329][T10742] pfkey_sendmsg+0x435/0xfc0 [ 294.951020][T10742] ? pfkey_release+0x330/0x330 [ 294.955834][T10742] ? aa_sk_perm+0x8fc/0xa30 [ 294.960416][T10742] ? aa_af_perm+0x350/0x350 [ 294.964965][T10742] ? migrate_enable+0x199/0x270 [ 294.969868][T10742] ? aa_sock_msg_perm+0x91/0x150 [ 294.974848][T10742] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 294.980167][T10742] ? security_socket_sendmsg+0x7d/0xa0 [ 294.985655][T10742] ? pfkey_release+0x330/0x330 [ 294.990469][T10742] ____sys_sendmsg+0x59e/0x8f0 [ 294.995275][T10742] ? iovec_from_user+0x300/0x390 [ 295.000288][T10742] ? __sys_sendmsg_sock+0x30/0x30 [ 295.005420][T10742] ___sys_sendmsg+0x252/0x2e0 [ 295.010164][T10742] ? __sys_sendmsg+0x260/0x260 [ 295.015163][T10742] ? __fdget+0x191/0x220 [ 295.019450][T10742] __se_sys_sendmsg+0x19a/0x260 [ 295.024369][T10742] ? __x64_sys_sendmsg+0x80/0x80 [ 295.029382][T10742] ? syscall_enter_from_user_mode+0x2e/0x240 [ 295.035405][T10742] ? lockdep_hardirqs_on+0x94/0x130 [ 295.040645][T10742] ? syscall_enter_from_user_mode+0x2e/0x240 [ 295.046670][T10742] do_syscall_64+0x3b/0xb0 [ 295.051115][T10742] ? clear_bhb_loop+0x15/0x70 [ 295.055834][T10742] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 295.061771][T10742] RIP: 0033:0x7fadc2ba9e79 [ 295.066218][T10742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.085858][T10742] RSP: 002b:00007fadc1026038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.094317][T10742] RAX: ffffffffffffffda RBX: 00007fadc2d45f80 RCX: 00007fadc2ba9e79 [ 295.102323][T10742] RDX: 0000000000000000 RSI: 0000000020003780 RDI: 0000000000000005 [ 295.110322][T10742] RBP: 00007fadc1026090 R08: 0000000000000000 R09: 0000000000000000 [ 295.118316][T10742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.126314][T10742] R13: 0000000000000000 R14: 00007fadc2d45f80 R15: 00007ffcb9d8c988 [ 295.134381][T10742] [ 295.166142][T10404] device veth1_macvtap entered promiscuous mode [ 295.305839][T10404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.345943][T10404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.387884][T10404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.424697][T10404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.456451][T10404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.495721][T10404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.534930][T10404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.564488][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 295.577314][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 295.600157][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 295.619819][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 295.646420][T10404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.667928][T10404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.689051][T10404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.713748][T10404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.724324][ T144] wlan1: Trigger new scan to find an IBSS to join [ 295.749387][T10404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.783822][T10404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.815259][T10404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.836796][ T5427] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 295.854607][ T5427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 295.866262][T10404] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.903784][T10404] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.912507][T10404] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.943754][T10404] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.146020][ T4731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.173951][ T4731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.216830][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 296.340987][T10766] netlink: 1703 bytes leftover after parsing attributes in process `syz.4.2325'. [ 296.415257][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.423383][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.484419][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 296.622038][T10772] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 296.675519][T10772] netlink: 'syz.4.2328': attribute type 27 has an invalid length. [ 296.733917][T10772] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.2328'. [ 296.774996][ T154] wlan1: Trigger new scan to find an IBSS to join [ 297.923054][T10796] FAULT_INJECTION: forcing a failure. [ 297.923054][T10796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.013929][T10796] CPU: 1 PID: 10796 Comm: syz.0.2335 Not tainted 5.15.164-syzkaller #0 [ 298.022219][T10796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 298.032283][T10796] Call Trace: [ 298.035569][T10796] [ 298.038502][T10796] dump_stack_lvl+0x1e3/0x2d0 [ 298.043190][T10796] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 298.048831][T10796] ? panic+0x860/0x860 [ 298.052917][T10796] ? snprintf+0xd6/0x120 [ 298.057170][T10796] should_fail+0x38a/0x4c0 [ 298.061600][T10796] _copy_to_user+0x2d/0x130 [ 298.066206][T10796] simple_read_from_buffer+0xc6/0x150 [ 298.071597][T10796] proc_fail_nth_read+0x1a3/0x210 [ 298.076635][T10796] ? proc_fault_inject_write+0x390/0x390 [ 298.082296][T10796] ? fsnotify_perm+0x442/0x590 [ 298.087076][T10796] ? proc_fault_inject_write+0x390/0x390 [ 298.092730][T10796] vfs_read+0x2fc/0xe10 [ 298.096909][T10796] ? kernel_read+0x1f0/0x1f0 [ 298.101542][T10796] ? __fget_files+0x413/0x480 [ 298.106247][T10796] ? mutex_lock_nested+0x17/0x20 [ 298.111190][T10796] ? __fdget_pos+0x2cb/0x380 [ 298.115789][T10796] ? ksys_read+0x77/0x2c0 [ 298.120328][T10796] ksys_read+0x1a2/0x2c0 [ 298.124585][T10796] ? print_irqtrace_events+0x210/0x210 [ 298.130055][T10796] ? vfs_write+0xe50/0xe50 [ 298.134486][T10796] ? syscall_enter_from_user_mode+0x2e/0x240 [ 298.140473][T10796] ? lockdep_hardirqs_on+0x94/0x130 [ 298.145685][T10796] ? syscall_enter_from_user_mode+0x2e/0x240 [ 298.151681][T10796] do_syscall_64+0x3b/0xb0 [ 298.156104][T10796] ? clear_bhb_loop+0x15/0x70 [ 298.160796][T10796] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 298.166708][T10796] RIP: 0033:0x7f9d254b18bc [ 298.171135][T10796] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 298.190744][T10796] RSP: 002b:00007f9d2392f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 298.199178][T10796] RAX: ffffffffffffffda RBX: 00007f9d2564ef80 RCX: 00007f9d254b18bc [ 298.207155][T10796] RDX: 000000000000000f RSI: 00007f9d2392f0a0 RDI: 0000000000000005 [ 298.215151][T10796] RBP: 00007f9d2392f090 R08: 0000000000000000 R09: 0000000000000000 [ 298.223131][T10796] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 298.231104][T10796] R13: 0000000000000000 R14: 00007f9d2564ef80 R15: 00007fff6e449ae8 [ 298.239125][T10796] [ 298.546343][T10801] netlink: 1703 bytes leftover after parsing attributes in process `syz.3.2339'. [ 298.764219][ T6835] wlan1: Trigger new scan to find an IBSS to join [ 298.877874][ T1493] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.088275][ T1493] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.138725][T10823] netlink: 'syz.4.2347': attribute type 27 has an invalid length. [ 299.183873][T10823] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.2347'. [ 299.256329][T10821] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 299.301096][T10626] delete_channel: no stack [ 299.381983][ T1493] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.523480][ T1493] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.638705][T10839] netlink: 1703 bytes leftover after parsing attributes in process `syz.3.2352'. [ 299.705784][T10842] sctp: [Deprecated]: syz.4.2353 (pid 10842) Use of struct sctp_assoc_value in delayed_ack socket option. [ 299.705784][T10842] Use struct sctp_sack_info instead [ 299.726563][ T9] wlan1: Trigger new scan to find an IBSS to join [ 299.828170][T10804] chnl_net:caif_netlink_parms(): no params data found [ 299.971322][T10850] A link change request failed with some changes committed already. Interface Y­4`Ò˜ may have been left with an inconsistent configuration, please check. [ 300.060909][T10852] A link change request failed with some changes committed already. Interface Y­4`Ò˜ may have been left with an inconsistent configuration, please check. [ 300.171256][T10862] netlink: 'syz.3.2358': attribute type 27 has an invalid length. [ 300.194371][T10862] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.2358'. [ 300.403954][T10859] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 300.654253][T10879] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2363'. [ 300.773941][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 300.799204][T10804] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.812045][T10804] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.853220][T10804] device bridge_slave_0 entered promiscuous mode [ 300.927797][T10804] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.949409][T10898] netlink: 1703 bytes leftover after parsing attributes