last executing test programs: 17.999266493s ago: executing program 0 (id=1539): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48) gettid() close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000580), &(0x7f0000000200)=""/159}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpuset.memory_pressure\x00', 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x3, 0x8, &(0x7f00000002c0)="0000ff", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x8901, &(0x7f0000000040)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000080)="90", 0x1}], 0x1}, 0x24004011) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000700)={0xffffffffffffffff, r2, 0x4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) 17.740304487s ago: executing program 0 (id=1544): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc6010", 0x15}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x10, 0x3a, 0x7}, {0x18, 0x84, 0x5, 'M'}], 0x28}, 0x800) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x200, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) socket$kcm(0x22, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@bloom_filter={0x1e, 0x9, 0xf, 0x6, 0x4121, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x6}, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x8000000, 0x69, 0x11, 0x16}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x70) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x8841) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, @perf_config_ext={0x8, 0x100000001}, 0x880, 0x800, 0x0, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000070000000000000000000000010500000010000000000000000100008500000000020000010200000000000001"], &(0x7f0000000340)=""/141, 0x52, 0x8d, 0x1}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000000)="a3098f3094494ebf8689b622967cf79eeef3b64126fe6abaac6889d7ebc7f878fb6f35da22472ccf4dbd5061b7ec85b036dfde8955b116b6dbf408c2322261cc1736ff4d04f30055b3a3891ce8e0d4c3b9f61180577e779316fd24a0e1ba58f05845a10338002f56c839980c4d6c8610d9efb9b8b6f3818bdb89f5c34a1649a035e0a9097ac11e3b769ae1f018fe3f5528df17d3cc", 0x95}], 0x2, 0x0, 0x0, 0x900}, 0x0) 17.325057603s ago: executing program 0 (id=1546): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107bfb, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0xff, 0xfffffbff, 0x1, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{0x0}], 0x1}, 0x0) sendmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)='D', 0x33fe0}], 0x1}, 0x20000040) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) close(r0) r7 = socket$kcm(0x10, 0x100000000002, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001000000", @ANYRES32, @ANYBLOB="af2810780300000000000000000000000800000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r8, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)=r6}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r9, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000900)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000940)=[0x0], &(0x7f0000000980), 0x0, 0xa8, &(0x7f00000009c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0xb8, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r14 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r14, 0x88, 0x64, &(0x7f00000009c0)=r13, 0x4) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1e0000000d000000050000000400000040000000", @ANYRES32=r8, @ANYBLOB="04f8ffffffffffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000005000000040000000300"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0xa, 0x16, &(0x7f0000000f00)=ANY=[@ANYBLOB="1800000007000000000000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018200000", @ANYRES32=r8, @ANYBLOB="000000000500000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7020000000000008500000086000000023774001a0f0000bf91000000000000b702000001000000850000008400000052b25c446b41af981229b70000004ff312dd4c00000000000000"], &(0x7f0000000800)='GPL\x00', 0x800, 0xbc, &(0x7f0000000840)=""/188, 0x41100, 0x0, '\x00', r11, @fallback=0x1f, r13, 0x8, &(0x7f0000000c00)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x5, 0x47f4, 0x3}, 0x10, 0xffffffffffffffff, r4, 0x2, &(0x7f0000000d00)=[r8, r15, r8], &(0x7f0000000740)=[{0x0, 0x10, 0x5, 0x4}, {0x3, 0x4, 0x10, 0x1}]}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000e00)="39000000140081ae00002c000500015601618575e285af01800000000d1300883795c04a31ba377a1b2cc37fffffffffffffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 16.445138057s ago: executing program 1 (id=1548): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000f02000000000000000000000d0100000000005f"], 0x0, 0x34}, 0x20) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYRESHEX], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, 0x2}, 0x94) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018000000000000000000000000000000950000002304f866"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe66}, 0x3f) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) (async) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r5 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) r6 = openat$cgroup_freezer_state(r3, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) write$cgroup_freezer_state(r6, &(0x7f00000000c0)='THAWED\x00', 0x7) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r0}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) syz_clone(0xe40c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 16.324343399s ago: executing program 1 (id=1550): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x8, 0x100000000}, 0x880, 0x9, 0xfffffffa, 0x0, 0xc, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b15d25a806c8c6394f90324fc60100000000a000200053582c137153e37000c0a80fc0b1000f835", 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0xa117800, &(0x7f00000001c0)="3176968b63bfaa7d387218a776425f6606845738a7aeaada432796d5d04563a10d0130bde029a9adfdd7a51e7ee819e66f6f11e6d9bd7feff6bbc2ca46d3b6ab58233bba52a6a9ee2e5c14f7f50f08b6c2d1663243910800d0e04bec873730c847253dd22d578e5dbbc1a50c9f4b5f52d22212f90a2cefb1f61c16c03c0348be30d918dee9c8c6d6343f7cb66f6f437f6c7adc29d7343d5a73eee4111ab3d16bd7a038a0baae8558b27a0fa80700126a22a37827b61bfc4f8cb7e3b4972ba88c8348b3135ef2c03bd6b9a22b44e6be9e21de725dcad803d1786d0359184db79a0231eb88172874951cdf2ceb55e5f10814e61dac", 0xf4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="2d02f9e7a1343a2ade0a2f22b6fc71ec85d14cdc9066ea124a4fb03c156185b28e228260d925699773e2e917077e551bca5214b812e03260c70aa534ec95b5b375f0a46f6d1ee9c27e95024b60401ca0d2f71ab86319ef437634ebbe703dfa74c74430") sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)}, 0x22) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x7, &(0x7f0000000080)=[{&(0x7f00000000c0)="d80000001d0081054e81f783db4cb904021d080006000000e8fc3ca10a0015000600142603600e1208000f0000000401a80001000047880000000000035c0461c1d67f6f94007134cf6efb8000feea60d8a8a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 16.22667036s ago: executing program 4 (id=1551): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) ioctl$TUNGETVNETLE(r4, 0x800454dd, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x3c) 16.005665234s ago: executing program 0 (id=1553): r0 = perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc6010", 0x15}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000001500)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="10000000000000003a0000070000000000000084000000050000004d0000000000000000"], 0x28}, 0x800) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x200, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x0, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000011008188040f80ec59acbc0413a1f848020000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x16080000, &(0x7f0000000100), 0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000500)="19041912264be7c354c5aa4b61df9393c828ed86ae312881c5c35fd9fa568e9b725ee815d68ef7907cbcb6dc2218c10568351586f75cd1c00283473637e8eccc59a683799d9782a617b3261e8df6c23155b4a68e129fffbf3280034dc6f1121437d6dc8572788d5f4163c0d5613967593683ba975c89e55ff0a00d9a82e4960cddf79f9e9dcde804f188ce0e480efaafbafa6bb9437f753aa335aacd2dc2f670072eeec682b1d2087687d9b6597f4583ff2b3abdf847a098bd1014054254e74ea488762be46a6017fe13c3021683465ef0ddb4f5ba2ec87b123b05c60a8a040f0d70bf736beb6b581f556bb8e5b8e8a15e551ced36a26f14bacc34533825ea7e359d6d74eb5cddce31970d1ee01efbe88018b3e3e22e02d3ad405c7dca272b22ab49063ab0fb7d53191826cdf35afcd26a2f77adbcb4d69ec636595773ae3d143c0a4c85906646f020473bf7e3215b94e724db2bc8f4e30a3bdafadf0b1c9503f6b801f6c74a34ed4ded1c08caaeff36057ccaa688973f8e2cde7ffdb923437144767bb7672149d44c7086fde433ec0790777244749f1d2da9c92a04d6647d55801d7bd2711e8a6e347dda1d916dd9f90add91494e400e772c946bf3c251411e08a762adc1e345b0ac948216ac7767032b8614090c2ed5f21380ec374cce9c9528599c76f386430b74b4d4e24b97b18b1a9a387c73c33fd07edf9ac02e9ee13e29c98c233515d576a24132edc52f92846a3dc0560d6c51da3325885b422333eccbfec6962827af5461d464d42de380b87de0f64d2e28e3831a58751904de420bb7f375004f45b691c4d6ceec7e0b14b95a046f4ebe97da8057e343dab272ec749800370277b0b838cfe6255cbf9eaf5d2ce43fb028efccfab0acc7175e584a7295ed91a1347f27bc4ae2baa1167b29aba65afd731439e24b5793a6bee5d1ff46ad14f110dbf74534e1cfe8b8fb9996d20a26ab8d7271ddbdee37caa00fa48210cfe66204c2dba04fdbed69cd2c2aaa78a1c33ebe37a7433651ba2e05fa428344fbcb24b1d6f532c67ae28e3445477e568f9313dff569c1e6411e8102a54108b8ba0960ba2d46ccb5585895f43f7421e06a6487856bd6ae9386b6467542ad7e370de069a4c06e844fedf7279ede888123ca7ff481c5f0a2c28f669a6f5f31f38e283d546238998002d885105bd1ed80a060d4e1aba3bf5a705ef92a061169894a56c7795aaa9b650b18640124f9ae5b6c8c4ce41a317a8365782c64f083eac15ba7321eefaba643e613d67aba715b2ab5a20d9b4e550a1eedf2a33a2e50538f65b5f3df8ed95a2a0293938b8adf4165e76b893fb905bf01810edbaff3d4909d8c8b0b1c73d8a75e2baa0b3f954f0eda878d9a8ceb9b0169cd2d5aeb23f1709cefee1d7ba6df817c8fa6d7b71339e64a13bc6e0f9951f322dc90a5e66599c39dfe730a6685fe80d8f5641b3c13707f3b12964c53affb3cbef84ac34b584580922a88cc124868b0875a2709ccf3eca9b1a9bd21ea75d2956098d0d92e746d7a1da97d66f6e80708fc17776449e50611bd0e2860bac826776affe273453ff9b32baa6aecf817c17835fcb291e6f036a3edf488161e87c7fb759931a0c044472c9b266a53e20c41e0cee539dd0192d304a33f3c9e804d178f295d3e88ef7f99b366e2a9170deb930b9ce3c4c08fb939650dea6a24419d25b4db82e6d76d3efccbb6fee8a28bb66abdf7d16834386e9284eec970cabb4563a4a10ed871229eee99816f741f3cc06bc2bdb4afe8fc019f1a1b4249ec908fe0c1cdd3224c969de5392df827ad7eea91972803ac785ee2ff3096a7241f98d8f6db3dc62c2ebc4bb7f3900bf8f950158a9c8c99e6b3907782f0f834edc78a49f0abe7d915560ec7356feead75e2d3c06a055bdb7a5f0e74bcebd1ad3d9146eb52c9ee3e35f866ee270ec97818891be80ef22dc257786785b31b94950ef17163ed6f0bbbb2f906299db4dafbd5f2bbdef64c4b6390593f9fccc85065a55ed5a7fde4a35d4bd34c61c4c792cb7c9001b9e6979102e34fe3c16c1953c7b68ac3b0aaed7cfaddeec7a122c2af63b2e37feb398bbff3e7e7fb66ed5737434acdbdbc30ed226ffdcd24bc5953df95fc8fb967eba68bb5e5522c93f9194e237c106d92cb8ab0b058ea164c552f7fd136287a6aea0bc46067aed775de4b219881666683aa921937df5b6b32729dbc21b34193707f5506e7d16cc40c5a917a1da585e5eb17f469baf3d1d781e71edfe751696e6aca6c3b8db1cd6a48ad8083aa1b847c24b48de1ec8160c4a83759ea45b8a316446b2abe525a710cd76d622060c46b381624cceb7786a2d0ac0546451c62203ada1475ca33c57fecf3d24f5e981cbf678d7456e41b3cbeceac1aea72cecc9b46dcaffafb1ac195b8537281d6bb2c3659273151967475298edd7597c3beb4aea28429dfea2e8bc4defd4510b7387ad06b46e7af24f194a72c4393887ea2962cdafe9dfed25b4dfe60f8c0fc921b337ddcd0f61404c93ed5d2c54760fbf83a89fb009e676e7571e7a34fb16319eaf577c5a01ec68daa38d4ecd4409549093b0d1dd140a163816b18cafdb660672deb6f86f6152163de59f40bb2a5db00ef3ce24651aed5a819a2f0d3779b036128d3e1f94e2c98405eda476a4f81da78aa57996f0dbbdd918e64df42c4d8cd010e65507c0c20a9f0eb8117bdc3cafd6d195a1581c3b2b066d22b161a539cfe7a33e3ed6a2a86fb4ee08ad3462262c0fcd37bf080d293d0325e7a4b338a98eb98b05f128798a59e3931132883e0613cfaee44471e671a5e13edecddae42f9092dd2af25128ff4359b9d2792ed7cb2200b8d2a35af61923212b54ad347f80ce4ee23016cd4d7e3415c1e2f995f24c052c80fac3536c3688817e71822963edf9b28b182fd3aa5ee1b624b633889c51261c7cbce7463ff2bdeb97492333bd92c78d894d6f8ca4dbe6211614f8fd4245196f663bda5d7719da0d74931858705ccf4ff7dffa97412db5f850003b83d29a61bd498514e4ce359f0f8a70cb1bc499ba273fa11be1d19a0d51471e9d012b56195efb54ff8c1fb622791c25746231854451b139f3f0198b81c6a5aa4029802727ce6cb9c51573596c189ffadf51cf4a2e56b1757f814356075bcb4bf3ff36ae4823150537657f3c364f094a31f00f142829cbe5a7d5e433406d59990bc89b4883e258ff2e9002605bf68601c1485bfcb10b8284c92c323b8774e4f74198061e37eb2babf484983d2de5b1db3e7ecd1a6960df446055d6714fffc8d10a7ff0bd6a259dc6024826385d949ee0f4236ced6ca9a419c39bb4aae50cf4d1cbe76cf62aa1a6fc1b0f6684c91be5e5faf889521e4b12ae09976ce86a16a151e034bce65c7ec3907faaa137949d4f6e8a708ef8cbf06ca0f16ee6aaae79b307bf885fddee4acae082f8f5eba04577f89b4cdc916c8c3da24d6eed71dc506eab662f9c9f4553457f5e590af6d60350d4a78793405d4a4b9ad96a083cdd61f634717449dcf1b90c2b1c606d012f10320940203cc38e69196a1cf83779cb34f72ab60e2caeeaf9cf6d4db4011f39ad900b0aa1026b20272087d5d138622539ff3346336e880c8e43418cd6457f3ead5c99aa7a3184d7b2e12cd47e1ef210c0f6f4637c84e0da084523b656c78c627ede96abfe9f9150475080272b4779821767180fcbfe8eee157c4774b9a4d7dc0051a2163b782b350cd1cdb9588daa9a8b0edf8bfd448e8e9f45d5f175cde579d898337b5422a6a8d796f3741a0992edb95382f716c1a51538bd43f72161949635b2d64b7d2b275b77983a6d27d4ec1cc65a60f5ed81f5f0c2b8080fc478b78f40f37703e68c5bef3d334016af76c0ff36139c587a12050da6cf507fa79f974c67d2c140361df3f4216a281cfe0a6a52762ecf0a7b76461279be18e62cbe59e2d76a7b8ce7937100ac23b36d574f82d5ef47d0349ac83a299ce0f5ad492aa48ab534ce85058d9ceebe03b2d2d03c5ccaf9f95098e12889b7ecc8289243aa45312a0b28e46280ad1aa5fdecf99a8a17e9bc17da5f47372373a9468f20298b9360182938506bc8bf8a70aa4563b6f53c5cc107933a1c49a01660b8d6424185bb805c664d5e4907adef6dd3a62bc7f70dd542b9a2b37c118cdc369d994b9a5267277caa47b654043e5eb95280dfabdc46a19b177ecdb86345c90263a349d3bc9df7f2ac55698f3f90310370c19f6cace2de20a2e3bbb0dcd8cab2dda2fac7d71b6e3ea4ae0ce772edf56a47c0cf66524e00ff7f9259a0040c4ecf11ed1102d9aabfca7eca0be70ce2c2402c0b77d3ae9aba4182c0ab2986e8d4562b821c685e259636b3ff57d7eb25747527ca5fa586080670e9a642dee27f55eae910233fd16b7cfd033970c5a4a6e2c156d520c9cd758a2854b13711117b96da133ba10aa9c3b579c7227b61a2675aa4311c50689bb0dd6f5b6f7bcee3d53dcdb2271bb92623e9b96ab21d7ba12163079d8d445133a67c8740d9b9d339e1a634819a0cf344598ca3d95591430d61d42cc6c4c48303d47e9e94aa13a4d2e253caf0d74a8483a857033d2daa35e3a842aac01d0bd77e472906c22842ae0dce2f86e962476d4216bb66642e37de6775b061a641cd046ab4d4b1c19bc4de8c8826b2ae3ee2310ae873c3d5bb0f74c76f73e6f97f14e5eee6711a3b64a79ded0da58a582bcff09b2debadc886a72775662607a6422193394d5bb9c31c6979dce8cc33d5a761ff4cc26fd94239ec50d2d6a0b012f60e2daa33d1abcc1da4f71bc72090ea3cf1df13a05ce4a3e1a8da921217ca9d7092e08d8fb30d59fbbd439bdbf43b99de558b0d1666123dd074f95bc293318094f75805e12dd309f39335f5590e2b202fc0fea664d077b0353c3a704497a4218b34871b3e05948e389cc876810b1abbf6ee502673fc97d6f505ec546d52fe00649e3fb0d0796ea67749f3e5fa08fb71126e81830e939f4420715a5bfd2c032d153a3e7b2759650917aa596b33ac5e0af1dc1f6b92317f0977efc90cdb3189338deace77ac739b32937362ba9061d79a3352c183e6e91d6fa4e3e72e2e01265bf7986cd3695e9e81744774004018f3ba910a08ae978bf057dff3ec67d25313f4a50db43d4dc1df6b9be9f06d2195b2ad3408e7d85a0e4065d804b1d9ee175c9c5200a079cdf1dfa54f0b2fb36678334ca9e8e10623b676fca1d3986900512c05f973eb8303974fc870bf5768a1bd7c51b3c4d8b382ee311c7ac947ecd82a54f040e99e64209d2538f7564db6172eaadfc285ee5ac0b7dcc6f99a4f2fc1354c270c5f8a0103e3480742b3f9b1923b15152c2dc4639a89d410b3e2eb155901a688c56392380f95e468fdf3ab4bf221bdad2a188e87f7db22ca9a6ab7bb3f607312cf84eff3da30d6292d1cb2ab60a632607e126e76deafb0c8ecd9570b0d3b21f4960ac118acedab45b242f1a55da4fa98a354da839edfb2bcc952aee9b0a1cf35779574cd83594d8c1cae80648e950152e6d608acb111979a7b00b15fd1089f31c219e7ce597449b50d65e1bf8f786f885c42abce557bca665c667095d97e1e757e4d123e61dd8983661ba081254426c377e8b0bde2ecd989a4d1823e1961d0726fe16f1c852eaa5eb171d51f1d790491f2200d3eb1053106e1c1e86fcde1bc2b72a3136e1dde01c8743d361b23fcdf1a8c975c90671611287c3c1fbc44c3bbaa0c7433b5917d93c7a3e9e834237421c659b41a0708874619953873ffd3a64338d1b123cc9d9c595b5762d148c64a2c6a0") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='fsi_slave_init\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0xfffffffffffffeee) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f00000000c0)='syz0\x00', 0x1ff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0xfffffffffffffd9c}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x56, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c96", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xfb, 0xca, &(0x7f0000000980)="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", &(0x7f00000007c0)="4c87fe555ceb79157b1e507ff4d3cc053321e42ae89f596427188b4877ab8f1776c0685784f1174c6401ecc1dd6e2a77bc79238f87ad9215a92ff203a30099e77c543e702b4a4438d358616381745f24f74e585498af129c4b173b242f445b08135f7fa40eb7ba78160ff4f0c80e1b324d0c234cb7f43a3ff9e9535dc16000c797113a039f4508a09144090000009f38a90a24f173b3e68377e4272950a80cfcd3aa6850e917bc7e57370060f5e6db941d67fc98a1e98103830b821657438325578d2af822dd4fc13ea7", 0x2, 0x0, 0x10000}, 0x50) setsockopt$sock_attach_bpf(r2, 0x0, 0x2, 0x0, 0x0) r5 = openat$cgroup_subtree(r3, &(0x7f0000000400), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000c40)=ANY=[@ANYBLOB="060000000000000020d4456aa9a4f7175f3d161c3a6bb5e7eb150615cc180a0f04a2c238954264d8e2d48b58f8ba989d1db15edc68077ca112977ecf"], 0x11) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0xce4, 0xc8, 0x0, 0x2, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.838028706s ago: executing program 1 (id=1555): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169b740ac03d7c64cee49ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d54f45a24effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c7724e9e7e7babf61fe358ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261ed1d4515f46290d5c6579b63358fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63e774e940bfeb0de83f42fd565a299f741f9b00be4e8fcaf4ec85daceb16d9e8a438e3eb2556570e381b03d9e3c245728648ed9ff22dc963ed105c851c3481125b4c0c8a08a0c9930190902af109fc56b64cc952f298ebe73d7b18052e0147356228ca171b06274a871e2cf9609e0b4cdad36c3250bc8f56f95a6ed"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000400)="d800000019008111e00212ba0d8105040a603f00ff0f042b067c55a1bc0009000800060060000000b0000500fe8081780d000500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) 15.773738327s ago: executing program 2 (id=1556): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000001, 0x0, @perf_config_ext={0xfffffffffffffff9, 0xa8b5}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e42000c371303ed6a33f2ff8689b3f60e"]) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x8, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80", @ANYRESHEX], 0xfe33) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='fsi_master_write\x00', r3, 0x0, 0x5}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='{{@.