last executing test programs: 5m19.986667288s ago: executing program 3 (id=1616): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000640), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000908500000073000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1a, 0x14, &(0x7f0000001a80)=ANY=[@ANYRES32, @ANYBLOB, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], &(0x7f0000001880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffff963}, [@call={0x85, 0x0, 0x0, 0x41}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x500, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) 5m19.789310866s ago: executing program 0 (id=1620): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x8000000}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0xd}, 0x94) 5m19.734932149s ago: executing program 3 (id=1621): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000380)={0x0, 0x5, 0x0, 0x0, 0x0, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc8, 0x7c4, 0x2, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102038700fe08000e40000200875a65969ff57b00ff020000000007000000000000000001"], 0xfdef) 5m19.522777618s ago: executing program 3 (id=1622): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="2e00000011008188040f80ec59acbca313a181003b00000000010000001000b10e978dec72ce000000800200121f", 0x2e}], 0x1}, 0x44000) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffff, 0x8a410, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext, 0x8018, 0x0, 0x3, 0x9, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10150, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x1, 0x8, 0x0, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f00000001c0)={0x2, 0x4e23, @remote}, 0x10, 0x0}, 0x80) r3 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x114, 0x3, 0x0, 0xfea5) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e34, @rand_addr=0x64010102}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)='\t}', 0x2}], 0x1}, 0x24000080) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x4b}, [@ldst={0x4}]}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x24}, 0x94) socket$kcm(0x2, 0x5, 0x84) (async) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="2e00000011008188040f80ec59acbca313a181003b00000000010000001000b10e978dec72ce000000800200121f", 0x2e}], 0x1}, 0x44000) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffff, 0x8a410, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext, 0x8018, 0x0, 0x3, 0x9, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10150, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x1, 0x8, 0x0, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socket$kcm(0xa, 0x2, 0x0) (async) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf) (async) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f00000001c0)={0x2, 0x4e23, @remote}, 0x10, 0x0}, 0x80) (async) socket$kcm(0x15, 0x5, 0x0) (async) setsockopt$sock_attach_bpf(r3, 0x114, 0x3, 0x0, 0xfea5) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e34, @rand_addr=0x64010102}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)='\t}', 0x2}], 0x1}, 0x24000080) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x4b}, [@ldst={0x4}]}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x24}, 0x94) (async) 5m19.522616398s ago: executing program 0 (id=1623): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020207025000f0000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m19.522084508s ago: executing program 1 (id=1624): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="1400060416000b63d25a80648c2594011d24fc60", 0x14}], 0x1}, 0x20000000) 5m19.520357048s ago: executing program 0 (id=1626): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000, 0xffffffffffffffff}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x7ff, 0x611a}, 0x90208, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) socket$kcm(0xa, 0x2, 0x73) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$kcm(r3, 0x0, 0x24000000) r4 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r4, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) recvmsg$kcm(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) recvmsg$kcm(r4, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) 5m19.501472409s ago: executing program 1 (id=1627): socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x581, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r2, 0x0, 0x0}, 0x20) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r5}, 0x18) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5c00000015006b05c84e21000af32c6e021875f8020000000500038000", 0x1d}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) r7 = socket$kcm(0x29, 0x0, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f0000001400)=r4, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40080, 0x0) close(0x3) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00630010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 5m19.25076015s ago: executing program 3 (id=1629): r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x2}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000002c0)={0x0, 0x80, 0x40, 0x0, 0x3, 0x3, 0x0, 0x6, 0x10040, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff0000, 0x4, @perf_config_ext={0x9, 0x990b}, 0x40, 0xfffffffffffff001, 0x1, 0x3, 0x2, 0x8000, 0x7, 0x0, 0x63, 0x0, 0xf22}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001d40)={{0x1, 0xffffffffffffffff}, &(0x7f00000016c0), &(0x7f0000001d00)='%pI4 \x00'}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002040)={0xffffffffffffffff, 0xe0, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001d80)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000001dc0)=[0x0], &(0x7f0000001e00)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x96, &(0x7f0000001e40)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001e80), &(0x7f0000001ec0), 0x8, 0xc4, 0x8, 0x8, &(0x7f0000001f00)}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002080), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000020c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x7, '\x00', r2, r3, 0x1, 0x1, 0x4}, 0x50) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x1, 0xaea}, 0x4104, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6) r7 = socket$kcm(0x11, 0x2, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fe02fe02e8fe50a10a000725250000000c600e41b0000900ac00080325000000160015000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x114b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x6, 0x7ff}, 0x19cb8, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r11 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x480783, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x3ff, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r12, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$kcm(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="2e0000003e000511d25a80698c6394090324fc602f6e35400800018025581d00d1bd00"/46, 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) r13 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001900)=@bpf_ext={0x1c, 0x1c, &(0x7f0000001b40)=ANY=[@ANYBLOB="0ec6ae88ec618ac671e100000000bffedff50023f5000000ff0000cef4540a00181100002ea1ebe63cef92838584920f38f710fcb108392c65a5105fc165b3f2713dcaa73fc6b51f5ecc292a1e70cadee544ef0f7f9867511452606b7dd4f22285c2df3d00cd2f72b0c173659bd072b69ffa32a2cc91a168f74aed4308cba0738a260bc2c1e4efc8f32bd2e623f09435d151adadd0524965b9ce3ae3946fa976e565d81a1a017f69ce154fdb412cc096beb7db0c3667877ecedc0a821511348586550f32619f43f177c79489ef1f97907510ecca6dccdab42e9db68dcc3661", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000010400007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000001700)='GPL\x00', 0x9, 0x41, &(0x7f0000001740)=""/65, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000017c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001800)={0x1, 0x3, 0x10001, 0x1}, 0x10, 0x1f91, r6, 0x5, &(0x7f0000001840)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0x1], &(0x7f0000001880)=[{0x1, 0x1, 0xd, 0xc}, {0x4, 0x3, 0xf, 0x1}, {0x4, 0x2, 0x5, 0x4}, {0x4, 0x2, 0xe, 0x7}, {0x4, 0x3, 0x9, 0x4}], 0x10, 0x2}, 0x94) r14 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000001600)={0x0, r6}, 0x10) r15 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001680)=@generic={&(0x7f0000001640)='./file0\x00', 0x0, 0x10}, 0x18) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f0000000340)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000440)="a98d302d7754e7838a75daf9bd4e024b5b869f6a8e0e115d715bdb990a63b7d3d28f2a724d163e12ba18615de5eb6c3d285adbc03d4c79a1d4339217d588f13af332e865beeb26dd46c8a69c6e755efeff3937659ba96d9a2b7b3df788b6b88bffb6f1244935662c6ad68104c27bfe4046abadff0a9aecf9cef4f1cd0b795413d68793f56eb7959d437128cad9f1a7ae6a2f4984cf", 0x95}, {&(0x7f0000000500)="85edcf001210759d448886713b4d61b6757d3fd3da6061d7cebaa2dbc8ea96c10c5c8b57b114944a6bd8ed0ffcac673e36e34bb61be0b124227c62b8ece456d1a8062c57122ffce6cee24adcd56ea6a0778d03308279dcd5c685ab3cf821bbb306e0e403b098fb4d251d4f04cc2e220f8d77b5dacd6b7938a1a8bb5aa031ecd654d3030ecc3fff6bde471d0fb85c4487d75b083b8e3e2d7eb8591a7e5147daf764bd244d89eabd619c2efc4acfcf0eb35e68fd34ee44cbe76f8e6ae090e62a7bdb5f1b80f096092421854cc8865935991883d69c6e13a187c6575aa039d389415618afcd8cce4c855904f0af853758e96ff64493ac3e850898b0ada929403b7a72aa9c2ba4a5f98cd1e6a6ab36a93cd482c4b98ad9390e791749201da2ff2bc288aee2531b5a0d6496d0752c5044cb4197298160c3a1d27948ddc36cd130d69a46e35fdca199193ff3a7f37cadd761c84554df61b83fa0b72581150582d4711facbd52ab7e4ef4f14b922acd95e6925278d735c387194f746238a14f1868f5a4d43b86bb262600bf28cfc910f76b99f5d5da877555926a9d166f5586b62be26e5c4cec248ebe3952663df5f5a99219f4661d1dad44ce68da788fe26d2ec5234bfc205bbb7bcfd97574a0bbe235776ab5f1b559d8cff2e264aac0efdad697b6a7f5f41ce0ff26e67316f0c9a8b677e5435ab87695b8f80c75df34c42efbfed92c1d010d1a1c9d78793b81166c954f1e824219460aa002a4f9c6094c4254a3436750c0bb424092c40e2f086d6952082b95990ab3a5ce1a9a530f44cf80c63c3e993688f78cd918b4a901dcd3322467ce1a0b6fae39cd4947836f3d2bc24b5ce8e7b51554f2712ddce540abf25152e38be79deb902c0bdf26c2abee6ef3b72ba79fae032fe6d81c63ba4c50489dfc7fa62c871ff2a29bd84b233c8b88b5f54e3d42fc023199a55178387f614c2af45ccb5afb607d6e9d6b9300d8117aee1664461fd44b20ce46401c8ef7c893af9c51d5b1c3b1fb2826f5077a1d30fa5c13214dbe89f4c42517cf5dc1acc8cfa8371a1f8e03fe30ab1f2ca49fcc306f1bf0906f4a007e05ff7f7659a8a3dc7f93fd0ab237951b36fb5ee784e708a661a652c0cbf9e15d9a37a1aa27c57e12d1d39b893d5ceb275c2a55e2198a658aa8a63cdb4a82ae48d73f741b9ff45800f354b81f26ae8f7a1ca3ca5f214d5aaf85fc725fe141c4a79b52dec7d6196a15e8616b88306bab6f9f2e2b80a6f32e60c895517ea51496803fac871844bd93211abe38826d3fc93064f388aa96ac980fbd1aced219ed10e7fb943bb5173eca2f07368d56168296db63ead945099eba9566ceff657c78174d0bfbbd915ddf9203df0fd4a9b7bef6090fa8e795b47fc79817ab1792f5a9ed496d214f27b5304ae741f1c7ad172399116a19b7826c7431014e85d31a887bdaf022be69587f0bddc22519ad0985d5681e2c49cee851d2378549ad592156ae58f0d6b2cb385df987c388961dbd76bcaf3b366a29830ed1866eeda86b5231335008085b503c552f7b2f325f1e221fa43a24de903880907e281c2eef53914c44b09d95384143d95cce701b1b4c91e1245a0bb23b5583c09d22b7583c05aff0812b67b1e0c0f08ed6fc9cca1b9e7c143f1e49250ec6216c530162a2e0fb771ca4c7c0bc3e0b3c5497886b41e1819cec255dbe20c9de8338867bf5f25392763ecc97ebced417b52b4949ade6b9b18a4d1964a87916dbe45408cd00f6963a7c4866c225f0e7c54b5001cf0f36132bbebf7dc9dfec09f99a4af1bbd39c364004ef1325caaa0f6b30bbecd57d2c43e29f7484dc575ec02afd58571d57b03c7df328592189ed7289eb76489acb35e6fe2fd219605319fda8d2b37a29811f9cb76b7cffb174614e398745bb99551624c38ae0343181b32788f5dc2260ea4a23f08d6d20233f245d079129335ba8b02cf905c8e15fe699f320c62ae10330176ddb178bc382f44253e67c483fb0f48af3c6430cdba8889107c2da7bf460a54307f6e9ffc288f6889a296616c453f4b75a002125ab1fe463879d2c8aae460e68b44163ddb1ccf811ff91b49ca39c63575edbc2e1ea3c3719f955bea95aa912433737579fe399a354002f1fa1e72ae7bf2e18a8bb1296261879925bf7e8108d2904e544abcf64c57328be11d81520c3092a8d578785ee89b5845574ce75813c4b2ba95e188bd2e7531c5287dceb5bfc6685e535b21f633031d5073e6a3ee1b1764c78f4d9bf63cd7568245d03fe616a73e749ce8e15101b8d19d0a5fb76bde8dbea3e4b06bb2454401d800700b9e58603f82d7563d53f4f89f246586360b9a4550a4d50b321d23598642c7dbfb2a58bc7342b52d33affb85f6cd7f44ecead9d9df646f8775de3b0e3e2441809f6249304612a168e39e66687c01ab9e53ee082e40aeb4c65d549b41ca5ca7789581e612ab446238838bc7f3466825151bf5af4a05d0dcb430d52ee17daeae494a5f7742de1b44c96bd2cbfb11b229b73a34accc8baa5344c83d2536424b6e6f38053526faba1d26a098e848f51abf798530b12169ba0cb241e70bd5ecc3981bd182367f5fdb6f6777c344cfe2f01a690aaeb5192a1012e9c75455418f720583f3a4d17c4a10a3871a29e4fd76f026f4ebfd1fea0b3ec38e1b4e0bb2bf9498b92d1f3e92bbe8ab3d0e21283146a1bd85f1d1196c281ec56cf845e2cc213ddbda1fe2bee8b54391f691474eb334137dff8e834c4277ea0a75185af600798f31cb0e824c4c26080262ca9de97d86cd8203a6ae06eb6f5ef9736b1790bc48e5243ed40e791aedd0fb42ec5bce2a83d6bf5588c8935cf05cbd1e70b2dffd21ae3cb9101b3e5e866a119a7ec95e3f5dab465d8f54a3a7b24cbb30e1fb4b559db82385fc7970126c9dccbe06b6735db025040943a8ebb07b00f7f843601a0842006479a35b76271f25e81b660568ab7b38be3dc672b669f2d5455d9101f894d2d4fa28eba92aa80ab4abd40339c5ecdaa53184050c7771caae6b608d56812779581db846e82da282e0b74bed03d953f816d1801130d3f15d41ca23fa2ca66a067f2f7c3ba1a771ba7b79e7533b59001ca5148fb82afa23b044813dfcde2ea54579e3ade5a53a8ac704d2ebc62a03d79d73eef926dd000ae01ac87e151fd1eb55874d8da20f0e466e46a526c750102fe0ae7b6a4a6e53c9cfc2ec3d500fb5546d4bb2ba8fd17506afb589f0ce7c38c6baa0f319a3f9f51dc2f5e18768b9c79c63af2be5bfc884f9ca53a59edf5853b7674946777404a7b0b121542a12a2084dba679d999b39cb86f4dd497b841b6360607725806f52a57c07ebea18f084e6d64a1972089d3db5848537aeb1306d0d1a470c8c245d8865b6526e09740128701828390469894a33622be7d50c0965af764228d1a2f8f819976c8fa2f922f8e9c6279022b31257b033ccbcb941e73efc995a10d82a2af0cac191dd55314bb87cd8722229182499a7444463cbab67e1db95957c6ecf9af58f45c99a92fe39c1ecc36c363d0c08657fcbe39b47c6af4d51288d031d4f6ebb6b265533a3ad7cba2c315dcc788b4d0957091d61b98d74aec2e967eb4b313dcc23ecf0aa2a924bb47ca255ec7c019be0362b15c558bc1552374e59e5a2c283c6b3f448c3c700a660149cac9b881a75ed2f8591bc644075d0cc8c1469bd26522e96bbe3b1ebca2e5408951e9d2035abadb13be6298658e24ec444718067015d40e577c1307880ac7bc29ac27a9288adddaad2441f2c102a8486204d2c42580274fabe7313e0187c137df176a6a284fe6f2f28cd44ab08fe9b9454fed5dde925c8b1a309021a4a53efc3cf7e4449c3c345a8d5863db1587b1195578da3b62e249c0b71e2bfd44901e90944fda324b5b7c8a8122670d680021325d4da3db65e4cdc56cd1dbdbf41f345a75797bc8f58f1063d1591df2af6d8d5ba48e6724c20b6373d174dae9fa65b934418534b8920d67856faf1d395f0cc5f8c1a2634d592deabfb2635de437ddbf73d8cd5a76354d1820d223afdea9e60c69ff53b17f5c288c9b6ef488de9b4502b2539c7d7143d07c73536716db2aa36671ac33611b6c42f90bb7421d7a0ff12a9eb27f39d6626d9d23abfcb66cf47e8f03329e408e2068d459e6bf3a8393eb232c23087dab5dd81ce0bff8bcc9f6423df83de689c3701d7a3eb3714b76dab9de561ee6e70de6b26eb4d36eaa7b35ab750fa1acc0a78a75c38fc0b438fa1b270eb29bd90821d3f78680e3769b7cbddbea15f5b7dcf461dbdc16004a1c96a0988ebd94d750ce0c8a5fd002389c6ffa670efef01787fd6aa59bbd7cef2f70066bf55be3c7b0f9a60ba5d8b718b1949f7882738d984c20b242665ce108594d1dfc2a922e8506340de085e77eeb18da4e2bb2d2fca9fe2e6d2003cb86255deab67489d07fdb1a3a332dbefd2c451020b6e6313049d15130852093bb425e09c000e6ea31960afa21342b465cbc1497a93c64149f8450da66ff9ed8dc68373927775b7fd9cdfb56c2357f3acdb302867e8af0f8ebee6aa4501180c1889ffb17786bdb83c64a27b88d1d2bf88dfc150ab104ffa5239e37ed5723bac0c531e7753386fc679fbbc855e831674f71b301a6fafdc46f70b76e9d2ea2fb46316815b49d047f12c92d5f22054448cdcfa3d494cd268951d40d81342f6169167901925a411538644bf5d45c243a9eff2915dfca44f7b7844bd3be0213dcf0cc5df6e315f524be0917c267ca977c2fcce77e4815c24d3e2e88dfd2606b18dba6f2b859c70cf98386284b7771f3bd7e83d524a4170d5843d02d5ee7ffdd4597a08f71062e0b85701a73b67d8ae33eeda5026b609869cdc5deacd4fa58544f1feaf8bf1af8cf86fbd8ed6cdec70fb317bfab001716e30e83c47e2d7f7bb2eac21ba9c23be022c38da34c876bdbe8208ef315efb6d7421bd24d2ffaab4225cf1736b0cf1a9019a22e9d58a2d80e4fc5c0de6cc2e8536ab21600993dfc57765006c13631ed8539e620f09379351afb06bfdb062a24deaadf427850afb7239322be868141ee4a6f8704e070baf48f1be1d01de9e8ac0e8fec8a4806f7b57ce699fe2ec0dd4edae66c066a2025dcdfd50a6371afd3925fd2d10fd4fece9f5c2c735846cc319bdfb65adcfcc25f2fa16df678aba82a55c9c17308817640d375dc98593b00c453141e784d9eb4f40fe0a6e8eb6f57a7229bce8407e3a70b029e3d25a549870bc5adb565f7570d31da2f6635d40668e3d7f447fb39cdd4976b0c3430b7e346d05d02cc589754435a47b9aedfa8bf48eed25b9708f5beed1ed99c6108b34a3674f976d7280603e43af4cc77501673f3c467c3cc7eb7ce21a87c3f0ded9d9d46a3fc10cbc531efce9593be8df68ad37438b76c102adf0bdffd1d852b7cc8477a02419c49856209c277684440be1b4b83964b9f4e6e2c287ea7a74cb2d5a2954fd05ddf948c532a03ce4d9dae4ee970e1c18349d7aadc76218ec30a82d05195d9c4872f6452e3d8015ef1a4a0744028e9a0c669053facb00944945e02d70cf2ac3b8596dffad854774b9cf7b07b988250df8f980cd6fc997272f623bd96b448663bbd18bf8c8d1ea60fd69a1a6cf28cc8cf2187fbf4937f37df92454842dbc6bfc2aae4eeca8261194c085fc9b2b38c07eae86b5a1029c5b32a5925ff467f38314e1ddee0082268746aa8bcdb4eaeb6b5960c62449d07b2d7df93491c963a0e330dbc3749c856a43b00708bf325ad499d5eb9df1e4f89b01c4d1045a94f123495af19d9309dcd2b", 0x1000}, {&(0x7f0000001500)="05a6ba70dd3730d983b71cd392036dba8d1458f4cb1b9d2665417d0b85ca56b5f71173b40e583824c891aa8ced670026c4eeb40f1fa1cf47bc2ff89b6ff056a8be1041ac58bffda2310ea6ca3488b88184c75efbc269d8eb35f00a1f1c6bfdd3af40d2f5f5da584914826943de4b2cc88291aea9595f9fba760412411dbe4e52cc2e2107641bf89b8fe9ce608ced466b020d73b3bebe63afd7e1d7f056df6780003cc0ed83f1148c6c58f74cf8a2edc1e4f822eeb4515bff06e3a8afddb9c20b000deab6d7df54eaeb62e8ecca747709e6e2809835c17b44c2", 0xd9}], 0x3, &(0x7f00000019c0)=[@rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, r6, r6, r5, r4, r0]}}, @rights={{0x18, 0x1, 0x1, [r4, r6]}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xffffffffffffffff, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r15, r13]}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xee00, 0xee00}}}, @rights={{0x2c, 0x1, 0x1, [r0, r7, r14, r6, r4, r4, r5]}}, @rights={{0x18, 0x1, 0x1, [r4, r11]}}, @rights={{0x20, 0x1, 0x1, [r4, r4, r5, r13]}}], 0x108, 0x840}, 0x20004005) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) 5m19.25058045s ago: executing program 1 (id=1630): perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f00000005c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x810}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc, 0x2, 0x0, 0x4000}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m19.192124303s ago: executing program 0 (id=1631): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000), 0xffc0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r4) write$cgroup_devices(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="80"], 0xa) r5 = socket$kcm(0x2, 0x5, 0x84) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x14, &(0x7f0000000000)=r6, 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x7, 0x0}, 0x8) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', 0x0, 0x18}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0xfda8, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2) write$cgroup_subtree(r10, &(0x7f0000000500)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc000b2c00db5b686158bbcfe8875a060300001123000000000000000000000000ac1414aa3b200007"], 0xfdef) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000fdffffff04000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fdffffff0000001000"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0x0, 0x155f, 0x10}, 0xc) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x7ff, 0x100, 0x7f, 0x840, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0x1d, &(0x7f0000000780)=ANY=[@ANYBLOB="f7ff0000800400"/28, @ANYRES32=r2, @ANYRES64, @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180000000200000000000000ffffffffb7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180000000000f90e00000000040000003556c0ff040000009500000000000000", @ANYRESOCT=r7], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x2a, &(0x7f00000001c0)=""/42, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x1e, r6, 0x8, &(0x7f0000000200)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x10, 0x10000, 0x7}, 0x10, r7, r1, 0x9, &(0x7f0000000440)=[r8, r10, 0xffffffffffffffff, r11, 0xffffffffffffffff, r12, r13, r14, r15, r12], &(0x7f0000000600)=[{0x1, 0x4, 0x5}, {0x1, 0x1, 0x3, 0xc}, {0x2, 0x5, 0x6}, {0x4, 0x4, 0xa, 0xa}, {0x2, 0x2, 0x0, 0xc}, {0x4, 0x1, 0xe, 0x8}, {0x1, 0x3, 0x2, 0xa}, {0x1, 0x2, 0xb, 0x2}, {0x2, 0x1, 0x1, 0x8}], 0x10, 0x10}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x400) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r16 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r16, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="1400000016000b63d25a80648c2594011d24fc60", 0x14}], 0x1}, 0x20000000) 5m19.058946929s ago: executing program 1 (id=1633): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) syz_clone(0x160480, 0x0, 0x0, 0x0, 0x0, 0x0) 5m18.858753958s ago: executing program 1 (id=1634): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a8001600200003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 5m18.335738631s ago: executing program 1 (id=1635): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000000}, 0x80) 5m18.332449362s ago: executing program 3 (id=1636): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f00000011c0)="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", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0xff00) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831373f00000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831373f00000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 5m18.031413745s ago: executing program 32 (id=1635): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000000}, 0x80) 5m18.017249416s