in process `syz.0.2368'. [ 300.954010][T10804] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.003120][T10804] device bridge_slave_1 entered promiscuous mode [ 301.083293][T10804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.146080][T10804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.347298][T10804] team0: Port device team_slave_0 added [ 301.380916][T10804] team0: Port device team_slave_1 added [ 301.526066][T10804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.550315][T10804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.693232][T10804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.751406][T10804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.780458][T10804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.872494][T10804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.902396][T10939] netlink: 1703 bytes leftover after parsing attributes in process `syz.3.2380'. [ 301.978525][T10942] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.2382'. [ 302.052140][T10942] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 302.203140][T10804] device hsr_slave_0 entered promiscuous mode [ 302.234551][T10804] device hsr_slave_1 entered promiscuous mode [ 302.314224][T10804] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 302.333109][T10804] Cannot create hsr debugfs directory [ 302.446718][T10962] netlink: 'syz.0.2387': attribute type 7 has an invalid length. [ 302.559233][ T1493] device hsr_slave_0 left promiscuous mode [ 302.618428][ T1493] device hsr_slave_1 left promiscuous mode [ 302.648138][ T1493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.678075][ T1493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.698720][ T4731] wlan1: Trigger new scan to find an IBSS to join [ 302.705349][ T6835] wlan1: Creating new IBSS network, BSSID ae:db:8d:39:9e:1e [ 302.720060][ T1493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.799675][ T1493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.832464][ T1493] device bridge_slave_1 left promiscuous mode [ 302.850228][ T1493] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.850332][ T3572] Bluetooth: hci2: command 0x041b tx timeout [ 302.875819][ T1493] device bridge_slave_0 left promiscuous mode [ 302.882567][ T1493] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.989704][T10990] netlink: 1703 bytes leftover after parsing attributes in process `syz.1.2394'. [ 303.005487][ T1493] device veth1_macvtap left promiscuous mode [ 303.011579][ T1493] device veth0_macvtap left promiscuous mode [ 303.068079][ T1493] device veth1_vlan left promiscuous mode [ 303.087955][ T1493] device veth0_vlan left promiscuous mode [ 303.327389][ T1493] team0 (unregistering): Port device team_slave_1 removed [ 303.346659][ T1493] team0 (unregistering): Port device team_slave_0 removed [ 303.363414][ T1493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.380933][ T1493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.457795][ T1493] bond0 (unregistering): Released all slaves [ 303.539849][T10988] device bridge_slave_1 left promiscuous mode [ 303.583437][T10988] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.725091][ T9] wlan1: Trigger new scan to find an IBSS to join [ 303.757797][T10988] device bridge_slave_0 left promiscuous mode [ 303.764181][T10988] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.427692][T11031] netlink: 1703 bytes leftover after parsing attributes in process `syz.3.2406'. [ 304.461168][T11034] FAULT_INJECTION: forcing a failure. [ 304.461168][T11034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.514478][T11033] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.2407'. [ 304.575924][T11033] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 304.585833][T11034] CPU: 1 PID: 11034 Comm: syz.0.2408 Not tainted 5.15.164-syzkaller #0 [ 304.594115][T11034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 304.604186][T11034] Call Trace: [ 304.607483][T11034] [ 304.610428][T11034] dump_stack_lvl+0x1e3/0x2d0 [ 304.615141][T11034] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 304.620786][T11034] ? panic+0x860/0x860 [ 304.624876][T11034] ? validate_chain+0x112/0x5930 [ 304.629851][T11034] ? validate_chain+0x112/0x5930 [ 304.634797][T11034] should_fail+0x38a/0x4c0 [ 304.639260][T11034] _copy_from_user+0x2d/0x170 [ 304.643970][T11034] iovec_from_user+0x13b/0x390 [ 304.648760][T11034] __import_iovec+0x72/0x4b0 [ 304.653350][T11034] ? __ia32_sys_shutdown+0x60/0x60 [ 304.658464][T11034] import_iovec+0xe6/0x120 [ 304.662885][T11034] ___sys_sendmsg+0x215/0x2e0 [ 304.667577][T11034] ? __sys_sendmsg+0x260/0x260 [ 304.672374][T11034] ? __fdget+0x191/0x220 [ 304.676621][T11034] __se_sys_sendmsg+0x19a/0x260 [ 304.681477][T11034] ? __x64_sys_sendmsg+0x80/0x80 [ 304.686431][T11034] ? syscall_enter_from_user_mode+0x2e/0x240 [ 304.692446][T11034] ? lockdep_hardirqs_on+0x94/0x130 [ 304.697668][T11034] ? syscall_enter_from_user_mode+0x2e/0x240 [ 304.703670][T11034] do_syscall_64+0x3b/0xb0 [ 304.708109][T11034] ? clear_bhb_loop+0x15/0x70 [ 304.712808][T11034] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 304.718755][T11034] RIP: 0033:0x7f9d254b2e79 [ 304.723193][T11034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.742822][T11034] RSP: 002b:00007f9d2392f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 304.751266][T11034] RAX: ffffffffffffffda RBX: 00007f9d2564ef80 RCX: 00007f9d254b2e79 [ 304.759267][T11034] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 304.767260][T11034] RBP: 00007f9d2392f090 R08: 0000000000000000 R09: 0000000000000000 [ 304.775255][T11034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.783340][T11034] R13: 0000000000000000 R14: 00007f9d2564ef80 R15: 00007fff6e449ae8 [ 304.791436][T11034] [ 304.937758][ T3572] Bluetooth: hci2: command 0x040f tx timeout [ 305.225330][T10804] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 305.296825][T10804] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 305.397723][T10804] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 305.434724][T10804] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 305.512522][T11075] netlink: 1703 bytes leftover after parsing attributes in process `syz.4.2419'. [ 305.712712][T11081] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 305.726442][ T4731] wlan1: Trigger new scan to find an IBSS to join [ 305.748170][T11081] netlink: 'syz.1.2420': attribute type 27 has an invalid length. [ 305.812124][T11081] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.2420'. [ 305.900883][T11087] device syzkaller0 entered promiscuous mode [ 305.915204][T11090] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.2423'. [ 305.994567][T11090] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 306.003639][T10804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.209464][T10804] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.258292][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 306.278796][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 306.386084][T11106] netlink: 134780 bytes leftover after parsing attributes in process `syz.3.2426'. [ 306.407140][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 306.426543][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 306.477873][ T3614] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.485080][ T3614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.558063][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 306.600836][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 306.640141][ T3614] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.647370][ T3614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.698840][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 306.734650][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 306.756828][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 306.788473][T11127] netlink: 'syz.3.2427': attribute type 12 has an invalid length. [ 306.814129][T11127] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2427'. [ 306.849917][T11128] netlink: 'syz.1.2428': attribute type 21 has an invalid length. [ 306.890440][T11127] netlink: 'syz.3.2427': attribute type 29 has an invalid length. [ 306.892154][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 306.932478][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 306.943607][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 306.960332][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 306.989263][T11127] netlink: 'syz.3.2427': attribute type 29 has an invalid length. [ 307.014885][ T3614] Bluetooth: hci2: command 0x0419 tx timeout [ 307.059495][T10804] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 307.099835][T10804] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 307.146071][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 307.162518][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 307.176121][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 307.188321][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 307.199913][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 