\x00') 15.773192647s ago: executing program 0 (id=1557): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x7, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x200, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, 0x0, 0x3000c085) sendmsg$inet(r1, 0x0, 0x52cc) close(r0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffffffffff91, 0x4}, 0x30}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0x10, 0xc}, {0x10000002, 0x4, 0xf, 0x6}], 0x10, 0x4000000}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x80044944, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r5, 0x8923, 0x0) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1, 0x0, 0x0, 0x1100}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000040)='\x00') 15.768887257s ago: executing program 3 (id=1558): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x6, 0x804, 0x0, 0x7}, {0x10400002, 0x2, 0x0, 0x5}], 0x10, 0xfffffffd}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) close(r0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0}, 0x40) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000500)=[{&(0x7f0000001500)='7J', 0x2}], 0x1}, 0x20004050) 15.687485789s ago: executing program 3 (id=1559): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000c080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x4001}, 0xff0f000020000080) 15.58582112s ago: executing program 1 (id=1560): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x22}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x401c5820, &(0x7f0000000a00)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000a40)={'wlan0\x00', @multicast}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x1a, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xcd}, [@tail_call, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x42, &(0x7f00000001c0)=""/66, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x8, 0x4, 0x2}, 0x10, 0x2236b, r0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000380)=r3, 0x4) 15.556768491s ago: executing program 3 (id=1561): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r1, 0x0, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0xceb, 0x0, 0x1, 0x9, '\x00', 0x0, r0, 0x3, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086602, &(0x7f00000003c0)=0x2004091) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20690, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'wg0\x00', @multicast}) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a"], 0xfe33) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00I'], 0xfe33) 15.541148521s ago: executing program 1 (id=1562): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x5, 0x0, 0x0, 0x8, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f00000000c0), &(0x7f00000002c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r2}, &(0x7f00000014c0), &(0x7f0000001500)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r3, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r4}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000a0000"], 0x50) openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) 15.481748052s ago: executing program 2 (id=1563): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r1, 0x0, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0xceb, 0x0, 0x1, 0x9, '\x00', 0x0, r0, 0x3, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086602, &(0x7f00000003c0)=0x2004091) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000006000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='mm_page_alloc\x00', r3}, 0x10) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20690, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'wg0\x00', @multicast}) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a"], 0xfe33) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00I'], 0xfe33) 15.329164434s ago: executing program 3 (id=1564): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10, 0x0}, 0x3000c085) (rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 15.253550365s ago: executing program 1 (id=1565): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x39, 0x0, 0xffffffffffffffff, 0x8}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$TUNGETSNDBUF(r3, 0x800454d3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="b8", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffffffffff91, 0x4}, 0x30}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0x10, 0xc}, {0x10000002, 0x4, 0xf, 0x6}], 0x10, 0x4000000}, 0x94) r4 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0xfffffffffffffffd) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0) recvmsg$unix(r5, &(0x7f00000007c0)={&(0x7f0000000440), 0x6e, &(0x7f0000000740)=[{0x0}, {&(0x7f00000019c0)=""/255, 0xff}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x3}, 0x40000020) setsockopt$sock_attach_bpf(r0, 0x1, 0x26, &(0x7f0000000100), 0x30) 15.209681886s ago: executing program 3 (id=1566): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000097000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000002feffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed000072030000000000001d44000000000000730a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0xe4, 0x1, 0x3, 0x6, 0x0, 0x42d, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x4, 0x7}, 0x188, 0x98cb, 0x4b, 0x1, 0x7ff, 0xffffffff, 0x6, 0x0, 0x6, 0x0, 0x1}, 0xffffffffffffffff, 0x2, r0, 0x3) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x0, 0x2, 0x9, 0x202, r1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x5, 0xf}, 0x50) r3 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x7, 0x3, 0x1, 0x3, 0x0, 0x5, 0x4, 0x6, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x40, 0x4, @perf_config_ext={0x5d, 0x8}, 0x40, 0xac07, 0xfff, 0x1, 0x7fff, 0x9, 0x200, 0x0, 0x3}, 0x0, 0xf, r3, 0xa) r4 = socket$kcm(0xa, 0x6, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) perf_event_open(0x0, 0x0, 0x4, r6, 0x8) r7 = perf_event_open(0x0, 0x0, 0xf, r3, 0x3) perf_event_open(&(0x7f0000000880)={0x3, 0x80, 0x4, 0x0, 0x9, 0x86, 0x0, 0x0, 0x400, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x8010, 0x2, 0x5, 0x3, 0x2, 0xffffffff, 0x7, 0x0, 0x6, 0x0, 0x3}, 0x0, 0x3, r7, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)}, 0x60000) 15.209430626s ago: executing program 4 (id=1567): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r3, &(0x7f00000000c0), 0x12) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) 15.184365656s ago: executing program 2 (id=1568): r0 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffd, 0x1, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00', r1}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="19000000040000000800000003"], 0x48) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x1d, &(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000fa1f1d2e57cf570e87c4000c000000b700000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x4a9, 0x1000, &(0x7f0000001500)=""/4096, 0x41100, 0x59, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0xd, 0x9, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000580)=[r2, r2], &(0x7f00000005c0)=[{0x1, 0x3, 0x0, 0x8}], 0x10, 0x58fa}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000006c0)=r3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x400}) socket$kcm(0x29, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188002ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 15.095601298s ago: executing program 4 (id=1569): ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x80087601, 0x0) r0 = perf_event_open(0x0, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x280a01, 0x0) close(r2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000200)={'syzkaller0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x3, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50) (async) close(r3) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @local}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc6007020f", 0x17}], 0x1, 0x0, 0x0, 0x400300}, 0x4040000) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) (async) socket$kcm(0x22, 0x2, 0x21) (async) write$cgroup_pressure(r4, 0x0, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x313) (async) mkdirat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x1ff) 14.865669771s ago: executing program 4 (id=1570): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x6, 0x804, 0x0, 0x7}, {0x10400002, 0x2, 0x0, 0x5}], 0x10, 0xfffffffd}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) close(r0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0}, 0x40) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000500)=[{&(0x7f0000001500)='7J', 0x2}], 0x1}, 0x20004050) 14.821611772s ago: executing program 0 (id=1571): r0 = socket$kcm(0xa, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000bf000000000000000000850000002000000085000000070000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000002380)=""/192}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000680)="e0b9547ed387dbe9abc89b6f5bff", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000000c0)={r1, r2}) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000580)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x101, 0x4000}, 0x80, 0x0}, 0x20000000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00'}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='bdi_dirty_ratelimit\x00', r3}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d12037fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c3d8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea4c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f056c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c79115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b93989832d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560ea1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00000000000000000000000000000000000000000000000000000000000000000051f9f0b8fec61db23d54e59ad817db0f8a03f6781b032b6324ff40dd211a9e62118a94235e2e36fbcdc8837fc5208bdf71650ad22fe0802eda7664122d64f29b434773e3dd55e0172a6f4509ae7da1e1644cca3fe702212fc3f2c5cc8a00"/2659], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001080)={r5, 0x18000000000002a0, 0x11, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f086ddeff913", 0x0, 0x2000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x10, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, [@tail_call, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @alu={0x4, 0x0, 0x3, 0x8, 0xb, 0xfffffffffffffff0, 0x4}, @tail_call]}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r6 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r6, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) r7 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r7, r4, 0x0, 0x5b, 0xfffffffffffffffe}, 0x32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='fsi_master_acf_crc_rsp_error\x00', 0xffffffffffffffff, 0x0, 0x1b5}, 0x18) r8 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r8, 0x84, 0xa, 0x0, 0x0) 14.811373082s ago: executing program 4 (id=1572): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000003, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x72, 0x7, 0x9, 0x2, 0x200}, 0x0, 0x3, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x9, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000069115400000000008510000002000000850000005600000095000000000015009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xabb7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, r0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='mmc_request_start\x00', 0xffffffffffffffff, 0x0, 0x620}, 0x18) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x12109, 0x0, 0x0, 0x0, 0x0, 0xd, 0x3}, 0x0, 0xc, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="120601"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x749}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20080, 0x0) socket$kcm(0x29, 0x7, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f00000001c0)={'lo\x00', @remote}) ioctl$TUNGETVNETLE(r7, 0x4010744d, &(0x7f0000000180)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00'}) 14.730406303s ago: executing program 3 (id=1573): socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f73, 0x1}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0xe, &(0x7f0000001580)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0xffffffffffffffb1, &(0x7f0000000100)="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", 0x0, 0x400000fe, 0x60000000, 0x0, 0xc7, &(0x7f0000000000), &(0x7f0000001480)="9c18a537674b5d9e9185cd0add6d6d4c9e63ece1b58d7b42c6c27a5f1671fdf94432fc1baaef86573fc9fbb426f9284a6bd47174eb6fb9f893c18421d26d649d633a0f459969df8d3284737c5586cd696884192ce10db91e21fd978337408b7bd1cbb6789b51d63c8e68dab5da01c8e19d572950cfe2142e244990624270eaa2a2ded01d820cec011a6b05192b91cd193b1995bc296c249e1ef1570000000000000f75eec7040de10b5d8c536e5b5ce39ab84e658eb8f02fe112a5136cd3ac5c06848a40ec335a", 0x0, 0x0, 0x800006}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB="00000000000000009500c000000000f80861000040"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x5, 0x7f, 0x9, 0xc0, 0x0, 0x80000000, 0x0, 0x11, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc, 0x0, @perf_config_ext={0x1000, 0x6}, 0x8000, 0x7, 0x2, 0x7, 0x1, 0x8, 0x0, 0x0, 0x10000, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0x10, &(0x7f00000013c0)=ANY=[@ANYBLOB="1856000001000000000000000000000095000000000000002a04a3ff0400000085100000020000001867000008000000000000000900000018000000f9ffffff000000005110ffff28654000010000001851002002000000000000000000000071110000", @ANYBLOB="9a8f60de90ebb6dc546ce926d5f8dbe2cacae2bd2e308890dc7b92473d36f7", @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f0000000280)='GPL\x00', 0x9, 0x84, &(0x7f00000003c0)=""/132, 0x41100, 0x1b, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0xd, 0x80}, 0x10, 0xffffffffffffffff, r1, 0x5, &(0x7f0000000540)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000580)=[{0x0, 0x5, 0x5, 0x4}, {0x5, 0x2, 0x2, 0x9}, {0x4, 0x4, 0x10, 0x6}, {0x3, 0x5, 0x2, 0x9}, {0x1, 0x3, 0xe, 0x1c}], 0x10, 0x1}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x248}, 0x20000804) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x0, 0x7, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='T\x00'], 0x88}, 0x0) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000000240)={'ip6gre0\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=r5, @ANYRES32], 0xfffffffffffffe13) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYRES32=r5, @ANYRES32, @ANYBLOB="00000000030000000300"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) 14.728049983s ago: executing program 2 (id=1574): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)='D', 0x33fe0}], 0x1}, 0x20000040) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg(r2, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x3ec0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000790018000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xd3, &(0x7f0000000100)=""/211, 0x0, 0x0, '\x00', r0, @sk_msg}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2400, 0x0) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000240)) 14.585623526s ago: executing program 4 (id=1575): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x5, 0x0, 0x0, 0x8, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f00000000c0), &(0x7f00000002c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r2}, &(0x7f00000014c0), &(0x7f0000001500)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r3, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r4}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000a0000"], 0x50) openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) 14.571922156s ago: executing program 2 (id=1576): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611068000000000063014000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='GPL\x00') 14.422883658s ago: executing program 2 (id=1577): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000a50000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001000000f7", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0900000004000000dd0000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007911c00000000000850000006b00000095000000f8000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfe01, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x21) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 