ago: executing program 0 (id=1638): socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000380)={0x0, 0x5, 0x0, 0x0, 0x0, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc8, 0x7c4, 0x2, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8100058700fe08000e40000200875a65969ff57b00ff020000000000f5ff00000000000001"], 0xfdef) 5m17.92289876s ago: executing program 3 (id=1640): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_lsm={0x10, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000018000000000000fcffffff7910000000000000c3704c000000000095"], &(0x7f0000000100)='GPL\x00', 0x2}, 0x94) 5m17.310488288s ago: executing program 33 (id=1640): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_lsm={0x10, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000018000000000000fcffffff7910000000000000c3704c000000000095"], &(0x7f0000000100)='GPL\x00', 0x2}, 0x94) 5m17.293923709s ago: executing program 0 (id=1642): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) syz_clone(0x160480, 0x0, 0x0, 0x0, 0x0, 0x0) 5m17.271176979s ago: executing program 34 (id=1642): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) syz_clone(0x160480, 0x0, 0x0, 0x0, 0x0, 0x0) 8.923454819s ago: executing program 5 (id=4096): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x18}, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db", 0xd}], 0x1, 0x0, 0x0, 0x7400}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) ioctl$SIOCSIFHWADDR(r4, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000840000000000000001"], 0x18}, 0x41) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/112, 0x70}, 0x42) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r7, 0x0, 0x0}, 0x10) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='ext4_free_blocks\x00', r6, 0x0, 0x80}, 0x18) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x40082404, &(0x7f0000000300)=0x9) perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 8.630204673s ago: executing program 5 (id=4099): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xfffd}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0xe0000000]}]}}}, @ip_tos_u8={{0x11}}], 0x70}, 0x0) 8.436176571s ago: executing program 5 (id=4102): bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="b702000006000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2a24a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9877399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a8449f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d2943e6f5f828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000056c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c072083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a0000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000638477fbac141416ac14141686189f034d2f87e5890c6aab845013f2325f1a39018303178da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 6.923916969s ago: executing program 5 (id=4105): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007001a00050004c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000001180)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYRESOCT=r3, @ANYRESDEC=r5], 0x8b) 6.90548348s ago: executing program 5 (id=4111): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110b6000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x2400c031) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x9e4, 0x0, 0xa, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r3, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000001680)}}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2}, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e8680d85ff978276fcf294", 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, &(0x7f0000000300)=[{&(0x7f00000002c0)="24c0359fbd7fc446c85da2", 0xfffffffffffffe9b}, {&(0x7f0000000340)="73a18447286c6d07b7703c10f1b9241e6d9955dff45fca129da46eedf1240e89b7", 0x31}], 0x2, 0x0, 0x0, 0xa6820000}, 0xafe6) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0xffffffffffffffff, r7, 0x0, 0xa, &(0x7f0000000140)='syzkaller\x00'}, 0x30) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="4782b472e5ab58c8ff459097ce5c5245c393fff8c3fb8c131d335befbf806561c7a3aa56b666cfc031ea2d2568e8b3244c8ec9", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB='/'], 0x20) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70003000140e2ffca1b1f00f0000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r11, 0x0, &(0x7f0000000080)=""/32}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r10, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000740)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000780)=[0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0], 0x0, 0xc2, &(0x7f00000008c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0x45, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) sendmsg$inet(r0, &(0x7f0000000bc0)={&(0x7f0000000240)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000440)="632c1f947ec00b1639b6cc9257152c6fda753a1c0279146f1a8e3ed60fb50d3220a89cfdc294b6550a183c8af4a08a122b913890e8540643d7be04d66adefb2f33a7c2fb8aa490228debc7e30b9d6c7edeb627d8d665ad0db6a8fc33ac4c1f3a09a9cbb80edd2d", 0x67}, {&(0x7f0000000580)="816401b8e6c286170eed2e1b8b694d08886a73b1df27d7f602075788a95457fffb47bb821a17a8199067d2ff48304667f59a86394463e3ede7daab40ff9a96402b13e245e13f12db6b6d9ba6268a2a1f6d6af28583a3c9430950", 0x5a}], 0x2, &(0x7f0000001040)=[@ip_retopts={{0x80, 0x0, 0x7, {[@cipso={0x86, 0x59, 0x0, [{0x6, 0xa, "aa54bf10ff6aecab"}, {0x0, 0x3, "05"}, {0x7, 0x6, "ff370a66"}, {0x2, 0x10, "1ef6f9343b74d52359390c694bd6"}, {0x1, 0x8, "0306f7d15e1a"}, {0x0, 0x8, "dbdad0a16523"}, {0x5, 0x8, "df211ed537ef"}, {0x2, 0x10, "78faf513f70260882bfeaf0616b5"}, {0x5, 0x8, "cfc54c8ec994"}]}, @timestamp={0x44, 0x8, 0x5b, 0x0, 0x2, [0x8]}, @noop, @lsrr={0x83, 0xb, 0xfd, [@multicast2, @empty]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x401}}, @ip_ttl={{0x14, 0x0, 0x2, 0xdc}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @multicast1, @multicast1}}}], 0xd0}, 0x44801) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000000500003cbf09000000000000c6090100000003e754cea405f4125eecef8c0253a45a650600000006000000180100002020702500000000002020207b9af8ff00000000ae910000000000003701b85686f7a16b0b7f0000f882ca21b71fffffffb70200000800000000005c93000000000000b5030000000000008500000076000000b7"], &(0x7f0000000540)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.920189134s ago: executing program 5 (id=4126): perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x3ff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000800000000000000007000010850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000308f00b702000000000000850000008600"/32], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="e02742e8680d85ff9782762f86dd", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c085) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x80350, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0xa}, 0x1010, 0x10000, 0x0, 0x4, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) (async) socket$kcm(0x10, 0x2, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8901, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="5c00000010006bcc9e3be35c6e17aa0b006b876c1d0000007ea60864160af36531001ac008000200070002002500020003a9e99fd8dc7add954664bc24eab556a705251e6182942259e65f0151f60a84c9f4d4938037e786a6d00010", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x300000000000000) 2.067094457s ago: executing program 6 (id=4153): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000004000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 1.729969092s ago: executing program 6 (id=4157): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0900000006000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000c30c000000000000000000000000000000000000000000938587cdee6297b0b7000419f9bc8f9df005816996570ab98e4502030656bf03ff9580c556ef3dbd7b5122466634010d12c92931e40b14649bc120bad46cf828302f6f6a31f32285c7670f88f926bf9858f7c23ecc12f77aae2a39ac087f1cc30ab5a3e61c77ee3f099b64fe0aca73555dca59a3"], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce87, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$kcm(0x25, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x408c050) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000100)=[{&(0x7f00000006c0)="62043c00590200000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee844", 0x46}, {&(0x7f0000000380)="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", 0xfe}, {&(0x7f00000013c0)="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", 0x178}], 0x3}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYRESOCT=0x0], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0xc, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r6, @ANYRESHEX=r3, @ANYRESHEX=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32, @ANYBLOB="00000000000000006600ffffff80000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x3, &(0x7f0000000340)=""/206}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r0}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x6e8e40, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/15], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110c230000) r10 = socket$kcm(0x10, 0x2, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="18020000000000000000000080000000850000180100002020702500000000002020207b1af8ff00000000bfa100000500000007010000f8ffffffb7f79266907023451798aacd2a38add1b301000008000000b703000000000000"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0xe, 0x44, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="5c00000012006bab9a3ff3d86e17aa0a056b876c1d00489200000080000000002a5ad6f7007ea60864160af34afe5f5e1be7ff5bdf1931a0e64f88c1976627dc80fd4460bc06000000938037e70e457ae2bb24ef6697070000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f00000009c0)=""/185, 0xb9}, {&(0x7f0000000a80)=""/92, 0x5c}, {&(0x7f0000000480)=""/199, 0xc7}, {&(0x7f00000020c0)=""/4096, 0x105c}, {&(0x7f0000000240)=""/81, 0x51}, {&(0x7f0000000600)=""/183, 0xb7}], 0x6}, 0x40010022) socketpair(0x6, 0x1, 0x0, &(0x7f0000000100)) 1.373439739s ago: executing program 6 (id=4163): bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 1.319607161s ago: executing program 4 (id=4164): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x538}, 0x40) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e0000001000000002800000000000000000000000700000094040007441405"], 0x48}, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e28, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x30}, 0x40880) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x4, 0x0, r0, 0x6db, '\x00', r3, r0, 0x1, 0x3, 0x1}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="78000000000000000b01000005000000c35b77d20f46bef258d1f1da33e61123d067a0c04a761c81471fa47e0355e33cfbc2c6d673cf1e973f17eec7c17df6db22db23c74b07273540d0ea7932f49eea36dcc5ec0fc423b3ce08009f9aabbe4e67966af3678c7a268c23e8f1ce081afae100000000000000e80000000000000000000000410f00004dff31081d0c29029733a134c87045f29ccd61c5647056f40604eaf22cd18c5769a316a31aba194c1bed931ae70ee7e3433dbfc3dff91c6f6a7ee9f516431d9b7bae20a12fe9fd7cf747bc6a748897b8cedd02e389380ec80467580e128c3bd31dc43088fd0fb1112cc900415d8a4cbae044705c9dbc2aaa811bd1e82968c6529fd74a0cee871f59c0308989bbfccdd8d0543e2221ce926aa80aab879429668c119470f7a5579f11a5a01753eb17163d4ea7f21ade3f91032b088a036f696a33e095714c72b6dcfde320f1de3db08613d600000000000000500000000000000012010000000000008024534bfdc43f2ddadd3d0776edd8577364571c8dc8da0c7b783c2ab7eb1a9958d5268aab334819e27d508cef4f0ff9d6ea49ac851c1c8bf4000000000000003000000000000000010000000d000000d6512845899105449c83871602353f4a2e123a02879c0a63bc000000000000005803000000000000840000000c0000007ce828fec129a63db46aa32f8033349f0c58c62d19ec032390b033aaf8301eec71225c3f42af36ec2b608a954c083aebfa928b1303b3403390b11189e1a1cc47a9ea621f974477eac4b5938b7b7c71ae6e5abebcc7645f900c23ff01288b43d677da03fe0da7ddb2eec2e3fc4532bd74f83110ed0e16cf45565af5ca4362aedabb3e455a9fbb80193a216ed41108fa80b00d150a3f0213ac10f73e863e16ab1dee9f7213ec010d6e16ae22ce90e69e3c3247de625eb537ed7ec18e69776c65a199fb0996d859736713165b01fe208a7d6f954e7f9337a11c86153ea83c7fa45eeecabca640f4bbb440448fd104b791678575551e1c302076ee3498834e6e7b550e3dd782375f55230a8c7c144faf5f22537f7f5b9ff6f21682a70671904598a4f5015ecb180c19d5b0e81ad6c09c4bd806bd3d49d35d9645d30fa3c8540fe7330869fc09fcf9c983512b2cbfaa82d0b64425e2aadc01b9ff817d84718e5e06aabd365e2515d576eccbdf41c331b08852888806cdfe4e0467ffa9a3286da1cf799fa3b22bbff740380ba8facd14505135fa14ff76e429777ce712f1c2123329c8121bb520b5c6963d129d08d2f736bb02bc0044122b3fec258554fccac1abc4decd3572e7ec6224a158b2a124dac4df1b7e97de2a88b69624ee27edfba0b47a61d0c43cead0e4d1c64ac69562fb887d699d1ca59ae4486aa98c98b8f42921455a4291f0ce5a47e80b91878d6eaad919af9d281f55d3c44fbc330462665efc357b3ede74ccc6deb71b4566c1d348e534c3c6f183041e36e26afdf571acdc0538cf601cc073881d8ba87fd59640d2b8cc503dd6af50c561eb81b26649d301c0ac4d9e6d24a3d4823e6d6a25ac05a5c2fd13028364781218f9079dfe8a39f4509dfa75e4c7497c353a30c88a3fef31a88dc90b2ab6b6deff2bd0e91d32db6ee198fa205d3496bb5b133b327b9e6d3f84e29823d1d87c851557a260129e315d3a0d33ddc0fe52b908f2dbe7695142fc7e1fbd10de2381febca77bfb4d7ce586889f9a5ac4f17ee609d0d0455cfbfe039a342b6ee6ce7bece491e1be894dd479a7a56b080f2f919bf2b68157af6648dac75d77a221f34e83923566cd1ff005da0f7bb3aaa7bef7ae462b62d38e056186e979a5108d5e070467fb3d31830efd52ed44228d8397c3f9daea23"], 0x538}, 0x40) (async) socket$kcm(0x2, 0x3, 0x2) (async) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e0000001000000002800000000000000000000000700000094040007441405"], 0x48}, 0x0) (async) socket$kcm(0x2, 0x1000000000000002, 0x0) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000180)=r0, 0x4) (async) sendmsg$inet(r2, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e28, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x30}, 0x40880) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x58, &(0x7f00000001c0)}, 0x10) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x4, 0x0, r0, 0x6db, '\x00', r3, r0, 0x1, 0x3, 0x1}, 0x50) (async) 1.110693631s ago: executing program 6 (id=4165): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x18}, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08", 0x13}], 0x1, 0x0, 0x0, 0x7400}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) ioctl$SIOCSIFHWADDR(r4, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000840000000000000001"], 0x18}, 0x41) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/112, 0x70}, 0x42) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r7, 0x0, 0x0}, 0x10) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='ext4_free_blocks\x00', r6, 0x0, 0x80}, 0x18) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x40082404, &(0x7f0000000300)=0x9) perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 1.085429822s ago: executing program 4 (id=4166): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63f580fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[], 0xfdef) 918.65824ms ago: executing program 2 (id=4167): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004801) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400000000004, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7a, 0x2, @perf_bp={0x0, 0x4}, 0x19122, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000e40)="180000003e000511d25a80698c6394090124fc602f6e3540", 0x18}], 0x1, 0x0, 0x0, 0x39c}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0f00000004000000040000000008000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB="b52b78fcd653505192691de142dea749c034fdb6708b3d537182dac73709ed9eff8b028e2ae602abf4020de1318c4f", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x1e, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) r3 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffd, 0x3, @perf_bp={0x0, 0x5}, 0x0, 0x2, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES16=r3], 0x20) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="1700000014006b81566463cc7a43a9de280a5f768e7e00", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x25, &(0x7f0000000040), 0x4) 870.697701ms ago: executing program 4 (id=4168): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_lsm={0x10, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000a0000fcffffff7910000000000000c3704c000000000095"], &(0x7f0000000100)='GPL\x00', 0x2}, 0x94) 734.381268ms ago: executing program 6 (id=4169): socket$kcm(0x10, 0x2, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000004}, 0x0, 0xd, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000009208500000072000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000180)=r4}, 0x20) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="7fbbb621a3045e9910cd4799bc1e8edc9497e994e53434f973f69fb97283b994ec44e9fb9448d8f69fb76b459dc4528cee63dacf85cc9ed7bc89f8d78e9b1df7313a7ce2604b86186db3ed83eb90106f82c32b093e0dde65411f6df5456870fcd06814052c01db8c62a5a3077f6fa12286c3e4f15aea06d427f437b55d366ae9d5450f0b336937915424a43d5b8ecfacc85c92e558499547404fd139699709cc7652af8c316fa2268f1805e199236476c553ea59294c99e1b92a94a797637407e603f100d9f76d3d08173416b9b60c49837f32f3558668d761e07473ad69462aaf0203e2f537a6f2f5ca80ebec55ca15acf0d7a8b3113dfd22"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1, 0x5, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000008000000000000000100000018420000fbffffff00000000000000009500000000000000ad0b2bff4013ba70f71ec92fdf7a4715b11f4f8349a91866f9948a70750b3fe8e16d492ff026f99365af319acd9c7aa6f270998f538d936b6fce2ebda37c225771ca6ced381707cabae54736a65ce6694fb614691230a5a2bbe097cb41a88fa998bc570f52cca291efbef6393d7404e90def07ea297598869dcf415cd64672a067ca924cc983263b3c52b7ecdb3bad93a797d81e1a5e102ab5a76cacfb6da75477030470934d826b2b263f5bab06"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0xfb, &(0x7f0000000340)=""/251, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x17, r1, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x0, 0x2, 0xe, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f00000006c0)=[r1, r8, r5, r8, r8, r8, r5, r0], &(0x7f0000000700)=[{0x0, 0x3, 0x5, 0x9}, {0x0, 0x4, 0x0, 0x1}, {0x3, 0x4, 0x3, 0x3}, {0x3, 0x1, 0xe, 0xb}], 0x10, 0x9}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r8}, &(0x7f0000000100), &(0x7f00000002c0)=r9}, 0xfea4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000740)={r8, &(0x7f0000000700), &(0x7f0000001980)=""/210}, 0x20) 658.704211ms ago: executing program 4 (id=4170): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x18}, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08", 0x13}], 0x1, 0x0, 0x0, 0x7400}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) ioctl$SIOCSIFHWADDR(r4, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000840000000000000001"], 0x18}, 0x41) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/112, 0x70}, 0x42) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r7, 0x0, 0x0}, 0x10) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='ext4_free_blocks\x00', r6, 0x0, 0x80}, 0x18) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x40082404, &(0x7f0000000300)=0x9) perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 645.779861ms ago: executing program 2 (id=4171): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000a50000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000e00000000000000004000008500000050000000850000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 510.746747ms ago: executing program 2 (id=4172): bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="b702000006000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2a24a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9877399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a8449f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d2943e6f5f828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000056c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c072083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a00000000000000000000d550c9f15fbb2324a3f37d"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000638477fbac141416ac14141686189f034d2f87e5890c6aab845013f2325f1a39018303178da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 450.79006ms ago: executing program 6 (id=4173): r0 = socket$kcm(0x25, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x2, 0x1000000000000002, 0x0) (async) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x60) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021c080406037c09e8fe55a10a0015400200142603600e122f00160004000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ed50c", 0xbd}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x20000000) (async) r2 = socket$kcm(0x11, 0x7, 0x300) sendmsg$sock(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) r3 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x80086601, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000000)='cpu\t&-&&\t') (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x30a) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00', 0x1000}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40086602, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f0, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$TUNDETACHFILTER(r9, 0x541b, 0x1000000000000) sendmsg$kcm(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000006000)=[{0x0}], 0x1}, 0x4) 368.335624ms ago: executing program 2 (id=4174): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000002200000000000000160000008500000061000000850000005000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x14, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e88a8", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffa888}, 0x50) 355.246135ms ago: executing program 4 (id=4175): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x15, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001580)=ANY=[@ANYBLOB], 0x0, 0xffff934c, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xbdc}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0xd000, 0x0, 0xfffffffa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0xc}, 0xa100, 0xc8, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63f580fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x100, 0x7}, 0x10481a, 0x0, 0x0, 0x7, 0x4, 0x0, 0xf792, 0x0, 0xffffffff, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) write$cgroup_subtree(r3, &(0x7f00000004c0)=ANY=[], 0xfdef) 246.75331ms ago: executing program 2 (id=4176): socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x581, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r2, 0x0, 0x0}, 0x20) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r5}, 0x18) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5c00000015006b05c84e21000af32c6e021875f8020000000500038000", 0x1d}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) r7 = socket$kcm(0x29, 0x0, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f0000001400)=r4, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40080, 0x0) close(0x3) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000310008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 187.268312ms ago: executing program 4 (id=4177): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, 0x0) 0s ago: executing program 2 (id=4178): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004801) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400000000004, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7a, 0x2, @perf_bp={0x0, 0x4}, 0x19122, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000e40)="180000003e000511d25a80698c6394090124fc602f6e3540", 0x18}], 0x1, 0x0, 0x0, 0x39c}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0f00000004000000040000000008000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB="b52b78fcd653505192691de142dea749c034fdb6708b3d537182dac73709ed9eff8b028e2ae602abf4020de1318c4f", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x1e, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) r3 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffd, 0x3, @perf_bp={0x0, 0x5}, 0x0, 0x2, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES16=r3], 0x20) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="1700000014006b81566463cc7a43a9de280a5f768e7e00", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x25, &(0x7f0000000040), 0x4) kernel console output (not intermixed with test programs): 000246 R12: 0000000000000002 [ 472.401278][T14787] R13: 00007f1c7cde6038 R14: 00007f1c7cde5fa0 R15: 00007fffe17bfe68 [ 472.409296][T14787] [ 472.502634][T14781] hsr_slave_1 (unregistering): left promiscuous mode [ 472.619812][T14785] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.3009'. [ 472.646434][T14789] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.3009'. [ 474.007353][T14823] netlink: 'syz.2.3024': attribute type 1 has an invalid length. [ 474.015749][T14823] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.3024'. [ 474.438447][T14835] netlink: 'syz.6.3028': attribute type 10 has an invalid length. [ 474.454199][T14835] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 474.923120][T14836] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3029'. [ 475.009165][T14836] `: default FDB implementation only supports local addresses [ 475.060553][T14843] FAULT_INJECTION: forcing a failure. [ 475.060553][T14843] name failslab, interval 1, probability 0, space 0, times 0 [ 475.075351][T14843] CPU: 0 PID: 14843 Comm: syz.5.3032 Not tainted syzkaller #0 [ 475.082877][T14843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 475.093054][T14843] Call Trace: [ 475.096349][T14843] [ 475.099289][T14843] dump_stack_lvl+0x16c/0x230 [ 475.104000][T14843] ? show_regs_print_info+0x20/0x20 [ 475.109229][T14843] ? load_image+0x3b0/0x3b0 [ 475.113780][T14843] ? __might_sleep+0xe0/0xe0 [ 475.118384][T14843] ? __lock_acquire+0x7c80/0x7c80 [ 475.123523][T14843] should_fail_ex+0x39d/0x4d0 [ 475.128227][T14843] should_failslab+0x9/0x20 [ 475.132755][T14843] slab_pre_alloc_hook+0x59/0x310 [ 475.137805][T14843] ? page_pool_create+0x71/0x5c0 [ 475.142793][T14843] __kmem_cache_alloc_node+0x53/0x260 [ 475.148191][T14843] ? page_pool_create+0x71/0x5c0 [ 475.153153][T14843] kmalloc_node_trace+0x26/0xe0 [ 475.158049][T14843] page_pool_create+0x71/0x5c0 [ 475.162881][T14843] bpf_test_run_xdp_live+0x1c1/0x1a20 [ 475.168279][T14843] ? verify_lock_unused+0x140/0x140 [ 475.173498][T14843] ? kasan_set_track+0x5f/0x70 [ 475.178309][T14843] ? kasan_set_track+0x4e/0x70 [ 475.183091][T14843] ? __kasan_kmalloc+0x8f/0xa0 [ 475.187869][T14843] ? __kmalloc+0xb4/0x240 [ 475.192217][T14843] ? bpf_prog_test_run_xdp+0x382/0xfa0 [ 475.197713][T14843] ? bpf_prog_test_run+0x321/0x390 [ 475.202845][T14843] ? __sys_bpf+0x440/0x800 [ 475.207275][T14843] ? __x64_sys_bpf+0x7c/0x90 [ 475.211874][T14843] ? do_syscall_64+0x55/0xb0 [ 475.216495][T14843] ? xdp_convert_md_to_buff+0x330/0x330 [ 475.222073][T14843] ? __lock_acquire+0x7c80/0x7c80 [ 475.227117][T14843] ? __virt_addr_valid+0x18c/0x540 [ 475.232252][T14843] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 475.238519][T14843] ? _copy_from_user+0xa5/0xe0 [ 475.243302][T14843] ? bpf_test_init+0x134/0x150 [ 475.248091][T14843] ? xdp_convert_md_to_buff+0x5b/0x330 [ 475.253576][T14843] bpf_prog_test_run_xdp+0x76c/0xfa0 [ 475.258909][T14843] ? dev_put+0x80/0x80 [ 475.263006][T14843] ? dev_put+0x80/0x80 [ 475.267092][T14843] bpf_prog_test_run+0x321/0x390 [ 475.272067][T14843] __sys_bpf+0x440/0x800 [ 475.276340][T14843] ? bpf_link_show_fdinfo+0x350/0x350 [ 475.281742][T14843] ? lock_chain_count+0x20/0x20 [ 475.286611][T14843] __x64_sys_bpf+0x7c/0x90 [ 475.291048][T14843] do_syscall_64+0x55/0xb0 [ 475.295485][T14843] ? clear_bhb_loop+0x40/0x90 [ 475.300185][T14843] ? clear_bhb_loop+0x40/0x90 [ 475.304878][T14843] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 475.310786][T14843] RIP: 0033:0x7f55b558f749 [ 475.315221][T14843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.334854][T14843] RSP: 002b:00007f55b63f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 475.343288][T14843] RAX: ffffffffffffffda RBX: 00007f55b57e5fa0 RCX: 00007f55b558f749 [ 475.351289][T14843] RDX: 0000000000000050 RSI: 0000200000000b00 RDI: 000000000000000a [ 475.359280][T14843] RBP: 00007f55b63f6090 R08: 0000000000000000 R09: 0000000000000000 [ 475.367267][T14843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.375272][T14843] R13: 00007f55b57e6038 R14: 00007f55b57e5fa0 R15: 00007fff2c073478 [ 475.383273][T14843] [ 476.567498][T14871] netlink: 'syz.5.3042': attribute type 10 has an invalid length. [ 477.327373][T14892] bridge0: port 2(team0) entered blocking state [ 477.369226][T14892] bridge0: port 2(team0) entered disabled state [ 477.384367][T14892] team0: entered allmulticast mode [ 477.389587][T14892] team_slave_0: entered allmulticast mode [ 477.400239][T14892] team_slave_1: entered allmulticast mode [ 477.409195][T14892] team0: entered promiscuous mode [ 477.415302][T14892] team_slave_0: entered promiscuous mode [ 477.423098][T14892] team_slave_1: entered promiscuous mode [ 477.434401][T14892] bridge0: port 2(team0) entered blocking state [ 477.440886][T14892] bridge0: port 2(team0) entered forwarding state [ 477.624692][T14905] FAULT_INJECTION: forcing a failure. [ 477.624692][T14905] name failslab, interval 1, probability 0, space 0, times 0 [ 477.652670][T14905] CPU: 1 PID: 14905 Comm: syz.5.3055 Not tainted syzkaller #0 [ 477.660221][T14905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 477.670325][T14905] Call Trace: [ 477.673683][T14905] [ 477.676649][T14905] dump_stack_lvl+0x16c/0x230 [ 477.681372][T14905] ? sctp_sendmsg+0x155c/0x27e0 [ 477.686263][T14905] ? ___sys_sendmsg+0x220/0x290 [ 477.691198][T14905] ? show_regs_print_info+0x20/0x20 [ 477.696455][T14905] ? load_image+0x3b0/0x3b0 [ 477.701039][T14905] should_fail_ex+0x39d/0x4d0 [ 477.705799][T14905] should_failslab+0x9/0x20 [ 477.710358][T14905] slab_pre_alloc_hook+0x59/0x310 [ 477.715468][T14905] ? sctp_add_bind_addr+0x8c/0x360 [ 477.720817][T14905] __kmem_cache_alloc_node+0x53/0x260 [ 477.726259][T14905] ? sctp_add_bind_addr+0x8c/0x360 [ 477.731614][T14905] kmalloc_trace+0x2a/0xe0 [ 477.736099][T14905] sctp_add_bind_addr+0x8c/0x360 [ 477.741100][T14905] sctp_copy_local_addr_list+0x30c/0x4e0 [ 477.746799][T14905] ? sctp_copy_local_addr_list+0x9c/0x4e0 [ 477.752584][T14905] ? sctp_do_8_2_transport_strike+0x8b0/0x8b0 [ 477.758720][T14905] ? sctp_v6_is_any+0x64/0x70 [ 477.763460][T14905] ? sctp_copy_one_addr+0x8c/0x350 [ 477.768639][T14905] sctp_bind_addr_copy+0xb3/0x3c0 [ 477.773895][T14905] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 477.780287][T14905] sctp_connect_new_asoc+0x2da/0x690 [ 477.785628][T14905] ? __sctp_connect+0xd20/0xd20 [ 477.790526][T14905] ? __local_bh_enable_ip+0x12e/0x1c0 [ 477.795985][T14905] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 477.801586][T14905] ? security_sctp_bind_connect+0x89/0xb0 [ 477.807384][T14905] sctp_sendmsg+0x155c/0x27e0 [ 477.812154][T14905] ? sctp_getsockopt+0xb60/0xb60 [ 477.817151][T14905] ? aa_sk_perm+0x7fc/0x930 [ 477.821721][T14905] ? aa_af_perm+0x2b0/0x2b0 [ 477.826366][T14905] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 477.832857][T14905] ? sock_rps_record_flow+0x19/0x400 [ 477.838196][T14905] ? inet_send_prepare+0x260/0x260 [ 477.843386][T14905] ? inet_sendmsg+0xe9/0x2f0 [ 477.848038][T14905] ? inet_send_prepare+0x260/0x260 [ 477.853205][T14905] ____sys_sendmsg+0x5bf/0x950 [ 477.858044][T14905] ? __asan_memset+0x22/0x40 [ 477.862695][T14905] ? __sys_sendmsg_sock+0x30/0x30 [ 477.867779][T14905] ? __import_iovec+0x5f2/0x860 [ 477.872715][T14905] ? import_iovec+0x73/0xa0 [ 477.877285][T14905] ___sys_sendmsg+0x220/0x290 [ 477.882027][T14905] ? __sys_sendmsg+0x270/0x270 [ 477.886900][T14905] ? __lock_acquire+0x7c80/0x7c80 [ 477.892030][T14905] __se_sys_sendmsg+0x1a5/0x270 [ 477.896952][T14905] ? __x64_sys_sendmsg+0x80/0x80 [ 477.901986][T14905] ? lockdep_hardirqs_on+0x98/0x150 [ 477.907252][T14905] do_syscall_64+0x55/0xb0 [ 477.911724][T14905] ? clear_bhb_loop+0x40/0x90 [ 477.916450][T14905] ? clear_bhb_loop+0x40/0x90 [ 477.921184][T14905] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 477.927128][T14905] RIP: 0033:0x7f55b558f749 [ 477.931595][T14905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.951863][T14905] RSP: 002b:00007f55b63f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 477.960338][T14905] RAX: ffffffffffffffda RBX: 00007f55b57e5fa0 RCX: 00007f55b558f749 [ 477.968358][T14905] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000005 [ 477.976378][T14905] RBP: 00007f55b63f6090 R08: 0000000000000000 R09: 0000000000000000 [ 477.984401][T14905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 477.992426][T14905] R13: 00007f55b57e6038 R14: 00007f55b57e5fa0 R15: 00007fff2c073478 [ 478.000569][T14905] [ 478.049619][T14906] netlink: 'syz.2.3054': attribute type 10 has an invalid length. [ 478.093122][T14906] hsr0: entered promiscuous mode [ 478.099090][T14906] team0: Port device hsr0 added [ 478.727467][T14926] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3063'. [ 478.761641][T14925] -1: renamed from syzkaller0 [ 478.784166][T14930] netlink: 'syz.4.3064': attribute type 10 has an invalid length. [ 478.967035][T14937] netlink: 196 bytes leftover after parsing attributes in process `syz.5.3067'. [ 479.030559][T14937] netlink: 'syz.5.3067': attribute type 29 has an invalid length. [ 479.059316][T14937] netlink: 'syz.5.3067': attribute type 29 has an invalid length. [ 479.084034][T14940] netlink: 'syz.5.3067': attribute type 29 has an invalid length. [ 479.105275][T14937] netlink: 'syz.5.3067': attribute type 29 has an invalid length. [ 479.255325][T14946] syz.4.3071[14946] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 479.255542][T14946] syz.4.3071[14946] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 480.479406][T14987] netlink: 18187 bytes leftover after parsing attributes in process `syz.2.3088'. [ 480.843911][T14996] netlink: 'syz.5.3089': attribute type 10 has an invalid length. [ 481.284868][T15004] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.3093'. [ 481.300532][T15004] openvswitch: netlink: Tunnel attr 0 has unexpected len 338 expected 8 [ 481.399327][T15002] FAULT_INJECTION: forcing a failure. [ 481.399327][T15002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 481.418187][T15002] CPU: 1 PID: 15002 Comm: syz.4.3094 Not tainted syzkaller #0 [ 481.425866][T15002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 481.435952][T15002] Call Trace: [ 481.439261][T15002] [ 481.442219][T15002] dump_stack_lvl+0x16c/0x230 [ 481.446988][T15002] ? show_regs_print_info+0x20/0x20 [ 481.452269][T15002] ? load_image+0x3b0/0x3b0 [ 481.456808][T15002] ? __might_fault+0xaa/0x120 [ 481.461508][T15002] ? __lock_acquire+0x7c80/0x7c80 [ 481.466564][T15002] should_fail_ex+0x39d/0x4d0 [ 481.471274][T15002] _copy_to_user+0x2f/0xa0 [ 481.475983][T15002] bpf_test_finish+0x19a/0x620 [ 481.480760][T15002] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 481.486995][T15002] ? lockdep_hardirqs_on+0x98/0x150 [ 481.492316][T15002] ? convert_skb_to___skb+0x420/0x420 [ 481.497741][T15002] bpf_prog_test_run_skb+0xc28/0x11c0 [ 481.503336][T15002] ? cpu_online+0x60/0x60 [ 481.507695][T15002] bpf_prog_test_run+0x321/0x390 [ 481.512664][T15002] __sys_bpf+0x440/0x800 [ 481.516937][T15002] ? bpf_link_show_fdinfo+0x350/0x350 [ 481.522335][T15002] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 481.528525][T15002] __x64_sys_bpf+0x7c/0x90 [ 481.532962][T15002] do_syscall_64+0x55/0xb0 [ 481.537407][T15002] ? clear_bhb_loop+0x40/0x90 [ 481.542100][T15002] ? clear_bhb_loop+0x40/0x90 [ 481.546795][T15002] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 481.552709][T15002] RIP: 0033:0x7fa9ab18f749 [ 481.557138][T15002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 481.577022][T15002] RSP: 002b:00007fa9ac00e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 481.585461][T15002] RAX: ffffffffffffffda RBX: 00007fa9ab3e5fa0 RCX: 00007fa9ab18f749 [ 481.593447][T15002] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 481.601467][T15002] RBP: 00007fa9ac00e090 R08: 0000000000000000 R09: 0000000000000000 [ 481.609457][T15002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.617616][T15002] R13: 00007fa9ab3e6038 R14: 00007fa9ab3e5fa0 R15: 00007ffd161562f8 [ 481.625631][T15002] [ 482.383630][T15031] -1: renamed from syzkaller0 [ 482.494112][T15036] netlink: 763 bytes leftover after parsing attributes in process `syz.4.3106'. [ 483.506569][T15074] netlink: 'syz.4.3120': attribute type 4 has an invalid length. [ 483.514589][T15074] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3120'. [ 483.700847][T15081] netlink: 1041 bytes leftover after parsing attributes in process `syz.5.3124'. [ 483.716949][T15078] -1: renamed from syzkaller0 [ 483.912344][T15091] netlink: 'syz.2.3123': attribute type 10 has an invalid length. [ 484.083236][T15094] netlink: 'syz.6.3126': attribute type 10 has an invalid length. [ 484.111426][T15094] wlan1: mtu less than device minimum [ 484.117178][T15094] .``: (slave wlan1): Error -22 calling dev_set_mtu [ 484.881998][T15119] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.3136'. [ 484.906530][T15119] tc_dump_action: action bad kind [ 484.980779][T15119] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3136'. [ 485.687439][T15143] syz.2.3144[15143] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 485.687578][T15143] syz.2.3144[15143] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 486.038545][T15158] netlink: 763 bytes leftover after parsing attributes in process `syz.5.3149'. [ 486.146338][T15161] netlink: 'syz.2.3152': attribute type 4 has an invalid length. [ 486.170014][T15161] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3152'. [ 486.595112][T15174] netlink: 'syz.4.3155': attribute type 10 has an invalid length. [ 486.617238][T15174] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 486.715381][T15182] FAULT_INJECTION: forcing a failure. [ 486.715381][T15182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.749562][T15182] CPU: 1 PID: 15182 Comm: syz.2.3160 Not tainted syzkaller #0 [ 486.757109][T15182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 486.767192][T15182] Call Trace: [ 486.770501][T15182] [ 486.773482][T15182] dump_stack_lvl+0x16c/0x230 [ 486.778197][T15182] ? show_regs_print_info+0x20/0x20 [ 486.783451][T15182] ? load_image+0x3b0/0x3b0 [ 486.787995][T15182] ? __might_fault+0xaa/0x120 [ 486.792797][T15182] ? __lock_acquire+0x7c80/0x7c80 [ 486.797866][T15182] should_fail_ex+0x39d/0x4d0 [ 486.802573][T15182] _copy_from_user+0x2f/0xe0 [ 486.807181][T15182] generic_map_update_batch+0x58e/0x810 [ 486.812767][T15182] ? rcu_read_unlock+0xa0/0xa0 [ 486.817559][T15182] ? __fdget+0x180/0x210 [ 486.821820][T15182] ? rcu_read_unlock+0xa0/0xa0 [ 486.826598][T15182] bpf_map_do_batch+0x3d7/0x610 [ 486.831466][T15182] __sys_bpf+0x31b/0x800 [ 486.835722][T15182] ? bpf_link_show_fdinfo+0x350/0x350 [ 486.841113][T15182] ? lock_chain_count+0x20/0x20 [ 486.845970][T15182] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 486.851965][T15182] __x64_sys_bpf+0x7c/0x90 [ 486.856385][T15182] do_syscall_64+0x55/0xb0 [ 486.860845][T15182] ? clear_bhb_loop+0x40/0x90 [ 486.865533][T15182] ? clear_bhb_loop+0x40/0x90 [ 486.870229][T15182] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 486.876150][T15182] RIP: 0033:0x7f1c7cb8f749 [ 486.880572][T15182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.900195][T15182] RSP: 002b:00007f1c7daa0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 486.908725][T15182] RAX: ffffffffffffffda RBX: 00007f1c7cde5fa0 RCX: 00007f1c7cb8f749 [ 486.916716][T15182] RDX: 0000000000000038 RSI: 0000200000000380 RDI: 000000000000001a [ 486.924702][T15182] RBP: 00007f1c7daa0090 R08: 0000000000000000 R09: 0000000000000000 [ 486.932684][T15182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.940668][T15182] R13: 00007f1c7cde6038 R14: 00007f1c7cde5fa0 R15: 00007fffe17bfe68 [ 486.948663][T15182] [ 487.093258][T15193] C: renamed from team_slave_0 (while UP) [ 487.132761][T15193] netlink: 'syz.6.3165': attribute type 1 has an invalid length. [ 487.140568][T15193] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3165'. [ 487.320665][T15201] netlink: 'syz.4.3174': attribute type 10 has an invalid length. [ 487.341417][T15201] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 487.451372][T15208] netlink: 'syz.2.3169': attribute type 4 has an invalid length. [ 487.835228][T15217] netlink: 'syz.6.3172': attribute type 9 has an invalid length. [ 487.854004][T15217] netlink: 126588 bytes leftover after parsing attributes in process `syz.6.3172'. [ 488.391258][T15241] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3183'. [ 488.445837][T15249] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3185'. [ 488.920643][T15270] netlink: 'syz.4.3192': attribute type 21 has an invalid length. [ 488.937119][T15270] netlink: 'syz.4.3192': attribute type 6 has an invalid length. [ 488.947347][T15270] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3192'. [ 489.138363][T15275] netlink: 763 bytes leftover after parsing attributes in process `syz.2.3194'. [ 489.349248][T15286] netlink: 'syz.6.3198': attribute type 2 has an invalid length. [ 489.455969][T15289] syz.2.3200[15289] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 489.456210][T15289] syz.2.3200[15289] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 490.074275][T15317] netlink: 'syz.6.3211': attribute type 25 has an invalid length. [ 490.153681][T15317] netlink: 'syz.6.3211': attribute type 1 has an invalid length. [ 490.163998][T15317] bridge0: port 1(bridge_slave_0) entered learning state [ 490.189284][T15324] __sock_release: fasync list not empty! [ 490.405538][T15337] netlink: 'syz.5.3215': attribute type 4 has an invalid length. [ 490.562310][T15338] netlink: 'syz.6.3218': attribute type 10 has an invalid length. [ 491.426722][T15356] netlink: 'syz.4.3221': attribute type 10 has an invalid length. [ 491.453305][T15356] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 491.726697][T15363] syzkaller0: entered promiscuous mode [ 491.788883][T15363] syzkaller0: entered allmulticast mode [ 491.824872][T15373] netlink: 'syz.6.3228': attribute type 4 has an invalid length. [ 491.863900][T15377] netlink: 'syz.2.3227': attribute type 10 has an invalid length. [ 492.416666][T15391] FAULT_INJECTION: forcing a failure. [ 492.416666][T15391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 492.430180][T15391] CPU: 1 PID: 15391 Comm: syz.6.3232 Not tainted syzkaller #0 [ 492.437762][T15391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 492.447833][T15391] Call Trace: [ 492.451124][T15391] [ 492.454058][T15391] dump_stack_lvl+0x16c/0x230 [ 492.458742][T15391] ? show_regs_print_info+0x20/0x20 [ 492.463954][T15391] ? load_image+0x3b0/0x3b0 [ 492.468475][T15391] ? __lock_acquire+0x7c80/0x7c80 [ 492.473514][T15391] ? snprintf+0xdb/0x120 [ 492.477767][T15391] should_fail_ex+0x39d/0x4d0 [ 492.482466][T15391] _copy_to_user+0x2f/0xa0 [ 492.486907][T15391] simple_read_from_buffer+0xe7/0x150 [ 492.492335][T15391] proc_fail_nth_read+0x1e3/0x250 [ 492.497390][T15391] ? proc_fault_inject_write+0x340/0x340 [ 492.503041][T15391] ? fsnotify_perm+0x271/0x5e0 [ 492.507831][T15391] ? proc_fault_inject_write+0x340/0x340 [ 492.513478][T15391] vfs_read+0x27e/0x920 [ 