307.209897][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 307.731710][ T6861] wlan1: Trigger new scan to find an IBSS to join [ 307.731724][ T664] wlan1: Trigger new scan to find an IBSS to join [ 307.764379][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 307.792401][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 307.819439][T10804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.911961][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 307.934636][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 307.957549][T11173] netlink: 1703 bytes leftover after parsing attributes in process `syz.1.2432'. [ 307.997573][ T5450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 308.017587][ T5450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 308.037793][T10804] device veth0_vlan entered promiscuous mode [ 308.048119][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 308.058049][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 308.103936][T10804] device veth1_vlan entered promiscuous mode [ 308.182389][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 308.196770][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 308.221292][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 308.251176][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 308.282791][T10804] device veth0_macvtap entered promiscuous mode [ 308.302075][T10804] device veth1_macvtap entered promiscuous mode [ 308.380214][T10804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.411487][T10804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.432478][T10804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.453823][T10804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.473822][T10804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.505766][T10804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.526245][T10804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.545737][ T5450] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 308.556059][ T5450] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 308.574549][ T5450] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 308.599726][ T5450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 308.624351][T10804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.653328][T10804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.680804][T10804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.712025][T10804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.733216][T10804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.763842][T10804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.786823][T10804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.804032][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 308.820982][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 308.848855][T10804] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.866726][T10804] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.886013][T10804] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.905152][T10804] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.105711][ T6855] wlan1: Creating new IBSS network, BSSID 00:0b:07:00:00:00 [ 309.606024][ T6835] wlan1: Creating new IBSS network, BSSID 00:11:07:00:00:00 [ 309.851954][ T6835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.876136][ T6835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.947590][T11215] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 309.978720][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 310.001063][T11215] netlink: 'syz.4.2435': attribute type 27 has an invalid length. [ 310.031123][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.051538][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.094295][T11215] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.2435'. [ 310.106369][T11219] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 310.133877][ T5450] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 310.167000][T11219] netlink: 'syz.3.2437': attribute type 27 has an invalid length. [ 310.193281][T11219] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.2437'. [ 310.253518][T11222] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 310.322150][T11222] netlink: 'syz.0.2438': attribute type 27 has an invalid length. [ 310.367180][T11222] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.2438'. [ 310.762812][T11239] bridge0: port 3(hsr_slave_1) entered blocking state [ 310.783565][T11239] bridge0: port 3(hsr_slave_1) entered disabled state [ 311.482633][T11261] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2450'. [ 311.492380][T11261] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2450'. [ 311.542556][T11268] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2450'. [ 311.619698][T11261] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2450'. [ 311.729246][T11272] netlink: 'syz.0.2455': attribute type 6 has an invalid length. [ 311.737774][T11272] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2455'. [ 311.748315][T11274] netlink: 'syz.1.2454': attribute type 27 has an invalid length. [ 311.764446][T11274] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.2454'. [ 311.782677][T11270] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 312.032513][ T664] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.149797][T11282] Â: renamed from pim6reg1 [ 312.544122][ T664] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.601510][ T664] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.660723][ T664] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.684463][ T6835] wlan1: Trigger new scan to find an IBSS to join [ 312.690999][ T6835] wlan1: Trigger new scan to find an IBSS to join [ 312.696032][ T6855] wlan1: Trigger new scan to find an IBSS to join [ 312.891139][T11286] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 312.935909][T11296] netlink: 'syz.3.2462': attribute type 27 has an invalid length. [ 313.009812][T11296] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.2462'. [ 313.115901][T11298] FAULT_INJECTION: forcing a failure. [ 313.115901][T11298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.374030][T11298] CPU: 1 PID: 11298 Comm: syz.4.2464 Not tainted 5.15.164-syzkaller #0 [ 313.382417][T11298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 313.392508][T11298] Call Trace: [ 313.395801][T11298] [ 313.398744][T11298] dump_stack_lvl+0x1e3/0x2d0 [ 313.403467][T11298] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 313.409129][T11298] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 313.415334][T11298] should_fail+0x38a/0x4c0 [ 313.419792][T11298] _copy_from_user+0x2d/0x170 [ 313.424494][T11298] __copy_msghdr_from_user+0x587/0x7c0 [ 313.429981][T11298] ? perf_swevent_event+0xc9/0x550 [ 313.435120][T11298] ? __ia32_sys_shutdown+0x60/0x60 [ 313.440290][T11298] ___sys_sendmsg+0x166/0x2e0 [ 313.444996][T11298] ? __sys_sendmsg+0x260/0x260 [ 313.449831][T11298] ? __fdget+0x191/0x220 [ 313.454099][T11298] __se_sys_sendmsg+0x19a/0x260 [ 313.458977][T11298] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 313.465162][T11298] ? __x64_sys_sendmsg+0x80/0x80 [ 313.470143][T11298] ? syscall_enter_from_user_mode+0x37/0x240 [ 313.476152][T11298] ? syscall_enter_from_user_mode+0x2e/0x240 [ 313.482156][T11298] do_syscall_64+0x3b/0xb0 [ 313.486591][T11298] ? clear_bhb_loop+0x15/0x70 [ 313.491303][T11298] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 313.497219][T11298] RIP: 0033:0x7f2714ab9e79 [ 313.501661][T11298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.521285][T11298] RSP: 002b:00007f2712f36038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.529906][T11298] RAX: ffffffffffffffda RBX: 00007f2714c55f80 RCX: 00007f2714ab9e79 [ 313.537905][T11298] RDX: 0000000000000000 RSI: 0000000020007940 RDI: 0000000000000009 [ 313.545918][T11298] RBP: 00007f2712f36090 R08: 0000000000000000 R09: 0000000000000000 [ 313.553910][T11298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.561901][T11298] R13: 0000000000000000 R14: 00007f2714c55f80 R15: 00007ffd7e87ebf8 [ 313.570097][T11298] [ 313.715669][T11310] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 313.841973][T11310] netlink: 'syz.1.2466': attribute type 27 has an invalid length. [ 313.914698][T11319] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 313.992695][T11319] netlink: 'syz.0.2469': attribute type 27 has an invalid length. [ 314.775084][T11306] chnl_net:caif_netlink_parms(): no params data found [ 314.800169][T11366] openvswitch: netlink: Flow actions attr not present in new flow. [ 314.943714][T11371] netlink: 'syz.4.2487': attribute type 27 has an invalid length. [ 315.512855][T11370] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 315.756866][ T6835] wlan1: Trigger new scan to find an IBSS to join [ 315.805361][ T3649] Bluetooth: hci2: command 0x0409 tx timeout [ 315.837289][T11306] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.854310][T11306] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.910377][T11306] device