32 (id=1565): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000001ec0)=ANY=[@ANYBLOB="61124c000000000061138d0000000000bf2000000000000007000000087000003d0301000000000095000000000000006926000000000000bf67000000000000150a00000fff07003506000043fe0000170600000ee60000bf0500000000000063620000000000006507000000000000460700004c0000000f75000000000000bf5400000000000007040000f0fff8ffad420100000000009500000000000000050000000000000095000000000000001c0a7900009d3c2792432a4fa650c512aee994a56462712cb064ecce5e7a9ce0a575a4f7952cb768637e60bd5d2e4b5992de991371274fdf535e001022e25659a7c85615c1b88bc894123c090014e8fb87efecdcb73858479526222b22ff81971ef49b2cb0dcebea6d90e9c1677fbefd35893d883a2c559b7af8db8b2d89fcc8af461b2a74af360eace66cec40d927006bd666c8122217c27902b3933106d0cc5bf6fec345ae9606c3c1a3000c94df67ae600900ffa2f49ec035883e27b1a9e9dff3e8bfc7d1be00f1a0820102b19000000000000000009095601e090012086dee84efd375f0642ed261765d3b9efdfbed9b430bcf04060000bdff1c8bcfc00300000000000000ab5d5f299354997c8bef9ca55841a57eddff9220c67c9e17bee524c3dc74c0271124cf9e4e2d23f7062351edf77c7129eb89085967722da6cb884d1afe82f7f722e38397996271700241094d272dd8b754b2dd36d486e7ffd1bdc198deb495cac0995ca3ef6c1affb693ae366b0f11db6ee4830d87a347d448b0737e852306b4713e5ce6cac6a27e29f164b9f16d6f045271b8e9f172c3db24558d77b8bf18be45c50b3fc005fa7b5e45a209d48d6dc2389d7f34cb9c02cf517c8ee8a9b6159ce895101c2ccff2bde95aa860ed9b8b6d6b8fcab7663d9bd8415e6f90fdb007b8f3e0ffe3a638c4fd88d20d235173720c1df1147c9f5013c82fc98604bd70cd56609a6b73943748a900e1d8cf81bcb1d2620bee688eb0a284040000005cc3ba8bf0b5e0fc018463d03a73fa85429725545128b0e9b550a13d0dd35092250b7d00ff03d5314fa8d37932055bb6d30d0000cad2375a34c7f15c3096f31e6aa6887864f62760ae35214552982bba84d92b1261251330dde4cf97b7cc6b2349e4f7a56003f7303d210fccd2efe6cda2595aacc36db66ff83af576b56dfbd40b15d569244d7d6e1182c4fa829c3f86acd17082bfed73ab9ef37705f9d2734801899e248e1a7155e28f000000000000000fce52263e3953a6f8560f852602ca905b58a9e2dbf16dd0322d0bb3ceb1b01752230bcbbf731701b2b1768aabb9a002090c09ab606e91ad9d88e7205464594add8691b62d55127cd891b8abe4358697e1b5f038773c0aa220cdce78b9346adbd72b293e66ef1a04905aaf6bd31e8d40d425d21232956ee45935d7adb2bf9fb37ff145472c58dbc8db58d0cde99df77d86ed71070000000000006d5cf959fb84c9f8ec46ec9af313d13d1bd85d57f598c00eb7bb8b6b4ff5875a50e2ea3287cf0f838bffdbf985fdce1fb66979b51cc6d6d6661354f33986f7acee499e25e3b70db6f15d7f2bfc0000000000000000ff7f00009eeb78c3d2e83f5e0eaf5cec82f45884cb0394271826ac2d5cc0afc4e784b515c659901c5c6a8573436be7b0f64c6176ef37db239a1ee9839436e951aef4196798d518a4820a241cec1b3e4923dae4c87d460900000000000000de7b13645fc6921a759e2c23153f432a3e5167628a94aacd0f40543049d8ef9787b56006227f143ce5554837675b93eeced66fe71bbe2c055660d23af1c9a83b78d0fde1f9dd526858a320563807a1ef41829913ce0b280010dca0cb3a98a8986e8e656dcaa6ae4ee6717a29e50450688763f1b17c156b860ba0d5a121d00ceac30ef5e104c43d76074c3884cb8fa504ebc94f7c83e90b6cad8d2a02df007bd585f4472cfb004cd9f09995000000000021000002cfceb7feffffffffffffffb1a6c40ac666744ca6c8fbba8452b686fd9b6250edd7d86ebc35898637dd88540e40d5799c11ee9883be26229eeee3941494fcd4389af9b755843126338c346b4d50a5b8684ad74bad46f4ffd86292d72a933fcb7304aef4b4a4bf6e054fea3549e08c0dd2334f485da9382887c16306176f73f029e2f9f8145360cfd5ffd66ae82d51e683ff364981b358a5f48af10059a0716951942eed021e41ba076d486cd095ffcefc3e8b8ead226c5a640b06fc13311826d024248f14b62a7fb0f9b95c9e23e7d29aca69e77db40dd00c0b20e43e300b1a46e243e2a8321dbb1270a22d9a2368de08d625566f253f0760abb44c11583fa5b914ab298ade422e4c0ddc7b17dd2aa8ac94d93d6b590000000000000000000000009b90eb1db265c18521667d305886e9c47ad357a76be0c9ce899bdd80a51a2017190a590d092bc500ea71b338098d1007517c1d6e785d5e0975ca2c2edf221b30377e61fce8bf47e7b93da593d154caca75b1ef1273aa501807005593ba45d219d7c656be0fb900000000004093461ceec5fce099368e07060c21cabb846f2447fc72be9925b2f568b15e5d22c8fabbfd3edac460c70a5619a043ada38fea3b104f9c1a473b7820faecfbb40b5e0d3681013c0cb2b8acc1ceb5f790210a3be07b2727c4e5a5d20468b3ed35f9a71519904c6dd76dee5738dcdac1f4358bb65c1aca8eb0a65aacbaaca92cc7cc553b1c5181d81c15ff4eaea3bcbfc4e0d06bd8d2e2d941924f860f2aba2253b9038e6923b026b7ece3e9fcdf6aa14a65bd6cd7e78457dac1fb3cdc421d6059e17d44e378189035c2fe489e5b7a87c23ec952e2affbc7a4c707312b17a5f428527cb42a8cbd072490eae617e6ea32ee7d3055bfc9b1128553cb963d3873115296a8bd2efb7368ea2727b294d6eceee49ad9093738a3b1bbfa163a917380953fdc3a443a6585925ee14a817390a655c1988632a414b304d688116d79693efd80b293ddc89bb27529c34f4f8ee3ddbaf1c13a4e15186353efd0ced475794ff5f9b0580f2fb996928f0ca6d1a9f4bda1fe9c1bc2e657448c00ca6afb2e5b1c336d657c87f2634db46e2e8e82366a2de4dd41ca0a26ab49d5d357e5a8af73d9504af230513acadd2f0d9d99c4b6e4ebf68582cf8dc4dac990b216a6a216b0cae87a2339fda14e546b224857f758cb64ca2dcdf32b5420ad9f33dbaeb36b7466c5129508d57329f57ac682757e398c4d2a6f93fb1dfc2c840e06bd6c0d7ceedc3721b19c7c9fc1645cf32d79807c4d3e0898ae2a829df5c03834bc2558aeed652399a9cf9e5c859d3c5c5341b329fea445d2e040562a813c35ed1c1afab50aeb12eea9456adf21953947413c03af836bc339355250daeaca253f809493c75c9dcdbae3a76753d593623348e82b1e9c5480fd099b6322b6c6158ebe8ecba0ab364ce4a58e244b76d16b81905878c4caaad1f54cc11df97a50356638016a7e50a92ee55af3c64ae2b95653373d3471c0f26119e18426fae7739a9031618635a257cf58b1e9b8264b6543d6c1c372b66d9a5f96198ae01beeb398744ac4b6f26b568cd7b792039ac4e10f9307b1a8dc268a5d2af3dbce55fdac6d1a158a2243c679261aa080acdf0d55753d3163664df7e4129f12f850c694dc140cf9380687da9914be848a01bc7f5278eb3c3210664b62743887b822814c58a3304b392c7e2a6e64576248af87c0f995af921be86e8102d8343c0de8cda3512f84c894ed6c0206e41443c456467c42ff9ddad36e882cc5287394aedd8d413a061a2894f2ef5fc3072fc8a0c5c2a9f94954278c3d67a0b0fa6e002ce0840e3405d166f037a6e678ce1af6ed9c6e7023f8663d294f4bee1effc148e096d2eb91903c482548c0c5b135a31ae6903a9cb9a40a89155ce15dbe3e373a7ac4c7b4d391bdac5268b2d419f13aeb86f68725a4633eb883417bc23243a302ccc919e0b141ae8aeb7457264f8cad663255db96efda704cef9428ffeb16acd3295a36b1e514ecf65944d5c754e02410075714612e7841e6c7e1e2366bd6ccf335ac9dd35332ee78aaa2ff6950c81fd53db93dcebe8b9c42aeefaf63150d649bd1542014ac64daaec18e82854454967e37a6dccea142f2504a6aba4dd44594c230101a4574d56a1ff4f5b7dd246f7d607ff6f8bebf4fd7e709122f3129bec4dd5b4129829d15d1d3b1fb82e341a325f7863c5035bc6a35a6568b35327a8364d98bdf516e27b57976af232128856692b491469c525eb2a48d4794459dae9213bd0088206f364f8c2c727e3e1d1a3ca9f1b40fea92bfea26189d3bf91e92c1e8795334cc268e0b31cd354701eff8adfa247b848b0ae203f78380b818c0afbe01efec884ff0a6cecfb726886bbdaf78ed3ebc40556b434d0fd81799d96cf302e1115c8cda0b4c7f27c8b4ad1a5808f6b908816ca7483f94fbb8391e6533833470c9c3352d70ae03bc8479e64caf16d5fabe77519aa196fcfb4e480620ef153a09e1dd59490ffab33976fba5b3126dc509e4cbc94bd59f745319efc4523e1f0387968be039a920a0abc8aef753f82ca796055bf28affa706df1312a898162454ff9010ee5fa95d56fa3e8ab283481c20d0fa2b3149a54c268d2b77ad6ce63f97e10bf3baa14dc7a4492587ae1e26237787231d000000000000000000000000003ef8cbcd3ffe8d35974cbb469c41e8ad0b58c5376c4fa943d02a4bd12dab3cab9ef4e62cb10820de0d87ddd79f820879e4ad8868f81cf931760d5c6b9c7337e8efcaa4e63eed8e3eb668f104cf1fa53fb300acb4bd61371d6f12165e9814d2517cba3403530d06737da5cb6ca5996af9a16cca9853430842bdf0995c53681e4a2b0bd1fdaeb0e7839669aed97a6f6f25f7de9ba0ea23384b85957faf49d62dba00af3c7e3c817e13e63c487fc167f2aff6e5a250937bb43b0a8e9d12ff551e6cc2d304aec2a5d843ea327c0a3379594726b92b1919367f3b1711087f160503b3b37170579ce2a664b21d86aca4cf19c1f36d264b0b7ba3de1e020601418d981c6f596e48d5cebe4ff0fb8046e87a5c4d95c07935"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x39, 0x0, 0xffffffffffffffff, 0x8}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$TUNGETSNDBUF(r3, 0x800454d3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="b8", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffffffffff91, 0x4}, 0x30}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0x10, 0xc}, {0x10000002, 0x4, 0xf, 0x6}], 0x10, 0x4000000}, 0x94) r4 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0xfffffffffffffffd) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0) recvmsg$unix(r5, &(0x7f00000007c0)={&(0x7f0000000440), 0x6e, &(0x7f0000000740)=[{0x0}, {&(0x7f00000019c0)=""/255, 0xff}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x3}, 0x40000020) setsockopt$sock_attach_bpf(r0, 0x1, 0x26, &(0x7f0000000100), 0x30) kernel console output (not intermixed with test programs): 0 port 6081 - 0 [ 67.708241][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.716998][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.729211][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.740332][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.751353][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.762298][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.772998][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 67.774463][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.790997][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.803015][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.810564][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.819818][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.829498][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.838927][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.848476][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 67.864911][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.874328][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.882719][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 67.895913][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.908926][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.914410][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.927903][ T4242] Bluetooth: hci4: command 0x040f tx timeout [ 67.931717][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.944713][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.955470][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.967933][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.978466][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.989786][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.008510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.021367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.030546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.052713][ T4194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.062931][ T4194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.072011][ T4194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.082729][ T4194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.139426][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.157097][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.193575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.202167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.210826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.224433][ T4192] device veth0_vlan entered promiscuous mode [ 68.270929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.290571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.316810][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.338979][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.350531][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.361526][ T4192] device veth1_vlan entered promiscuous mode [ 68.404737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.408637][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.425959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.441854][ T1457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.465443][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.485157][ T1457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.503064][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.525363][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.569626][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.587348][ C0] hrtimer: interrupt took 47881 ns [ 68.641915][ T4192] device veth0_macvtap entered promiscuous mode [ 68.671009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.706183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.757967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.824440][ T4192] device veth1_macvtap entered promiscuous mode [ 68.860387][ T1457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.879973][ T1457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.052974][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.084036][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.149764][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.178581][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.188583][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.199500][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.211043][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.221606][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.233077][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.244288][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.272574][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.308575][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.318329][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.331187][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.344384][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.354671][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.366102][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.377254][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.390592][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.400605][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.411215][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.423866][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.481556][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.499388][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.538479][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.558178][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.576644][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.585822][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.596434][ T4298] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.6'. [ 69.673109][ T4304] netlink: 'syz.2.7': attribute type 29 has an invalid length. [ 69.712685][ T4303] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.4'. [ 69.770839][ T4242] Bluetooth: hci0: command 0x0419 tx timeout [ 69.885784][ T4242] Bluetooth: hci1: command 0x0419 tx timeout [ 69.902572][ T4304] netlink: 'syz.2.7': attribute type 29 has an invalid length. [ 69.929794][ T4242] Bluetooth: hci2: command 0x0419 tx timeout [ 69.951301][ T4309] netlink: 'syz.0.8': attribute type 39 has an invalid length. [ 69.977588][ T4242] Bluetooth: hci3: command 0x0419 tx timeout [ 70.013014][ T4242] Bluetooth: hci4: command 0x0419 tx timeout [ 70.048623][ T4307] netlink: 'syz.2.7': attribute type 29 has an invalid length. [ 70.068303][ T4308] netlink: 'syz.2.7': attribute type 29 has an invalid length. [ 70.115646][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.143753][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.177144][ T4300] netlink: 'syz.2.7': attribute type 29 has an invalid length. [ 70.215731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.242425][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.285913][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.311638][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.329975][ C1] Illegal XDP return value 16128, expect packet loss! [ 70.555829][ T4328] Zero length message leads to an empty skb [ 70.973738][ T4336] netlink: 'syz.3.15': attribute type 10 has an invalid length. [ 71.376544][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.383238][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.214411][ T4336] team0: Port device geneve1 added [ 72.236737][ T4344] netlink: 'syz.2.17': attribute type 10 has an invalid length. [ 72.275959][ T4344] team0: Port device dummy0 added [ 72.295343][ T4336] syz.3.15 (4336) used greatest stack depth: 19264 bytes left [ 72.600785][ T4368] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.26'. [ 72.864500][ T4375] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.29'. [ 74.050713][ T4394] netlink: 'syz.4.34': attribute type 10 has an invalid length. [ 74.176881][ T4394] team0: Port device dummy0 added [ 74.494590][ T4404] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.37'. [ 75.044607][ T4415] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.41'. [ 75.509955][ T4423] netlink: 209592 bytes leftover after parsing attributes in process `syz.4.43'. [ 75.869033][ T4429] Q6\bY4: renamed from lo [ 76.283089][ T4443] netlink: 'syz.3.49': attribute type 10 has an invalid length. [ 76.434083][ T4443] team0: Port device dummy0 added [ 76.524490][ T4446] netlink: 'syz.0.51': attribute type 10 has an invalid length. [ 76.732502][ T4449] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.53'. [ 77.026589][ T4453] netlink: 'syz.1.54': attribute type 9 has an invalid length. [ 77.678664][ T4446] team0: Port device geneve1 added [ 77.761274][ T4453] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.54'. [ 77.845011][ T4446] syz.0.51 (4446) used greatest stack depth: 19136 bytes left [ 81.441475][ T4476] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.61'. [ 82.994352][ T4523] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.80'. [ 83.243942][ T4524] netlink: 'syz.1.69': attribute type 10 has an invalid length. [ 83.573642][ T4524] team0: Port device geneve1 added [ 84.039818][ T4533] netlink: 'syz.3.72': attribute type 9 has an invalid length. [ 84.260278][ T4533] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.72'. [ 85.118585][ T4552] netlink: 