492.517671][T15391] ? kernel_read+0x1e0/0x1e0 [ 492.522299][T15391] ? __fget_files+0x28/0x4d0 [ 492.526920][T15391] ? __fget_files+0x44a/0x4d0 [ 492.531628][T15391] ? __fdget_pos+0x2a3/0x330 [ 492.536243][T15391] ? ksys_read+0x75/0x250 [ 492.540587][T15391] ksys_read+0x147/0x250 [ 492.544859][T15391] ? vfs_write+0x940/0x940 [ 492.549302][T15391] ? lockdep_hardirqs_on+0x98/0x150 [ 492.554522][T15391] do_syscall_64+0x55/0xb0 [ 492.558970][T15391] ? clear_bhb_loop+0x40/0x90 [ 492.563662][T15391] ? clear_bhb_loop+0x40/0x90 [ 492.568371][T15391] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 492.574281][T15391] RIP: 0033:0x7fb3cad8e15c [ 492.578706][T15391] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 492.598338][T15391] RSP: 002b:00007fb3cbb3e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 492.606759][T15391] RAX: ffffffffffffffda RBX: 00007fb3cafe5fa0 RCX: 00007fb3cad8e15c [ 492.614735][T15391] RDX: 000000000000000f RSI: 00007fb3cbb3e0a0 RDI: 0000000000000003 [ 492.622724][T15391] RBP: 00007fb3cbb3e090 R08: 0000000000000000 R09: 0000000000000000 [ 492.630724][T15391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.638703][T15391] R13: 00007fb3cafe6038 R14: 00007fb3cafe5fa0 R15: 00007ffc1dad0528 [ 492.646686][T15391] [ 494.047677][T15382] netlink: 'syz.4.3229': attribute type 10 has an invalid length. [ 494.055832][T15382] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 495.041877][T15421] netlink: 'syz.6.3243': attribute type 10 has an invalid length. [ 495.098761][T15421] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 495.156921][T15423] __nla_validate_parse: 2 callbacks suppressed [ 495.156937][T15423] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3244'. [ 495.496631][T15434] netlink: 'syz.5.3245': attribute type 10 has an invalid length. [ 496.049671][T15453] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3254'. [ 496.060569][T15453] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3254'. [ 496.122097][T15453] netlink: 203516 bytes leftover after parsing attributes in process `syz.5.3254'. [ 496.138035][T15453] netlink: 6332 bytes leftover after parsing attributes in process `syz.5.3254'. [ 496.221860][T15456] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3254'. [ 496.244386][T15456] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3254'. [ 496.580944][T15467] netlink: 'syz.2.3258': attribute type 10 has an invalid length. [ 497.118119][T15478] netlink: 'syz.4.3261': attribute type 10 has an invalid length. [ 497.140380][T15478] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 498.431781][T15521] netlink: 'syz.5.3278': attribute type 10 has an invalid length. [ 499.722967][T15559] netlink: 'syz.6.3289': attribute type 10 has an invalid length. [ 499.800866][T15559] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 499.963586][T15567] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 500.682383][T15578] netlink: 'syz.4.3295': attribute type 10 has an invalid length. [ 500.963128][T15588] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3298'. [ 500.991315][T15588] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3298'. [ 501.098079][T15588] netlink: 203516 bytes leftover after parsing attributes in process `syz.6.3298'. [ 501.131547][T15588] netlink: 6332 bytes leftover after parsing attributes in process `syz.6.3298'. [ 501.243801][T15592] FAULT_INJECTION: forcing a failure. [ 501.243801][T15592] name failslab, interval 1, probability 0, space 0, times 0 [ 501.291604][T15588] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3298'. [ 501.306756][T15592] CPU: 1 PID: 15592 Comm: syz.5.3301 Not tainted syzkaller #0 [ 501.314276][T15592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 501.324360][T15592] Call Trace: [ 501.327661][T15592] [ 501.330640][T15592] dump_stack_lvl+0x16c/0x230 [ 501.335354][T15592] ? show_regs_print_info+0x20/0x20 [ 501.340588][T15592] ? load_image+0x3b0/0x3b0 [ 501.345133][T15592] ? mark_lock+0x94/0x320 [ 501.349516][T15592] should_fail_ex+0x39d/0x4d0 [ 501.354231][T15592] should_failslab+0x9/0x20 [ 501.358766][T15592] slab_pre_alloc_hook+0x59/0x310 [ 501.363832][T15592] ? sctp_add_bind_addr+0x8c/0x360 [ 501.368988][T15592] __kmem_cache_alloc_node+0x53/0x260 [ 501.374427][T15592] ? sctp_add_bind_addr+0x8c/0x360 [ 501.379588][T15592] kmalloc_trace+0x2a/0xe0 [ 501.384042][T15592] sctp_add_bind_addr+0x8c/0x360 [ 501.389061][T15592] sctp_copy_local_addr_list+0x30c/0x4e0 [ 501.394743][T15592] ? sctp_copy_local_addr_list+0x9c/0x4e0 [ 501.400495][T15592] ? sctp_do_8_2_transport_strike+0x8b0/0x8b0 [ 501.406611][T15592] ? sctp_v4_is_any+0x35/0x60 [ 501.411324][T15592] ? sctp_copy_one_addr+0x8c/0x350 [ 501.416469][T15592] sctp_bind_addr_copy+0xb3/0x3c0 [ 501.421512][T15592] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 501.427846][T15592] sctp_connect_new_asoc+0x2da/0x690 [ 501.433140][T15592] ? __sctp_connect+0xd20/0xd20 [ 501.438003][T15592] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 501.443561][T15592] ? security_sctp_bind_connect+0x89/0xb0 [ 501.449726][T15592] sctp_sendmsg+0x155c/0x27e0 [ 501.454413][T15592] ? sctp_getsockopt+0xb60/0xb60 [ 501.459359][T15592] ? aa_sk_perm+0x7fc/0x930 [ 501.463882][T15592] ? aa_af_perm+0x2b0/0x2b0 [ 501.468411][T15592] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 501.474857][T15592] ? sock_rps_record_flow+0x19/0x400 [ 501.480169][T15592] ? inet_send_prepare+0x260/0x260 [ 501.485308][T15592] ? inet_sendmsg+0x7c/0x2f0 [ 501.489936][T15592] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 501.495227][T15592] ? security_socket_sendmsg+0x80/0xa0 [ 501.500689][T15592] ? inet_send_prepare+0x260/0x260 [ 501.505806][T15592] ____sys_sendmsg+0x5bf/0x950 [ 501.510607][T15592] ? __asan_memset+0x22/0x40 [ 501.515201][T15592] ? __sys_sendmsg_sock+0x30/0x30 [ 501.520236][T15592] ? __import_iovec+0x5f2/0x860 [ 501.525103][T15592] ? import_iovec+0x73/0xa0 [ 501.529629][T15592] ___sys_sendmsg+0x220/0x290 [ 501.534317][T15592] ? __sys_sendmsg+0x270/0x270 [ 501.539120][T15592] __se_sys_sendmsg+0x1a5/0x270 [ 501.543978][T15592] ? __x64_sys_sendmsg+0x80/0x80 [ 501.548938][T15592] ? syscall_enter_from_user_mode+0x2e/0x80 [ 501.554841][T15592] do_syscall_64+0x55/0xb0 [ 501.559262][T15592] ? clear_bhb_loop+0x40/0x90 [ 501.563941][T15592] ? clear_bhb_loop+0x40/0x90 [ 501.568628][T15592] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 501.574530][T15592] RIP: 0033:0x7f55b558f749 [ 501.578955][T15592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.598742][T15592] RSP: 002b:00007f55b63f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 501.607161][T15592] RAX: ffffffffffffffda RBX: 00007f55b57e5fa0 RCX: 00007f55b558f749 [ 501.615160][T15592] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 501.623141][T15592] RBP: 00007f55b63f6090 R08: 0000000000000000 R09: 0000000000000000 [ 501.631131][T15592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.639101][T15592] R13: 00007f55b57e6038 R14: 00007f55b57e5fa0 R15: 00007fff2c073478 [ 501.647086][T15592] [ 501.657801][T15594] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3298'. [ 501.676927][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.685188][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.165767][T15610] netlink: 'syz.5.3305': attribute type 10 has an invalid length. [ 502.711589][T15627] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3312'. [ 502.726928][T15627] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3312'. [ 502.794977][T15627] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.3312'. [ 502.821209][T15627] netlink: 6332 bytes leftover after parsing attributes in process `syz.2.3312'. [ 503.453490][T15644] netlink: 'syz.5.3320': attribute type 10 has an invalid length. [ 503.964366][T15663] netlink: 'syz.5.3327': attribute type 10 has an invalid length. [ 504.068078][T15668] .`: entered promiscuous mode [ 504.077511][T15668] bond_slave_0: entered promiscuous mode [ 504.119209][T15668] bond_slave_1: entered promiscuous mode [ 504.125294][T15668] batadv0: entered promiscuous mode [ 504.143560][T15668] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 504.193492][T15671] netlink: 'syz.2.3329': attribute type 2 has an invalid length. [ 504.244884][T15671] netlink: 'syz.2.3329': attribute type 1 has an invalid length. [ 504.680226][T15686] netlink: 'syz.5.3333': attribute type 21 has an invalid length. [ 504.827025][T15691] netlink: 'syz.2.3335': attribute type 10 has an invalid length. [ 505.464625][T15711] netlink: 'syz.2.3342': attribute type 10 has an invalid length. [ 506.041239][T15733] netlink: 'syz.5.3349': attribute type 10 has an invalid length. [ 506.340103][T15746] netlink: 'syz.6.3359': attribute type 10 has an invalid length. [ 506.383399][T15746] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 506.525780][T15749] netlink: 'syz.2.3352': attribute type 33 has an invalid length. [ 506.594496][T15749] __nla_validate_parse: 5 callbacks suppressed [ 506.594516][T15749] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3352'. [ 507.673382][T15790] netlink: 'syz.5.3367': attribute type 10 has an invalid length. [ 507.886100][T15795] netlink: 830 bytes leftover after parsing attributes in process `syz.6.3369'. [ 508.018347][T15770] delete_channel: no stack [ 508.054715][T15803] netlink: 'syz.4.3372': attribute type 19 has an invalid length. [ 508.232059][T15813] FAULT_INJECTION: forcing a failure. [ 508.232059][T15813] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 508.245763][T15813] CPU: 0 PID: 15813 Comm: syz.2.3376 Not tainted syzkaller #0 [ 508.253253][T15813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 508.263351][T15813] Call Trace: [ 508.266661][T15813] [ 508.269616][T15813] dump_stack_lvl+0x16c/0x230 [ 508.274326][T15813] ? show_regs_print_info+0x20/0x20 [ 508.279562][T15813] ? load_image+0x3b0/0x3b0 [ 508.284118][T15813] ? __lock_acquire+0x7c80/0x7c80 [ 508.289177][T15813] should_fail_ex+0x39d/0x4d0 [ 508.293890][T15813] prepare_alloc_pages+0x1e2/0x5f0 [ 508.299039][T15813] __alloc_pages+0x127/0x460 [ 508.303681][T15813] ? rcu_is_watching+0x15/0xb0 [ 508.308476][T15813] ? zone_statistics+0x170/0x170 [ 508.313538][T15813] ? __build_skb_around+0x255/0x3d0 [ 508.318790][T15813] alloc_skb_with_frags+0x23c/0x7c0 [ 508.324026][T15813] sock_alloc_send_pskb+0x857/0x990 [ 508.329289][T15813] ? sock_kzfree_s+0x50/0x50 [ 508.333930][T15813] tun_get_user+0x9dc/0x3bf0 [ 508.338555][T15813] ? aa_file_perm+0x120/0xec0 [ 508.343281][T15813] ? aa_file_perm+0x3e8/0xec0 [ 508.347994][T15813] ? rcu_read_unlock+0xa0/0xa0 [ 508.352815][T15813] ? tun_get+0x1c/0x2e0 [ 508.357014][T15813] ? __lock_acquire+0x7c80/0x7c80 [ 508.362071][T15813] ? tun_get+0x1c/0x2e0 [ 508.366272][T15813] tun_chr_write_iter+0x119/0x200 [ 508.371323][T15813] vfs_write+0x43b/0x940 [ 508.375596][T15813] ? file_end_write+0x250/0x250 [ 508.380478][T15813] ? __fget_files+0x44a/0x4d0 [ 508.385187][T15813] ? __fdget_pos+0x1d8/0x330 [ 508.389799][T15813] ? ksys_write+0x75/0x250 [ 508.394251][T15813] ksys_write+0x147/0x250 [ 508.398636][T15813] ? __ia32_sys_read+0x90/0x90 [ 508.403438][T15813] ? lockdep_hardirqs_on+0x98/0x150 [ 508.408693][T15813] do_syscall_64+0x55/0xb0 [ 508.413147][T15813] ? clear_bhb_loop+0x40/0x90 [ 508.417857][T15813] ? clear_bhb_loop+0x40/0x90 [ 508.422562][T15813] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 508.428490][T15813] RIP: 0033:0x7f1c7cb8f749 [ 508.432937][T15813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 508.452579][T15813] RSP: 002b:00007f1c7daa0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 508.461036][T15813] RAX: ffffffffffffffda RBX: 00007f1c7cde5fa0 RCX: 00007f1c7cb8f749 [ 508.469043][T15813] RDX: 000000000000fdef RSI: 00002000000004c0 RDI: 00000000000000c8 [ 508.477036][T15813] RBP: 00007f1c7daa0090 R08: 0000000000000000 R09: 0000000000000000 [ 508.485025][T15813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.493019][T15813] R13: 00007f1c7cde6038 R14: 00007f1c7cde5fa0 R15: 00007fffe17bfe68 [ 508.501043][T15813] [ 508.780157][T15821] FAULT_INJECTION: forcing a failure. [ 508.780157][T15821] name failslab, interval 1, probability 0, space 0, times 0 [ 508.812262][T15821] CPU: 0 PID: 15821 Comm: syz.5.3378 Not tainted syzkaller #0 [ 508.819807][T15821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 508.829892][T15821] Call Trace: [ 508.833202][T15821] [ 508.836158][T15821] dump_stack_lvl+0x16c/0x230 [ 508.840871][T15821] ? show_regs_print_info+0x20/0x20 [ 508.846105][T15821] ? load_image+0x3b0/0x3b0 [ 508.850648][T15821] ? __might_sleep+0xe0/0xe0 [ 508.855273][T15821] ? __lock_acquire+0x7c80/0x7c80 [ 508.860334][T15821] should_fail_ex+0x39d/0x4d0 [ 508.865051][T15821] should_failslab+0x9/0x20 [ 508.869585][T15821] slab_pre_alloc_hook+0x59/0x310 [ 508.874634][T15821] ? kvmalloc_node+0x70/0x180 [ 508.879314][T15821] ? kvmalloc_node+0x70/0x180 [ 508.883995][T15821] __kmem_cache_alloc_node+0x53/0x260 [ 508.889376][T15821] ? kvmalloc_node+0x70/0x180 [ 508.894056][T15821] __kmalloc_node+0xa4/0x230 [ 508.898653][T15821] kvmalloc_node+0x70/0x180 [ 508.903168][T15821] page_pool_create+0x1eb/0x5c0 [ 508.908036][T15821] bpf_test_run_xdp_live+0x1c1/0x1a20 [ 508.913433][T15821] ? verify_lock_unused+0x140/0x140 [ 508.918656][T15821] ? kasan_set_track+0x5f/0x70 [ 508.923437][T15821] ? kasan_set_track+0x4e/0x70 [ 508.928307][T15821] ? __kasan_kmalloc+0x8f/0xa0 [ 508.933094][T15821] ? __kmalloc+0xb4/0x240 [ 508.937448][T15821] ? bpf_prog_test_run_xdp+0x382/0xfa0 [ 508.942925][T15821] ? bpf_prog_test_run+0x321/0x390 [ 508.948051][T15821] ? __sys_bpf+0x440/0x800 [ 508.952474][T15821] ? __x64_sys_bpf+0x7c/0x90 [ 508.957074][T15821] ? do_syscall_64+0x55/0xb0 [ 508.961688][T15821] ? xdp_convert_md_to_buff+0x330/0x330 [ 508.967267][T15821] ? __lock_acquire+0x7c80/0x7c80 [ 508.972314][T15821] ? __virt_addr_valid+0x18c/0x540 [ 508.977449][T15821] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 508.983706][T15821] ? _copy_from_user+0xa5/0xe0 [ 508.988498][T15821] ? bpf_test_init+0x134/0x150 [ 508.993275][T15821] ? xdp_convert_md_to_buff+0x5b/0x330 [ 508.998756][T15821] bpf_prog_test_run_xdp+0x76c/0xfa0 [ 509.004088][T15821] ? dev_put+0x80/0x80 [ 509.008191][T15821] ? dev_put+0x80/0x80 [ 509.012298][T15821] bpf_prog_test_run+0x321/0x390 [ 509.017251][T15821] __sys_bpf+0x440/0x800 [ 509.021502][T15821] ? bpf_link_show_fdinfo+0x350/0x350 [ 509.026891][T15821] ? lock_chain_count+0x20/0x20 [ 509.031754][T15821] __x64_sys_bpf+0x7c/0x90 [ 509.036177][T15821] do_syscall_64+0x55/0xb0 [ 509.040606][T15821] ? clear_bhb_loop+0x40/0x90 [ 509.045293][T15821] ? clear_bhb_loop+0x40/0x90 [ 509.049983][T15821] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 509.055888][T15821] RIP: 0033:0x7f55b558f749 [ 509.060316][T15821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.079933][T15821] RSP: 002b:00007f55b63f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 509.088377][T15821] RAX: ffffffffffffffda RBX: 00007f55b57e5fa0 RCX: 00007f55b558f749 [ 509.096354][T15821] RDX: 0000000000000050 RSI: 0000200000000b00 RDI: 000000000000000a [ 509.104329][T15821] RBP: 00007f55b63f6090 R08: 0000000000000000 R09: 0000000000000000 [ 509.112316][T15821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.120299][T15821] R13: 00007f55b57e6038 R14: 00007f55b57e5fa0 R15: 00007fff2c073478 [ 509.128302][T15821] [ 509.150869][T15821] page_pool_create() gave up with errno -12 [ 509.432162][T15842] netlink: 830 bytes leftover after parsing attributes in process `syz.6.3383'. [ 509.541495][T15842] team0: default FDB implementation only supports local addresses [ 510.799230][T15871] syzkaller0: entered promiscuous mode [ 510.818897][T15871] syzkaller0: entered allmulticast mode [ 511.008808][T15884] FAULT_INJECTION: forcing a failure. [ 511.008808][T15884] name failslab, interval 1, probability 0, space 0, times 0 [ 511.049590][T15884] CPU: 1 PID: 15884 Comm: syz.5.3399 Not tainted syzkaller #0 [ 511.057117][T15884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 511.067202][T15884] Call Trace: [ 511.070504][T15884] [ 511.073471][T15884] dump_stack_lvl+0x16c/0x230 [ 511.078199][T15884] ? sctp_sendmsg+0x155c/0x27e0 [ 511.083082][T15884] ? ___sys_sendmsg+0x220/0x290 [ 511.087989][T15884] ? show_regs_print_info+0x20/0x20 [ 511.093231][T15884] ? load_image+0x3b0/0x3b0 [ 511.097793][T15884] should_fail_ex+0x39d/0x4d0 [ 511.102516][T15884] should_failslab+0x9/0x20 [ 511.107064][T15884] slab_pre_alloc_hook+0x59/0x310 [ 511.112142][T15884] ? sctp_add_bind_addr+0x8c/0x360 [ 511.117306][T15884] __kmem_cache_alloc_node+0x53/0x260 [ 511.122741][T15884] ? sctp_add_bind_addr+0x8c/0x360 [ 511.127920][T15884] kmalloc_trace+0x2a/0xe0 [ 511.132385][T15884] sctp_add_bind_addr+0x8c/0x360 [ 511.137382][T15884] sctp_copy_local_addr_list+0x30c/0x4e0 [ 511.143060][T15884] ? sctp_copy_local_addr_list+0x9c/0x4e0 [ 511.148833][T15884] ? sctp_do_8_2_transport_strike+0x8b0/0x8b0 [ 511.154953][T15884] ? sctp_v6_is_any+0x64/0x70 [ 511.159668][T15884] ? sctp_copy_one_addr+0x8c/0x350 [ 511.164819][T15884] sctp_bind_addr_copy+0xb3/0x3c0 [ 511.169876][T15884] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 511.176253][T15884] sctp_connect_new_asoc+0x2da/0x690 [ 511.181574][T15884] ? __sctp_connect+0xd20/0xd20 [ 511.186450][T15884] ? __local_bh_enable_ip+0x12e/0x1c0 [ 511.191854][T15884] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 511.197434][T15884] ? security_sctp_bind_connect+0x89/0xb0 [ 511.203190][T15884] sctp_sendmsg+0x155c/0x27e0 [ 511.207918][T15884] ? sctp_getsockopt+0xb60/0xb60 [ 511.212893][T15884] ? perf_trace_lock+0xf7/0x380 [ 511.217789][T15884] ? aa_sk_perm+0x7fc/0x930 [ 511.222359][T15884] ? aa_af_perm+0x2b0/0x2b0 [ 511.226901][T15884] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 511.233366][T15884] ? sock_rps_record_flow+0x19/0x400 [ 511.238690][T15884] ? inet_send_prepare+0x260/0x260 [ 511.243833][T15884] ? inet_sendmsg+0xe9/0x2f0 [ 511.248453][T15884] ? inet_send_prepare+0x260/0x260 [ 511.253612][T15884] ____sys_sendmsg+0x5bf/0x950 [ 511.258414][T15884] ? __asan_memset+0x22/0x40 [ 511.263047][T15884] ? __sys_sendmsg_sock+0x30/0x30 [ 511.268129][T15884] ? __import_iovec+0x5f2/0x860 [ 511.273040][T15884] ? import_iovec+0x73/0xa0 [ 511.277591][T15884] ___sys_sendmsg+0x220/0x290 [ 511.282325][T15884] ? __sys_sendmsg+0x270/0x270 [ 511.287157][T15884] ? __lock_acquire+0x7c80/0x7c80 [ 511.292240][T15884] __se_sys_sendmsg+0x1a5/0x270 [ 511.297161][T15884] ? __x64_sys_sendmsg+0x80/0x80 [ 511.302160][T15884] ? lockdep_hardirqs_on+0x98/0x150 [ 511.307402][T15884] do_syscall_64+0x55/0xb0 [ 511.311857][T15884] ? clear_bhb_loop+0x40/0x90 [ 511.316574][T15884] ? clear_bhb_loop+0x40/0x90 [ 511.321282][T15884] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 511.327202][T15884] RIP: 0033:0x7f55b558f749 [ 511.331643][T15884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.351274][T15884] RSP: 002b:00007f55b63d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 511.359716][T15884] RAX: ffffffffffffffda RBX: 00007f55b57e6090 RCX: 00007f55b558f749 [ 511.367720][T15884] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000005 [ 511.375717][T15884] RBP: 00007f55b63d5090 R08: 0000000000000000 R09: 0000000000000000 [ 511.383717][T15884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 511.391716][T15884] R13: 00007f55b57e6128 R14: 00007f55b57e6090 R15: 00007fff2c073478 [ 511.399738][T15884] [ 513.958216][T15894] netlink: 'syz.6.3400': attribute type 10 has an invalid length. [ 513.966404][T15894] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 514.162459][T15911] netlink: 'syz.2.3409': attribute type 1 has an invalid length. [ 514.213355][T15911] netlink: 'syz.2.3409': attribute type 1 has an invalid length. [ 514.226301][T15915] syz.4.3410[15915] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 514.226518][T15915] syz.4.3410[15915] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 514.638162][T15936] netlink: 'syz.5.3417': attribute type 10 has an invalid length. [ 515.273486][T15969] netlink: 14601 bytes leftover after parsing attributes in process `syz.6.3431'. [ 515.303686][T15969] netlink: 14601 bytes leftover after parsing attributes in process `syz.6.3431'. [ 515.352807][T15973] netlink: 'syz.5.3430': attribute type 10 has an invalid length. [ 515.976397][T15996] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3438'. [ 516.377540][T16004] netlink: 'syz.2.3443': attribute type 4 has an invalid length. [ 516.533120][T16009] netlink: 'syz.6.3444': attribute type 10 has an invalid length. [ 516.554069][T16009] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 516.867297][T16022] netlink: 'syz.5.3446': attribute type 10 has an invalid length. [ 517.227817][T16036] netlink: 'syz.4.3452': attribute type 10 has an invalid length. [ 517.244326][T16036] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3452'. [ 517.267395][T16036] veth0_macvtap: left promiscuous mode [ 518.054401][T16073] syz.4.3470[16073] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 518.055695][T16073] syz.4.3470[16073] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 518.332325][T16084] netlink: 'syz.2.3472': attribute type 10 has an invalid length. [ 518.807694][T16091] netlink: 197276 bytes leftover after parsing attributes in process `syz.6.3476'. [ 519.118630][ T5804] Bluetooth: hci3: command 0x0406 tx timeout [ 519.352779][T16106] FAULT_INJECTION: forcing a failure. [ 519.352779][T16106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.366322][T16106] CPU: 1 PID: 16106 Comm: syz.4.3482 Not tainted syzkaller #0 [ 519.373814][T16106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 519.383890][T16106] Call Trace: [ 519.387206][T16106] [ 519.390174][T16106] dump_stack_lvl+0x16c/0x230 [ 519.394906][T16106] ? show_regs_print_info+0x20/0x20 [ 519.400133][T16106] ? load_image+0x3b0/0x3b0 [ 519.404673][T16106] ? __might_fault+0xaa/0x120 [ 519.409374][T16106] ? __lock_acquire+0x7c80/0x7c80 [ 519.414431][T16106] should_fail_ex+0x39d/0x4d0 [ 519.419158][T16106] _copy_from_user+0x2f/0xe0 [ 519.423778][T16106] generic_map_update_batch+0x53f/0x810 [ 519.429375][T16106] ? rcu_read_unlock+0xa0/0xa0 [ 519.434182][T16106] ? __fdget+0x180/0x210 [ 519.438458][T16106] ? rcu_read_unlock+0xa0/0xa0 [ 519.443253][T16106] bpf_map_do_batch+0x3d7/0x610 [ 519.448144][T16106] __sys_bpf+0x31b/0x800 [ 519.452424][T16106] ? bpf_link_show_fdinfo+0x350/0x350 [ 519.457844][T16106] ? lock_chain_count+0x20/0x20 [ 519.462728][T16106] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 519.468752][T16106] __x64_sys_bpf+0x7c/0x90 [ 519.473197][T16106] do_syscall_64+0x55/0xb0 [ 519.477675][T16106] ? clear_bhb_loop+0x40/0x90 [ 519.482369][T16106] ? clear_bhb_loop+0x40/0x90 [ 519.487065][T16106] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 519.492986][T16106] RIP: 0033:0x7fa9ab18f749 [ 519.497411][T16106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.517021][T16106] RSP: 002b:00007fa9ac00e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 519.525529][T16106] RAX: ffffffffffffffda RBX: 00007fa9ab3e5fa0 RCX: 00007fa9ab18f749 [ 519.533509][T16106] RDX: 0000000000000038 RSI: 0000200000000380 RDI: 000000000000001a [ 519.541491][T16106] RBP: 00007fa9ac00e090 R08: 0000000000000000 R09: 0000000000000000 [ 519.549460][T16106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.557436][T16106] R13: 00007fa9ab3e6038 R14: 00007fa9ab3e5fa0 R15: 00007ffd161562f8 [ 519.565422][T16106] [ 519.741320][T16113] validate_nla: 1 callbacks suppressed [ 519.741337][T16113] netlink: 'syz.2.3485': attribute type 4 has an invalid length. [ 520.053901][T16119] netlink: 'syz.4.3486': attribute type 10 has an invalid length. [ 520.081691][T16119] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 520.868206][T16140] delete_channel: no stack [ 520.873682][T16140] delete_channel: no stack [ 521.383852][T16160] netlink: 'syz.4.3504': attribute type 10 has an invalid length. [ 521.428848][T16160] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3504'. [ 521.890700][T16180] netlink: 'syz.4.3513': attribute type 25 has an invalid length. [ 521.920432][T16180] netlink: 'syz.4.3513': attribute type 1 has an invalid length. [ 521.950518][T16180] bridge0: port 1(bridge_slave_0) entered learning state [ 523.059624][T16208] netlink: 'syz.6.3522': attribute type 10 has an invalid length. [ 523.148261][T16211] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.3523'. [ 523.674605][T16221] netlink: 'syz.5.3525': attribute type 10 has an invalid length. [ 523.955710][T16227] netlink: 'syz.4.3529': attribute type 10 has an invalid length. [ 523.981350][T16227] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 524.548150][T16252] netlink: 'syz.4.3539': attribute type 10 has an invalid length. [ 524.623952][T16252] .