bridge_slave_0 entered promiscuous mode [ 315.970201][ T664] device hsr_slave_0 left promiscuous mode [ 316.125657][ T664] device hsr_slave_1 left promiscuous mode [ 316.214356][ T664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.237264][ T664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.287363][ T664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.322377][ T664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.341691][ T664] device bridge_slave_1 left promiscuous mode [ 316.361398][ T664] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.437675][ T664] device bridge_slave_0 left promiscuous mode [ 316.448147][ T664] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.505429][ T664] device veth1_macvtap left promiscuous mode [ 316.526415][ T664] device veth0_macvtap left promiscuous mode [ 316.534831][T11437] netlink: 'syz.4.2503': attribute type 27 has an invalid length. [ 316.545713][T11437] __nla_validate_parse: 4 callbacks suppressed [ 316.545732][T11437] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.2503'. [ 316.564081][ T664] device veth1_vlan left promiscuous mode [ 316.570549][ T664] device veth0_vlan left promiscuous mode [ 316.684243][ T6835] wlan1: Trigger new scan to find an IBSS to join [ 317.010627][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.017056][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.724341][ T9] wlan1: Trigger new scan to find an IBSS to join [ 317.724645][ T6855] wlan1: Trigger new scan to find an IBSS to join [ 317.894817][ T3649] Bluetooth: hci2: command 0x041b tx timeout [ 317.955847][ T664] team0 (unregistering): Port device team_slave_1 removed [ 318.017761][ T664] team0 (unregistering): Port device team_slave_0 removed [ 318.089247][ T664] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.160425][ T664] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.351101][T11463] FAULT_INJECTION: forcing a failure. [ 318.351101][T11463] name failslab, interval 1, probability 0, space 0, times 0 [ 318.384345][T11463] CPU: 1 PID: 11463 Comm: syz.1.2513 Not tainted 5.15.164-syzkaller #0 [ 318.392648][T11463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 318.402725][T11463] Call Trace: [ 318.406043][T11463] [ 318.409004][T11463] dump_stack_lvl+0x1e3/0x2d0 [ 318.413731][T11463] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 318.419433][T11463] ? panic+0x860/0x860 [ 318.423568][T11463] ? __might_sleep+0xc0/0xc0 [ 318.428222][T11463] should_fail+0x38a/0x4c0 [ 318.432696][T11463] should_failslab+0x5/0x20 [ 318.437238][T11463] slab_pre_alloc_hook+0x53/0xc0 [ 318.442226][T11463] __kmalloc+0x6e/0x300 [ 318.446411][T11463] ? tomoyo_realpath_from_path+0xd8/0x5e0 [ 318.452187][T11463] tomoyo_realpath_from_path+0xd8/0x5e0 [ 318.457814][T11463] tomoyo_path_number_perm+0x225/0x810 [ 318.463372][T11463] ? __d_add+0x4ab/0x7f0 [ 318.467669][T11463] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 318.473177][T11463] ? read_lock_is_recursive+0x10/0x10 [ 318.478590][T11463] ? __d_add+0x4ab/0x7f0 [ 318.482977][T11463] ? d_splice_alias+0x10f/0x330 [ 318.487869][T11463] ? lookup_one_qstr_excl+0x125/0x240 [ 318.493301][T11463] tomoyo_path_mkdir+0xe3/0x120 [ 318.498207][T11463] ? tomoyo_path_unlink+0x100/0x100 [ 318.503632][T11463] ? kern_path_create+0x180/0x180 [ 318.508721][T11463] security_path_mkdir+0xdc/0x130 [ 318.513807][T11463] do_mkdirat+0x19f/0x520 [ 318.518184][T11463] ? vfs_mkdir+0x590/0x590 [ 318.522665][T11463] ? getname_flags+0x1ec/0x4e0 [ 318.527472][T11463] ? lockdep_hardirqs_on+0x94/0x130 [ 318.532741][T11463] __x64_sys_mkdir+0x6a/0x80 [ 318.537379][T11463] do_syscall_64+0x3b/0xb0 [ 318.541826][T11463] ? clear_bhb_loop+0x15/0x70 [ 318.546543][T11463] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 318.552466][T11463] RIP: 0033:0x7f2138185e79 [ 318.556916][T11463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.576552][T11463] RSP: 002b:00007f2136602038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 318.585272][T11463] RAX: ffffffffffffffda RBX: 00007f2138321f80 RCX: 00007f2138185e79 [ 318.593277][T11463] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 318.601277][T11463] RBP: 00007f2136602090 R08: 0000000000000000 R09: 0000000000000000 [ 318.609278][T11463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.617278][T11463] R13: 0000000000000000 R14: 00007f2138321f80 R15: 00007ffd287f0948 [ 318.625358][T11463] [ 318.682013][ T664] bond0 (unregistering): Released all slaves [ 318.712069][T11463] ERROR: Out of memory at tomoyo_realpath_from_path. [ 318.761924][T11306] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.773791][T11306] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.783027][T11306] device bridge_slave_1 entered promiscuous mode [ 318.828494][T11435] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 319.011294][T11306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.067193][T11306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.338169][T11306] team0: Port device team_slave_0 added [ 319.400238][T11306] team0: Port device team_slave_1 added [ 319.734078][ T6835] wlan1: Trigger new scan to find an IBSS to join [ 319.964500][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 319.999435][T11306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.013753][T11306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.049586][T11306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.121431][T11306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.153599][T11306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.252773][T11306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.662314][T11504] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2524'. [ 320.724857][ T4731] wlan1: Trigger new scan to find an IBSS to join [ 321.044710][T11306] device hsr_slave_0 entered promiscuous mode [ 321.077995][T11306] device hsr_slave_1 entered promiscuous mode [ 321.400690][T11516] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 321.430850][T11523] netlink: 'syz.0.2526': attribute type 27 has an invalid length. [ 321.430879][T11523] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.2526'. [ 321.677460][T11534] netlink: 'syz.3.2531': attribute type 29 has an invalid length. [ 321.737960][ T6835] wlan1: Trigger new scan to find an IBSS to join [ 321.803834][T11534] netlink: 'syz.3.2531': attribute type 29 has an invalid length. [ 321.813702][ T4731] wlan1: Creating new IBSS network, BSSID 1e:0b:1e:0f:2c:fd [ 321.890400][T11540] netlink: 'syz.3.2531': attribute type 10 has an invalid length. [ 321.926500][T11540] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2531'. [ 322.044112][ T1075] Bluetooth: hci2: command 0x0419 tx timeout [ 322.684033][ T6835] wlan1: Trigger new scan to find an IBSS to join [ 322.836120][T11565] netlink: 'syz.4.2536': attribute type 10 has an invalid length. [ 322.853692][ T9] wlan1: Creating new IBSS network, BSSID 00:0b:07:00:00:00 [ 322.953973][T11565] device macvlan0 entered promiscuous mode [ 323.015476][T11565] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 323.498003][T11603] netlink: 'syz.3.2543': attribute type 27 has an invalid length. [ 323.517939][T11603] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.2543'. [ 323.604660][T11599] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 323.725880][ T154] wlan1: Trigger new scan to find an IBSS to join [ 323.975778][T11621] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2545'. [ 324.176517][T11306] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 324.299109][T11306] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 324.343045][T11306] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 324.492936][T11306] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 325.054348][T11306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.110174][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 325.130823][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 325.160775][T11650] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2553'. [ 325.196345][T11653] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2552'. [ 325.307055][T11306] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.336741][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 325.355049][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 325.363575][ T5452] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.370759][ T5452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.454131][ T5450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 325.462387][ T5450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 325.494838][ T5450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 325.503347][ T5450] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.510497][ T5450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.571340][T11669] netlink: 'syz.3.2556': attribute type 27 has an invalid length. [ 325.579964][ T5450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 325.606972][ T5450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 