'syz.1.78': attribute type 3 has an invalid length. [ 85.152636][ T4552] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.78'. [ 85.629192][ T4555] device syzkaller0 entered promiscuous mode [ 85.740538][ T4561] netlink: 'syz.1.84': attribute type 3 has an invalid length. [ 85.865991][ T4561] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.84'. [ 86.104101][ T4567] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.85'. [ 86.729468][ T1108] cfg80211: failed to load regulatory.db [ 86.816559][ T4594] netlink: 'syz.0.93': attribute type 10 has an invalid length. [ 87.175354][ T4599] netlink: 'syz.2.95': attribute type 12 has an invalid length. [ 87.266758][ T4599] netlink: 132 bytes leftover after parsing attributes in process `syz.2.95'. [ 87.878979][ T4614] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.101'. [ 88.056207][ T4610] IPv6: Can't replace route, no match found [ 88.456461][ T4629] Q6\bY4: renamed from lo [ 88.551718][ T4627] netlink: 'syz.0.105': attribute type 12 has an invalid length. [ 88.584274][ T4627] netlink: 132 bytes leftover after parsing attributes in process `syz.0.105'. [ 88.734333][ T4635] netlink: 'syz.2.104': attribute type 6 has an invalid length. [ 88.772576][ T4637] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 88.838078][ T4643] netlink: 'syz.0.109': attribute type 8 has an invalid length. [ 88.845775][ T4643] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.109'. [ 88.861408][ T4635] netlink: 164 bytes leftover after parsing attributes in process `syz.2.104'. [ 89.373688][ T4698] FAULT_INJECTION: forcing a failure. [ 89.373688][ T4698] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 89.517640][ T4698] CPU: 1 PID: 4698 Comm: syz.0.110 Not tainted 5.15.189-syzkaller #0 [ 89.525763][ T4698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 89.535854][ T4698] Call Trace: [ 89.539154][ T4698] [ 89.542099][ T4698] dump_stack_lvl+0x168/0x230 [ 89.546812][ T4698] ? show_regs_print_info+0x20/0x20 [ 89.552127][ T4698] ? load_image+0x3b0/0x3b0 [ 89.556740][ T4698] ? __lock_acquire+0x7c60/0x7c60 [ 89.561791][ T4698] ? mutex_unlock+0x10/0x10 [ 89.566324][ T4698] should_fail+0x38c/0x4c0 [ 89.570768][ T4698] _copy_from_user+0x2e/0x170 [ 89.575457][ T4698] smc_setsockopt+0x307/0xa20 [ 89.580167][ T4698] ? smc_shutdown+0x5d0/0x5d0 [ 89.584869][ T4698] ? aa_sock_opt_perm+0x74/0x100 [ 89.589829][ T4698] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 89.595390][ T4698] ? security_socket_setsockopt+0x7a/0xa0 [ 89.601221][ T4698] ? smc_shutdown+0x5d0/0x5d0 [ 89.605919][ T4698] __sys_setsockopt+0x2bf/0x3d0 [ 89.610787][ T4698] __x64_sys_setsockopt+0xb1/0xc0 [ 89.615824][ T4698] do_syscall_64+0x4c/0xa0 [ 89.620264][ T4698] ? clear_bhb_loop+0x30/0x80 [ 89.624950][ T4698] ? clear_bhb_loop+0x30/0x80 [ 89.629643][ T4698] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.635600][ T4698] RIP: 0033:0x7f10bb4cd9a9 [ 89.640040][ T4698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.659786][ T4698] RSP: 002b:00007f10b9335038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 89.668238][ T4698] RAX: ffffffffffffffda RBX: 00007f10bb6f4fa0 RCX: 00007f10bb4cd9a9 [ 89.676232][ T4698] RDX: 0000000000000012 RSI: 0000000000000006 RDI: 0000000000000003 [ 89.684303][ T4698] RBP: 00007f10b9335090 R08: 0000000000000004 R09: 0000000000000000 [ 89.692282][ T4698] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 89.700386][ T4698] R13: 0000000000000000 R14: 00007f10bb6f4fa0 R15: 00007fffbb0919d8 [ 89.708387][ T4698] [ 90.050306][ T4711] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.114'. [ 90.216943][ T4705] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 90.556836][ T4715] netlink: 8063 bytes leftover after parsing attributes in process `syz.2.115'. [ 90.593403][ T4720] netlink: 'syz.4.116': attribute type 3 has an invalid length. [ 90.642157][ T4720] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.116'. [ 90.852572][ T4720] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.116'. [ 91.303994][ T4741] netlink: 'syz.1.121': attribute type 12 has an invalid length. [ 91.343374][ T4741] netlink: 132 bytes leftover after parsing attributes in process `syz.1.121'. [ 92.388560][ T4773] netlink: 'syz.3.134': attribute type 3 has an invalid length. [ 92.428855][ T4773] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.134'. [ 92.635964][ T4772] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.135'. [ 92.705786][ T4774] Q6\bY4: renamed from lo [ 93.065175][ T4787] netlink: 'syz.3.137': attribute type 3 has an invalid length. [ 93.156271][ T4787] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.137'. [ 93.379619][ T4800] netlink: 'syz.4.142': attribute type 1 has an invalid length. [ 93.431652][ T4787] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.137'. [ 93.437744][ T4792] netlink: 'syz.2.138': attribute type 12 has an invalid length. [ 93.455135][ T4800] netlink: 154788 bytes leftover after parsing attributes in process `syz.4.142'. [ 93.473424][ T4792] netlink: 132 bytes leftover after parsing attributes in process `syz.2.138'. [ 93.721024][ T4805] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 93.727960][ T4805] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 94.312980][ T4831] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.151'. [ 94.650711][ T4841] netlink: 'syz.3.155': attribute type 12 has an invalid length. [ 94.697479][ T4841] netlink: 132 bytes leftover after parsing attributes in process `syz.3.155'. [ 95.570771][ T4851] netlink: 'syz.2.157': attribute type 10 has an invalid length. [ 96.851417][ T4871] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 96.858183][ T4871] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 97.741335][ T4891] netlink: 'syz.2.169': attribute type 1 has an invalid length. [ 97.946214][ T4894] IPv6: Can't replace route, no match found [ 98.213419][ T4908] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 98.220013][ T4908] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 102.101024][ T4931] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.185'. [ 102.509016][ T4950] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 102.515630][ T4950] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 102.551427][ T4951] syzkaller0: mtu greater than device maximum [ 103.766778][ T4968] netlink: 'syz.0.198': attribute type 29 has an invalid length. [ 103.792558][ T4969] bridge_slave_1: mtu less than device minimum [ 103.815906][ T4967] netlink: 'syz.4.197': attribute type 9 has an invalid length. [ 103.834703][ T4968] netlink: 'syz.0.198': attribute type 29 has an invalid length. [ 103.867066][ T4967] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.197'. [ 103.887067][ T4971] netlink: 'syz.0.198': attribute type 29 has an invalid length. [ 105.118849][ T5006] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 105.125440][ T5006] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 105.193713][ T5000] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.203'. [ 106.559339][ T5025] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.211'. [ 106.618293][ T5022] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.212'. [ 106.852472][ T5033] syz.4.211 uses obsolete (PF_INET,SOCK_PACKET) [ 107.061313][ T5032] IPv6: NLM_F_CREATE should be specified when creating new route [ 107.109332][ T5032] netlink: 1 bytes leftover after parsing attributes in process `syz.4.211'. [ 107.332944][ T5047] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 107.339527][ T5047] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 108.249230][ T5077] netlink: 'syz.4.230': attribute type 29 has an invalid length. [ 108.286914][ T5077] netlink: 'syz.4.230': attribute type 29 has an invalid length. [ 108.326344][ T5078] netlink: 'syz.4.230': attribute type 29 has an invalid length. [ 109.044092][ T5093] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.234'. [ 109.819465][ T5117] FAULT_INJECTION: forcing a failure. [ 109.819465][ T5117] name failslab, interval 1, probability 0, space 0, times 1 [ 109.897459][ T5117] CPU: 1 PID: 5117 Comm: syz.0.241 Not tainted 5.15.189-syzkaller #0 [ 109.905590][ T5117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 109.915661][ T5117] Call Trace: [ 109.918959][ T5117] [ 109.921900][ T5117] dump_stack_lvl+0x168/0x230 [ 109.926594][ T5117] ? show_regs_print_info+0x20/0x20 [ 109.931811][ T5117] ? load_image+0x3b0/0x3b0 [ 109.936329][ T5117] ? __lock_acquire+0x7c60/0x7c60 [ 109.941370][ T5117] should_fail+0x38c/0x4c0 [ 109.945802][ T5117] should_failslab+0x5/0x20 [ 109.950324][ T5117] slab_pre_alloc_hook+0x51/0xc0 [ 109.955272][ T5117] __kmalloc+0x6b/0x330 [ 109.959443][ T5117] ? sk_prot_alloc+0xe7/0x210 [ 109.964226][ T5117] sk_prot_alloc+0xe7/0x210 [ 109.968734][ T5117] ? sk_alloc+0x1d/0x310 [ 109.972988][ T5117] sk_alloc+0x2f/0x310 [ 109.977070][ T5117] bpf_prog_test_run_skb+0x240/0x1180 [ 109.982567][ T5117] ? __fget_files+0x40f/0x480 [ 109.987255][ T5117] ? cpu_online+0x60/0x60 [ 109.991595][ T5117] bpf_prog_test_run+0x31e/0x390 [ 109.996544][ T5117] __sys_bpf+0x535/0x670 [ 110.000795][ T5117] ? bpf_link_show_fdinfo+0x340/0x340 [ 110.006199][ T5117] ? vtime_user_exit+0x2dc/0x400 [ 110.011147][ T5117] __x64_sys_bpf+0x78/0x90 [ 110.015569][ T5117] do_syscall_64+0x4c/0xa0 [ 110.019990][ T5117] ? clear_bhb_loop+0x30/0x80 [ 110.024674][ T5117] ? clear_bhb_loop+0x30/0x80 [ 110.029357][ T5117] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.035259][ T5117] RIP: 0033:0x7f10bb4cd9a9 [ 110.039686][ T5117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.059297][ T5117] RSP: 002b:00007f10b9335038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 110.067716][ T5117] RAX: ffffffffffffffda RBX: 00007f10bb6f4fa0 RCX: 00007f10bb4cd9a9 [ 110.075691][ T5117] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 110.083669][ T5117] RBP: 00007f10b9335090 R08: 0000000000000000 R09: 0000000000000000 [ 110.091645][ T5117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.099706][ T5117] R13: 0000000000000000 R14: 00007f10bb6f4fa0 R15: 00007fffbb0919d8 [ 110.107698][ T5117] [ 110.251903][ T5127] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.243'. [ 110.388151][ T5122] delete_channel: no stack [ 110.639913][ T5136] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 111.245752][ T5150] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 111.347374][ T5161] Q6\bY4: renamed from lo [ 111.451965][ T5158] netlink: 164 bytes leftover after parsing attributes in process `syz.4.255'. [ 111.504059][ T5165] FAULT_INJECTION: forcing a failure. [ 111.504059][ T5165] name failslab, interval 1, probability 0, space 0, times 0 [ 111.597482][ T5165] CPU: 1 PID: 5165 Comm: syz.3.258 Not tainted 5.15.189-syzkaller #0 [ 111.605610][ T5165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 111.615695][ T5165] Call Trace: [ 111.618996][ T5165] [ 111.621953][ T5165] dump_stack_lvl+0x168/0x230 [ 111.626677][ T5165] ? show_regs_print_info+0x20/0x20 [ 111.631915][ T5165] ? load_image+0x3b0/0x3b0 [ 111.636457][ T5165] ? __lock_acquire+0x12d9/0x7c60 [ 111.641517][ T5165] should_fail+0x38c/0x4c0 [ 111.645965][ T5165] should_failslab+0x5/0x20 [ 111.650492][ T5165] slab_pre_alloc_hook+0x51/0xc0 [ 111.655460][ T5165] ? skb_clone+0x1bd/0x350 [ 111.659913][ T5165] kmem_cache_alloc+0x3d/0x290 [ 111.664721][ T5165] skb_clone+0x1bd/0x350 [ 111.669010][ T5165] bpf_clone_redirect+0xa9/0x390 [ 111.674002][ T5165] bpf_prog_64e505a7b7f97a05+0x55/0x1d0 [ 111.679587][ T5165] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 111.685606][ T5165] ? lock_chain_count+0x20/0x20 [ 111.690504][ T5165] ? seqcount_lockdep_reader_access+0x120/0x1c0 [ 111.696785][ T5165] ? lockdep_hardirqs_on+0x94/0x140 [ 111.702020][ T5165] ? ktime_get+0x7b/0x270 [ 111.706387][ T5165] ? seqcount_lockdep_reader_access+0x172/0x1c0 [ 111.712658][ T5165] ? ktime_get_real_ts64+0x420/0x420 [ 111.717977][ T5165] ? read_lock_is_recursive+0x10/0x10 [ 111.723404][ T5165] bpf_test_run+0x498/0x7d0 [ 111.727966][ T5165] ? convert___skb_to_skb+0x4c0/0x4c0 [ 111.731005][ T5167] netlink: 'syz.2.260': attribute type 3 has an invalid length. [ 111.733370][ T5165] ? eth_get_headlen+0x1f0/0x1f0 [ 111.733410][ T5165] ? __build_skb+0x1e2/0x2e0 [ 111.733435][ T5165] ? convert___skb_to_skb+0x3d/0x4c0 [ 111.733462][ T5165] bpf_prog_test_run_skb+0x9cc/0x1180 [ 111.733499][ T5165] ? cpu_online+0x60/0x60 [ 111.752893][ T5167] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.260'. [ 111.755922][ T5165] bpf_prog_test_run+0x31e/0x390 [ 111.755957][ T5165] __sys_bpf+0x535/0x670 [ 111.755981][ T5165] ? bpf_link_show_fdinfo+0x340/0x340 [ 111.756003][ T5165] ? rcu_nmi_exit+0x6f/0xf0 [ 111.756055][ T5165] ? vtime_user_exit+0x2dc/0x400 [ 111.799086][ T5165] __x64_sys_bpf+0x78/0x90 [ 111.803553][ T5165] do_syscall_64+0x4c/0xa0 [ 111.808013][ T5165] ? clear_bhb_loop+0x30/0x80 [ 111.812725][ T5165] ? clear_bhb_loop+0x30/0x80 [ 111.817434][ T5165] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.823361][ T5165] RIP: 0033:0x7f0094fc69a9 [ 111.827813][ T5165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.847622][ T5165] RSP: 002b:00007f0092e2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 111.856175][ T5165] RAX: ffffffffffffffda RBX: 00007f00951edfa0 RCX: 00007f0094fc69a9 [ 111.864262][ T5165] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 111.872262][ T5165] RBP: 00007f0092e2e090 R08: 0000000000000000 R09: 0000000000000000 [ 111.880449][ T5165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.888448][ T5165] R13: 0000000000000000 R14: 00007f00951edfa0 R15: 00007fffe7815648 [ 111.896465][ T5165] [ 112.033326][ T5173] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.259'. [ 112.196039][ T5168] delete_channel: no stack [ 112.608323][ T5192] netlink: 'syz.0.267': attribute type 9 has an invalid length. [ 112.649848][ T5192] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.267'. [ 113.062879][ T5211] netlink: 'syz.1.274': attribute type 3 has an invalid length. [ 113.098821][ T5211] netlink: 132 bytes leftover after parsing attributes in process `syz.1.274'. [ 113.134554][ T5213] netlink: 44 bytes leftover after parsing attributes in process `syz.4.275'. [ 113.178665][ T5216] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 113.185208][ T5216] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 113.425964][ T5225] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.277'. [ 113.575003][ T5226] netlink: 'syz.4.278': attribute type 29 has an invalid length. [ 113.662690][ T5226] netlink: 'syz.4.278': attribute type 29 has an invalid length. [ 113.682751][ T5234] netlink: 'syz.4.278': attribute type 29 has an invalid length. [ 113.723956][ T5226] netlink: 'syz.4.278': attribute type 29 has an invalid length. [ 113.908171][ T5218] delete_channel: no stack [ 114.499849][ T5255] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.287'. [ 114.613967][ T5261] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 114.613986][ T5255] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.287'. [ 114.620532][ T5261] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 114.724602][ T5255] netlink: 2 bytes leftover after parsing attributes in process `syz.3.287'. [ 116.951669][ T5306] netlink: 164 bytes leftover after parsing attributes in process `syz.0.301'. [ 117.795198][ T5313] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.302'. [ 117.993870][ T5324] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.306'. [ 118.049087][ T5326] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.307'. [ 118.081086][ T5327] netlink: 'syz.4.306': attribute type 10 has an invalid length. [ 118.136159][ T5327] FAULT_INJECTION: forcing a failure. [ 118.136159][ T5327] name failslab, interval 1, probability 0, space 0, times 0 [ 118.207136][ T5327] CPU: 0 PID: 5327 Comm: syz.4.306 Not tainted 5.15.189-syzkaller #0 [ 118.215262][ T5327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 118.225364][ T5327] Call Trace: [ 118.228804][ T5327] [ 118.231764][ T5327] dump_stack_lvl+0x168/0x230 [ 118.236494][ T5327] ? show_regs_print_info+0x20/0x20 [ 118.241819][ T5327] ? load_image+0x3b0/0x3b0 [ 118.246381][ T5327] should_fail+0x38c/0x4c0 [ 118.250839][ T5327] should_failslab+0x5/0x20 [ 118.255369][ T5327] slab_pre_alloc_hook+0x51/0xc0 [ 118.260339][ T5327] __kmalloc_node_track_caller+0x68/0x3a0 [ 118.266107][ T5327] ? rtmsg_ifinfo_build_skb+0x80/0x180 [ 118.271603][ T5327] ? kmem_cache_alloc_node+0x162/0x2d0 [ 118.277104][ T5327] ? __alloc_skb+0xf4/0x750 [ 118.281666][ T5327] ? rtmsg_ifinfo_build_skb+0x80/0x180 [ 118.287305][ T5327] __alloc_skb+0x22c/0x750 [ 118.291771][ T5327] rtmsg_ifinfo_build_skb+0x80/0x180 [ 118.297108][ T5327] rtmsg_ifinfo+0x71/0x120 [ 118.301566][ T5327] __dev_notify_flags+0xde/0x2d0 [ 118.306863][ T5327] ? __dev_change_flags+0x6a0/0x6a0 [ 118.312117][ T5327] ? __dev_change_flags+0x4bb/0x6a0 [ 118.317368][ T5327] ? dev_get_flags+0x1c0/0x1c0 [ 118.322168][ T5327] ? preempt_schedule_common+0xa5/0xd0 [ 118.327669][ T5327] ? preempt_schedule+0xa7/0xb0 [ 118.332556][ T5327] dev_change_flags+0xe3/0x1a0 [ 118.337355][ T5327] do_setlink+0xc01/0x3980 [ 118.341817][ T5327] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 118.348011][ T5327] ? load_image+0x3b0/0x3b0 [ 118.352547][ T5327] ? perf_trace_lock+0xdf/0x370 [ 118.357531][ T5327] ? __nla_validate_parse+0x1dd5/0x2750 [ 118.363108][ T5327] ? rtnetlink_rcv_msg+0x9b9/0xe60 [ 118.368249][ T5327] ? netlink_rcv_skb+0x1e0/0x430 [ 118.373222][ T5327] ? netlink_unicast+0x774/0x920 [ 118.378225][ T5327] ? __nla_validate+0x50/0x50 [ 118.382968][ T5327] ? validate_linkmsg+0x3db/0x4c0 [ 118.388124][ T5327] ? mutex_is_locked+0xe/0x40 [ 118.392839][ T5327] rtnl_newlink+0x1419/0x17d0 [ 118.397556][ T5327] ? rtnl_newlink+0x3e1/0x17d0 [ 118.402359][ T5327] ? rtnl_setlink+0x450/0x450 [ 118.407072][ T5327] ? __lock_acquire+0x13ad/0x7c60 [ 118.412176][ T5327] ? trace_event_raw_event_lock+0x250/0x250 [ 118.418187][ T5327] ? rtnetlink_rcv_msg+0x974/0xe60 [ 118.423361][ T5327] ? rtnl_setlink+0x450/0x450 [ 118.428085][ T5327] rtnetlink_rcv_msg+0x9b9/0xe60 [ 118.433074][ T5327] ? rtnetlink_bind+0x80/0x80 [ 118.437789][ T5327] ? preempt_schedule_thunk+0x16/0x18 [ 118.443199][ T5327] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 118.449137][ T5327] ? _raw_spin_unlock+0x40/0x40 [ 118.454042][ T5327] ? swake_up_one+0x6d/0x130 [ 118.458672][ T5327] ? rcu_preempt_deferred_qs_irqrestore+0x9b3/0xc10 [ 118.465489][ T5327] ? perf_trace_lock+0xdf/0x370 [ 118.470379][ T5327] ? trace_event_raw_event_lock+0x250/0x250 [ 118.476405][ T5327] ? rcu_read_unlock_special+0xee/0x480 [ 118.481989][ T5327] ? lockdep_hardirqs_off+0x70/0x100 [ 118.487314][ T5327] netlink_rcv_skb+0x1e0/0x430 [ 118.492117][ T5327] ? rtnetlink_bind+0x80/0x80 [ 118.496826][ T5327] ? netlink_ack+0xb60/0xb60 [ 118.501466][ T5327] netlink_unicast+0x774/0x920 [ 118.506388][ T5327] netlink_sendmsg+0x8ab/0xbc0 [ 118.511291][ T5327] ? netlink_getsockopt+0x560/0x560 [ 118.516531][ T5327] ? aa_sock_msg_perm+0x94/0x150 [ 118.521511][ T5327] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 118.526851][ T5327] ? security_socket_sendmsg+0x7c/0xa0 [ 118.532365][ T5327] ? netlink_getsockopt+0x560/0x560 [ 118.538067][ T5327] ____sys_sendmsg+0x5a2/0x8c0 [ 118.543140][ T5327] ? memset+0x1e/0x40 [ 118.547159][ T5327] ? __sys_sendmsg_sock+0x30/0x30 [ 118.552231][ T5327] ? import_iovec+0x6f/0xa0 [ 118.556776][ T5327] ___sys_sendmsg+0x1f0/0x260 [ 118.561502][ T5327] ? __sys_sendmsg+0x250/0x250 [ 118.566293][ T5327] ? trace_event_raw_event_lock+0x250/0x250 [ 118.572212][ T5327] ? vfs_write+0x84d/0xd00 [ 118.576671][ T5327] ? __fdget+0x18b/0x210 [ 118.580939][ T5327] __se_sys_sendmsg+0x190/0x250 [ 118.585831][ T5327] ? __x64_sys_sendmsg+0x80/0x80 [ 118.590786][ T5327] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 118.596805][ T5327] ? lockdep_hardirqs_on+0x94/0x140 [ 118.602024][ T5327] do_syscall_64+0x4c/0xa0 [ 118.606499][ T5327] ? clear_bhb_loop+0x30/0x80 [ 118.611181][ T5327] ? clear_bhb_loop+0x30/0x80 [ 118.615867][ T5327] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 118.621787][ T5327] RIP: 0033:0x7f83ec4089a9 [ 118.626209][ T5327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.645821][ T5327] RSP: 002b:00007f83ea24f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.654333][ T5327] RAX: ffffffffffffffda RBX: 00007f83ec630080 RCX: 00007f83ec4089a9 [ 118.662328][ T5327] RDX: 0000000000000084 RSI: 0000200000000600 RDI: 0000000000000009 [ 118.670392][ T5327] RBP: 00007f83ea24f090 R08: 0000000000000000 R09: 0000000000000000 [ 118.678370][ T5327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.686358][ T5327] R13: 0000000000000000 R14: 00007f83ec630080 R15: 00007ffc396b5d58 [ 118.694356][ T5327] [ 118.741352][ T5327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.811316][ T5327] team0: Port device bond0 added [ 118.816913][ T5326] netlink: 'syz.0.307': attribute type 10 has an invalid length. [ 118.854276][ T5326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.930819][ T5326] team0: Port device bond0 added [ 120.637733][ T5369] netlink: 164 bytes leftover after parsing attributes in process `syz.1.317'. [ 121.417174][ T5382] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.320'. [ 122.098532][ T5391] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 122.668707][ T5416] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.328'. [ 122.818682][ T5416] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.328'. [ 122.877574][ T5416] netlink: 2 bytes leftover after parsing attributes in process `syz.2.328'. [ 124.535913][ T5439] netlink: 'syz.0.335': attribute type 39 has an invalid length. [ 124.646034][ T5431] netlink: 164 bytes leftover after parsing attributes in process `syz.3.332'. [ 124.835219][ T5445] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.336'. [ 129.540339][ T5518] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.361'. [ 129.655118][ T5522] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.363'. [ 129.708588][ T5526] netlink: 67 bytes leftover after parsing attributes in process `syz.2.365'. [ 129.785802][ T5527] netlink: 'syz.3.364': attribute type 3 has an invalid length. [ 129.802281][ T5527] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.364'. [ 129.929735][ T5527] netlink: 35343 bytes leftover after parsing attributes in process `syz.3.364'. [ 129.977569][ T5533] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.367'. [ 130.048337][ T5527] tc_dump_action: action bad kind [ 130.172007][ T5542] FAULT_INJECTION: forcing a failure. [ 130.172007][ T5542] name failslab, interval 1, probability 0, space 0, times 0 [ 130.269355][ T5542] CPU: 0 PID: 5542 Comm: syz.2.370 Not tainted 5.15.189-syzkaller #0 [ 130.277494][ T5542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 130.287607][ T5542] Call Trace: [ 130.290921][ T5542] [ 130.293893][ T5542] dump_stack_lvl+0x168/0x230 [ 130.298642][ T5542] ? show_regs_print_info+0x20/0x20 [ 130.303888][ T5542] ? load_image+0x3b0/0x3b0 [ 130.308445][ T5542] ? __might_sleep+0xf0/0xf0 [ 130.313077][ T5542] ? __lock_acquire+0x7c60/0x7c60 [ 130.318144][ T5542] ? netlink_insert+0xe7c/0x11d0 [ 130.323140][ T5542] should_fail+0x38c/0x4c0 [ 130.327621][ T5542] should_failslab+0x5/0x20 [ 130.332167][ T5542] slab_pre_alloc_hook+0x51/0xc0 [ 130.337153][ T5542] kmem_cache_alloc_node+0x47/0x2d0 [ 130.342386][ T5542] ? __alloc_skb+0xf4/0x750 [ 130.346954][ T5542] __alloc_skb+0xf4/0x750 [ 130.351351][ T5542] netlink_sendmsg+0x645/0xbc0 [ 130.356194][ T5542] ? netlink_getsockopt+0x560/0x560 [ 130.361452][ T5542] ? aa_sock_msg_perm+0x94/0x150 [ 130.366454][ T5542] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 130.371788][ T5542] ? security_socket_sendmsg+0x7c/0xa0 [ 130.377297][ T5542] ? netlink_getsockopt+0x560/0x560 [ 130.382566][ T5542] ____sys_sendmsg+0x5a2/0x8c0 [ 130.387459][ T5542] ? memset+0x1e/0x40 [ 130.391660][ T5542] ? __sys_sendmsg_sock+0x30/0x30 [ 130.396826][ T5542] ? import_iovec+0x6f/0xa0 [ 130.401449][ T5542] ___sys_sendmsg+0x1f0/0x260 [ 130.406270][ T5542] ? __sys_sendmsg+0x250/0x250 [ 130.411288][ T5542] ? vfs_write+0x84d/0xd00 [ 130.415819][ T5542] ? __fdget+0x18b/0x210 [ 130.420119][ T5542] __se_sys_sendmsg+0x190/0x250 [ 130.425028][ T5542] ? __x64_sys_sendmsg+0x80/0x80 [ 130.430015][ T5542] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 130.436098][ T5542] ? lockdep_hardirqs_on+0x94/0x140 [ 130.441351][ T5542] do_syscall_64+0x4c/0xa0 [ 130.445805][ T5542] ? clear_bhb_loop+0x30/0x80 [ 130.450517][ T5542] ? clear_bhb_loop+0x30/0x80 [ 130.455248][ T5542] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 130.461189][ T5542] RIP: 0033:0x7f7abe10b9a9 [ 130.465662][ T5542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.485328][ T5542] RSP: 002b:00007f7abbf73038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.493819][ T5542] RAX: ffffffffffffffda RBX: 00007f7abe332fa0 RCX: 00007f7abe10b9a9 [ 130.501849][ T5542] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 130.509874][ T5542] RBP: 00007f7abbf73090 R08: 0000000000000000 R09: 0000000000000000 [ 130.517892][ T5542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.525921][ T5542] R13: 0000000000000000 R14: 00007f7abe332fa0 R15: 00007ffc085a7628 [ 130.534021][ T5542] [ 131.464281][ T5568] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.378'. [ 131.860536][ T5573] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.379'. [ 132.752187][ T5590] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.387'. [ 132.842696][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.849156][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.079526][ T5604] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.390'. [ 133.870189][ T5607] FAULT_INJECTION: forcing a failure. [ 133.870189][ T5607] name failslab, interval 1, probability 0, space 0, times 0 [ 133.891179][ T5607] CPU: 0 PID: 5607 Comm: syz.0.391 Not tainted 5.15.189-syzkaller #0 [ 133.899306][ T5607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 133.909384][ T5607] Call Trace: [ 133.912681][ T5607] [ 133.915631][ T5607] dump_stack_lvl+0x168/0x230 [ 133.920343][ T5607] ? show_regs_print_info+0x20/0x20 [ 133.925569][ T5607] ? load_image+0x3b0/0x3b0 [ 133.930105][ T5607] ? nla_put+0x130/0x1e0 [ 133.934391][ T5607] should_fail+0x38c/0x4c0 [ 133.938828][ T5607] should_failslab+0x5/0x20 [ 133.943334][ T5607] slab_pre_alloc_hook+0x51/0xc0 [ 133.948274][ T5607] ? skb_clone+0x1bd/0x350 [ 133.952701][ T5607] kmem_cache_alloc+0x3d/0x290 [ 133.957476][ T5607] skb_clone+0x1bd/0x350 [ 133.961725][ T5607] __netlink_deliver_tap+0x3cd/0x7c0 [ 133.967037][ T5607] netlink_deliver_tap+0x16c/0x180 [ 133.972156][ T5607] netlink_dump+0x805/0xcd0 [ 133.976681][ T5607] ? netlink_lookup+0x1d0/0x1d0 [ 133.981548][ T5607] __netlink_dump_start+0x523/0x700 [ 133.986766][ T5607] unix_diag_handler_dump+0x1c0/0x8b0 [ 133.992171][ T5607] ? mutex_lock_io_nested+0x60/0x60 [ 133.997380][ T5607] ? rcu_lock_release+0x20/0x20 [ 134.002239][ T5607] ? unix_diag_handler_dump+0x8b0/0x8b0 [ 134.007789][ T5607] ? dev_queue_xmit+0x20/0x20 [ 134.012469][ T5607] ? memcpy+0x3c/0x60 [ 134.016452][ T5607] ? sock_diag_rcv+0x17/0x40 [ 134.021057][ T5607] ? sock_diag_rcv+0x17/0x40 [ 134.025654][ T5607] ? rcu_lock_release+0x20/0x20 [ 134.030529][ T5607] sock_diag_rcv_msg+0x164/0x3e0 [ 134.035482][ T5607] netlink_rcv_skb+0x1e0/0x430 [ 134.040251][ T5607] ? sock_diag_bind+0xa0/0xa0 [ 134.044934][ T5607] ? netlink_ack+0xb60/0xb60 [ 134.049534][ T5607] ? __lock_acquire+0x7c60/0x7c60 [ 134.054578][ T5607] sock_diag_rcv+0x26/0x40 [ 134.059004][ T5607] netlink_unicast+0x774/0x920 [ 134.063786][ T5607] netlink_sendmsg+0x8ab/0xbc0 [ 134.068563][ T5607] ? netlink_getsockopt+0x560/0x560 [ 134.073770][ T5607] ? aa_sock_msg_perm+0x94/0x150 [ 134.078714][ T5607] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 134.084018][ T5607] ? security_socket_sendmsg+0x7c/0xa0 [ 134.089484][ T5607] ? netlink_getsockopt+0x560/0x560 [ 134.094693][ T5607] ____sys_sendmsg+0x5a2/0x8c0 [ 134.099466][ T5607] ? memset+0x1e/0x40 [ 134.103460][ T5607] ? __sys_sendmsg_sock+0x30/0x30 [ 134.108497][ T5607] ? import_iovec+0x6f/0xa0 [ 134.113005][ T5607] ___sys_sendmsg+0x1f0/0x260 [ 134.117693][ T5607] ? __sys_sendmsg+0x250/0x250 [ 134.122475][ T5607] ? vfs_write+0x84d/0xd00 [ 134.126909][ T5607] ? __fdget+0x18b/0x210 [ 134.131156][ T5607] __se_sys_sendmsg+0x190/0x250 [ 134.136013][ T5607] ? __x64_sys_sendmsg+0x80/0x80 [ 134.140954][ T5607] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 134.146953][ T5607] ? lockdep_hardirqs_on+0x94/0x140 [ 134.152159][ T5607] do_syscall_64+0x4c/0xa0 [ 134.156584][ T5607] ? clear_bhb_loop+0x30/0x80 [ 134.161264][ T5607] ? clear_bhb_loop+0x30/0x80 [ 134.165943][ T5607] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.171847][ T5607] RIP: 0033:0x7f10bb4cd9a9 [ 134.176266][ T5607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.195880][ T5607] RSP: 002b:00007f10b9314038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.204301][ T5607] RAX: ffffffffffffffda RBX: 00007f10bb6f5080 RCX: 00007f10bb4cd9a9 [ 134.212277][ T5607] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 134.220248][ T5607] RBP: 00007f10b9314090 R08: 0000000000000000 R09: 0000000000000000 [ 134.228219][ T5607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.236190][ T5607] R13: 0000000000000000 R14: 00007f10bb6f5080 R15: 00007fffbb0919d8 [ 134.244177][ T5607] [ 134.460283][ T5611] netlink: 'syz.3.393': attribute type 8 has an invalid length. [ 134.641786][ T5620] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.396'. [ 135.155481][ T5632] netlink: 'syz.3.402': attribute type 4 has an invalid length. [ 135.595328][ T5644] netlink: 212168 bytes leftover after parsing attributes in process `syz.0.406'. [ 136.479830][ T5644] syz.0.406 (5644) used greatest stack depth: 18592 bytes left [ 136.700570][ T5650] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.408'. [ 136.870587][ T5662] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.411'. [ 137.105910][ T5669] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.414'. [ 137.391879][ T5648] delete_channel: no stack [ 137.875643][ T5687] netlink: 'syz.1.421': attribute type 3 has an invalid length. [ 137.899450][ T5687] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.421'. [ 138.773128][ T5694] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.424'. [ 138.905037][ T5703] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.427'. [ 138.965915][ T5706] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.429'. [ 139.026387][ T5710] netlink: 212168 bytes leftover after parsing attributes in process `syz.1.430'. [ 139.856420][ T5742] FAULT_INJECTION: forcing a failure. [ 139.856420][ T5742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.891192][ T5742] CPU: 0 PID: 5742 Comm: syz.2.439 Not tainted 5.15.189-syzkaller #0 [ 139.899329][ T5742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 139.909420][ T5742] Call Trace: [ 139.912717][ T5742] [ 139.915659][ T5742] dump_stack_lvl+0x168/0x230 [ 139.920366][ T5742] ? show_regs_print_info+0x20/0x20 [ 139.925584][ T5742] ? load_image+0x3b0/0x3b0 [ 139.930118][ T5742] ? __lock_acquire+0x7c60/0x7c60 [ 139.935178][ T5742] should_fail+0x38c/0x4c0 [ 139.939631][ T5742] _copy_to_user+0x2e/0x130 [ 139.944152][ T5742] simple_read_from_buffer+0xe3/0x150 [ 139.949542][ T5742] proc_fail_nth_read+0x19a/0x210 [ 139.954584][ T5742] ? proc_fault_inject_write+0x2f0/0x2f0 [ 139.960338][ T5742] ? fsnotify_perm+0x254/0x560 [ 139.965122][ T5742] ? proc_fault_inject_write+0x2f0/0x2f0 [ 139.970772][ T5742] vfs_read+0x2f6/0xcf0 [ 139.974960][ T5742] ? kernel_read+0x1e0/0x1e0 [ 139.979576][ T5742] ? __fget_files+0x40f/0x480 [ 139.984294][ T5742] ? mutex_lock_nested+0x17/0x20 [ 139.989240][ T5742] ? __fdget_pos+0x2bf/0x370 [ 139.993836][ T5742] ? ksys_read+0x71/0x250 [ 139.998186][ T5742] ksys_read+0x14d/0x250 [ 140.002451][ T5742] ? vfs_write+0xd00/0xd00 [ 140.006885][ T5742] ? trace_sys_enter+0x1f/0x80 [ 140.011667][ T5742] do_syscall_64+0x4c/0xa0 [ 140.016098][ T5742] ? clear_bhb_loop+0x30/0x80 [ 140.020785][ T5742] ? clear_bhb_loop+0x30/0x80 [ 140.025478][ T5742] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 140.031389][ T5742] RIP: 0033:0x7f7abe10a3bc [ 140.035822][ T5742] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 140.055434][ T5742] RSP: 002b:00007f7abbf73030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 140.063866][ T5742] RAX: ffffffffffffffda RBX: 00007f7abe332fa0 RCX: 00007f7abe10a3bc [ 140.071853][ T5742] RDX: 000000000000000f RSI: 00007f7abbf730a0 RDI: 0000000000000006 [ 140.079832][ T5742] RBP: 00007f7abbf73090 R08: 0000000000000000 R09: 0000000000000000 [ 140.087807][ T5742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.095788][ T5742] R13: 0000000000000000 R14: 00007f7abe332fa0 R15: 00007ffc085a7628 [ 140.103809][ T5742] [ 140.254432][ T5748] netlink: 'syz.3.442': attribute type 5 has an invalid length. [ 140.439440][ T5756] __nla_validate_parse: 1 callbacks suppressed [ 140.439481][ T5756] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.445'. [ 142.391252][ T5825] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.465'. [ 143.628601][ T5866] netlink: 830 bytes leftover after parsing attributes in process `syz.1.479'. [ 144.292696][ T5891] netlink: 'syz.0.484': attribute type 10 has an invalid length. [ 144.325115][ T5891] bridge0: port 3(macsec0) entered blocking state [ 144.363529][ T5891] bridge0: port 3(macsec0) entered disabled state [ 144.401858][ T5891] device macsec0 entered promiscuous mode [ 144.430414][ T5891] bridge0: port 3(macsec0) entered blocking state [ 144.437471][ T5891] bridge0: port 3(macsec0) entered forwarding state [ 145.541527][ T5914] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.494'. [ 146.554662][ T5940] netlink: 178584 bytes leftover after parsing attributes in process `syz.4.503'. [ 146.583254][ T5940] netlink: zone id is out of range [ 146.602173][ T5940] netlink: zone id is out of range [ 146.634350][ T5940] netlink: zone id is out of range [ 146.675316][ T5940] netlink: zone id is out of range [ 146.707092][ T5940] netlink: zone id is out of range [ 146.734847][ T5940] netlink: zone id is out of range [ 146.747494][ T5940] netlink: zone id is out of range [ 146.752655][ T5940] netlink: zone id is out of range [ 146.797337][ T5940] netlink: zone id is out of range [ 146.822889][ T5940] netlink: zone id is out of range [ 147.498799][ T5954] netlink: 1 bytes leftover after parsing attributes in process `syz.4.506'. [ 149.438713][ T5961] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.509'. [ 149.729786][ T5974] netlink: 'syz.1.514': attribute type 10 has an invalid length. [ 149.807827][ T5974] netlink: 2 bytes leftover after parsing attributes in process `syz.1.514'. [ 149.838748][ T5974] device bond0 entered promiscuous mode [ 149.846329][ T5974] device bond_slave_0 entered promiscuous mode [ 149.855336][ T5974] device bond_slave_1 entered promiscuous mode [ 149.862283][ T5974] bridge0: port 3(bond0) entered blocking state [ 149.869075][ T5974] bridge0: port 3(bond0) entered disabled state [ 149.902336][ T5974] bridge0: port 3(bond0) entered blocking state [ 149.908733][ T5974] bridge0: port 3(bond0) entered forwarding state [ 149.920713][ T5980] netlink: 830 bytes leftover after parsing attributes in process `syz.1.514'. [ 150.010492][ T5988] netlink: 178584 bytes leftover after parsing attributes in process `syz.1.517'. [ 150.254336][ T5995] device syzkaller0 entered promiscuous mode [ 150.737878][ T5999] netlink: 1 bytes leftover after parsing attributes in process `syz.2.522'. [ 151.385303][ T6028] netlink: 'syz.3.529': attribute type 10 has an invalid length. [ 151.447748][ T6028] netlink: 2 bytes leftover after parsing attributes in process `syz.3.529'. [ 151.498108][ T6028] device bond0 entered promiscuous mode [ 151.517575][ T6028] device bond_slave_0 entered promiscuous mode [ 151.551533][ T6028] device bond_slave_1 entered promiscuous mode [ 151.574207][ T6035] netlink: 178584 bytes leftover after parsing attributes in process `syz.2.532'. [ 151.595564][ T6028] bridge0: port 3(bond0) entered blocking state [ 151.635548][ T6028] bridge0: port 3(bond0) entered disabled state [ 151.644440][ T6035] net_ratelimit: 248 callbacks suppressed [ 151.644456][ T6035] netlink: zone id is out of range [ 151.686723][ T6028] bridge0: port 3(bond0) entered blocking state [ 151.693243][ T6028] bridge0: port 3(bond0) entered forwarding state [ 151.729710][ T6035] netlink: zone id is out of range [ 151.775707][ T6035] netlink: zone id is out of range [ 151.802901][ T6033] netlink: 830 bytes leftover after parsing attributes in process `syz.3.529'. [ 151.842503][ T6035] netlink: zone id is out of range [ 151.876731][ T6035] netlink: zone id is out of range [ 151.970948][ T6035] netlink: zone id is out of range [ 152.032664][ T6035] netlink: zone id is out of range [ 152.088439][ T6035] netlink: zone id is out of range [ 152.127833][ T6035] netlink: zone id is out of range [ 152.151596][ T6035] netlink: zone id is out of range [ 152.412828][ T6047] netlink: 'syz.3.538': attribute type 10 has an invalid length. [ 153.146109][ T6059] netlink: 1 bytes leftover after parsing attributes in process `syz.1.541'. [ 153.396543][ T6080] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.547'. [ 153.471178][ T6085] netlink: 'syz.3.546': attribute type 28 has an invalid length. [ 153.529749][ T6085] netlink: 2 bytes leftover after parsing attributes in process `syz.3.546'. [ 154.316738][ T6095] netlink: 178584 bytes leftover after parsing attributes in process `syz.0.552'. [ 155.202662][ T6123] netlink: 'syz.4.559': attribute type 9 has an invalid length. [ 155.232804][ T6123] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.559'. [ 155.917804][ T6146] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.565'. [ 155.942795][ T6144] syzkaller0: create flow: hash 809375040 index 1 [ 155.957583][ T6144] syzkaller0: tun_chr_ioctl cmd 1074025684 [ 155.983056][ T7] syzkaller0: tun_net_xmit 76 [ 156.066200][ T6144] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.566'. [ 156.273193][ T6153] netlink: 'syz.1.567': attribute type 28 has an invalid length. [ 156.324450][ T6153] netlink: 2 bytes leftover after parsing attributes in process `syz.1.567'. [ 156.532764][ T6143] syzkaller0: delete flow: hash 809375040 index 1 [ 157.124935][ T6183] netlink: 'syz.4.578': attribute type 10 has an invalid length. [ 157.296229][ T6183] team0: Device hsr_slave_0 failed to register rx_handler [ 158.709562][ T6204] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.584'. [ 159.031885][ T6213] netlink: 'syz.4.587': attribute type 10 has an invalid length. [ 159.076145][ T6213] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 159.351956][ T6226] netlink: 212168 bytes leftover after parsing attributes in process `syz.0.591'. [ 162.245106][ T6282] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.612'. [ 162.793894][ T6290] netlink: 'syz.1.614': attribute type 2 has an invalid length. [ 162.837654][ T6290] netlink: 'syz.1.614': attribute type 8 has an invalid length. [ 162.909869][ T6290] netlink: 132 bytes leftover after parsing attributes in process `syz.1.614'. [ 162.932848][ T6291] netlink: 180 bytes leftover after parsing attributes in process `syz.4.613'. [ 162.990194][ T6296] netlink: 40 bytes leftover after parsing attributes in process `syz.0.615'. [ 163.831931][ T6323] FAULT_INJECTION: forcing a failure. [ 163.831931][ T6323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.928578][ T6323] CPU: 0 PID: 6323 Comm: syz.2.626 Not tainted 5.15.189-syzkaller #0 [ 163.936793][ T6323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 163.946992][ T6323] Call Trace: [ 163.950302][ T6323] [ 163.953280][ T6323] dump_stack_lvl+0x168/0x230 [ 163.957994][ T6323] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 163.964186][ T6323] ? show_regs_print_info+0x20/0x20 [ 163.969430][ T6323] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 163.975627][ T6323] ? dump_stack+0x5/0x20 [ 163.979912][ T6323] should_fail+0x38c/0x4c0 [ 163.984371][ T6323] _copy_from_user+0x2e/0x170 [ 163.989107][ T6323] iovec_from_user+0x142/0x370 [ 163.993913][ T6323] __import_iovec+0x70/0x490 [ 163.998558][ T6323] import_iovec+0x6f/0xa0 [ 164.002928][ T6323] ___sys_sendmsg+0x1b9/0x260 [ 164.007741][ T6323] ? __sys_sendmsg+0x250/0x250 [ 164.012569][ T6323] ? __fdget+0x18b/0x210 [ 164.016845][ T6323] __se_sys_sendmsg+0x190/0x250 [ 164.021809][ T6323] ? __x64_sys_sendmsg+0x80/0x80 [ 164.026846][ T6323] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 164.032849][ T6323] ? lockdep_hardirqs_on+0x94/0x140 [ 164.038057][ T6323] do_syscall_64+0x4c/0xa0 [ 164.042483][ T6323] ? clear_bhb_loop+0x30/0x80 [ 164.047166][ T6323] ? clear_bhb_loop+0x30/0x80 [ 164.051937][ T6323] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.057845][ T6323] RIP: 0033:0x7f7abe10b9a9 [ 164.062267][ T6323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.081879][ T6323] RSP: 002b:00007f7abbf73038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.090306][ T6323] RAX: ffffffffffffffda RBX: 00007f7abe332fa0 RCX: 00007f7abe10b9a9 [ 164.098300][ T6323] RDX: ff0f000020000080 RSI: 0000200000000000 RDI: 0000000000000008 [ 164.106290][ T6323] RBP: 00007f7abbf73090 R08: 0000000000000000 R09: 0000000000000000 [ 164.114313][ T6323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.122380][ T6323] R13: 0000000000000000 R14: 00007f7abe332fa0 R15: 00007ffc085a7628 [ 164.130385][ T6323] [ 164.404103][ T6342] netlink: 180 bytes leftover after parsing attributes in process `syz.2.631'. [ 165.177880][ T6360] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.640'. [ 165.425182][ T6363] device syzkaller0 entered promiscuous mode [ 165.449424][ T6366] netlink: 'syz.1.642': attribute type 10 has an invalid length. [ 165.572349][ T6366] bridge0: port 3(bond0) entered disabled state [ 165.580776][ T6366] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.591378][ T6366] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.726829][ T6366] bridge0: port 3(bond0) entered blocking state [ 165.734116][ T6366] bridge0: port 3(bond0) entered forwarding state [ 165.741378][ T6366] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.749028][ T6366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.757345][ T6366] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.766586][ T6366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.885136][ T6366] bridge0: port 3(bond0) entered disabled state [ 165.892127][ T6366] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.900734][ T6366] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.076565][ T6383] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 166.420815][ T6403] netlink: 180 bytes leftover after parsing attributes in process `syz.3.653'. [ 166.704257][ T6415] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.655'. [ 167.278412][ T6426] netlink: 'syz.0.659': attribute type 21 has an invalid length. [ 167.346525][ T6426] IPv6: NLM_F_CREATE should be specified when creating new route [ 167.465129][ T6426] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 167.472488][ T6426] IPv6: NLM_F_CREATE should be set when creating new route [ 167.479831][ T6426] IPv6: NLM_F_CREATE should be set when creating new route [ 167.942096][ T6446] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.666'. [ 168.055180][ T6449] netlink: 'syz.3.667': attribute type 10 has an invalid length. [ 168.624218][ T6472] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.676'. [ 168.660795][ T6468] device sit0 entered promiscuous mode [ 168.932103][ T6476] netlink: 'syz.4.677': attribute type 9 has an invalid length. [ 168.967990][ T6476] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.677'. [ 169.230358][ T6479] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.679'. [ 169.964316][ T6498] netlink: 763 bytes leftover after parsing attributes in process `syz.4.685'. [ 170.384167][ T6504] device syzkaller0 entered promiscuous mode [ 170.533131][ T6521] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.691'. [ 171.828906][ T6571] FAULT_INJECTION: forcing a failure. [ 171.828906][ T6571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.879677][ T6576] netlink: 'syz.1.707': attribute type 4 has an invalid length. [ 171.898181][ T6571] CPU: 1 PID: 6571 Comm: syz.2.706 Not tainted 5.15.189-syzkaller #0 [ 171.906394][ T6571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 171.916483][ T6571] Call Trace: [ 171.918020][ T6576] netlink: 152 bytes leftover after parsing attributes in process `syz.1.707'. [ 171.919789][ T6571] [ 171.919801][ T6571] dump_stack_lvl+0x168/0x230 [ 171.936493][ T6571] ? show_regs_print_info+0x20/0x20 [ 171.941826][ T6571] ? load_image+0x3b0/0x3b0 [ 171.946385][ T6571] ? __lock_acquire+0x7c60/0x7c60 [ 171.951455][ T6571] should_fail+0x38c/0x4c0 [ 171.955922][ T6571] _copy_from_user+0x2e/0x170 [ 171.960631][ T6571] ___sys_recvmsg+0x129/0x4f0 [ 171.965346][ T6571] ? __sys_recvmsg+0x250/0x250 [ 171.970147][ T6571] ? __lock_acquire+0x7c60/0x7c60 [ 171.975229][ T6571] ? __fdget+0x18b/0x210 [ 171.979512][ T6571] __x64_sys_recvmsg+0x1dd/0x2a0 [ 171.983621][ T6576] net_ratelimit: 248 callbacks suppressed [ 171.983638][ T6576] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 171.984480][ T6571] ? ___sys_recvmsg+0x4f0/0x4f0 [ 172.010418][ T6571] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 172.016467][ T6571] ? lockdep_hardirqs_on+0x94/0x140 [ 172.021802][ T6571] do_syscall_64+0x4c/0xa0 [ 172.026258][ T6571] ? clear_bhb_loop+0x30/0x80 [ 172.030966][ T6571] ? clear_bhb_loop+0x30/0x80 [ 172.035673][ T6571] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 172.041603][ T6571] RIP: 0033:0x7f7abe10b9a9 [ 172.046042][ T6571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.065693][ T6571] RSP: 002b:00007f7abbf52038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 172.074145][ T6571] RAX: ffffffffffffffda RBX: 00007f7abe333080 RCX: 00007f7abe10b9a9 [ 172.082153][ T6571] RDX: 0000000040000002 RSI: 0000200000000e80 RDI: 0000000000000003 [ 172.090148][ T6571] RBP: 00007f7abbf52090 R08: 0000000000000000 R09: 0000000000000000 [ 172.098149][ T6571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.106152][ T6571] R13: 0000000000000000 R14: 00007f7abe333080 R15: 00007ffc085a7628 [ 172.114171][ T6571] [ 172.645329][ T6604] netlink: 'syz.0.715': attribute type 3 has an invalid length. [ 172.682164][ T6604] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.715'. [ 173.705517][ T6630] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.727'. [ 173.815687][ T6631] netlink: 'syz.0.728': attribute type 10 has an invalid length. [ 174.900961][ T6664] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.739'. [ 175.558395][ T6699] Dead loop on virtual device ip6_vti0, fix it urgently! [ 175.572275][ T6681] device sit0 entered promiscuous mode [ 175.935244][ T6703] netlink: 'syz.4.752': attribute type 3 has an invalid length. [ 175.947366][ T6707] FAULT_INJECTION: forcing a failure. [ 175.947366][ T6707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.962364][ T6703] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.752'. [ 175.986333][ T6707] CPU: 0 PID: 6707 Comm: syz.3.753 Not tainted 5.15.189-syzkaller #0 [ 175.994461][ T6707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 176.004544][ T6707] Call Trace: [ 176.007863][ T6707] [ 176.010828][ T6707] dump_stack_lvl+0x168/0x230 [ 176.015543][ T6707] ? show_regs_print_info+0x20/0x20 [ 176.020774][ T6707] ? load_image+0x3b0/0x3b0 [ 176.025320][ T6707] ? __lock_acquire+0x7c60/0x7c60 [ 176.030377][ T6707] should_fail+0x38c/0x4c0 [ 176.034809][ T6707] _copy_to_user+0x2e/0x130 [ 176.039325][ T6707] simple_read_from_buffer+0xe3/0x150 [ 176.044707][ T6707] proc_fail_nth_read+0x19a/0x210 [ 176.049746][ T6707] ? proc_fault_inject_write+0x2f0/0x2f0 [ 176.055391][ T6707] ? fsnotify_perm+0x254/0x560 [ 176.060162][ T6707] ? proc_fault_inject_write+0x2f0/0x2f0 [ 176.065847][ T6707] vfs_read+0x2f6/0xcf0 [ 176.070031][ T6707] ? kernel_read+0x1e0/0x1e0 [ 176.074636][ T6707] ? __fget_files+0x40f/0x480 [ 176.079325][ T6707] ? mutex_lock_nested+0x17/0x20 [ 176.084272][ T6707] ? __fdget_pos+0x2bf/0x370 [ 176.088867][ T6707] ? ksys_read+0x71/0x250 [ 176.093202][ T6707] ksys_read+0x14d/0x250 [ 176.097455][ T6707] ? vfs_write+0xd00/0xd00 [ 176.101878][ T6707] ? lockdep_hardirqs_on+0x94/0x140 [ 176.107089][ T6707] do_syscall_64+0x4c/0xa0 [ 176.111522][ T6707] ? clear_bhb_loop+0x30/0x80 [ 176.116200][ T6707] ? clear_bhb_loop+0x30/0x80 [ 176.120888][ T6707] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 176.126789][ T6707] RIP: 0033:0x7f0094fc53bc [ 176.131297][ T6707] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 176.150906][ T6707] RSP: 002b:00007f0092e2e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 176.159330][ T6707] RAX: ffffffffffffffda RBX: 00007f00951edfa0 RCX: 00007f0094fc53bc [ 176.167310][ T6707] RDX: 000000000000000f RSI: 00007f0092e2e0a0 RDI: 0000000000000009 [ 176.175283][ T6707] RBP: 00007f0092e2e090 R08: 0000000000000000 R09: 0000000000000000 [ 176.183263][ T6707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.191252][ T6707] R13: 0000000000000000 R14: 00007f00951edfa0 R15: 00007fffe7815648 [ 176.199447][ T6707] [ 176.374554][ T6715] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.754'. [ 176.556247][ T6713] device sit0 entered promiscuous mode [ 177.177248][ T6743] netlink: 'syz.0.768': attribute type 10 has an invalid length. [ 177.241211][ T6743] team0: Cannot enslave team device to itself [ 177.909678][ T6764] netlink: 'syz.2.774': attribute type 9 has an invalid length. [ 177.933402][ T6764] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.774'. [ 178.119976][ T6771] Dead loop on virtual device ip6_vti0, fix it urgently! [ 178.391381][ T6788] device sit0 entered promiscuous mode [ 179.104271][ T6818] netlink: 'syz.2.791': attribute type 21 has an invalid length. [ 179.136752][ T6818] netlink: 164 bytes leftover after parsing attributes in process `syz.2.791'. [ 179.294877][ T6823] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.792'. [ 179.745994][ T6844] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.800'. [ 180.163295][ T6847] netlink: 'syz.1.802': attribute type 3 has an invalid length. [ 180.193295][ T6847] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.802'. [ 180.249798][ T6855] FAULT_INJECTION: forcing a failure. [ 180.249798][ T6855] name failslab, interval 1, probability 0, space 0, times 0 [ 180.264555][ T6839] delete_channel: no stack [ 180.281132][ T6855] CPU: 1 PID: 6855 Comm: syz.4.804 Not tainted 5.15.189-syzkaller #0 [ 180.289261][ T6855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 180.299349][ T6855] Call Trace: [ 180.302634][ T6855] [ 180.305564][ T6855] dump_stack_lvl+0x168/0x230 [ 180.310247][ T6855] ? show_regs_print_info+0x20/0x20 [ 180.315539][ T6855] ? load_image+0x3b0/0x3b0 [ 180.320075][ T6855] ? __might_sleep+0xf0/0xf0 [ 180.324668][ T6855] ? __lock_acquire+0x7c60/0x7c60 [ 180.329703][ T6855] should_fail+0x38c/0x4c0 [ 180.334129][ T6855] should_failslab+0x5/0x20 [ 180.338639][ T6855] slab_pre_alloc_hook+0x51/0xc0 [ 180.343610][ T6855] kmem_cache_alloc_node_trace+0x4a/0x300 [ 180.349362][ T6855] ? __get_vm_area_node+0x119/0x2d0 [ 180.354600][ T6855] ? __alloc_pages+0x275/0x470 [ 180.359412][ T6855] __get_vm_area_node+0x119/0x2d0 [ 180.364483][ T6855] vmap+0xd4/0x290 [ 180.368239][ T6855] ? bpf_ringbuf_alloc+0x33b/0x510 [ 180.373392][ T6855] bpf_ringbuf_alloc+0x33b/0x510 [ 180.378367][ T6855] ringbuf_map_alloc+0x1e4/0x310 [ 180.383344][ T6855] map_create+0x485/0x2170 [ 180.387804][ T6855] __sys_bpf+0x2a4/0x670 [ 180.392083][ T6855] ? bpf_link_show_fdinfo+0x340/0x340 [ 180.397527][ T6855] ? vtime_user_exit+0x2dc/0x400 [ 180.402502][ T6855] __x64_sys_bpf+0x78/0x90 [ 180.406953][ T6855] do_syscall_64+0x4c/0xa0 [ 180.411407][ T6855] ? clear_bhb_loop+0x30/0x80 [ 180.416113][ T6855] ? clear_bhb_loop+0x30/0x80 [ 180.420826][ T6855] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 180.426758][ T6855] RIP: 0033:0x7f83ec4089a9 [ 180.431202][ T6855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.450833][ T6855] RSP: 002b:00007f83ea270038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 180.459296][ T6855] RAX: ffffffffffffffda RBX: 00007f83ec62ffa0 RCX: 00007f83ec4089a9 [ 180.467298][ T6855] RDX: 0000000000000048 RSI: 00002000000000c0 RDI: 0000000000000000 [ 180.475293][ T6855] RBP: 00007f83ea270090 R08: 0000000000000000 R09: 0000000000000000 [ 180.483292][ T6855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 180.491299][ T6855] R13: 