`: (slave ªªªªªª): Releasing backup interface [ 524.648498][T16252] netdevsim netdevsim4 ªªªªªª: left promiscuous mode [ 524.679869][T16252] `: Port device ªªªªªª added [ 524.788414][T16261] netlink: 'syz.2.3541': attribute type 10 has an invalid length. [ 525.425852][T16279] netlink: 'syz.2.3542': attribute type 10 has an invalid length. [ 525.960078][T16297] netlink: 'syz.4.3551': attribute type 10 has an invalid length. [ 525.985311][T16297] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 527.320318][T16322] syzkaller0: entered promiscuous mode [ 527.331654][T16322] syzkaller0: entered allmulticast mode [ 529.645175][T16360] netlink: 'syz.5.3577': attribute type 10 has an invalid length. [ 529.892947][T16364] netlink: 'syz.6.3578': attribute type 25 has an invalid length. [ 530.361982][T16392] netlink: 'syz.5.3588': attribute type 10 has an invalid length. [ 530.607476][T16402] netlink: 'syz.2.3594': attribute type 10 has an invalid length. [ 530.616553][T16402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.916218][T16402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.056518][T16402] batadv_slave_0: entered promiscuous mode [ 531.068712][T16402] .`: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 531.325856][T16419] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3599'. [ 531.430210][T16425] netlink: 'syz.2.3599': attribute type 2 has an invalid length. [ 531.486960][T16425] netlink: 'syz.2.3599': attribute type 1 has an invalid length. [ 531.906741][T16440] netlink: 'syz.2.3604': attribute type 10 has an invalid length. [ 532.480446][T16455] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.3611'. [ 532.780285][T16463] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3614'. [ 535.408200][T16473] netlink: 'syz.4.3615': attribute type 27 has an invalid length. [ 535.416272][T16473] netlink: 'syz.4.3615': attribute type 4 has an invalid length. [ 535.424364][T16473] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3615'. [ 535.437990][T16480] netlink: 'syz.6.3618': attribute type 10 has an invalid length. [ 535.446681][T16480] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 535.461151][T16487] netlink: 65051 bytes leftover after parsing attributes in process `syz.5.3621'. [ 535.620281][T16493] netlink: 'syz.6.3624': attribute type 1 has an invalid length. [ 535.661532][T16493] netlink: 'syz.6.3624': attribute type 17 has an invalid length. [ 535.690372][T16493] netlink: 'syz.6.3624': attribute type 16 has an invalid length. [ 535.707264][T16493] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3624'. [ 536.033778][T16510] FAULT_INJECTION: forcing a failure. [ 536.033778][T16510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.055073][T16512] netlink: 'syz.4.3629': attribute type 10 has an invalid length. [ 536.071985][T16510] CPU: 1 PID: 16510 Comm: syz.2.3631 Not tainted syzkaller #0 [ 536.079504][T16510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 536.079683][T16512] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 536.089581][T16510] Call Trace: [ 536.089593][T16510] [ 536.089602][T16510] dump_stack_lvl+0x16c/0x230 [ 536.089638][T16510] ? show_regs_print_info+0x20/0x20 [ 536.089667][T16510] ? load_image+0x3b0/0x3b0 [ 536.089692][T16510] ? __might_fault+0xaa/0x120 [ 536.127355][T16510] ? __lock_acquire+0x7c80/0x7c80 [ 536.132425][T16510] should_fail_ex+0x39d/0x4d0 [ 536.137163][T16510] _copy_from_iter+0x1d3/0x1290 [ 536.142055][T16510] ? __virt_addr_valid+0x18c/0x540 [ 536.147203][T16510] ? __lock_acquire+0x7c80/0x7c80 [ 536.152256][T16510] ? sock_alloc_send_pskb+0x875/0x990 [ 536.157686][T16510] ? copyout_mc+0x70/0x70 [ 536.162046][T16510] ? __virt_addr_valid+0x18c/0x540 [ 536.167188][T16510] ? __virt_addr_valid+0x18c/0x540 [ 536.172335][T16510] ? __virt_addr_valid+0x469/0x540 [ 536.177508][T16510] ? __check_object_size+0x506/0xa30 [ 536.182840][T16510] skb_copy_datagram_from_iter+0xf4/0x6e0 [ 536.188599][T16510] ? skb_put+0x11b/0x210 [ 536.192873][T16510] tun_get_user+0x1583/0x3bf0 [ 536.197599][T16510] ? aa_file_perm+0x120/0xec0 [ 536.202331][T16510] ? aa_file_perm+0x3e8/0xec0 [ 536.207046][T16510] ? rcu_read_unlock+0xa0/0xa0 [ 536.211870][T16510] ? tun_get+0x1c/0x2e0 [ 536.216058][T16510] ? __lock_acquire+0x7c80/0x7c80 [ 536.221116][T16510] ? tun_get+0x1c/0x2e0 [ 536.225314][T16510] tun_chr_write_iter+0x119/0x200 [ 536.230378][T16510] vfs_write+0x43b/0x940 [ 536.234661][T16510] ? file_end_write+0x250/0x250 [ 536.239424][T16515] netlink: 65051 bytes leftover after parsing attributes in process `syz.5.3632'. [ 536.239527][T16510] ? __fget_files+0x44a/0x4d0 [ 536.253490][T16510] ? __fdget_pos+0x1d8/0x330 [ 536.258104][T16510] ? ksys_write+0x75/0x250 [ 536.262564][T16510] ksys_write+0x147/0x250 [ 536.266954][T16510] ? __ia32_sys_read+0x90/0x90 [ 536.271753][T16510] ? lockdep_hardirqs_on+0x98/0x150 [ 536.276981][T16510] do_syscall_64+0x55/0xb0 [ 536.281449][T16510] ? clear_bhb_loop+0x40/0x90 [ 536.286165][T16510] ? clear_bhb_loop+0x40/0x90 [ 536.290879][T16510] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 536.296795][T16510] RIP: 0033:0x7f1c7cb8f749 [ 536.301232][T16510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.320869][T16510] RSP: 002b:00007f1c7daa0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 536.329312][T16510] RAX: ffffffffffffffda RBX: 00007f1c7cde5fa0 RCX: 00007f1c7cb8f749 [ 536.337315][T16510] RDX: 000000000000fdef RSI: 00002000000004c0 RDI: 00000000000000c8 [ 536.345335][T16510] RBP: 00007f1c7daa0090 R08: 0000000000000000 R09: 0000000000000000 [ 536.353342][T16510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.361355][T16510] R13: 00007f1c7cde6038 R14: 00007f1c7cde5fa0 R15: 00007fffe17bfe68 [ 536.369378][T16510] [ 536.990927][T16543] netlink: 'syz.5.3642': attribute type 10 has an invalid length. [ 538.530019][T16585] netlink: 'syz.5.3659': attribute type 10 has an invalid length. [ 538.614844][T16586] netlink: 'syz.6.3658': attribute type 10 has an invalid length. [ 538.641483][T16586] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 538.682367][T16591] netlink: 16054 bytes leftover after parsing attributes in process `syz.2.3660'. [ 539.023036][T16602] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.3664'. [ 539.171566][T16613] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3666'. [ 540.033883][T16635] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 540.516515][T16645] validate_nla: 5 callbacks suppressed [ 540.516533][T16645] netlink: 'syz.6.3678': attribute type 10 has an invalid length. [ 540.560856][T16645] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 547.753905][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 547.831672][T16660] netlink: 'syz.4.3683': attribute type 30 has an invalid length. [ 548.043143][T16668] netlink: 65051 bytes leftover after parsing attributes in process `syz.5.3686'. [ 548.099617][T16669] team0: left allmulticast mode [ 548.112016][T16669] C: left allmulticast mode [ 548.122384][T16669] team_slave_1: left allmulticast mode [ 548.145014][T16669] team0: left promiscuous mode [ 548.162529][T16669] C: left promiscuous mode [ 548.169924][T16669] team_slave_1: left promiscuous mode [ 548.229922][T16669] bridge0: port 2(team0) entered disabled state [ 548.391970][T16669] veth0_to_bridge: left allmulticast mode [ 548.411226][T16669] veth0_to_bridge: left promiscuous mode [ 548.421454][T16669] bridge0: port 3(veth0_to_bridge) entered disabled state [ 548.433340][T16677] FAULT_INJECTION: forcing a failure. [ 548.433340][T16677] name failslab, interval 1, probability 0, space 0, times 0 [ 548.592357][T16677] CPU: 1 PID: 16677 Comm: syz.5.3690 Not tainted syzkaller #0 [ 548.599888][T16677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 548.606956][T16669] bridge_slave_0: left allmulticast mode [ 548.609969][T16677] Call Trace: [ 548.609982][T16677] [ 548.609992][T16677] dump_stack_lvl+0x16c/0x230 [ 548.610039][T16677] ? show_regs_print_info+0x20/0x20 [ 548.616406][T16669] bridge_slave_0: left promiscuous mode [ 548.619067][T16677] ? load_image+0x3b0/0x3b0 [ 548.619101][T16677] ? __lock_acquire+0x7c80/0x7c80 [ 548.629517][T16669] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.631903][T16677] should_fail_ex+0x39d/0x4d0 [ 548.631944][T16677] should_failslab+0x9/0x20 [ 548.631973][T16677] slab_pre_alloc_hook+0x59/0x310 [ 548.668345][T16677] ? map_create+0x877/0x12f0 [ 548.672968][T16677] ? __sys_bpf+0x5f0/0x800 [ 548.677417][T16677] ? __x64_sys_bpf+0x7c/0x90 [ 548.682042][T16677] kmem_cache_alloc_node+0x60/0x330 [ 548.687282][T16677] ? alloc_vmap_area+0x1c4/0x1c70 [ 548.692351][T16677] alloc_vmap_area+0x1c4/0x1c70 [ 548.697270][T16677] ? vm_map_ram+0xcb0/0xcb0 [ 548.701828][T16677] __get_vm_area_node+0x162/0x370 [ 548.706911][T16677] vmap+0x126/0x2a0 [ 548.710791][T16677] ? bpf_ringbuf_alloc+0x33b/0x560 [ 548.715945][T16677] bpf_ringbuf_alloc+0x33b/0x560 [ 548.720919][T16677] ringbuf_map_alloc+0x1c3/0x2f0 [ 548.725895][T16677] map_create+0x877/0x12f0 [ 548.730339][T16677] ? bpf_lsm_bpf+0x9/0x10 [ 548.734702][T16677] __sys_bpf+0x5f0/0x800 [ 548.738979][T16677] ? bpf_link_show_fdinfo+0x350/0x350 [ 548.744400][T16677] ? lock_chain_count+0x20/0x20 [ 548.749292][T16677] __x64_sys_bpf+0x7c/0x90 [ 548.753744][T16677] do_syscall_64+0x55/0xb0 [ 548.758200][T16677] ? clear_bhb_loop+0x40/0x90 [ 548.762914][T16677] ? clear_bhb_loop+0x40/0x90 [ 548.767644][T16677] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 548.773578][T16677] RIP: 0033:0x7f55b558f749 [ 548.778020][T16677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.797649][T16677] RSP: 002b:00007f55b63f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 548.806096][T16677] RAX: ffffffffffffffda RBX: 00007f55b57e5fa0 RCX: 00007f55b558f749 [ 548.814115][T16677] RDX: 0000000000000048 RSI: 00002000000009c0 RDI: 0000000000000000 [ 548.822129][T16677] RBP: 00007f55b63f6090 R08: 0000000000000000 R09: 0000000000000000 [ 548.830133][T16677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 548.838130][T16677] R13: 00007f55b57e6038 R14: 00007f55b57e5fa0 R15: 00007fff2c073478 [ 548.846153][T16677] [ 549.182180][T16675] netlink: 'syz.2.3689': attribute type 10 has an invalid length. [ 549.478613][T16697] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.3698'. [ 550.140845][T16722] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.3709'. [ 550.221865][T16726] netlink: 'syz.5.3705': attribute type 10 has an invalid length. [ 550.326639][T16725] netlink: 'syz.4.3710': attribute type 39 has an invalid length. [ 550.435864][T16732] syz.2.3712[16732] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 550.436104][T16732] syz.2.3712[16732] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 550.625598][T16734] pim6reg1: entered promiscuous mode [ 550.670331][T16734] pim6reg1: entered allmulticast mode [ 551.335711][T16767] netlink: 'syz.6.3723': attribute type 10 has an invalid length. [ 551.363645][T16767] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 551.912115][T16777] netlink: 164 bytes leftover after parsing attributes in process `syz.6.3727'. [ 551.948812][T16777] netlink: 10 bytes leftover after parsing attributes in process `syz.6.3727'. [ 552.003635][T16779] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3728'. [ 552.274612][T16785] netlink: 'syz.4.3732': attribute type 4 has an invalid length. [ 552.303203][T16783] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3730'. [ 552.318099][T16787] FAULT_INJECTION: forcing a failure. [ 552.318099][T16787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.332266][T16787] CPU: 0 PID: 16787 Comm: syz.5.3731 Not tainted syzkaller #0 [ 552.339754][T16787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 552.349827][T16787] Call Trace: [ 552.353126][T16787] [ 552.356075][T16787] dump_stack_lvl+0x16c/0x230 [ 552.360810][T16787] ? show_regs_print_info+0x20/0x20 [ 552.366048][T16787] ? load_image+0x3b0/0x3b0 [ 552.370587][T16787] ? __might_fault+0xaa/0x120 [ 552.375290][T16787] ? __lock_acquire+0x7c80/0x7c80 [ 552.380343][T16787] should_fail_ex+0x39d/0x4d0 [ 552.385060][T16787] _copy_from_user+0x2f/0xe0 [ 552.389678][T16787] generic_map_update_batch+0x58e/0x810 [ 552.395268][T16787] ? rcu_read_unlock+0xa0/0xa0 [ 552.400062][T16787] ? __fdget+0x180/0x210 [ 552.404335][T16787] ? rcu_read_unlock+0xa0/0xa0 [ 552.409129][T16787] bpf_map_do_batch+0x3d7/0x610 [ 552.414015][T16787] __sys_bpf+0x31b/0x800 [ 552.418279][T16787] ? bpf_link_show_fdinfo+0x350/0x350 [ 552.423684][T16787] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 552.429863][T16787] __x64_sys_bpf+0x7c/0x90 [ 552.434289][T16787] do_syscall_64+0x55/0xb0 [ 552.438708][T16787] ? clear_bhb_loop+0x40/0x90 [ 552.443400][T16787] ? clear_bhb_loop+0x40/0x90 [ 552.448084][T16787] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 552.454002][T16787] RIP: 0033:0x7f55b558f749 [ 552.458449][T16787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.478059][T16787] RSP: 002b:00007f55b63f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 552.486480][T16787] RAX: ffffffffffffffda RBX: 00007f55b57e5fa0 RCX: 00007f55b558f749 [ 552.494453][T16787] RDX: 0000000000000038 RSI: 0000200000000380 RDI: 000000000000001a [ 552.502427][T16787] RBP: 00007f55b63f6090 R08: 0000000000000000 R09: 0000000000000000 [ 552.510399][T16787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.518370][T16787] R13: 00007f55b57e6038 R14: 00007f55b57e5fa0 R15: 00007fff2c073478 [ 552.526355][T16787] [ 552.579202][T16789] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.587183][T16789] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.633903][T16789] bridge0: entered allmulticast mode [ 553.034734][T16808] netlink: 'syz.2.3735': attribute type 10 has an invalid length. [ 553.784432][T16830] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.3744'. [ 553.996919][T16834] netlink: 174904 bytes leftover after parsing attributes in process `syz.2.3746'. [ 554.048220][T16839] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3748'. [ 554.495910][T16859] netlink: 'syz.6.3752': attribute type 10 has an invalid length. [ 554.530779][T16859] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 554.614885][T16863] netlink: 'syz.4.3756': attribute type 21 has an invalid length. [ 554.667680][T16863] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3756'. [ 554.688546][T16863] netlink: 'syz.4.3756': attribute type 21 has an invalid length. [ 554.703563][T16863] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3756'. [ 554.715113][T16863] netlink: 'syz.4.3756': attribute type 21 has an invalid length. [ 554.730347][T16863] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3756'. [ 554.784309][T16863] netlink: 'syz.4.3756': attribute type 21 has an invalid length. [ 554.804333][T16863] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3756'. [ 554.821321][T16863] netlink: 'syz.4.3756': attribute type 21 has an invalid length. [ 554.835706][T16863] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3756'. [ 554.848459][T16863] netlink: 'syz.4.3756': attribute type 21 has an invalid length. [ 554.857078][T16863] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3756'. [ 554.866962][T16863] netlink: 'syz.4.3756': attribute type 21 has an invalid length. [ 554.877723][T16863] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3756'. [ 554.892723][T16863] netlink: 'syz.4.3756': attribute type 21 has an invalid length. [ 555.075427][T16875] bridge0: port 1(bridge_slave_0) entered learning state [ 555.111154][T16876] syz.4.3760[16876] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 555.111408][T16876] syz.4.3760[16876] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 556.310214][T16896] pim6reg1: entered promiscuous mode [ 556.381184][T16896] pim6reg1: entered allmulticast mode [ 557.044776][T16910] delete_channel: no stack [ 557.375163][T16923] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 557.391689][T16923] syzkaller1: group set to 0 [ 558.192637][T16966] sctp: [Deprecated]: syz.4.3793 (pid 16966) Use of int in max_burst socket option deprecated. [ 558.192637][T16966] Use struct sctp_assoc_value instead [ 558.691556][T16991] netdevsim netdevsim2: Direct firmware load for ß failed with error -2 [ 558.700537][T16991] netdevsim netdevsim2: Falling back to sysfs fallback for: ß [ 559.388547][T17028] __nla_validate_parse: 64 callbacks suppressed [ 559.388566][T17028] netlink: 129384 bytes leftover after parsing attributes in process `syz.5.3819'. [ 559.410337][T17028] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.3819'. [ 559.458689][T17031] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.3819'. [ 559.506629][T17028] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.3819'. [ 559.808179][T17042] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.3824'. [ 560.264402][T17057] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 561.231310][ T5796] Bluetooth: hci0: unexpected event 0x14 length: 15 > 6 [ 561.562217][T17097] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.3848'. [ 561.650282][T17103] FAULT_INJECTION: forcing a failure. [ 561.650282][T17103] name failslab, interval 1, probability 0, space 0, times 0 [ 561.673957][T17103] CPU: 1 PID: 17103 Comm: syz.5.3850 Not tainted syzkaller #0 [ 561.681555][T17103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 561.691636][T17103] Call Trace: [ 561.694938][T17103] [ 561.697893][T17103] dump_stack_lvl+0x16c/0x230 [ 561.702626][T17103] ? sctp_sendmsg+0x155c/0x27e0 [ 561.707506][T17103] ? ___sys_sendmsg+0x220/0x290 [ 561.712392][T17103] ? show_regs_print_info+0x20/0x20 [ 561.717635][T17103] ? load_image+0x3b0/0x3b0 [ 561.722178][T17103] should_fail_ex+0x39d/0x4d0 [ 561.726994][T17103] should_failslab+0x9/0x20 [ 561.731533][T17103] slab_pre_alloc_hook+0x59/0x310 [ 561.736609][T17103] ? sctp_add_bind_addr+0x8c/0x360 [ 561.741764][T17103] __kmem_cache_alloc_node+0x53/0x260 [ 561.747170][T17103] ? sctp_add_bind_addr+0x8c/0x360 [ 561.752326][T17103] kmalloc_trace+0x2a/0xe0 [ 561.756783][T17103] sctp_add_bind_addr+0x8c/0x360 [ 561.761764][T17103] sctp_copy_local_addr_list+0x30c/0x4e0 [ 561.767434][T17103] ? sctp_copy_local_addr_list+0x9c/0x4e0 [ 561.773195][T17103] ? sctp_do_8_2_transport_strike+0x8b0/0x8b0 [ 561.779309][T17103] ? sctp_v4_is_any+0x35/0x60 [ 561.784085][T17103] ? sctp_copy_one_addr+0x8c/0x350 [ 561.789367][T17103] sctp_bind_addr_copy+0xb3/0x3c0 [ 561.794423][T17103] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 561.800766][T17103] sctp_connect_new_asoc+0x2da/0x690 [ 