325.615532][T11669] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.2556'. [ 325.638521][ T5450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 325.666886][ T5450] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 325.731579][ T4731] wlan1: Trigger new scan to find an IBSS to join [ 325.748749][T11667] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 325.783286][T11306] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 325.812538][T11306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 325.841903][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 325.852783][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 325.867111][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 325.879140][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 325.890980][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 325.902761][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 325.917436][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 325.944697][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 326.700341][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 326.729664][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 326.767347][T11306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.887683][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 326.900028][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 326.940703][ T6855] wlan1: Creating new IBSS network, BSSID 00:11:07:00:00:00 [ 326.980226][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 327.006642][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 327.053018][T11306] device veth0_vlan entered promiscuous mode [ 327.071804][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 327.086785][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 327.114168][T11306] device veth1_vlan entered promiscuous mode [ 327.180673][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 327.191360][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 327.210522][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 327.238707][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 327.272554][T11306] device veth0_macvtap entered promiscuous mode [ 327.317677][T11306] device veth1_macvtap entered promiscuous mode [ 327.391863][T11306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.435693][T11306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.483625][T11306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.521781][T11306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.552660][T11306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.585307][T11306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.605387][T11306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.643611][T11306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.681750][T11306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.694674][T11306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.705436][T11306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.730539][T11306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.751473][T11306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.763502][T11306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.805052][ T5450] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 327.813466][ T5450] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 327.862193][ T6855] wlan1: Trigger new scan to find an IBSS to join [ 327.876500][ T5450] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 327.897941][ T5450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 327.922117][ T5450] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 328.006636][ T5450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 328.026500][T11306] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.067716][T11306] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.077911][T11306] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.092729][T11306] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.355790][ T664] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.392058][ T664] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.447642][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 328.479957][ T6835] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.513525][ T6835] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.574365][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 328.735428][T11754] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 328.735440][T11758] netlink: 'syz.3.2575': attribute type 27 has an invalid length. [ 328.764317][ T4731] wlan1: Trigger new scan to find an IBSS to join [ 328.845604][T11758] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.2575'. [ 329.183564][T11775] netlink: 1703 bytes leftover after parsing attributes in process `syz.0.2579'. [ 329.971608][ T6835] wlan1: Creating new IBSS network, BSSID 6e:6c:cc:87:33:e8 [ 330.532371][T11829] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2588'. [ 330.778836][T11839] netlink: 1703 bytes leftover after parsing attributes in process `syz.4.2592'. [ 331.470551][ T1493] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.725835][ T664] wlan1: Trigger new scan to find an IBSS to join [ 332.158143][ T1493] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.359760][ T1493] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.461815][ T1493] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.638158][T11876] chnl_net:caif_netlink_parms(): no params data found [ 332.735488][T11897] netlink: 'syz.4.2603': attribute type 27 has an invalid length. [ 332.760771][T11897] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.2603'. [ 332.863483][T11896] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 332.883952][T11892] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.2602'. [ 333.157343][T11917] netlink: 'syz.3.2608': attribute type 46 has an invalid length. [ 333.198233][T11917] netlink: 'syz.3.2608': attribute type 46 has an invalid length. [ 333.344455][T11876] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.351568][T11876] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.390635][T11876] device bridge_slave_0 entered promiscuous mode [ 333.406780][T11876] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.445880][T11876] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.454550][T11876] device bridge_slave_1 entered promiscuous mode [ 333.600520][T11876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.722647][T11876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.851458][T11876] team0: Port device team_slave_0 added [ 333.888160][T11950] can: request_module (can-proto-3) failed. [ 333.933916][T11876] team0: Port device team_slave_1 added [ 334.098342][T11948] device syzkaller0 entered promiscuous mode [ 334.122590][T11876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.130069][ T1291] Bluetooth: hci2: command 0x0409 tx timeout [ 334.140179][T11876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.187058][T11876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.205757][T11876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.219997][T11876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.273797][T11876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.294769][T11961] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.2617'. [ 334.726628][ T4731] wlan1: Trigger new scan to find an IBSS to join [ 334.779099][ T664] wlan1: Trigger new scan to find an IBSS to join [ 334.913322][T11985] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.2623'. [ 334.950433][T11980] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 335.063595][T11876] device hsr_slave_0 entered promiscuous mode [ 335.089925][T11876] device hsr_slave_1 entered promiscuous mode [ 335.132895][T11876] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.153587][T11876] Cannot create hsr debugfs directory [ 335.166824][ T5452] Bluetooth: hci6: command 0x0409 tx timeout [ 335.202879][T11907] chnl_net:caif_netlink_parms(): no params data found [ 335.363945][T11999] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.371092][T11999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.378611][T11999] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.385729][T11999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.455383][T11999] device bridge0 entered promiscuous mode [ 335.786445][T12023] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.2629'. [ 335.853079][T12027] netlink: 'syz.0.2630': attribute type 3 has an invalid length. [ 335.868152][ T154] wlan1: Creating new IBSS network, BSSID 00:0b:07:00:00:00 [ 335.877338][T12027] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2630'. [ 335.956649][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 336.008821][ T1493] device hsr_slave_0 left promiscuous mode [ 336.063765][ T1493] device hsr_slave_1 left promiscuous mode [ 336.079092][ T1493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.103164][ T1493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.137489][ T1493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.174164][ T1493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.216415][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 336.232671][ T1493] device bridge_slave_1 left promiscuous mode [ 336.318924][ T1493] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.335752][ T1493] device bridge_slave_0 left promiscuous mode [ 336.352320][ T1493] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.372965][ T1493] device veth1_macvtap left promiscuous mode [ 336.382022][ T1493] device veth0_macvtap left promiscuous mode [ 336.396557][ T1493] device veth1_vlan left promiscuous mode [ 336.412683][ T1493] device veth0_vlan left promiscuous mode [ 336.649139][T12054] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.2638'. [ 336.764082][ T154] wlan1: Trigger new scan to find an IBSS to join [ 337.059399][ T1493] team0 (unregistering): Port device team_slave_1 removed [ 337.087172][ T1493] team0 (unregistering): Port device team_slave_0 removed [ 337.128712][ T1493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.174907][ T1493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.243955][ T5450] Bluetooth: hci6: command 0x041b tx timeout [ 337.385481][ T1493] bond0 (unregistering): Released all slaves [ 337.467177][T11907] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.474486][T11907] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.483639][T11907] device bridge_slave_0 entered promiscuous mode [ 337.534963][T12053] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 337.577198][T11907] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.614103][T11907] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.654378][T11907] device bridge_slave_1 entered promiscuous mode [ 337.789150][T11907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.907909][T12064] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.2641'. [ 337.925149][T11907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.955304][T12067] FAULT_INJECTION: forcing a failure. [ 337.955304][T12067] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 337.975014][T12067] CPU: 1 PID: 12067 Comm: syz.4.2643 Not tainted 5.15.164-syzkaller #0 [ 337.983297][T12067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 337.993371][T12067] Call Trace: [ 337.996653][T12067] [ 337.999581][T12067] dump_stack_lvl+0x1e3/0x2d0 [ 338.004265][T12067] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 338.009894][T12067] ? panic+0x860/0x860 [ 338.013964][T12067] ? __alloc_pages+0x334/0x700 [ 338.018728][T12067] should_fail+0x38a/0x4c0 [ 338.023144][T12067] prepare_alloc_pages+0x1db/0x5b0 [ 338.028258][T12067] __alloc_pages+0x14f/0x700 [ 338.032840][T12067] ? __kasan_kmalloc_large+0x8d/0xb0 [ 338.038120][T12067] ? __rmqueue_pcplist+0x2030/0x2030 [ 338.043404][T12067] ? __phys_addr+0xb6/0x170 [ 338.047904][T12067] ? alloc_pages+0x458/0x570 [ 338.052498][T12067] alloc_skb_with_frags+0x208/0x780 [ 338.057708][T12067] sock_alloc_send_pskb+0x915/0xa50 [ 338.062897][T12067] ? __might_fault+0xb4/0x110 [ 338.067584][T12067] ? sock_kzfree_s+0x50/0x50 [ 338.072169][T12067] ? reacquire_held_locks+0x660/0x660 [ 338.077542][T12067] packet_sendmsg+0x386a/0x5e90 [ 338.082395][T12067] ? aa_sk_perm+0xa30/0xa30 [ 338.086912][T12067] ? __might_sleep+0xc0/0xc0 [ 338.091515][T12067] ? aa_sk_perm+0x8fc/0xa30 [ 338.096016][T12067] ? packet_getsockopt+0xed0/0xed0 [ 338.101125][T12067] ? aa_sock_msg_perm+0x91/0x150 [ 338.106058][T12067] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 338.111337][T12067] ? security_socket_sendmsg+0x7d/0xa0 [ 338.116787][T12067] ? packet_getsockopt+0xed0/0xed0 [ 338.121892][T12067] ____sys_sendmsg+0x59e/0x8f0 [ 338.126653][T12067] ? iovec_from_user+0x300/0x390 [ 338.131594][T12067] ? __sys_sendmsg_sock+0x30/0x30 [ 338.136643][T12067] ___sys_sendmsg+0x252/0x2e0 [ 338.141324][T12067] ? __sys_sendmsg+0x260/0x260 [ 338.146112][T12067] ? __fdget+0x191/0x220 [ 338.150352][T12067] __se_sys_sendmsg+0x19a/0x260 [ 338.155197][T12067] ? __x64_sys_sendmsg+0x80/0x80 [ 338.160137][T12067] ? syscall_enter_from_user_mode+0x2e/0x240 [ 338.166112][T12067] ? lockdep_hardirqs_on+0x94/0x130 [ 338.171305][T12067] ? syscall_enter_from_user_mode+0x2e/0x240 [ 338.177283][T12067] do_syscall_64+0x3b/0xb0 [ 338.181710][T12067] ? clear_bhb_loop+0x15/0x70 [ 338.186384][T12067] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 338.192273][T12067] RIP: 0033:0x7f2714ab9e79 [ 338.196700][T12067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.216298][T12067] RSP: 002b:00007f2712f36038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 338.224707][T12067] RAX: ffffffffffffffda RBX: 00007f2714c55f80 RCX: 00007f2714ab9e79 [ 338.232694][T12067] RDX: 00000000200400c4 RSI: 0000000020000180 RDI: 0000000000000003 [ 338.240657][T12067] RBP: 00007f2712f36090 R08: 0000000000000000 R09: 0000000000000000 [ 338.248626][T12067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 338.256592][T12067] R13: 0000000000000000 R14: 00007f2714c55f80 R15: 00007ffd7e87ebf8 [ 338.264570][T12067] [ 338.284102][ T5448] Bluetooth: hci2: command 0x040f tx timeout [ 338.353454][T11907] team0: Port device team_slave_0 added [ 338.404951][T11907] team0: Port device team_slave_1 added [ 338.553903][T11907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.562541][T11907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.597322][T12091] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.2647'. [ 338.620337][T11907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.636457][T12093] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.2648'. [ 338.648509][T12072] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2645'. [ 338.660353][T12080] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 338.679622][T12083] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 338.822127][T11907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.838008][T11907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.911534][T11907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.110424][T11907] device hsr_slave_0 entered promiscuous mode [ 339.150098][T11907] device hsr_slave_1 entered promiscuous mode [ 339.318724][T12124] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.2653'. [ 339.342486][ T13] Bluetooth: hci6: command 0x040f tx timeout [ 339.502118][T12127] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.2654'. [ 339.526424][T11876] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 339.540295][T11876] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 339.569555][T12126] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 339.724947][ T144] wlan1: Trigger new scan to find an IBSS to join [ 339.757531][T11876] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 339.768611][T12129] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2655'. [ 339.847023][T11876] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 340.075256][T11907] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.306533][T11907] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.363866][ T5446] Bluetooth: hci2: command 0x0419 tx timeout [ 340.541905][T11907] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.608226][T12154] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 340.681397][T12154] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.2660'. [ 340.787289][ T664] wlan1: Trigger new scan to find an IBSS to join [ 340.817756][T11907] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.014218][T11876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.103876][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 341.114698][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 341.142985][T12173] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.2664'. [ 341.161866][T11876] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.251331][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 341.261477][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 341.288802][ T3649] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.295956][ T3649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.346229][T12183] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 341.383178][T12183] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.2666'. [ 341.432789][ T3572] Bluetooth: hci6: command 0x0419 tx timeout [ 341.439454][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 341.476157][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 341.655027][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 341.724115][ T144] wlan1: Trigger new scan to find an IBSS to join [ 341.784132][ T1075] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.791246][ T1075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.800135][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 341.809597][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 341.820476][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 341.841137][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 341.931964][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 341.952520][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 