0000000000000000 R14: 00007f83ec62ffa0 R15: 00007ffc396b5d58 [ 180.499320][ T6855] [ 180.639496][ T6866] FAULT_INJECTION: forcing a failure. [ 180.639496][ T6866] name failslab, interval 1, probability 0, space 0, times 0 [ 180.693537][ T6866] CPU: 0 PID: 6866 Comm: syz.2.808 Not tainted 5.15.189-syzkaller #0 [ 180.701671][ T6866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 180.711758][ T6866] Call Trace: [ 180.715069][ T6866] [ 180.718022][ T6866] dump_stack_lvl+0x168/0x230 [ 180.722737][ T6866] ? show_regs_print_info+0x20/0x20 [ 180.727974][ T6866] ? load_image+0x3b0/0x3b0 [ 180.732615][ T6866] ? __might_sleep+0xf0/0xf0 [ 180.737375][ T6866] ? __lock_acquire+0x7c60/0x7c60 [ 180.742617][ T6866] should_fail+0x38c/0x4c0 [ 180.747071][ T6866] should_failslab+0x5/0x20 [ 180.751598][ T6866] slab_pre_alloc_hook+0x51/0xc0 [ 180.756579][ T6866] kmem_cache_alloc_node+0x47/0x2d0 [ 180.761816][ T6866] ? perf_event_alloc+0x161/0x2240 [ 180.766964][ T6866] perf_event_alloc+0x161/0x2240 [ 180.771940][ T6866] ? __fdget+0x18b/0x210 [ 180.776206][ T6866] ? perf_fget_light+0x14/0x130 [ 180.781098][ T6866] __se_sys_perf_event_open+0x5ae/0x1b80 [ 180.786780][ T6866] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 180.792562][ T6866] ? lockdep_hardirqs_on+0x94/0x140 [ 180.797800][ T6866] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 180.803550][ T6866] do_syscall_64+0x4c/0xa0 [ 180.808001][ T6866] ? clear_bhb_loop+0x30/0x80 [ 180.812705][ T6866] ? clear_bhb_loop+0x30/0x80 [ 180.817413][ T6866] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 180.823345][ T6866] RIP: 0033:0x7f7abe10b9a9 [ 180.827791][ T6866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.847425][ T6866] RSP: 002b:00007f7abbf73038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 180.855976][ T6866] RAX: ffffffffffffffda RBX: 00007f7abe332fa0 RCX: 00007f7abe10b9a9 [ 180.863981][ T6866] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 00002000000001c0 [ 180.871988][ T6866] RBP: 00007f7abbf73090 R08: 0000000000000000 R09: 0000000000000000 [ 180.879994][ T6866] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 180.887992][ T6866] R13: 0000000000000000 R14: 00007f7abe332fa0 R15: 00007ffc085a7628 [ 180.896009][ T6866] [ 181.219428][ T6883] netlink: 'syz.4.813': attribute type 1 has an invalid length. [ 181.394173][ T6883] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.813'. [ 181.734131][ T6888] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.814'. [ 182.719787][ T6904] netlink: 830 bytes leftover after parsing attributes in process `syz.1.816'. [ 183.174423][ T6905] delete_channel: no stack [ 183.770859][ T6922] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.823'. [ 184.289425][ T6929] netlink: 763 bytes leftover after parsing attributes in process `syz.4.827'. [ 186.152831][ T4809] Bluetooth: hci0: command 0x0406 tx timeout [ 186.168702][ T4809] Bluetooth: hci1: command 0x0406 tx timeout [ 186.174867][ T4809] Bluetooth: hci2: command 0x0406 tx timeout [ 186.182760][ T4809] Bluetooth: hci3: command 0x0406 tx timeout [ 186.189114][ T4809] Bluetooth: hci4: command 0x0406 tx timeout [ 186.288454][ T6951] delete_channel: no stack [ 187.234089][ T6983] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.841'. [ 189.966631][ T7026] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.857'. [ 190.246819][ T7034] Q6\bY4: renamed from lo [ 191.484000][ T7069] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.870'. [ 192.583646][ T7080] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.875'. [ 194.260598][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.266983][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.896341][ T7147] FAULT_INJECTION: forcing a failure. [ 195.896341][ T7147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.054439][ T7147] CPU: 0 PID: 7147 Comm: syz.3.893 Not tainted 5.15.189-syzkaller #0 [ 196.062598][ T7147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 196.072734][ T7147] Call Trace: [ 196.076101][ T7147] [ 196.079102][ T7147] dump_stack_lvl+0x168/0x230 [ 196.083959][ T7147] ? show_regs_print_info+0x20/0x20 [ 196.089327][ T7147] ? load_image+0x3b0/0x3b0 [ 196.093922][ T7147] ? __lock_acquire+0x7c60/0x7c60 [ 196.099052][ T7147] should_fail+0x38c/0x4c0 [ 196.103566][ T7147] _copy_from_user+0x2e/0x170 [ 196.108327][ T7147] iovec_from_user+0x142/0x370 [ 196.113572][ T7147] __import_iovec+0x70/0x490 [ 196.118288][ T7147] import_iovec+0x6f/0xa0 [ 196.122718][ T7147] ___sys_sendmsg+0x1b9/0x260 [ 196.127509][ T7147] ? __sys_sendmsg+0x250/0x250 [ 196.132512][ T7147] ? __fdget+0x18b/0x210 [ 196.136840][ T7147] __se_sys_sendmsg+0x190/0x250 [ 196.141781][ T7147] ? __x64_sys_sendmsg+0x80/0x80 [ 196.146784][ T7147] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 196.152918][ T7147] ? lockdep_hardirqs_on+0x94/0x140 [ 196.158204][ T7147] do_syscall_64+0x4c/0xa0 [ 196.162807][ T7147] ? clear_bhb_loop+0x30/0x80 [ 196.167541][ T7147] ? clear_bhb_loop+0x30/0x80 [ 196.172293][ T7147] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 196.178259][ T7147] RIP: 0033:0x7f0094fc69a9 [ 196.182738][ T7147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.202400][ T7147] RSP: 002b:00007f0092e2e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.210891][ T7147] RAX: ffffffffffffffda RBX: 00007f00951edfa0 RCX: 00007f0094fc69a9 [ 196.218937][ T7147] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 196.226967][ T7147] RBP: 00007f0092e2e090 R08: 0000000000000000 R09: 0000000000000000 [ 196.234999][ T7147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.243123][ T7147] R13: 0000000000000000 R14: 00007f00951edfa0 R15: 00007fffe7815648 [ 196.251288][ T7147] [ 196.360019][ T7153] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.897'. [ 197.652593][ T7174] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.903'. [ 198.214070][ T7194] netlink: 200648 bytes leftover after parsing attributes in process `syz.1.911'. [ 198.359465][ T7196] netlink: 'syz.0.912': attribute type 10 has an invalid length. [ 198.401003][ T7196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.512927][ T7196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.680142][ T7196] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 199.906352][ T7231] netlink: 'syz.0.925': attribute type 10 has an invalid length. [ 200.596610][ T7252] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.932'. [ 202.544496][ T7292] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.946'. [ 202.810477][ T7300] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.949'. [ 202.943157][ T7305] netlink: 'syz.1.951': attribute type 10 has an invalid length. [ 202.973789][ T7305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.054995][ T7305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.201588][ T7305] device batadv_slave_0 entered promiscuous mode [ 203.224091][ T7305] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 203.709765][ T7320] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check. [ 204.131853][ T7320] syz.0.955 (7320) used greatest stack depth: 18560 bytes left [ 204.703741][ T7346] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.962'. [ 206.934102][ T7402] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.978'. [ 207.052975][ T7400] netlink: 'syz.3.979': attribute type 1 has an invalid length. [ 207.096579][ T7400] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.979'. [ 207.143034][ T7410] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.983'. [ 207.197570][ T7400] netlink: 1 bytes leftover after parsing attributes in process `syz.3.979'. [ 208.197679][ T7442] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.994'. [ 208.635185][ T7463] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1002'. [ 208.656247][ T7463] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 208.715422][ T7463] openvswitch: netlink: Message has 1 unknown bytes. [ 209.514779][ T7500] netlink: 'syz.4.1011': attribute type 12 has an invalid length. [ 209.827865][ T7500] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1011'. [ 209.895373][ T7493] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1013'. [ 210.764232][ T7527] netlink: 'syz.0.1025': attribute type 29 has an invalid length. [ 210.791171][ T7527] netlink: 'syz.0.1025': attribute type 29 has an invalid length. [ 211.579070][ T7551] ip6_vti0: mtu greater than device maximum [ 211.646478][ T7558] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1035'. [ 212.350470][ T7582] netlink: 'syz.2.1040': attribute type 9 has an invalid length. [ 212.369201][ T7582] netlink: 208572 bytes leftover after parsing attributes in process `syz.2.1040'. [ 213.007958][ T7590] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1044'. [ 213.805443][ T7635] netlink: 'syz.0.1059': attribute type 10 has an invalid length. [ 213.931204][ T7635] team0: Port device dummy0 added [ 214.056626][ T7648] netlink: 'syz.3.1062': attribute type 9 has an invalid length. [ 214.098969][ T7648] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1062'. [ 214.735275][ T7671] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1071'. [ 216.715006][ T7714] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1084'. [ 216.970815][ T7717] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1085'. [ 217.580709][ T7738] netlink: 'syz.4.1091': attribute type 10 has an invalid length. [ 217.608348][ T7738] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1091'. [ 217.637669][ T7738] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 217.736982][ T7740] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1093'. [ 217.768166][ T7740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1093'. [ 218.342548][ T7760] sctp: [Deprecated]: syz.4.1098 (pid 7760) Use of struct sctp_assoc_value in delayed_ack socket option. [ 218.342548][ T7760] Use struct sctp_sack_info instead [ 218.784478][ T7773] device syzkaller0 entered promiscuous mode [ 219.215320][ T7787] netlink: 'syz.0.1110': attribute type 2 has an invalid length. [ 219.256438][ T7787] netlink: 147416 bytes leftover after parsing attributes in process `syz.0.1110'. [ 219.279034][ T7789] sctp: [Deprecated]: syz.2.1112 (pid 7789) Use of struct sctp_assoc_value in delayed_ack socket option. [ 219.279034][ T7789] Use struct sctp_sack_info instead [ 219.330242][ T7793] IPv6: Can't replace route, no match found [ 219.774864][ T7808] netlink: 'syz.3.1118': attribute type 29 has an invalid length. [ 219.791247][ T7808] netlink: 'syz.3.1118': attribute type 29 has an invalid length. [ 219.969479][ T7816] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1120'. [ 220.007557][ T7810] device syzkaller0 entered promiscuous mode [ 220.154900][ T7815] syzkaller0: mtu greater than device maximum [ 220.692341][ T7822] netlink: 'syz.2.1123': attribute type 29 has an invalid length. [ 220.958252][ T7822] netlink: 'syz.2.1123': attribute type 29 has an invalid length. [ 220.994181][ T7827] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1124'. [ 221.053173][ T7833] netlink: 67 bytes leftover after parsing attributes in process `syz.4.1126'. [ 221.139094][ T7835] sctp: [Deprecated]: syz.3.1125 (pid 7835) Use of struct sctp_assoc_value in delayed_ack socket option. [ 221.139094][ T7835] Use struct sctp_sack_info instead [ 221.208744][ T7842] FAULT_INJECTION: forcing a failure. [ 221.208744][ T7842] name failslab, interval 1, probability 0, space 0, times 0 [ 221.257434][ T7842] CPU: 1 PID: 7842 Comm: syz.4.1129 Not tainted 5.15.189-syzkaller #0 [ 221.265641][ T7842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 221.275721][ T7842] Call Trace: [ 221.279023][ T7842] [ 221.281974][ T7842] dump_stack_lvl+0x168/0x230 [ 221.286684][ T7842] ? show_regs_print_info+0x20/0x20 [ 221.291902][ T7842] ? load_image+0x3b0/0x3b0 [ 221.296428][ T7842] ? __might_sleep+0xf0/0xf0 [ 221.301048][ T7842] ? __lock_acquire+0x7c60/0x7c60 [ 221.306112][ T7842] should_fail+0x38c/0x4c0 [ 221.310566][ T7842] should_failslab+0x5/0x20 [ 221.315100][ T7842] slab_pre_alloc_hook+0x51/0xc0 [ 221.320059][ T7842] __kmalloc_node_track_caller+0x68/0x3a0 [ 221.325807][ T7842] ? netlink_sendmsg+0x645/0xbc0 [ 221.330770][ T7842] ? kmem_cache_alloc_node+0x162/0x2d0 [ 221.336247][ T7842] ? __alloc_skb+0xf4/0x750 [ 221.340769][ T7842] ? netlink_sendmsg+0x645/0xbc0 [ 221.345735][ T7842] __alloc_skb+0x22c/0x750 [ 221.350176][ T7842] netlink_sendmsg+0x645/0xbc0 [ 221.354973][ T7842] ? netlink_getsockopt+0x560/0x560 [ 221.360197][ T7842] ? aa_sock_msg_perm+0x94/0x150 [ 221.365160][ T7842] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 221.370469][ T7842] ? security_socket_sendmsg+0x7c/0xa0 [ 221.375959][ T7842] ? netlink_getsockopt+0x560/0x560 [ 221.381180][ T7842] ____sys_sendmsg+0x5a2/0x8c0 [ 221.385972][ T7842] ? memset+0x1e/0x40 [ 221.389975][ T7842] ? __sys_sendmsg_sock+0x30/0x30 [ 221.395032][ T7842] ? import_iovec+0x6f/0xa0 [ 221.399577][ T7842] ___sys_sendmsg+0x1f0/0x260 [ 221.404286][ T7842] ? __sys_sendmsg+0x250/0x250 [ 221.409088][ T7842] ? vfs_write+0x84d/0xd00 [ 221.413544][ T7842] ? __fdget+0x18b/0x210 [ 221.417811][ T7842] __se_sys_sendmsg+0x190/0x250 [ 221.422686][ T7842] ? __x64_sys_sendmsg+0x80/0x80 [ 221.427641][ T7842] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 221.433654][ T7842] ? lockdep_hardirqs_on+0x94/0x140 [ 221.438874][ T7842] do_syscall_64+0x4c/0xa0 [ 221.443309][ T7842] ? clear_bhb_loop+0x30/0x80 [ 221.448004][ T7842] ? clear_bhb_loop+0x30/0x80 [ 221.452700][ T7842] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 221.458622][ T7842] RIP: 0033:0x7f83ec4089a9 [ 221.463056][ T7842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.482688][ T7842] RSP: 002b:00007f83ea270038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.491129][ T7842] RAX: ffffffffffffffda RBX: 00007f83ec62ffa0 RCX: 00007f83ec4089a9 [ 221.499120][ T7842] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 221.507110][ T7842] RBP: 00007f83ea270090 R08: 0000000000000000 R09: 0000000000000000 [ 221.515099][ T7842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.523095][ T7842] R13: 0000000000000000 R14: 00007f83ec62ffa0 R15: 00007ffc396b5d58 [ 221.531109][ T7842] [ 222.082648][ T7864] netlink: 'syz.1.1135': attribute type 9 has an invalid length. [ 222.151415][ T7864] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1135'. [ 222.712889][ T7870] bridge_slave_1: mtu less than device minimum [ 222.910466][ T7878] sctp: [Deprecated]: syz.1.1142 (pid 7878) Use of struct sctp_assoc_value in delayed_ack socket option. [ 222.910466][ T7878] Use struct sctp_sack_info instead [ 224.551868][ T7912] netlink: 'syz.1.1152': attribute type 20 has an invalid length. [ 224.695415][ T7924] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1156'. [ 225.253100][ T7934] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1158'. [ 226.679134][ T7973] netlink: 'syz.0.1171': attribute type 29 has an invalid length. [ 226.700812][ T7973] netlink: 'syz.0.1171': attribute type 29 has an invalid length. [ 226.793035][ T7979] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 228.378276][ T8016] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 229.140165][ T8035] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1189'. [ 229.808704][ T8066] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1199'. [ 230.225085][ T8076] device batadv0 entered promiscuous mode [ 230.339580][ T8090] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1206'. [ 230.648973][ T8106] netlink: 'syz.4.1211': attribute type 10 has an invalid length. [ 230.660286][ T8106] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1211'. [ 230.896780][ T8115] FAULT_INJECTION: forcing a failure. [ 230.896780][ T8115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.921454][ T8115] CPU: 0 PID: 8115 Comm: syz.3.1214 Not tainted 5.15.189-syzkaller #0 [ 230.929674][ T8115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 230.939774][ T8115] Call Trace: [ 230.943091][ T8115] [ 230.946051][ T8115] dump_stack_lvl+0x168/0x230 [ 230.950778][ T8115] ? show_regs_print_info+0x20/0x20 [ 230.956019][ T8115] ? load_image+0x3b0/0x3b0 [ 230.960575][ T8115] ? __lock_acquire+0x7c60/0x7c60 [ 230.965636][ T8115] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 230.971482][ T8115] should_fail+0x38c/0x4c0 [ 230.975938][ T8115] _copy_from_user+0x2e/0x170 [ 230.980649][ T8115] __copy_msghdr_from_user+0x448/0x5e0 [ 230.986139][ T8115] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 230.991898][ T8115] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 230.997229][ T8115] ? trace_event_raw_event_lock+0x250/0x250 [ 231.003157][ T8115] ___sys_sendmsg+0x156/0x260 [ 231.007885][ T8115] ? __sys_sendmsg+0x250/0x250 [ 231.012705][ T8115] ? trace_event_raw_event_lock+0x250/0x250 [ 231.018630][ T8115] ? vfs_write+0x84d/0xd00 [ 231.023117][ T8115] ? __fdget+0x18b/0x210 [ 231.027394][ T8115] __se_sys_sendmsg+0x190/0x250 [ 231.033260][ T8115] ? __x64_sys_sendmsg+0x80/0x80 [ 231.038225][ T8115] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 231.044259][ T8115] ? lockdep_hardirqs_on+0x94/0x140 [ 231.049499][ T8115] do_syscall_64+0x4c/0xa0 [ 231.053949][ T8115] ? clear_bhb_loop+0x30/0x80 [ 231.058646][ T8115] ? clear_bhb_loop+0x30/0x80 [ 231.063359][ T8115] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 231.069286][ T8115] RIP: 0033:0x7f0094fc69a9 [ 231.073736][ T8115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.093363][ T8115] RSP: 002b:00007f0092e2e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.101812][ T8115] RAX: ffffffffffffffda RBX: 00007f00951edfa0 RCX: 