561.806061][T17103] ? __sctp_connect+0xd20/0xd20 [ 561.810914][T17103] ? __local_bh_enable_ip+0x12e/0x1c0 [ 561.816309][T17103] ? _local_bh_enable+0xa0/0xa0 [ 561.821167][T17103] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 561.826986][T17103] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 561.832805][T17103] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 561.838362][T17103] ? security_sctp_bind_connect+0x89/0xb0 [ 561.844092][T17103] sctp_sendmsg+0x155c/0x27e0 [ 561.848783][T17103] ? sctp_getsockopt+0xb60/0xb60 [ 561.853726][T17103] ? aa_sk_perm+0x7fc/0x930 [ 561.858241][T17103] ? aa_af_perm+0x2b0/0x2b0 [ 561.862754][T17103] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 561.869189][T17103] ? sock_rps_record_flow+0x19/0x400 [ 561.874475][T17103] ? inet_send_prepare+0x260/0x260 [ 561.879589][T17103] ? inet_sendmsg+0x7c/0x2f0 [ 561.884192][T17103] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 561.889478][T17103] ? security_socket_sendmsg+0x80/0xa0 [ 561.894940][T17103] ? inet_send_prepare+0x260/0x260 [ 561.900054][T17103] ____sys_sendmsg+0x5bf/0x950 [ 561.904834][T17103] ? __asan_memset+0x22/0x40 [ 561.909451][T17103] ? __sys_sendmsg_sock+0x30/0x30 [ 561.914493][T17103] ? __import_iovec+0x5f2/0x860 [ 561.919374][T17103] ? import_iovec+0x73/0xa0 [ 561.923896][T17103] ___sys_sendmsg+0x220/0x290 [ 561.928589][T17103] ? __sys_sendmsg+0x270/0x270 [ 561.933419][T17103] __se_sys_sendmsg+0x1a5/0x270 [ 561.938286][T17103] ? __x64_sys_sendmsg+0x80/0x80 [ 561.943252][T17103] ? syscall_enter_from_user_mode+0x2e/0x80 [ 561.949153][T17103] do_syscall_64+0x55/0xb0 [ 561.953577][T17103] ? clear_bhb_loop+0x40/0x90 [ 561.958260][T17103] ? clear_bhb_loop+0x40/0x90 [ 561.962953][T17103] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 561.968854][T17103] RIP: 0033:0x7f55b558f749 [ 561.973276][T17103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.992899][T17103] RSP: 002b:00007f55b63f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 562.001323][T17103] RAX: ffffffffffffffda RBX: 00007f55b57e5fa0 RCX: 00007f55b558f749 [ 562.009294][T17103] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 562.017265][T17103] RBP: 00007f55b63f6090 R08: 0000000000000000 R09: 0000000000000000 [ 562.025240][T17103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.033215][T17103] R13: 00007f55b57e6038 R14: 00007f55b57e5fa0 R15: 00007fff2c073478 [ 562.041206][T17103] [ 562.329532][T17115] FAULT_INJECTION: forcing a failure. [ 562.329532][T17115] name failslab, interval 1, probability 0, space 0, times 0 [ 562.351991][T17116] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3855'. [ 562.361472][T17115] CPU: 1 PID: 17115 Comm: syz.2.3856 Not tainted syzkaller #0 [ 562.368960][T17115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 562.379043][T17115] Call Trace: [ 562.382351][T17115] [ 562.385325][T17115] dump_stack_lvl+0x16c/0x230 [ 562.390042][T17115] ? show_regs_print_info+0x20/0x20 [ 562.395268][T17115] ? load_image+0x3b0/0x3b0 [ 562.399816][T17115] should_fail_ex+0x39d/0x4d0 [ 562.404535][T17115] should_failslab+0x9/0x20 [ 562.409070][T17115] slab_pre_alloc_hook+0x59/0x310 [ 562.414136][T17115] ? find_exception+0x17a/0xa00 [ 562.419024][T17115] kmem_cache_alloc+0x5a/0x2e0 [ 562.423817][T17115] ? dst_alloc+0x105/0x170 [ 562.428287][T17115] dst_alloc+0x105/0x170 [ 562.432576][T17115] ip_route_output_key_hash_rcu+0x14f0/0x2360 [ 562.438693][T17115] ? ip_route_output_key_hash+0x12f/0x340 [ 562.444452][T17115] ip_route_output_key_hash+0x20b/0x340 [ 562.450033][T17115] ? ip_route_input_rcu+0x3010/0x3010 [ 562.455431][T17115] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 562.461446][T17115] ? lock_chain_count+0x20/0x20 [ 562.466336][T17115] ip_route_output_flow+0x2a/0x150 [ 562.471481][T17115] sctp_v4_get_dst+0x3cf/0x11c0 [ 562.476390][T17115] ? sctp_v4_xmit+0xe80/0xe80 [ 562.481088][T17115] ? rcu_force_quiescent_state+0x230/0x230 [ 562.486913][T17115] ? dst_release+0x121/0x1a0 [ 562.491516][T17115] sctp_transport_pmtu+0x12c/0x580 [ 562.496633][T17115] sctp_transport_route+0x184/0x2c0 [ 562.501840][T17115] sctp_assoc_add_peer+0x650/0x13a0 [ 562.507051][T17115] sctp_connect_new_asoc+0x304/0x690 [ 562.512355][T17115] ? __sctp_connect+0xd20/0xd20 [ 562.517240][T17115] ? __local_bh_enable_ip+0x12e/0x1c0 [ 562.522632][T17115] ? _local_bh_enable+0xa0/0xa0 [ 562.527498][T17115] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 562.533400][T17115] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 562.539213][T17115] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 562.544761][T17115] ? security_sctp_bind_connect+0x89/0xb0 [ 562.550489][T17115] sctp_sendmsg+0x155c/0x27e0 [ 562.555184][T17115] ? sctp_getsockopt+0xb60/0xb60 [ 562.560127][T17115] ? lock_chain_count+0x20/0x20 [ 562.564998][T17115] ? sctp_getsockopt+0xb60/0xb60 [ 562.569957][T17115] ? inet_send_prepare+0x260/0x260 [ 562.575080][T17115] ____sys_sendmsg+0x5bf/0x950 [ 562.579893][T17115] ? __asan_memset+0x22/0x40 [ 562.584506][T17115] ? __sys_sendmsg_sock+0x30/0x30 [ 562.589554][T17115] ? __import_iovec+0x5f2/0x860 [ 562.594448][T17115] ? import_iovec+0x73/0xa0 [ 562.598975][T17115] ___sys_sendmsg+0x220/0x290 [ 562.603683][T17115] ? __sys_sendmsg+0x270/0x270 [ 562.608464][T17115] ? perf_trace_preemptirq_template+0xa4/0x340 [ 562.614628][T17115] ? irqentry_enter+0x3b/0x50 [ 562.619349][T17115] __se_sys_sendmsg+0x1a5/0x270 [ 562.624226][T17115] ? __x64_sys_sendmsg+0x80/0x80 [ 562.629193][T17115] ? lockdep_hardirqs_on+0x98/0x150 [ 562.634402][T17115] do_syscall_64+0x55/0xb0 [ 562.638829][T17115] ? clear_bhb_loop+0x40/0x90 [ 562.643528][T17115] ? clear_bhb_loop+0x40/0x90 [ 562.648215][T17115] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 562.654117][T17115] RIP: 0033:0x7f1c7cb8f749 [ 562.658539][T17115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 562.678147][T17115] RSP: 002b:00007f1c7daa0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 562.686656][T17115] RAX: ffffffffffffffda RBX: 00007f1c7cde5fa0 RCX: 00007f1c7cb8f749 [ 562.694629][T17115] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 562.702603][T17115] RBP: 00007f1c7daa0090 R08: 0000000000000000 R09: 0000000000000000 [ 562.710580][T17115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 562.718562][T17115] R13: 00007f1c7cde6038 R14: 00007f1c7cde5fa0 R15: 00007fffe17bfe68 [ 562.726551][T17115] [ 563.127923][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.134370][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.274925][T17128] validate_nla: 62 callbacks suppressed [ 563.274944][T17128] netlink: 'syz.4.3860': attribute type 10 has an invalid length. [ 563.330646][T17128] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 563.481587][T17132] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3861'. [ 563.624961][T17134] netlink: 'syz.5.3861': attribute type 2 has an invalid length. [ 563.671170][T17134] netlink: 'syz.5.3861': attribute type 1 has an invalid length. [ 565.000380][T17160] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.3870'. [ 565.174123][T17164] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3871'. [ 565.540783][T17173] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3875'. [ 565.777592][T17177] FAULT_INJECTION: forcing a failure. [ 565.777592][T17177] name failslab, interval 1, probability 0, space 0, times 0 [ 565.818336][T17177] CPU: 0 PID: 17177 Comm: syz.6.3877 Not tainted syzkaller #0 [ 565.825860][T17177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 565.835935][T17177] Call Trace: [ 565.839240][T17177] [ 565.842206][T17177] dump_stack_lvl+0x16c/0x230 [ 565.846959][T17177] ? show_regs_print_info+0x20/0x20 [ 565.852202][T17177] ? load_image+0x3b0/0x3b0 [ 565.856752][T17177] ? trace_call_bpf+0xc3/0x690 [ 565.861553][T17177] ? __lock_acquire+0x7c80/0x7c80 [ 565.866621][T17177] should_fail_ex+0x39d/0x4d0 [ 565.871337][T17177] should_failslab+0x9/0x20 [ 565.875893][T17177] slab_pre_alloc_hook+0x59/0x310 [ 565.880972][T17177] kmem_cache_alloc_node+0x60/0x330 [ 565.886207][T17177] ? __alloc_skb+0x108/0x2c0 [ 565.890834][T17177] __alloc_skb+0x108/0x2c0 [ 565.895272][T17177] _sctp_make_chunk+0x5e/0x430 [ 565.900051][T17177] sctp_make_init+0x598/0xf10 [ 565.904747][T17177] ? sctp_addto_chunk+0x230/0x230 [ 565.909787][T17177] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 565.915955][T17177] sctp_sf_do_prm_asoc+0xd2/0x3e0 [ 565.920999][T17177] sctp_do_sm+0x1da/0x59a0 [ 565.925430][T17177] ? __stack_depot_save+0x1f/0x630 [ 565.930570][T17177] ? kasan_set_track+0x5f/0x70 [ 565.935335][T17177] ? kasan_set_track+0x4e/0x70 [ 565.940111][T17177] ? __kasan_kmalloc+0x8f/0xa0 [ 565.944919][T17177] ? sctp_stream_init_ext+0x57/0x170 [ 565.950415][T17177] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 565.956320][T17177] ? __se_sys_sendmsg+0x1a5/0x270 [ 565.961382][T17177] ? do_syscall_64+0x55/0xb0 [ 565.965988][T17177] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 565.972096][T17177] ? __sk_mem_raise_allocated+0xa88/0x1350 [ 565.977943][T17177] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 565.983336][T17177] sctp_sendmsg_to_asoc+0x101c/0x17f0 [ 565.988730][T17177] ? sctp_assoc_add_peer+0xcf3/0x13a0 [ 565.994122][T17177] ? sctp_sendmsg_check_sflags+0x2e0/0x2e0 [ 565.999945][T17177] ? __sctp_connect+0xd20/0xd20 [ 566.004812][T17177] ? _local_bh_enable+0xa0/0xa0 [ 566.009673][T17177] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 566.015509][T17177] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 566.021326][T17177] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 566.026883][T17177] ? security_sctp_bind_connect+0x89/0xb0 [ 566.032617][T17177] sctp_sendmsg+0x1941/0x27e0 [ 566.037306][T17177] ? sctp_getsockopt+0xb60/0xb60 [ 566.042269][T17177] ? lockdep_hardirqs_on+0x98/0x150 [ 566.047481][T17177] ? aa_sk_perm+0x7fc/0x930 [ 566.052003][T17177] ? aa_af_perm+0x2b0/0x2b0 [ 566.056517][T17177] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 566.062961][T17177] ? sock_rps_record_flow+0x19/0x400 [ 566.068263][T17177] ? inet_send_prepare+0x260/0x260 [ 566.073590][T17177] ? inet_sendmsg+0x7c/0x2f0 [ 566.078191][T17177] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 566.083483][T17177] ? security_socket_sendmsg+0x80/0xa0 [ 566.088945][T17177] ? inet_send_prepare+0x260/0x260 [ 566.094059][T17177] ____sys_sendmsg+0x5bf/0x950 [ 566.098842][T17177] ? __asan_memset+0x22/0x40 [ 566.103444][T17177] ? __sys_sendmsg_sock+0x30/0x30 [ 566.108497][T17177] ? __import_iovec+0x5f2/0x860 [ 566.113374][T17177] ? import_iovec+0x73/0xa0 [ 566.117906][T17177] ___sys_sendmsg+0x220/0x290 [ 566.122602][T17177] ? __sys_sendmsg+0x270/0x270 [ 566.127399][T17177] ? seqcount_lockdep_reader_access+0x160/0x1c0 [ 566.133675][T17177] __se_sys_sendmsg+0x1a5/0x270 [ 566.138556][T17177] ? perf_trace_preemptirq_template+0x281/0x340 [ 566.144831][T17177] ? __x64_sys_sendmsg+0x80/0x80 [ 566.149794][T17177] ? lockdep_hardirqs_on+0x98/0x150 [ 566.155001][T17177] do_syscall_64+0x55/0xb0 [ 566.159436][T17177] ? clear_bhb_loop+0x40/0x90 [ 566.164113][T17177] ? clear_bhb_loop+0x40/0x90 [ 566.168799][T17177] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 566.174698][T17177] RIP: 0033:0x7fb3cad8f749 [ 566.179118][T17177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 566.198733][T17177] RSP: 002b:00007fb3cbb3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 566.207163][T17177] RAX: ffffffffffffffda RBX: 00007fb3cafe5fa0 RCX: 00007fb3cad8f749 [ 566.215138][T17177] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 566.223117][T17177] RBP: 00007fb3cbb3e090 R08: 0000000000000000 R09: 0000000000000000 [ 566.231104][T17177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 566.239091][T17177] R13: 00007fb3cafe6038 R14: 00007fb3cafe5fa0 R15: 00007ffc1dad0528 [ 566.247079][T17177] [ 566.385333][T17179] netlink: 'syz.2.3874': attribute type 10 has an invalid length. [ 567.946146][T17228] netlink: 'syz.5.3892': attribute type 10 has an invalid length. [ 568.022851][T17221] netlink: 830 bytes leftover after parsing attributes in process `syz.6.3891'. [ 568.036722][T17221] team0: default FDB implementation only supports local addresses [ 568.187505][T17233] netlink: 'syz.2.3895': attribute type 33 has an invalid length. [ 568.207589][T17233] netlink: 'syz.2.3895': attribute type 3 has an invalid length. [ 568.220887][T17233] netlink: 153952 bytes leftover after parsing attributes in process `syz.2.3895'. [ 568.903829][T17274] netlink: 'syz.5.3909': attribute type 2 has an invalid length. [ 569.202627][T17288] netlink: 'syz.4.3913': attribute type 10 has an invalid length. [ 569.651580][T17298] sit0: entered allmulticast mode [ 569.715994][T17298] sit0: entered promiscuous mode [ 569.936046][ T5796] Bluetooth: hci2: ISO packet for unknown connection handle 3131 [ 570.328753][T17325] IPv6: NLM_F_CREATE should be specified when creating new route [ 570.361327][T17325] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3928'. [ 570.697847][T17334] syzkaller0: entered promiscuous mode [ 570.706396][T17334] syzkaller0: entered allmulticast mode [ 572.950337][T17374] netlink: 4068 bytes leftover after parsing attributes in process `syz.5.3946'. [ 572.988745][T17377] netlink: 'syz.6.3945': attribute type 10 has an invalid length. [ 573.031749][T17377] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 573.451495][T17390] syz.6.3951[17390] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 573.452001][T17390] syz.6.3951[17390] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 574.351808][T17417] netlink: 'syz.4.3960': attribute type 10 has an invalid length. [ 574.491317][T17417] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 575.202114][T17427] syz.5.3965[17427] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 575.202264][T17427] syz.5.3965[17427] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 575.417632][ T5804] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 575.445921][ T5804] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 575.454979][ T5804] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 575.473276][ T5804] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 575.491399][ T5804] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 575.498975][ T5804] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 575.640908][ T48] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.975238][ T48] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.591825][ T5796] Bluetooth: hci2: command tx timeout [ 578.340288][ T48] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.354782][T17455] netlink: 'syz.4.3971': attribute type 10 has an invalid length. [ 578.363454][T17455] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 578.503950][T17462] FAULT_INJECTION: forcing a failure. [ 578.503950][T17462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 578.517660][T17462] CPU: 0 PID: 17462 Comm: syz.4.3974 Not tainted syzkaller #0 [ 578.525205][T17462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 578.535283][T17462] Call Trace: [ 578.538576][T17462] [ 578.541527][T17462] dump_stack_lvl+0x16c/0x230 [ 578.546239][T17462] ? show_regs_print_info+0x20/0x20 [ 578.551455][T17462] ? load_image+0x3b0/0x3b0 [ 578.555988][T17462] ? __might_fault+0xaa/0x120 [ 578.560678][T17462] ? __lock_acquire+0x7c80/0x7c80 [ 578.565719][T17462] should_fail_ex+0x39d/0x4d0 [ 578.570416][T17462] _copy_from_user+0x2f/0xe0 [ 578.575025][T17462] generic_map_update_batch+0x53f/0x810 [ 578.580599][T17462] ? rcu_read_unlock+0xa0/0xa0 [ 578.585391][T17462] ? __fdget+0x180/0x210 [ 578.589653][T17462] ? rcu_read_unlock+0xa0/0xa0 [ 578.594427][T17462] bpf_map_do_batch+0x3d7/0x610 [ 578.599299][T17462] __sys_bpf+0x31b/0x800 [ 578.603555][T17462] ? bpf_link_show_fdinfo+0x350/0x350 [ 578.608949][T17462] ? lock_chain_count+0x20/0x20 [ 578.613807][T17462] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 578.619801][T17462] __x64_sys_bpf+0x7c/0x90 [ 578.624222][T17462] do_syscall_64+0x55/0xb0 [ 578.628646][T17462] ? clear_bhb_loop+0x40/0x90 [ 578.633332][T17462] ? clear_bhb_loop+0x40/0x90 [ 578.638022][T17462] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 578.643924][T17462] RIP: 0033:0x7fa9ab18f749 [ 578.648352][T17462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 578.667966][T17462] RSP: 002b:00007fa9ac00e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 578.676382][T17462] RAX: ffffffffffffffda RBX: 00007fa9ab3e5fa0 RCX: 00007fa9ab18f749 [ 578.684360][T17462] RDX: 0000000000000038 RSI: 0000200000000380 RDI: 000000000000001a [ 578.692341][T17462] RBP: 00007fa9ac00e090 R08: 0000000000000000 R09: 0000000000000000 [ 578.700335][T17462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 578.708328][T17462] R13: 00007fa9ab3e6038 R14: 00007fa9ab3e5fa0 R15: 00007ffd161562f8 [ 578.716331][T17462] [ 578.747035][ T48] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.053157][T17474] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3977'. [ 579.292930][T17430] chnl_net:caif_netlink_parms(): no params data found [ 579.465574][T17489] netlink: 'syz.5.3981': attribute type 10 has an invalid length. [ 579.681701][ T5796] Bluetooth: hci2: command tx timeout [ 579.880188][T17498] netlink: 'syz.2.3985': attribute type 10 has an invalid length. [ 580.378485][T17430] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.389704][T17430] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.398662][T17430] bridge_slave_0: entered allmulticast mode [ 580.415574][T17430] bridge_slave_0: entered promiscuous mode [ 580.425222][T17504] netlink: 'syz.5.3986': attribute type 21 has an invalid length. [ 580.434132][T17504] IPv6: NLM_F_CREATE should be specified when creating new route [ 580.591399][T17430] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.598793][T17430] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.621788][T17430] bridge_slave_1: entered allmulticast mode [ 580.634567][T17430] bridge_slave_1: entered promiscuous mode [ 580.715365][T17430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 580.730160][T17430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 580.803216][T17430] team0: Port device team_slave_0 added [ 580.970124][T17430] team0: Port device team_slave_1 added [ 581.162211][T17430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.177345][T17430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.210387][T17430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.233278][T17526] netlink: 'syz.4.3996': attribute type 2 has an invalid length. [ 581.258185][T17526] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3996'. [ 581.282788][T17430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.295706][T17430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.357308][T17430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.549660][T17430] hsr_slave_0: entered promiscuous mode [ 581.601909][T17430] hsr_slave_1: entered promiscuous mode [ 581.632618][T17538] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4001'. [ 581.635614][T17430] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 581.668569][T17430] Cannot create hsr debugfs directory [ 581.691140][T17538] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4001'. [ 581.751318][ T5796] Bluetooth: hci2: command tx timeout [ 581.768922][T17541] netlink: 'syz.2.4000': attribute type 2 has an invalid length. [ 581.780644][T17541] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4000'. [ 581.814009][T17538] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4001'. [ 581.950135][T17541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4000'. [ 582.222669][ T5796] Bluetooth: hci1: unexpected event 0x04 length: 151 > 10 [ 582.322937][ T48] veth0_to_team: left allmulticast mode [ 582.355698][ T48] veth0_to_team: left promiscuous mode [ 582.371594][ T48] Ÿë: port 1(veth0_to_team) entered disabled state [ 582.405914][ T48] hsr_slave_0: left promiscuous mode [ 582.445042][ T48] veth1_macvtap: left promiscuous mode [ 582.452676][ T48] veth1_vlan: left promiscuous mode [ 582.458231][ T48] veth0_vlan: left promiscuous mode [ 583.248798][ T48] team0 (unregistering): Port device team_slave_1 removed [ 583.295594][ T48] team0 (unregistering): Port device C removed [ 583.349871][ T48] .`` (unregistering): (slave bond_slave_1): Releasing backup interface [ 583.360056][ T48] bond_slave_1 (unregistering): left promiscuous mode [ 583.408653][ T48] .`` (unregistering): (slave bond_slave_0): Releasing backup interface [ 583.418516][ T48] bond_slave_0 (unregistering): left promiscuous mode [ 583.456403][ T48] .`` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 583.466717][ T48] bridge_slave_1 (unregistering): left promiscuous mode [ 583.834614][ T48] .