341.991242][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 342.012289][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 342.045728][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 342.086927][T11876] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 342.135976][T11876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 342.173308][ T5450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 342.194567][ T5450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 342.239366][T11907] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 342.276389][T11907] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 342.330488][T11907] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 342.394688][T11907] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 342.619166][T12217] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.2672'. [ 342.685682][T12213] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 342.857269][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 342.866990][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 342.965240][T11876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.116150][T11907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.123238][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 343.149961][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 343.285474][T11907] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.294621][T11876] device veth0_vlan entered promiscuous mode [ 343.331284][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 343.349750][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 343.388615][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 343.425460][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 343.479862][T11876] device veth1_vlan entered promiscuous mode [ 343.501356][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 343.540078][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 343.600990][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 343.644698][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 343.653450][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 343.724049][ T664] wlan1: Trigger new scan to find an IBSS to join [ 343.743188][ T3614] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.750388][ T3614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.842688][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 343.869736][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 343.901217][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 343.951402][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.958553][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.046471][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 344.064788][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 344.094862][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 344.200300][T12257] netlink: 'syz.3.2680': attribute type 12 has an invalid length. [ 344.252155][T12257] netlink: 14552 bytes leftover after parsing attributes in process `syz.3.2680'. [ 344.290206][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 344.304963][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 344.329710][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 344.355697][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 344.377041][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 344.400609][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 344.427757][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 344.484164][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 344.507638][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 344.531334][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 344.561457][T11876] device veth0_macvtap entered promiscuous mode [ 344.594316][T11907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 344.622514][T12263] netlink: 'syz.3.2680': attribute type 10 has an invalid length. [ 344.634917][T12263] device bridge_slave_1 left promiscuous mode [ 344.643026][T12263] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.657564][T12263] device bridge_slave_0 left promiscuous mode [ 344.669884][T12263] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.765745][ T664] wlan1: Trigger new scan to find an IBSS to join [ 344.791902][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 344.807735][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 344.833026][T11876] device veth1_macvtap entered promiscuous mode [ 344.938792][T11876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.010567][T11876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.021837][T11876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.038632][T11876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.049024][T11876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.067434][T11876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.111262][T11876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.211699][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 345.221926][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 345.254827][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 345.295907][T11876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.331258][T11876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.360040][T11876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.383373][T11876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.393989][T11876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.415377][T11876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.435215][T11876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.495334][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 345.516909][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 345.566822][T11907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.592687][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 345.614262][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 345.636624][T11876] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.669570][T11876] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.689155][T11876] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.724560][ T4731] wlan1: Trigger new scan to find an IBSS to join [ 345.739734][T11876] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.882351][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 345.904174][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 345.984121][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 345.992906][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 346.057857][T11907] device veth0_vlan entered promiscuous mode [ 346.087323][ T5446] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 346.104587][ T5446] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 346.132519][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.145231][T11907] device veth1_vlan entered promiscuous mode [ 346.166418][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.214167][ T5446] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 346.222387][ T5446] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 346.294836][ T5446] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 346.327625][ T4731] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.330566][T11907] device veth0_macvtap entered promiscuous mode [ 346.351180][ T4731] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.436605][ T5446] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 346.452543][ T5446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 346.492313][ T5446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 346.525074][ T5446] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 346.566058][T11907] device veth1_macvtap entered promiscuous mode [ 346.687591][T11907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.727488][T11907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.773868][T11907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.774202][ T4731] wlan1: Trigger new scan to find an IBSS to join [ 346.817465][T11907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.851454][T11907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.884266][T11907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.897214][T11907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.913131][T11907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.926708][T11907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.937210][ T664] wlan1: Creating new IBSS network, BSSID 00:11:07:00:00:00 [ 346.984240][ T5450] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 347.024969][ T5450] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 347.058915][ T5450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 347.095050][T11907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.150468][T11907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.184880][T11907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.253687][T11907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.275654][T11907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.292153][T11907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.305420][T11907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.334452][T11907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.352893][T11907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.534239][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 