`` (unregistering): Released all slaves [ 583.841172][ T5796] Bluetooth: hci2: command tx timeout [ 583.878965][T17562] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4010'. [ 584.231348][ T5796] Bluetooth: hci1: command 0x0406 tx timeout [ 584.239623][T17584] netlink: 'syz.4.4015': attribute type 10 has an invalid length. [ 584.267852][T17584] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4015'. [ 584.294881][T17584] `: entered promiscuous mode [ 584.300087][T17584] team_slave_0: entered promiscuous mode [ 584.318366][T17584] team_slave_1: entered promiscuous mode [ 584.327859][T17584] macvlan0: entered promiscuous mode [ 584.337738][T17584] netdevsim netdevsim4 ªªªªªª: entered promiscuous mode [ 584.346003][T17584] `: entered allmulticast mode [ 584.352878][T17584] team_slave_0: entered allmulticast mode [ 584.358905][T17584] team_slave_1: entered allmulticast mode [ 584.365359][T17584] netdevsim netdevsim4 ªªªªªª: entered allmulticast mode [ 584.385022][T17584] bridge0: port 3(`) entered blocking state [ 584.401951][T17584] bridge0: port 3(`) entered disabled state [ 584.557304][T17430] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 584.567799][T17430] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 584.626550][T17430] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 584.659102][T17430] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 584.804016][T17601] netdevsim netdevsim2: Direct firmware load for ß failed with error -2 [ 584.846634][T17601] netdevsim netdevsim2: Falling back to sysfs fallback for: ß [ 584.978446][T17430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.057362][T17430] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.154185][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.161445][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.193110][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.200373][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 585.726934][T17625] netlink: 'syz.4.4029': attribute type 2 has an invalid length. [ 585.746603][T17625] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4029'. [ 585.805495][T17430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 586.276043][T17430] veth0_vlan: entered promiscuous mode [ 586.312571][T17430] veth1_vlan: entered promiscuous mode [ 586.377899][T17430] veth0_macvtap: entered promiscuous mode [ 586.405998][T17430] veth1_macvtap: entered promiscuous mode [ 586.477468][T17430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.501792][T17430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.519167][T17430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 586.624350][T17654] FAULT_INJECTION: forcing a failure. [ 586.624350][T17654] name failslab, interval 1, probability 0, space 0, times 0 [ 586.653238][T17654] CPU: 1 PID: 17654 Comm: syz.5.4038 Not tainted syzkaller #0 [ 586.660754][T17654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 586.670841][T17654] Call Trace: [ 586.674151][T17654] [ 586.677110][T17654] dump_stack_lvl+0x16c/0x230 [ 586.681835][T17654] ? show_regs_print_info+0x20/0x20 [ 586.687078][T17654] ? load_image+0x3b0/0x3b0 [ 586.691619][T17654] ? mark_lock+0x94/0x320 [ 586.695987][T17654] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 586.702006][T17654] should_fail_ex+0x39d/0x4d0 [ 586.706729][T17654] should_failslab+0x9/0x20 [ 586.711301][T17654] slab_pre_alloc_hook+0x59/0x310 [ 586.716354][T17654] ? lockdep_hardirqs_on+0x98/0x150 [ 586.721579][T17654] ? sctp_add_bind_addr+0x8c/0x360 [ 586.726732][T17654] __kmem_cache_alloc_node+0x53/0x260 [ 586.732146][T17654] ? sctp_add_bind_addr+0x8c/0x360 [ 586.737275][T17654] kmalloc_trace+0x2a/0xe0 [ 586.741706][T17654] sctp_add_bind_addr+0x8c/0x360 [ 586.746665][T17654] sctp_copy_local_addr_list+0x30c/0x4e0 [ 586.752319][T17654] ? sctp_copy_local_addr_list+0x9c/0x4e0 [ 586.758063][T17654] ? sctp_do_8_2_transport_strike+0x8b0/0x8b0 [ 586.764163][T17654] ? sctp_v4_is_any+0x35/0x60 [ 586.768867][T17654] ? sctp_copy_one_addr+0x8c/0x350 [ 586.774005][T17654] sctp_bind_addr_copy+0xb3/0x3c0 [ 586.779090][T17654] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 586.785692][T17654] sctp_connect_new_asoc+0x2da/0x690 [ 586.790988][T17654] ? __sctp_connect+0xd20/0xd20 [ 586.795850][T17654] ? _local_bh_enable+0xa0/0xa0 [ 586.800722][T17654] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 586.806533][T17654] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 586.812348][T17654] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 586.817906][T17654] ? security_sctp_bind_connect+0x89/0xb0 [ 586.823645][T17654] sctp_sendmsg+0x155c/0x27e0 [ 586.828353][T17654] ? sctp_getsockopt+0xb60/0xb60 [ 586.833304][T17654] ? lock_chain_count+0x20/0x20 [ 586.838181][T17654] ? sctp_getsockopt+0xb60/0xb60 [ 586.843127][T17654] ? inet_send_prepare+0x260/0x260 [ 586.848249][T17654] ____sys_sendmsg+0x5bf/0x950 [ 586.853069][T17654] ? __asan_memset+0x22/0x40 [ 586.857675][T17654] ? __sys_sendmsg_sock+0x30/0x30 [ 586.862718][T17654] ? __import_iovec+0x5f2/0x860 [ 586.867593][T17654] ? import_iovec+0x73/0xa0 [ 586.872113][T17654] ___sys_sendmsg+0x220/0x290 [ 586.876804][T17654] ? __sys_sendmsg+0x270/0x270 [ 586.881622][T17654] __se_sys_sendmsg+0x1a5/0x270 [ 586.886502][T17654] ? __x64_sys_sendmsg+0x80/0x80 [ 586.891471][T17654] ? syscall_enter_from_user_mode+0x2e/0x80 [ 586.897551][T17654] do_syscall_64+0x55/0xb0 [ 586.901982][T17654] ? clear_bhb_loop+0x40/0x90 [ 586.906672][T17654] ? clear_bhb_loop+0x40/0x90 [ 586.911359][T17654] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 586.917258][T17654] RIP: 0033:0x7f55b558f749 [ 586.921681][T17654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.941307][T17654] RSP: 002b:00007f55b63f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 586.949728][T17654] RAX: ffffffffffffffda RBX: 00007f55b57e5fa0 RCX: 00007f55b558f749 [ 586.957707][T17654] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 586.965688][T17654] RBP: 00007f55b63f6090 R08: 0000000000000000 R09: 0000000000000000 [ 586.973673][T17654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 586.981647][T17654] R13: 00007f55b57e6038 R14: 00007f55b57e5fa0 R15: 00007fff2c073478 [ 586.989640][T17654] [ 587.058667][T17430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.079034][T17430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.089114][T17430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.099700][T17430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.109869][T17430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.128527][T17430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.140866][T17430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 587.184830][T17430] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.212072][T17430] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.220921][T17430] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.239979][T17430] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.392299][T17430] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 587.411128][T17430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.433540][T17662] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4040'. [ 587.531429][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.539303][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.612549][T17668] netlink: 'syz.4.4041': attribute type 10 has an invalid length. [ 587.631295][T17668] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 587.674493][T12761] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.710588][T12761] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.292146][T17679] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4044'. [ 588.331133][T17679] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4044'. [ 588.371227][T17678] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4044'. [ 588.700227][ T5804] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 588.710702][ T5804] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 588.774286][ T5804] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 588.799911][ T5804] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 588.808624][ T5804] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 588.821396][ T5804] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 589.105164][T12766] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.130954][T17697] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.4050'. [ 589.294616][T17692] syzkaller0: entered promiscuous mode [ 589.300208][T17692] syzkaller0: entered allmulticast mode [ 589.524733][T12766] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.849288][T12766] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.987419][T12766] netdevsim netdevsim4 ªªªªªª (unregistering): left promiscuous mode [ 590.000548][T12766] netdevsim netdevsim4 ªªªªªª (unregistering): left allmulticast mode [ 590.014481][T12766] `: Port device ªªªªªª removed [ 590.022306][T12766] netdevsim netdevsim4 ªªªªªª (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.236434][T17693] chnl_net:caif_netlink_parms(): no params data found [ 590.346260][T17720] netlink: 9275 bytes leftover after parsing attributes in process `syz.6.4060'. [ 590.681260][T17693] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.683167][T17732] FAULT_INJECTION: forcing a failure. [ 590.683167][T17732] name failslab, interval 1, probability 0, space 0, times 0 [ 590.688877][T17693] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.713020][T17693] bridge_slave_0: entered allmulticast mode [ 590.720729][T17693] bridge_slave_0: entered promiscuous mode [ 590.730065][T17732] CPU: 1 PID: 17732 Comm: syz.5.4062 Not tainted syzkaller #0 [ 590.737569][T17732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 590.747648][T17732] Call Trace: [ 590.750946][T17732] [ 590.753897][T17732] dump_stack_lvl+0x16c/0x230 [ 590.758624][T17732] ? show_regs_print_info+0x20/0x20 [ 590.763855][T17732] ? load_image+0x3b0/0x3b0 [ 590.768429][T17732] ? __might_sleep+0xe0/0xe0 [ 590.773063][T17732] ? __lock_acquire+0x7c80/0x7c80 [ 590.778124][T17732] ? __se_sys_sendmsg+0x1a5/0x270 [ 590.783193][T17732] should_fail_ex+0x39d/0x4d0 [ 590.787917][T17732] should_failslab+0x9/0x20 [ 590.792455][T17732] slab_pre_alloc_hook+0x59/0x310 [ 590.797520][T17732] ? sctp_datamsg_from_user+0x88/0xee0 [ 590.803016][T17732] __kmem_cache_alloc_node+0x53/0x260 [ 590.808434][T17732] ? sctp_datamsg_from_user+0x88/0xee0 [ 590.813941][T17732] kmalloc_trace+0x2a/0xe0 [ 590.818395][T17732] sctp_datamsg_from_user+0x88/0xee0 [ 590.823718][T17732] ? __sk_mem_raise_allocated+0xa88/0x1350 [ 590.829587][T17732] ? sctp_primitive_ASSOCIATE+0x95/0xc0 [ 590.835186][T17732] sctp_sendmsg_to_asoc+0xff2/0x17f0 [ 590.840509][T17732] ? __asan_memcpy+0x40/0x70 [ 590.845146][T17732] ? sctp_assoc_add_peer+0xcf3/0x13a0 [ 590.850554][T17732] ? sctp_sendmsg_check_sflags+0x2e0/0x2e0 [ 590.856386][T17732] ? __sctp_connect+0xd20/0xd20 [ 590.861269][T17732] ? __local_bh_enable_ip+0x12e/0x1c0 [ 590.866680][T17732] ? _local_bh_enable+0xa0/0xa0 [ 590.871378][ T5804] Bluetooth: hci0: command tx timeout [ 590.871537][T17732] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 590.882940][T17732] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 590.888788][T17732] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 590.894373][T17732] ? security_sctp_bind_connect+0x89/0xb0 [ 590.900127][T17732] sctp_sendmsg+0x1941/0x27e0 [ 590.904848][T17732] ? sctp_getsockopt+0xb60/0xb60 [ 590.909809][T17732] ? aa_sk_perm+0x7fc/0x930 [ 590.914353][T17732] ? aa_af_perm+0x2b0/0x2b0 [ 590.918904][T17732] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 590.925373][T17732] ? sock_rps_record_flow+0x19/0x400 [ 590.930693][T17732] ? inet_send_prepare+0x260/0x260 [ 590.935840][T17732] ? inet_sendmsg+0x7c/0x2f0 [ 590.940461][T17732] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 590.945783][T17732] ? security_socket_sendmsg+0x80/0xa0 [ 590.951276][T17732] ? inet_send_prepare+0x260/0x260 [ 590.956419][T17732] ____sys_sendmsg+0x5bf/0x950 [ 590.961240][T17732] ? __asan_memset+0x22/0x40 [ 590.965865][T17732] ? __sys_sendmsg_sock+0x30/0x30 [ 590.970935][T17732] ? __import_iovec+0x5f2/0x860 [ 590.975851][T17732] ? import_iovec+0x73/0xa0 [ 590.980411][T17732] ___sys_sendmsg+0x220/0x290 [ 590.985153][T17732] ? __sys_sendmsg+0x270/0x270 [ 590.989989][T17732] ? __lock_acquire+0x7c80/0x7c80 [ 590.995105][T17732] __se_sys_sendmsg+0x1a5/0x270 [ 591.000025][T17732] ? __x64_sys_sendmsg+0x80/0x80 [ 591.005050][T17732] ? lockdep_hardirqs_on+0x98/0x150 [ 591.010298][T17732] do_syscall_64+0x55/0xb0 [ 591.014779][T17732] ? clear_bhb_loop+0x40/0x90 [ 591.019501][T17732] ? clear_bhb_loop+0x40/0x90 [ 591.024222][T17732] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 591.030157][T17732] RIP: 0033:0x7f55b558f749 [ 591.034609][T17732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 591.054253][T17732] RSP: 002b:00007f55b63f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 591.062712][T17732] RAX: ffffffffffffffda RBX: 00007f55b57e5fa0 RCX: 00007f55b558f749 [ 591.070719][T17732] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 591.078726][T17732] RBP: 00007f55b63f6090 R08: 0000000000000000 R09: 0000000000000000 [ 591.086725][T17732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 591.094720][T17732] R13: 00007f55b57e6038 R14: 00007f55b57e5fa0 R15: 00007fff2c073478 [ 591.102739][T17732] [ 591.236465][T17693] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.251306][T17693] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.267230][T17693] bridge_slave_1: entered allmulticast mode [ 591.289173][T17693] bridge_slave_1: entered promiscuous mode [ 591.768621][T17744] netlink: 188 bytes leftover after parsing attributes in process `syz.6.4065'. [ 591.788978][T17745] netlink: 'syz.6.4065': attribute type 21 has an invalid length. [ 591.816223][T17745] netlink: 'syz.6.4065': attribute type 6 has an invalid length. [ 591.831900][T17745] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4065'. [ 591.900908][T17693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.930717][T17693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 592.082621][T17693] team0: Port device team_slave_0 added [ 592.169986][T17693] team0: Port device team_slave_1 added [ 592.963233][ T5804] Bluetooth: hci0: command tx timeout [ 593.134527][T17693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.142822][T17693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.169584][T17693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.188024][T17693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.196097][T17693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.231288][T17693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.433703][T17693] hsr_slave_0: entered promiscuous mode [ 593.442492][T17693] hsr_slave_1: entered promiscuous mode [ 593.449655][T17693] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 593.459496][T17693] Cannot create hsr debugfs directory [ 593.561563][T17774] netlink: 188 bytes leftover after parsing attributes in process `syz.5.4078'. [ 593.587354][T17779] netlink: 'syz.5.4078': attribute type 21 has an invalid length. [ 593.609277][T17779] netlink: 'syz.5.4078': attribute type 6 has an invalid length. [ 593.632133][T17779] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4078'. [ 593.899886][T17788] netlink: 'syz.2.4082': attribute type 10 has an invalid length. [ 593.986274][T12766] veth0_to_team: left allmulticast mode [ 593.992779][T12766] veth0_to_team: left promiscuous mode [ 593.998562][T12766] Ÿë: port 1(veth0_to_team) entered disabled state [ 594.014556][T12766] hsr_slave_0: left promiscuous mode [ 594.020593][T12766] hsr_slave_1: left promiscuous mode [ 594.027553][T12766] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 594.039917][T12766] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.047910][T12766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 594.055742][T12766] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.066100][T12766] bridge0: port 3(`) entered disabled state [ 594.074640][T12766] bridge_slave_1: left allmulticast mode [ 594.081428][T12766] bridge_slave_1: left promiscuous mode [ 594.087351][T12766] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.096479][T12766] bridge_slave_0: left allmulticast mode [ 594.106432][T12766] bridge_slave_0: left promiscuous mode [ 594.113572][T12766] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.144413][T12766] veth1_macvtap: left allmulticast mode [ 594.150224][T12766] veth1_macvtap: left promiscuous mode [ 594.163809][T12766] veth1_vlan: left allmulticast mode [ 594.176070][T12766] veth1_vlan: left promiscuous mode [ 594.188902][T12766] veth0_vlan: left promiscuous mode [ 594.196273][ T5804] Bluetooth: hci3: unexpected event 0x35 length: 15 > 6 [ 594.649422][T12766] macvlan0 (unregistering): left promiscuous mode [ 594.670805][T12766] ` (unregistering): Port device macvlan0 removed [ 594.978283][T12766] team_slave_1 (unregistering): left promiscuous mode [ 594.985241][T12766] team_slave_1 (unregistering): left allmulticast mode [ 594.997921][T12766] ` (unregistering): Port device team_slave_1 removed [ 595.031104][ T5804] Bluetooth: hci0: command tx timeout [ 595.048349][T12766] team_slave_0 (unregistering): left promiscuous mode [ 595.055626][T12766] team_slave_0 (unregistering): left allmulticast mode [ 595.064856][T12766] ` (unregistering): Port device team_slave_0 removed [ 595.112226][T12766] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 595.120822][T12766] bond_slave_1 (unregistering): left promiscuous mode [ 595.167819][T12766] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 595.177832][T12766] bond_slave_0 (unregistering): left promiscuous mode [ 595.341642][T12766] .` (unregistering): (slave batadv0): Releasing backup interface [ 595.350049][T12766] batadv0 (unregistering): left promiscuous mode [ 595.603122][T12766] .` (unregistering): Released all slaves [ 595.696409][T17800] netlink: 'syz.6.4087': attribute type 10 has an invalid length. [ 596.162830][T17820] netlink: 'syz.6.4092': attribute type 10 has an invalid length. [ 596.212375][T17820] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 596.417914][T17693] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 596.436505][T17693] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 596.448534][T17693] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 596.466093][T17693] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 596.547649][T17842] netlink: 'syz.2.4100': attribute type 10 has an invalid length. [ 596.566281][T17842] veth1_vlan: left allmulticast mode [ 596.663820][T17693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.734261][T17693] 8021q: adding VLAN 0 to HW filter on device team0 [ 596.757950][T12761] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.765216][T12761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 596.790715][T12761] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.797951][T12761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 596.966850][T17855] netlink: 1 bytes leftover after parsing attributes in process `syz.5.4105'. [ 597.111332][T17864] FAULT_INJECTION: forcing a failure. [ 597.111332][T17864] name failslab, interval 1, probability 0, space 0, times 0 [ 597.124356][T17864] CPU: 1 PID: 17864 Comm: syz.2.4108 Not tainted syzkaller #0 [ 597.128769][ T5804] Bluetooth: hci0: command tx timeout [ 597.131835][T17864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 597.147374][T17864] Call Trace: [ 597.150685][T17864] [ 597.153653][T17864] dump_stack_lvl+0x16c/0x230 [ 597.158370][T17864] ? sctp_sendmsg+0x155c/0x27e0 [ 597.163260][T17864] ? ___sys_sendmsg+0x220/0x290 [ 597.168168][T17864] ? show_regs_print_info+0x20/0x20 [ 597.173430][T17864] ? load_image+0x3b0/0x3b0 [ 597.178001][T17864] should_fail_ex+0x39d/0x4d0 [ 597.182731][T17864] should_failslab+0x9/0x20 [ 597.187266][T17864] slab_pre_alloc_hook+0x59/0x310 [ 597.192334][T17864] ? sctp_add_bind_addr+0x8c/0x360 [ 597.197472][T17864] __kmem_cache_alloc_node+0x53/0x260 [ 597.202876][T17864] ? sctp_add_bind_addr+0x8c/0x360 [ 597.208012][T17864] kmalloc_trace+0x2a/0xe0 [ 597.212449][T17864] sctp_add_bind_addr+0x8c/0x360 [ 597.217415][T17864] sctp_copy_local_addr_list+0x30c/0x4e0 [ 597.223076][T17864] ? sctp_copy_local_addr_list+0x9c/0x4e0 [ 597.228816][T17864] ? sctp_do_8_2_transport_strike+0x8b0/0x8b0 [ 597.234928][T17864] ? sctp_v6_is_any+0x64/0x70 [ 597.239664][T17864] ? sctp_copy_one_addr+0x8c/0x350 [ 597.244820][T17864] sctp_bind_addr_copy+0xb3/0x3c0 [ 597.249861][T17864] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 597.256206][T17864] sctp_connect_new_asoc+0x2da/0x690 [ 597.261504][T17864] ? __sctp_connect+0xd20/0xd20 [ 597.266357][T17864] ? __local_bh_enable_ip+0x12e/0x1c0 [ 597.271768][T17864] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 597.277329][T17864] ? security_sctp_bind_connect+0x89/0xb0 [ 597.283087][T17864] sctp_sendmsg+0x155c/0x27e0 [ 597.287791][T17864] ? sctp_getsockopt+0xb60/0xb60 [ 597.292744][T17864] ? aa_sk_perm+0x7fc/0x930 [ 597.297277][T17864] ? aa_af_perm+0x2b0/0x2b0 [ 597.301803][T17864] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 597.308259][T17864] ? sock_rps_record_flow+0x19/0x400 [ 597.313568][T17864] ? inet_send_prepare+0x260/0x260 [ 597.318696][T17864] ? inet_sendmsg+0xe9/0x2f0 [ 597.323308][T17864] ? inet_send_prepare+0x260/0x260 [ 597.328433][T17864] ____sys_sendmsg+0x5bf/0x950 [ 597.333229][T17864] ? __asan_memset+0x22/0x40 [ 597.337834][T17864] ? __sys_sendmsg_sock+0x30/0x30 [ 597.342879][T17864] ? __import_iovec+0x5f2/0x860 [ 597.347774][T17864] ? import_iovec+0x73/0xa0 [ 597.352306][T17864] ___sys_sendmsg+0x220/0x290 [ 597.357010][T17864] ? __sys_sendmsg+0x270/0x270 [ 597.361833][T17864] ? __lock_acquire+0x7c80/0x7c80 [ 597.366912][T17864] __se_sys_sendmsg+0x1a5/0x270 [ 597.371795][T17864] ? __x64_sys_sendmsg+0x80/0x80 [ 597.376775][T17864] ? lockdep_hardirqs_on+0x98/0x150 [ 597.381992][T17864] do_syscall_64+0x55/0xb0 [ 597.386425][T17864] ? clear_bhb_loop+0x40/0x90 [ 597.391112][T17864] ? clear_bhb_loop+0x40/0x90 [ 597.395808][T17864] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 597.401711][T17864] RIP: 0033:0x7f1c7cb8f749 [ 597.406139][T17864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 597.425758][T17864] RSP: 002b:00007f1c7daa0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 597.434191][T17864] RAX: ffffffffffffffda RBX: 00007f1c7cde5fa0 RCX: 00007f1c7cb8f749 [ 597.442189][T17864] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000005 [ 597.450171][T17864] RBP: 00007f1c7daa0090 R08: 0000000000000000 R09: 0000000000000000 [ 597.458153][T17864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 597.466135][T17864] R13: 00007f1c7cde6038 R14: 00007f1c7cde5fa0 R15: 00007fffe17bfe68 [ 597.474156][T17864] [ 597.484601][T17693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 597.738065][T17693] veth0_vlan: entered promiscuous mode [ 597.749663][T17693] veth1_vlan: entered promiscuous mode [ 597.779805][T17693] veth0_macvtap: entered promiscuous mode [ 597.790731][T17693] veth1_macvtap: entered promiscuous mode [ 597.807261][T17693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 597.818657][T17693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.828666][T17693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 597.840230][T17693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.852166][T17693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 597.864986][T17693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.875670][T17693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.885550][T17693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.895997][T17693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.905953][T17693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.916683][T17693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.927929][T17693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 597.939620][T17693] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.950107][T17693] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.959319][T17693] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.968177][T17693] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.026702][T17693] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 598.036940][T17693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.058120][T12770] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.071144][T12770] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.098528][T12742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.107919][T12742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.166890][T17872] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4043'. [ 598.177720][T17872] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 598.239030][T17874] netlink: 14568 bytes leftover after parsing attributes in process `syz.6.4109'. [ 598.256915][T17872] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4043'. [ 598.295277][T17872] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 598.698379][T17894] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4115'. [ 599.271331][T17924] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4126'. [ 599.280253][T17924] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4126'. [ 599.322179][T17924] netlink: 33 bytes leftover after parsing attributes in process `syz.5.4126'. [ 599.358981][T17924] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4126'. [ 599.401078][T17924] netlink: 33 bytes leftover after parsing attributes in process `syz.5.4126'. [ 600.333941][T17947] netlink: 'syz.6.4134': attribute type 10 has an invalid length. [ 600.356028][T17947] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 600.571146][ T5796] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 600.581999][ T5796] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 600.589715][ T5796] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 600.598974][ T5796] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 600.608009][ T5796] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 600.617245][ T5796] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 601.024221][T12742] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.454019][T12742] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.668320][T17952] chnl_net:caif_netlink_parms(): no params data found [ 601.907676][T12742] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.134135][T12742] .`: (slave netdevsim0): Releasing backup interface [ 602.213024][T12742] netdevsim netdevsim5 netdevsim0 (unregistering): left promiscuous mode [ 602.234161][T12742] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.497499][T17994] netlink: 'syz.6.4146': attribute type 10 has an invalid length. [ 602.526358][T17994] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 602.541664][T17998] FAULT_INJECTION: forcing a failure. [ 602.541664][T17998] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 602.555116][T17998] CPU: 1 PID: 17998 Comm: syz.4.4150 Not tainted syzkaller #0 [ 602.562618][T17998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 602.572712][T17998] Call Trace: [ 602.576026][T17998] [ 602.578978][T17998] dump_stack_lvl+0x16c/0x230 [ 602.583692][T17998] ? show_regs_print_info+0x20/0x20 [ 602.588911][T17998] ? load_image+0x3b0/0x3b0 [ 602.593438][T17998] ? __lock_acquire+0x7c80/0x7c80 [ 602.598471][T17998] should_fail_ex+0x39d/0x4d0 [ 602.603158][T17998] prepare_alloc_pages+0x1e2/0x5f0 [ 602.608282][T17998] __alloc_pages+0x127/0x460 [ 602.612888][T17998] ? zone_statistics+0x170/0x170 [ 602.617863][T17998] ? alloc_pages+0x4dc/0x740 [ 602.622467][T17998] ? do_raw_spin_unlock+0x121/0x230 [ 602.627683][T17998] __get_free_pages+0xc/0x30 [ 602.632300][T17998] kasan_populate_vmalloc_pte+0x35/0x100 [ 602.637942][T17998] __apply_to_page_range+0x878/0xdb0 [ 602.643243][T17998] ? kasan_populate_vmalloc+0x70/0x70 [ 602.648629][T17998] ? apply_to_page_range+0x50/0x50 [ 602.653755][T17998] ? do_raw_spin_unlock+0x121/0x230 [ 602.658965][T17998] alloc_vmap_area+0x1b4a/0x1c70 [ 602.663929][T17998] ? vm_map_ram+0xcb0/0xcb0 [ 602.668445][T17998] __get_vm_area_node+0x162/0x370 [ 602.673483][T17998] vmap+0x126/0x2a0 [ 602.677312][T17998] ? bpf_ringbuf_alloc+0x33b/0x560 [ 602.682445][T17998] bpf_ringbuf_alloc+0x33b/0x560 [ 602.687402][T17998] ringbuf_map_alloc+0x1c3/0x2f0 [ 602.692360][T17998] map_create+0x877/0x12f0 [ 602.696784][T17998] ? bpf_lsm_bpf+0x9/0x10 [ 602.701123][T17998] __sys_bpf+0x5f0/0x800 [ 602.705368][T17998] ? bpf_link_show_fdinfo+0x350/0x350 [ 602.710751][T17998] ? lock_chain_count+0x20/0x20 [ 602.715613][T17998] __x64_sys_bpf+0x7c/0x90 [ 602.720044][T17998] do_syscall_64+0x55/0xb0 [ 602.724465][T17998] ? clear_bhb_loop+0x40/0x90 [ 602.729160][T17998] ? clear_bhb_loop+0x40/0x90 [ 602.733858][T17998] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 602.739772][T17998] RIP: 0033:0x7fbd2ab8f749 [ 602.744207][T17998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 602.763834][T17998] RSP: 002b:00007fbd2b956038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 602.772263][T17998] RAX: ffffffffffffffda RBX: 00007fbd2ade5fa0 RCX: 00007fbd2ab8f749 [ 602.780239][T17998] RDX: 0000000000000048 RSI: 00002000000009c0 RDI: 0000000000000000 [ 602.788224][T17998] RBP: 00007fbd2b956090 R08: 0000000000000000 R09: 0000000000000000 [ 602.796197][T17998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 602.804171][T17998] R13: 00007fbd2ade6038 R14: 00007fbd2ade5fa0 R15: 00007fff2f75d028 [ 602.812188][T17998] [ 602.817354][ T5804] Bluetooth: hci4: command tx timeout [ 602.876448][T17952] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.884002][T17952] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.901820][T17952] bridge_slave_0: entered allmulticast mode [ 602.909216][T17952] bridge_slave_0: entered promiscuous mode [ 602.953033][T17952] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.960292][T17952] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.982399][T17952] bridge_slave_1: entered allmulticast mode [ 602.989745][T17952] bridge_slave_1: entered promiscuous mode [ 603.145640][T17952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.178778][T18009] netlink: 'syz.6.4153': attribute type 4 has an invalid length. [ 603.188705][T18009] __nla_validate_parse: 1 callbacks suppressed [ 603.188718][T18009] netlink: 152 bytes leftover after parsing attributes in process `syz.6.4153'. [ 603.228313][T18009] .`: renamed from bond0 (while UP) [ 603.247488][T17952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 603.433209][T18016] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4157'. [ 603.489588][T17952] team0: Port device team_slave_0 added [ 603.508395][T18016] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4157'. [ 603.582868][T17952] team0: Port device team_slave_1 added [ 603.630279][T18023] syz.4.4161[18023] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 603.631749][T18023] syz.4.4161[18023] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 603.648743][T18019] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4157'. [ 603.849981][T17952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.891036][T17952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.958828][T17952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.992726][T18026] netlink: 'syz.2.4162': attribute type 10 has an invalid length. [ 604.047376][T17952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 604.054859][T17952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.082841][T17952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 604.296314][T17952] hsr_slave_0: entered promiscuous mode [ 604.305945][T17952] hsr_slave_1: entered promiscuous mode [ 604.497910][T18045] netlink: 9275 bytes leftover after parsing attributes in process `syz.6.4169'. [ 604.825427][T18053] pim6reg1: entered promiscuous mode [ 604.830798][T18053] pim6reg1: entered allmulticast mode [ 604.872105][ T5804] Bluetooth: hci4: command tx timeout [ 605.197396][T12742] [ 605.199780][T12742] ====================================================== [ 605.206803][T12742] WARNING: possible circular locking dependency detected [ 605.213845][T12742] syzkaller #0 Not tainted [ 605.218280][T12742] ------------------------------------------------------ [ 605.225309][T12742] kworker/u4:10/12742 is trying to acquire lock: [ 605.231643][T12742] ffff88807ab88d00 (team->team_lock_key#6){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 605.241250][T12742] [ 605.241250][T12742] but task is already holding lock: [ 605.248624][T12742] ffff888029ea8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 605.258993][T12742] [ 605.258993][T12742] which lock already depends on the new lock. [ 605.258993][T12742] [ 605.269396][T12742] [ 605.269396][T12742] the existing dependency chain (in reverse order) is: [ 605.278424][T12742] [ 605.278424][T12742] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 605.286162][T12742] __mutex_lock+0x129/0xcc0 [ 605.291218][T12742] ieee80211_open+0x144/0x200 [ 605.296427][T12742] __dev_open+0x2bc/0x430 [ 605.301278][T12742] dev_open+0xab/0x170 [ 605.305868][T12742] team_add_slave+0xae7/0x2660 [ 605.311158][T12742] do_setlink+0xe14/0x3fb0 [ 605.316092][T12742] rtnl_newlink+0x175b/0x2020 [ 605.321302][T12742] rtnetlink_rcv_msg+0x7c7/0xf10 [ 605.326757][T12742] netlink_rcv_skb+0x216/0x480 [ 605.332044][T12742] netlink_unicast+0x751/0x8d0 [ 605.337332][T12742] netlink_sendmsg+0x8c1/0xbe0 [ 605.342625][T12742] ____sys_sendmsg+0x5bf/0x950 [ 605.347915][T12742] ___sys_sendmsg+0x220/0x290 [ 605.353141][T12742] __se_sys_sendmsg+0x1a5/0x270 [ 605.358526][T12742] do_syscall_64+0x55/0xb0 [ 605.363473][T12742] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 605.369886][T12742] [ 605.369886][T12742] -> #0 (team->team_lock_key#6){+.+.}-{3:3}: [ 605.378056][T12742] __lock_acquire+0x2ddb/0x7c80 [ 605.383433][T12742] lock_acquire+0x197/0x410 [ 605.388456][T12742] __mutex_lock+0x129/0xcc0 [ 605.393485][T12742] team_del_slave+0x32/0x1c0 [ 605.398611][T12742] team_device_event+0x28d/0xa20 [ 605.404066][T12742] notifier_call_chain+0x197/0x390 [ 605.409693][T12742] unregister_netdevice_many_notify+0xf36/0x1810 [ 605.416545][T12742] unregister_netdevice_queue+0x324/0x360 [ 605.422794][T12742] _cfg80211_unregister_wdev+0x16b/0x580 [ 605.428973][T12742] ieee80211_remove_interfaces+0x496/0x680 [ 605.435301][T12742] ieee80211_unregister_hw+0x5d/0x2a0 [ 605.441198][T12742] mac80211_hwsim_del_radio+0x274/0x450 [ 605.447264][T12742] hwsim_exit_net+0x585/0x640 [ 605.452549][T12742] cleanup_net+0x6f4/0xb90 [ 605.457489][T12742] process_scheduled_works+0xa45/0x15b0 [ 605.463559][T12742] worker_thread+0xa55/0xfc0 [ 605.468667][T12742] kthread+0x2fa/0x390 [ 605.473252][T12742] ret_from_fork+0x48/0x80 [ 605.478201][T12742] ret_from_fork_asm+0x11/0x20 [ 605.483494][T12742] [ 605.483494][T12742] other info that might help us debug this: [ 605.483494][T12742] [ 605.493722][T12742] Possible unsafe locking scenario: [ 605.493722][T12742] [ 605.501171][T12742] CPU0 CPU1 [ 605.506526][T12742] ---- ---- [ 605.511880][T12742] lock(&rdev->wiphy.mtx); [ 605.516383][T12742] lock(team->team_lock_key#6); [ 605.523847][T12742] lock(&rdev->wiphy.mtx); [ 605.530867][T12742] lock(team->team_lock_key#6); [ 605.535816][T12742] [ 605.535816][T12742] *** DEADLOCK *** [ 605.535816][T12742] [ 605.543962][T12742] 5 locks held by kworker/u4:10/12742: [ 605.549414][T12742] #0: ffff888017873938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 605.560309][T12742] #1: ffffc90004d0fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 605.570873][T12742] #2: ffffffff8dfaf8d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x136/0xb90 [ 605.580304][T12742] #3: ffffffff8dfbc708 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 605.590154][T12742] #4: ffff888029ea8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 605.600957][T12742] [ 605.600957][T12742] stack backtrace: [ 605.606847][T12742] CPU: 0 PID: 12742 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 605.614561][T12742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 605.624613][T12742] Workqueue: netns cleanup_net [ 605.629391][T12742] Call Trace: [ 605.632672][T12742] [ 605.635604][T12742] dump_stack_lvl+0x16c/0x230 [ 605.640286][T12742] ? load_image+0x3b0/0x3b0 [ 605.644791][T12742] ? show_regs_print_info+0x20/0x20 [ 605.649994][T12742] ? print_circular_bug+0x12b/0x1a0 [ 605.655194][T12742] check_noncircular+0x2bd/0x3c0 [ 605.660134][T12742] ? print_deadlock_bug+0x5d0/0x5d0 [ 605.665336][T12742] ? lockdep_lock+0xe0/0x220 [ 605.669932][T12742] ? __lock_acquire+0x1334/0x7c80 [ 605.674973][T12742] ? _find_first_zero_bit+0xd3/0x100 [ 605.680277][T12742] __lock_acquire+0x2ddb/0x7c80 [ 605.685153][T12742] ? verify_lock_unused+0x140/0x140 [ 605.690358][T12742] ? verify_lock_unused+0x140/0x140 [ 605.695571][T12742] lock_acquire+0x197/0x410 [ 605.700082][T12742] ? team_del_slave+0x32/0x1c0 [ 605.704858][T12742] ? __might_sleep+0xe0/0xe0 [ 605.709455][T12742] ? read_lock_is_recursive+0x20/0x20 [ 605.714829][T12742] __mutex_lock+0x129/0xcc0 [ 605.719350][T12742] ? team_del_slave+0x32/0x1c0 [ 605.724122][T12742] ? __lock_acquire+0x7c80/0x7c80 [ 605.729144][T12742] ? rcu_is_watching+0x15/0xb0 [ 605.733913][T12742] ? trace_contention_end+0x39/0xe0 [ 605.739120][T12742] ? __mutex_lock+0x304/0xcc0 [ 605.743819][T12742] ? team_del_slave+0x32/0x1c0 [ 605.748604][T12742] ? mutex_lock_nested+0x20/0x20 [ 605.753562][T12742] ? bond_netdev_event+0xe1/0xef0 [ 605.758628][T12742] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 605.764288][T12742] ? bond_ipsec_offload_ok+0x410/0x410 [ 605.769760][T12742] team_del_slave+0x32/0x1c0 [ 605.774356][T12742] team_device_event+0x28d/0xa20 [ 605.779314][T12742] notifier_call_chain+0x197/0x390 [ 605.784452][T12742] unregister_netdevice_many_notify+0xf36/0x1810 [ 605.790796][T12742] ? lock_chain_count+0x20/0x20 [ 605.795654][T12742] ? unregister_netdevice_many+0x20/0x20 [ 605.801299][T12742] ? kernfs_remove_by_name_ns+0x117/0x150 [ 605.807037][T12742] ? __lock_acquire+0x7c80/0x7c80 [ 605.812068][T12742] unregister_netdevice_queue+0x324/0x360 [ 605.817813][T12742] ? list_netdevice+0x730/0x730 [ 605.822683][T12742] ? kernfs_remove_by_name_ns+0x117/0x150 [ 605.828422][T12742] _cfg80211_unregister_wdev+0x16b/0x580 [ 605.834098][T12742] ieee80211_remove_interfaces+0x496/0x680 [ 605.839931][T12742] ? ieee80211_do_stop+0x1db0/0x1db0 [ 605.845224][T12742] ? rcu_is_watching+0x15/0xb0 [ 605.849995][T12742] ieee80211_unregister_hw+0x5d/0x2a0 [ 605.855390][T12742] mac80211_hwsim_del_radio+0x274/0x450 [ 605.860942][T12742] ? rhashtable_remove_fast+0xbf0/0xbf0 [ 605.866493][T12742] hwsim_exit_net+0x585/0x640 [ 605.871175][T12742] ? hwsim_init_net+0x90/0x90 [ 605.875859][T12742] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 605.881669][T12742] cleanup_net+0x6f4/0xb90 [ 605.886095][T12742] ? ops_free_list+0x3b0/0x3b0 [ 605.890872][T12742] ? _raw_spin_unlock_irq+0x23/0x50 [ 605.896076][T12742] ? process_scheduled_works+0x957/0x15b0 [ 605.901805][T12742] ? process_scheduled_works+0x957/0x15b0 [ 605.907532][T12742] process_scheduled_works+0xa45/0x15b0 [ 605.913116][T12742] ? assign_work+0x400/0x400 [ 605.917716][T12742] ? assign_work+0x39e/0x400 [ 605.922348][T12742] worker_thread+0xa55/0xfc0 [ 605.926975][T12742] kthread+0x2fa/0x390 [ 605.931047][T12742] ? pr_cont_work+0x560/0x560 [ 605.935744][T12742] ? kthread_blkcg+0xd0/0xd0 [ 605.940356][T12742] ret_from_fork+0x48/0x80 [ 605.944808][T12742] ? kthread_blkcg+0xd0/0xd0 [ 605.949408][T12742] ret_from_fork_asm+0x11/0x20 [ 605.954197][T12742] [ 605.963334][T12742] `: Port device .3ãc¤± removed [ 606.057598][T12742] batman_adv: batadv0: Interface deactivated: wlan0 [ 606.067812][T12742] batman_adv: batadv0: Removing interface: wlan0 [ 606.079115][T17952] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 606.089872][T17952] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 606.099471][T17952] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 606.114093][T17952] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 606.136726][T12742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 606.144511][T12742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.152385][T12742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.159790][T12742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.167479][T12742] bridge_slave_1: left allmulticast mode [ 606.173190][T12742] bridge_slave_1: left promiscuous mode [ 606.178880][T12742] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.187509][T12742] bridge_slave_0: left promiscuous mode [ 606.194924][T12742] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.205634][T12742] veth1_macvtap: left promiscuous mode [ 606.211500][T12742] veth1_vlan: left allmulticast mode [ 606.216809][T12742] veth1_vlan: left promiscuous mode [ 606.222319][T12742] veth0_vlan: left promiscuous mode [ 606.354342][T12742] ` (unregistering): Port device macvlan0 removed [ 606.411907][T12742] ` (unregistering): Port device team_slave_1 removed [ 606.439684][T12742] ` (unregistering): Port device team_slave_0 removed [ 606.464136][T12742] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 606.474832][T12742] bond_slave_1 (unregistering): left promiscuous mode [ 606.497648][T12742] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 606.506397][T12742] bond_slave_0 (unregistering): left promiscuous mode [ 606.555934][T12742] .` (unregistering): (slave batadv0): Releasing backup interface [ 606.564379][T12742] batadv0 (unregistering): left promiscuous mode [ 606.586361][T12742] ` (unregistering): Port device .` removed [ 606.702191][T12742] .` (unregistering): Released all slaves [ 606.793683][T17952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.811205][T17952] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.835401][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.842533][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.853413][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.860561][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.951436][ T5804] Bluetooth: hci4: command tx timeout [ 607.037467][T17952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.102203][T18051] caif:caif_disconnect_client(): nothing to disconnect [ 607.230616][T17952] veth0_vlan: entered promiscuous mode [ 607.242298][T17952] veth1_vlan: entered promiscuous mode [ 607.267372][T17952] veth0_macvtap: entered promiscuous mode [ 607.276667][T17952] veth1_macvtap: entered promiscuous mode [ 607.291432][T17952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.302114][T17952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.312012][T17952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.322456][T17952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.333638][T17952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 607.347550][T17952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.358426][T17952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.368654][T17952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.380023][T17952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.390243][T17952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.400777][T17952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.412030][T17952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 607.424305][T17952] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.433054][T17952] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.442140][T17952] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.450843][T17952] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.480435][T17952] ieee80211 phy49: Selected rate control algorithm 'minstrel_ht' [ 607.501605][T12761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.503385][T17952] ieee80211 phy50: Selected rate control algorithm 'minstrel_ht' [ 607.509805][T12761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.538705][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.548353][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.031073][ T5804] Bluetooth: hci4: command tx timeout