347.550605][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 347.567018][T12327] device sit0 entered promiscuous mode [ 347.802737][T11907] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.866741][T11907] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.894478][T11907] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.903317][T11907] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.967864][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.110304][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.195488][ T1493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.217173][ T1493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.238565][T12258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 348.258022][ T1493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.273880][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.286722][ T1493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.303187][T12258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 348.342124][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.909188][T12352] netlink: 1703 bytes leftover after parsing attributes in process `syz.3.2699'. [ 349.054767][T12358] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.2605'. [ 349.219048][T12353] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 349.724796][ T4731] wlan1: Trigger new scan to find an IBSS to join [ 350.541182][T12420] netlink: 1703 bytes leftover after parsing attributes in process `syz.1.2711'. [ 350.783434][ T1493] wlan1: Creating new IBSS network, BSSID 00:0b:07:00:00:00 [ 350.810455][T12429] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 350.823059][ T144] ------------[ cut here ]------------ [ 350.830159][ T144] WARNING: CPU: 1 PID: 144 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x42b/0x4b0 [ 350.892789][ T144] Modules linked in: [ 350.908382][ T144] CPU: 1 PID: 144 Comm: kworker/u4:1 Not tainted 5.15.164-syzkaller #0 [ 350.932557][T12429] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.2714'. [ 350.942029][T12371] chnl_net:caif_netlink_parms(): no params data found [ 350.997900][ T144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 351.034802][ T9] device hsr_slave_0 left promiscuous mode [ 351.050365][ T144] Workqueue: cfg80211 cfg80211_event_work [ 351.080620][ T9] device hsr_slave_1 left promiscuous mode [ 351.097077][ T144] RIP: 0010:__cfg80211_ibss_joined+0x42b/0x4b0 [ 351.128919][ T144] Code: 3b 84 24 80 00 00 00 0f 85 8e 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 de 55 d0 f7 0f 0b eb bf e8 d5 55 d0 f7 <0f> 0b eb b1 e8 cc 55 d0 f7 0f 0b e9 70 fd ff ff e8 c0 55 d0 f7 0f [ 351.153524][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.177245][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.278017][ T144] RSP: 0018:ffffc900016efac0 EFLAGS: 00010293 [ 351.296058][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.329601][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.350084][ T144] RAX: ffffffff89b00b8b RBX: 000000000000001f RCX: ffff888012b65940 [ 351.391581][ T9] device bridge_slave_1 left promiscuous mode [ 351.403334][ T144] RDX: 0000000000000000 RSI: ffffffff8a8b2a00 RDI: ffffffff8ad8f800 [ 351.431862][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.454773][ T144] RBP: ffffc900016efba0 R08: dffffc0000000000 R09: fffffbfff1f8e026 [ 351.491833][ T9] device bridge_slave_0 left promiscuous mode [ 351.504558][ T144] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888060114c90 [ 351.539312][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.562089][ T144] R13: dffffc0000000000 R14: ffff88807e6cb510 R15: 1ffff920002ddf60 [ 351.615362][ T144] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 351.644305][T12258] Bluetooth: hci2: command 0x0409 tx timeout [ 351.687729][ T144] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 351.702389][ T9] device veth1_macvtap left promiscuous mode [ 351.724187][ T4731] wlan1: Trigger new scan to find an IBSS to join [ 351.732179][ T664] wlan1: Trigger new scan to find an IBSS to join [ 351.752119][ T144] CR2: 00007fb64b9c8ba8 CR3: 0000000025aff000 CR4: 00000000003506f0 [ 351.762017][ T9] device veth0_macvtap left promiscuous mode [ 351.801417][ T9] device veth1_vlan left promiscuous mode [ 351.812610][ T144] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 351.831790][ T4731] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 351.849635][ T9] device veth0_vlan left promiscuous mode [ 351.863195][ T144] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 351.911211][ T144] Call Trace: [ 351.926653][ T144] [ 351.956993][ T144] ? __warn+0x15b/0x300 [ 351.994655][ T144] ? __cfg80211_ibss_joined+0x42b/0x4b0 [ 352.036559][ T144] ? report_bug+0x1b7/0x2e0 [ 352.089170][ T144] ? handle_bug+0x3d/0x70 [ 352.119796][ T144] ? exc_invalid_op+0x16/0x40 [ 352.152569][T12258] Bluetooth: hci7: command 0x0409 tx timeout [ 352.177689][ T144] ? asm_exc_invalid_op+0x16/0x20 [ 352.204044][ T144] ? __cfg80211_ibss_joined+0x42b/0x4b0 [ 352.249620][ T144] ? __cfg80211_ibss_joined+0x42b/0x4b0 [ 352.278697][ T144] ? mutex_lock_io_nested+0x60/0x60 [ 352.312213][ T144] ? trace_rdev_return_void+0x1d0/0x1d0 [ 352.340276][ T144] cfg80211_process_wdev_events+0x39f/0x4c0 [ 352.382557][ T144] cfg80211_process_rdev_events+0xa8/0x100 [ 352.410724][ T144] cfg80211_event_work+0x2b/0x40 [ 352.437085][ T144] process_one_work+0x8a1/0x10c0 [ 352.471439][ T144] ? worker_detach_from_pool+0x260/0x260 [ 352.499987][ T144] ? _raw_spin_lock_irqsave+0x120/0x120 [ 352.518612][ T144] ? kthread_data+0x4e/0xc0 [ 352.531128][ T144] ? wq_worker_running+0x97/0x170 [ 352.545572][ T144] worker_thread+0xaca/0x1280 [ 352.561406][ T144] kthread+0x3f6/0x4f0 [ 352.578102][ T144] ? rcu_lock_release+0x20/0x20 [ 352.600199][ T144] ? kthread_blkcg+0xd0/0xd0 [ 352.621157][ T144] ret_from_fork+0x1f/0x30 [ 352.640231][ T144] [ 352.652024][ T144] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 352.659526][ T144] CPU: 0 PID: 144 Comm: kworker/u4:1 Not tainted 5.15.164-syzkaller #0 [ 352.667805][ T144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 352.677885][ T144] Workqueue: cfg80211 cfg80211_event_work [ 352.683650][ T144] Call Trace: [ 352.686945][ T144] [ 352.689895][ T144] dump_stack_lvl+0x1e3/0x2d0 [ 352.694641][ T144] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 352.700359][ T144] ? panic+0x860/0x860 [ 352.704504][ T144] ? __cfg80211_ibss_joined+0x3a0/0x4b0 [ 352.710091][ T144] ? __cfg80211_ibss_joined+0x3a0/0x4b0 [ 352.715676][ T144] panic+0x318/0x860 [ 352.719623][ T144] ? __warn+0x16a/0x300 [ 352.723819][ T144] ? fb_is_primary_device+0xd0/0xd0 [ 352.729094][ T144] ? ret_from_fork+0x1f/0x30 [ 352.733724][ T144] ? __cfg80211_ibss_joined+0x42b/0x4b0 [ 352.739305][ T144] __warn+0x2b2/0x300 [ 352.743341][ T144] ? __cfg80211_ibss_joined+0x42b/0x4b0 [ 352.748917][ T144] report_bug+0x1b7/0x2e0 [ 352.753309][ T144] handle_bug+0x3d/0x70 [ 352.757507][ T144] exc_invalid_op+0x16/0x40 [ 352.762058][ T144] asm_exc_invalid_op+0x16/0x20 [ 352.766936][ T144] RIP: 0010:__cfg80211_ibss_joined+0x42b/0x4b0 [ 352.773120][ T144] Code: 3b 84 24 80 00 00 00 0f 85 8e 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 de 55 d0 f7 0f 0b eb bf e8 d5 55 d0 f7 <0f> 0b eb b1 e8 cc 55 d0 f7 0f 0b e9 70 fd ff ff e8 c0 55 d0 f7 0f [ 352.792754][ T144] RSP: 0018:ffffc900016efac0 EFLAGS: 00010293 [ 352.798860][ T144] RAX: ffffffff89b00b8b RBX: 000000000000001f RCX: ffff888012b65940 [ 352.806861][ T144] RDX: 0000000000000000 RSI: ffffffff8a8b2a00 RDI: ffffffff8ad8f800 [ 352.815306][ T144] RBP: ffffc900016efba0 R08: dffffc0000000000 R09: fffffbfff1f8e026 [ 352.823334][ T144] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888060114c90 [ 352.831336][ T144] R13: dffffc0000000000 R14: ffff88807e6cb510 R15: 1ffff920002ddf60 [ 352.839368][ T144] ? __cfg80211_ibss_joined+0x42b/0x4b0 [ 352.844974][ T144] ? mutex_lock_io_nested+0x60/0x60 [ 352.850216][ T144] ? trace_rdev_return_void+0x1d0/0x1d0 [ 352.855843][ T144] cfg80211_process_wdev_events+0x39f/0x4c0 [ 352.861812][ T144] cfg80211_process_rdev_events+0xa8/0x100 [ 352.867671][ T144] cfg80211_event_work+0x2b/0x40 [ 352.872651][ T144] process_one_work+0x8a1/0x10c0 [ 352.877685][ T144] ? worker_detach_from_pool+0x260/0x260 [ 352.883367][ T144] ? _raw_spin_lock_irqsave+0x120/0x120 [ 352.888965][ T144] ? kthread_data+0x4e/0xc0 [ 352.893509][ T144] ? wq_worker_running+0x97/0x170 [ 352.898571][ T144] worker_thread+0xaca/0x1280 [ 352.903381][ T144] kthread+0x3f6/0x4f0 [ 352.907500][ T144] ? rcu_lock_release+0x20/0x20 [ 352.912382][ T144] ? kthread_blkcg+0xd0/0xd0 [ 352.917008][ T144] ret_from_fork+0x1f/0x30 [ 352.921512][ T144] [ 352.924846][ T144] Kernel Offset: disabled [ 352.929373][ T144] Rebooting in 86400 seconds..