00007f0094fc69a9 [ 231.109804][ T8115] RDX: 00000000200440e4 RSI: 00002000000004c0 RDI: 0000000000000005 [ 231.117799][ T8115] RBP: 00007f0092e2e090 R08: 0000000000000000 R09: 0000000000000000 [ 231.125794][ T8115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.133786][ T8115] R13: 0000000000000000 R14: 00007f00951edfa0 R15: 00007fffe7815648 [ 231.141819][ T8115] [ 231.549228][ T8135] netlink: 'syz.3.1222': attribute type 11 has an invalid length. [ 232.939119][ T8197] tap0: tun_chr_ioctl cmd 1074025677 [ 232.954867][ T8197] tap0: linktype set to 786 [ 233.035808][ T8197] : renamed from pim6reg1 [ 233.435281][ T8220] FAULT_INJECTION: forcing a failure. [ 233.435281][ T8220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.483437][ T8220] CPU: 0 PID: 8220 Comm: syz.1.1249 Not tainted 5.15.189-syzkaller #0 [ 233.491648][ T8220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 233.501728][ T8220] Call Trace: [ 233.505040][ T8220] [ 233.508013][ T8220] dump_stack_lvl+0x168/0x230 [ 233.512725][ T8220] ? show_regs_print_info+0x20/0x20 [ 233.517947][ T8220] ? load_image+0x3b0/0x3b0 [ 233.522495][ T8220] ? __lock_acquire+0x7c60/0x7c60 [ 233.527552][ T8220] should_fail+0x38c/0x4c0 [ 233.531999][ T8220] _copy_to_user+0x2e/0x130 [ 233.536538][ T8220] simple_read_from_buffer+0xe3/0x150 [ 233.541938][ T8220] proc_fail_nth_read+0x19a/0x210 [ 233.547011][ T8220] ? proc_fault_inject_write+0x2f0/0x2f0 [ 233.552683][ T8220] ? fsnotify_perm+0x254/0x560 [ 233.557476][ T8220] ? proc_fault_inject_write+0x2f0/0x2f0 [ 233.563143][ T8220] vfs_read+0x2f6/0xcf0 [ 233.567477][ T8220] ? kernel_read+0x1e0/0x1e0 [ 233.572193][ T8220] ? __fget_files+0x40f/0x480 [ 233.576908][ T8220] ? mutex_lock_nested+0x17/0x20 [ 233.582000][ T8220] ? __fdget_pos+0x2bf/0x370 [ 233.586621][ T8220] ? ksys_read+0x71/0x250 [ 233.590981][ T8220] ksys_read+0x14d/0x250 [ 233.595260][ T8220] ? vfs_write+0xd00/0xd00 [ 233.599708][ T8220] ? lockdep_hardirqs_on+0x94/0x140 [ 233.604939][ T8220] do_syscall_64+0x4c/0xa0 [ 233.609380][ T8220] ? clear_bhb_loop+0x30/0x80 [ 233.614076][ T8220] ? clear_bhb_loop+0x30/0x80 [ 233.618879][ T8220] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 233.625070][ T8220] RIP: 0033:0x7fb5ebc623bc [ 233.629519][ T8220] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 233.649150][ T8220] RSP: 002b:00007fb5e9acb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 233.657598][ T8220] RAX: ffffffffffffffda RBX: 00007fb5ebe8afa0 RCX: 00007fb5ebc623bc [ 233.665601][ T8220] RDX: 000000000000000f RSI: 00007fb5e9acb0a0 RDI: 0000000000000004 [ 233.673596][ T8220] RBP: 00007fb5e9acb090 R08: 0000000000000000 R09: 0000000000000000 [ 233.681589][ T8220] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 233.689585][ T8220] R13: 0000000000000000 R14: 00007fb5ebe8afa0 R15: 00007ffee66f05b8 [ 233.697596][ T8220] [ 235.005888][ T8271] netlink: 'syz.4.1266': attribute type 25 has an invalid length. [ 235.033296][ T8271] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.1266'. [ 235.115932][ T8279] netlink: 'syz.2.1269': attribute type 3 has an invalid length. [ 235.187474][ T8279] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1269'. [ 238.625446][ T8318] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1281'. [ 239.320501][ T8349] FAULT_INJECTION: forcing a failure. [ 239.320501][ T8349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.411496][ T8349] CPU: 1 PID: 8349 Comm: syz.1.1289 Not tainted 5.15.189-syzkaller #0 [ 239.419719][ T8349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 239.429813][ T8349] Call Trace: [ 239.433118][ T8349] [ 239.436084][ T8349] dump_stack_lvl+0x168/0x230 [ 239.440809][ T8349] ? show_regs_print_info+0x20/0x20 [ 239.446152][ T8349] ? load_image+0x3b0/0x3b0 [ 239.450709][ T8349] ? __lock_acquire+0x7c60/0x7c60 [ 239.455884][ T8349] should_fail+0x38c/0x4c0 [ 239.460360][ T8349] _copy_to_user+0x2e/0x130 [ 239.464900][ T8349] simple_read_from_buffer+0xe3/0x150 [ 239.470319][ T8349] proc_fail_nth_read+0x19a/0x210 [ 239.475398][ T8349] ? proc_fault_inject_write+0x2f0/0x2f0 [ 239.481188][ T8349] ? fsnotify_perm+0x254/0x560 [ 239.485992][ T8349] ? proc_fault_inject_write+0x2f0/0x2f0 [ 239.491669][ T8349] vfs_read+0x2f6/0xcf0 [ 239.495888][ T8349] ? kernel_read+0x1e0/0x1e0 [ 239.500865][ T8349] ? __fget_files+0x40f/0x480 [ 239.505587][ T8349] ? mutex_lock_nested+0x17/0x20 [ 239.510651][ T8349] ? __fdget_pos+0x2bf/0x370 [ 239.515278][ T8349] ? ksys_read+0x71/0x250 [ 239.519822][ T8349] ksys_read+0x14d/0x250 [ 239.524098][ T8349] ? vfs_write+0xd00/0xd00 [ 239.528544][ T8349] ? lockdep_hardirqs_on+0x94/0x140 [ 239.533791][ T8349] do_syscall_64+0x4c/0xa0 [ 239.538247][ T8349] ? clear_bhb_loop+0x30/0x80 [ 239.542962][ T8349] ? clear_bhb_loop+0x30/0x80 [ 239.547683][ T8349] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 239.553613][ T8349] RIP: 0033:0x7fb5ebc623bc [ 239.558148][ T8349] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 239.577792][ T8349] RSP: 002b:00007fb5e9acb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 239.586260][ T8349] RAX: ffffffffffffffda RBX: 00007fb5ebe8afa0 RCX: 00007fb5ebc623bc [ 239.594313][ T8349] RDX: 000000000000000f RSI: 00007fb5e9acb0a0 RDI: 0000000000000004 [ 239.602322][ T8349] RBP: 00007fb5e9acb090 R08: 0000000000000000 R09: 0000000000000000 [ 239.610327][ T8349] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 239.618328][ T8349] R13: 0000000000000000 R14: 00007fb5ebe8afa0 R15: 00007ffee66f05b8 [ 239.626351][ T8349] [ 240.167003][ T8368] device syzkaller0 entered promiscuous mode [ 240.910136][ T8405] IPv6: NLM_F_CREATE should be specified when creating new route [ 240.931351][ T8405] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1306'. [ 241.238799][ T8419] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1311'. [ 241.518255][ T8429] netlink: 'syz.0.1314': attribute type 9 has an invalid length. [ 241.526176][ T8429] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1314'. [ 242.623732][ T8476] netlink: 'syz.4.1330': attribute type 10 has an invalid length. [ 242.708415][ T8476] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.782489][ T8476] device bridge_slave_1 left promiscuous mode [ 242.811173][ T8476] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.903471][ T8476] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 244.297582][ T8531] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1348'. [ 244.347375][ T8532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1346'. [ 244.776682][ T8551] netlink: 'syz.0.1352': attribute type 21 has an invalid length. [ 245.374395][ T8568] FAULT_INJECTION: forcing a failure. [ 245.374395][ T8568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.419299][ T8568] CPU: 0 PID: 8568 Comm: syz.0.1358 Not tainted 5.15.189-syzkaller #0 [ 245.427516][ T8568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 245.437886][ T8568] Call Trace: [ 245.441194][ T8568] [ 245.444148][ T8568] dump_stack_lvl+0x168/0x230 [ 245.448864][ T8568] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 245.455054][ T8568] ? show_regs_print_info+0x20/0x20 [ 245.460286][ T8568] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 245.466488][ T8568] should_fail+0x38c/0x4c0 [ 245.470951][ T8568] _copy_from_user+0x2e/0x170 [ 245.475661][ T8568] kstrtouint_from_user+0xbe/0x200 [ 245.480806][ T8568] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 245.486820][ T8568] ? kstrtol_from_user+0x260/0x260 [ 245.491960][ T8568] ? rcu_is_watching+0x11/0xa0 [ 245.496755][ T8568] ? lockdep_hardirqs_on+0x94/0x140 [ 245.502084][ T8568] proc_fail_nth_write+0x85/0x1f0 [ 245.507132][ T8568] ? proc_fail_nth_read+0x210/0x210 [ 245.512354][ T8568] ? vfs_write+0x2eb/0xd00 [ 245.516796][ T8568] ? proc_fail_nth_read+0x210/0x210 [ 245.522022][ T8568] vfs_write+0x300/0xd00 [ 245.526384][ T8568] ? file_end_write+0x250/0x250 [ 245.531276][ T8568] ? __fget_files+0x40f/0x480 [ 245.535999][ T8568] ? mutex_lock_nested+0x17/0x20 [ 245.540982][ T8568] ? __fdget_pos+0x2bf/0x370 [ 245.545597][ T8568] ? ksys_write+0x71/0x250 [ 245.550040][ T8568] ksys_write+0x14d/0x250 [ 245.554403][ T8568] ? __ia32_sys_read+0x80/0x80 [ 245.559201][ T8568] ? syscall_enter_from_user_mode+0x2a/0x70 [ 245.565120][ T8568] do_syscall_64+0x4c/0xa0 [ 245.569565][ T8568] ? clear_bhb_loop+0x30/0x80 [ 245.574263][ T8568] ? clear_bhb_loop+0x30/0x80 [ 245.578960][ T8568] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 245.584878][ T8568] RIP: 0033:0x7f10bb4cc45f [ 245.589313][ T8568] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 245.609059][ T8568] RSP: 002b:00007f10b9335030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 245.617509][ T8568] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f10bb4cc45f [ 245.625503][ T8568] RDX: 0000000000000001 RSI: 00007f10b93350a0 RDI: 0000000000000007 [ 245.633495][ T8568] RBP: 00007f10b9335090 R08: 0000000000000000 R09: 0000000000000000 [ 245.641660][ T8568] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 245.649652][ T8568] R13: 0000000000000000 R14: 00007f10bb6f4fa0 R15: 00007fffbb0919d8 [ 245.657672][ T8568] [ 247.078936][ T8591] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1365'. [ 248.180938][ T8627] FAULT_INJECTION: forcing a failure. [ 248.180938][ T8627] name failslab, interval 1, probability 0, space 0, times 0 [ 248.238903][ T8627] CPU: 1 PID: 8627 Comm: syz.0.1378 Not tainted 5.15.189-syzkaller #0 [ 248.247244][ T8627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 248.257411][ T8627] Call Trace: [ 248.260701][ T8627] [ 248.263662][ T8627] dump_stack_lvl+0x168/0x230 [ 248.268353][ T8627] ? show_regs_print_info+0x20/0x20 [ 248.273557][ T8627] ? load_image+0x3b0/0x3b0 [ 248.278070][ T8627] ? __might_sleep+0xf0/0xf0 [ 248.282666][ T8627] ? __lock_acquire+0x7c60/0x7c60 [ 248.287794][ T8627] should_fail+0x38c/0x4c0 [ 248.292225][ T8627] should_failslab+0x5/0x20 [ 248.296741][ T8627] slab_pre_alloc_hook+0x51/0xc0 [ 248.301685][ T8627] ? security_file_alloc+0x30/0x110 [ 248.306895][ T8627] kmem_cache_alloc+0x3d/0x290 [ 248.311672][ T8627] ? rcu_is_watching+0x11/0xa0 [ 248.316441][ T8627] security_file_alloc+0x30/0x110 [ 248.321484][ T8627] __alloc_file+0xc2/0x240 [ 248.325912][ T8627] alloc_empty_file+0x90/0x180 [ 248.330684][ T8627] alloc_file+0x5b/0x4f0 [ 248.334931][ T8627] ? do_raw_spin_unlock+0x11d/0x230 [ 248.340139][ T8627] alloc_file_pseudo+0x17a/0x1f0 [ 248.345088][ T8627] ? alloc_empty_file_noaccount+0x80/0x80 [ 248.351001][ T8627] ? alloc_fd+0x598/0x630 [ 248.355357][ T8627] sock_alloc_file+0xb3/0x240 [ 248.360160][ T8627] __sys_socket+0x11d/0x170 [ 248.364680][ T8627] __x64_sys_socket+0x76/0x80 [ 248.369366][ T8627] do_syscall_64+0x4c/0xa0 [ 248.373792][ T8627] ? clear_bhb_loop+0x30/0x80 [ 248.378481][ T8627] ? clear_bhb_loop+0x30/0x80 [ 248.383186][ T8627] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 248.389090][ T8627] RIP: 0033:0x7f10bb4cd9a9 [ 248.393520][ T8627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.413278][ T8627] RSP: 002b:00007f10b9335038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 248.421713][ T8627] RAX: ffffffffffffffda RBX: 00007f10bb6f4fa0 RCX: 00007f10bb4cd9a9 [ 248.429700][ T8627] RDX: 0000000000000300 RSI: 0000000000000002 RDI: 0000000000000011 [ 248.437676][ T8627] RBP: 00007f10b9335090 R08: 0000000000000000 R09: 0000000000000000 [ 248.445649][ T8627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.453620][ T8627] R13: 0000000000000000 R14: 00007f10bb6f4fa0 R15: 00007fffbb0919d8 [ 248.461613][ T8627] [ 248.546307][ T8634] netlink: 'syz.0.1381': attribute type 39 has an invalid length. [ 249.928034][ T8678] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1393'. [ 250.035570][ T8682] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.1395'. [ 250.079707][ T8682] netlink: 'syz.4.1395': attribute type 41 has an invalid length. [ 250.107533][ T8682] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1395'. [ 250.156189][ T8682] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 250.525701][ T8693] device syzkaller0 entered promiscuous mode [ 250.658025][ T8705] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1399'. [ 251.411888][ T8719] netlink: 'syz.4.1403': attribute type 2 has an invalid length. [ 251.456873][ T8719] netlink: 119 bytes leftover after parsing attributes in process `syz.4.1403'. [ 251.678568][ T8737] FAULT_INJECTION: forcing a failure. [ 251.678568][ T8737] name failslab, interval 1, probability 0, space 0, times 0 [ 251.756500][ T8737] CPU: 1 PID: 8737 Comm: syz.2.1409 Not tainted 5.15.189-syzkaller #0 [ 251.764717][ T8737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 251.774802][ T8737] Call Trace: [ 251.778115][ T8737] [ 251.781078][ T8737] dump_stack_lvl+0x168/0x230 [ 251.785795][ T8737] ? show_regs_print_info+0x20/0x20 [ 251.791035][ T8737] ? load_image+0x3b0/0x3b0 [ 251.795600][ T8737] should_fail+0x38c/0x4c0 [ 251.800079][ T8737] ? bpf_clone_redirect+0x10f/0x390 [ 251.805307][ T8737] should_failslab+0x5/0x20 [ 251.809834][ T8737] slab_pre_alloc_hook+0x51/0xc0 [ 251.814818][ T8737] ? bpf_clone_redirect+0x10f/0x390 [ 251.820061][ T8737] __kmalloc_node_track_caller+0x68/0x3a0 [ 251.825810][ T8737] ? bpf_clone_redirect+0x10f/0x390 [ 251.831061][ T8737] ? bpf_clone_redirect+0x10f/0x390 [ 251.836301][ T8737] pskb_expand_head+0x127/0x10f0 [ 251.841298][ T8737] bpf_clone_redirect+0x10f/0x390 [ 251.846370][ T8737] bpf_prog_64e505a7b7f97a05+0x55/0xba8 [ 251.851953][ T8737] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 251.857984][ T8737] ? lock_chain_count+0x20/0x20 [ 251.862890][ T8737] ? seqcount_lockdep_reader_access+0x120/0x1c0 [ 251.869174][ T8737] ? lockdep_hardirqs_on+0x94/0x140 [ 251.874407][ T8737] ? ktime_get+0x7b/0x270 [ 251.878770][ T8737] ? seqcount_lockdep_reader_access+0x172/0x1c0 [ 251.885054][ T8737] ? ktime_get_real_ts64+0x420/0x420 [ 251.890372][ T8737] ? read_lock_is_recursive+0x10/0x10 [ 251.895781][ T8737] bpf_test_run+0x498/0x7d0 [ 251.900319][ T8737] ? convert___skb_to_skb+0x4c0/0x4c0 [ 251.905710][ T8737] ? eth_get_headlen+0x1f0/0x1f0 [ 251.910666][ T8737] ? __build_skb+0x1e2/0x2e0 [ 251.915274][ T8737] ? convert___skb_to_skb+0x3d/0x4c0 [ 251.920572][ T8737] bpf_prog_test_run_skb+0x9cc/0x1180 [ 251.925969][ T8737] ? cpu_online+0x60/0x60 [ 251.930308][ T8737] bpf_prog_test_run+0x31e/0x390 [ 251.935260][ T8737] __sys_bpf+0x535/0x670 [ 251.939510][ T8737] ? bpf_link_show_fdinfo+0x340/0x340 [ 251.944895][ T8737] ? vtime_user_exit+0x2dc/0x400 [ 251.949848][ T8737] __x64_sys_bpf+0x78/0x90 [ 251.954275][ T8737] do_syscall_64+0x4c/0xa0 [ 251.958696][ T8737] ? clear_bhb_loop+0x30/0x80 [ 251.963378][ T8737] ? clear_bhb_loop+0x30/0x80 [ 251.968059][ T8737] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 251.974076][ T8737] RIP: 0033:0x7f7abe10b9a9 [ 251.978513][ T8737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.998136][ T8737] RSP: 002b:00007f7abbf73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 252.006562][ T8737] RAX: ffffffffffffffda RBX: 00007f7abe332fa0 RCX: 00007f7abe10b9a9 [ 252.014541][ T8737] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 252.022526][ T8737] RBP: 00007f7abbf73090 R08: 0000000000000000 R09: 0000000000000000 [ 252.030506][ T8737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.038481][ T8737] R13: 0000000000000000 R14: 00007f7abe332fa0 R15: 00007ffc085a7628 [ 252.046471][ T8737] [ 252.395372][ T8749] netlink: 'syz.4.1412': attribute type 21 has an invalid length. [ 252.406399][ T8749] netlink: 'syz.4.1412': attribute type 15 has an invalid length. [ 252.417931][ T8749] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1412'. [ 252.454556][ T8749] IPv6: NLM_F_CREATE should be specified when creating new route [ 252.486417][ T8749] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 252.493745][ T8749] IPv6: NLM_F_CREATE should be set when creating new route [ 252.501043][ T8749] IPv6: NLM_F_CREATE should be set when creating new route [ 252.508482][ T8749] IPv6: NLM_F_CREATE should be set when creating new route [ 252.641209][ T8753] netlink: 'syz.1.1414': attribute type 9 has an invalid length. [ 252.668172][ T8753] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1414'. [ 253.291593][ T8769] device syzkaller0 entered promiscuous mode [ 253.663381][ T8798] netlink: 'syz.3.1428': attribute type 29 has an invalid length. [ 253.667510][ T8793] device syzkaller0 entered promiscuous mode [ 253.685151][ T8798] netlink: 'syz.3.1428': attribute type 29 has an invalid length. [ 253.723159][ T8798] netlink: 'syz.3.1428': attribute type 29 has an invalid length. [ 253.875161][ T8803] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1430'. [ 254.275897][ T8823] netlink: 'syz.3.1436': attribute type 4 has an invalid length. [ 254.298196][ T8823] netlink: 'syz.3.1436': attribute type 1 has an invalid length. [ 254.306597][ T8823] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.1436'. [ 254.885064][ T8844] device syzkaller0 entered promiscuous mode [ 254.935843][ T8854] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1446'. [ 255.014035][ T8859] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1448'. [ 255.086883][ T8859] netlink: 'syz.0.1448': attribute type 10 has an invalid length. [ 255.699979][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.706426][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.049327][ T8898] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1457'. [ 256.314955][ T8904] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1462'. [ 257.302460][ T8914] device syzkaller0 entered promiscuous mode [ 257.852186][ T8950] netlink: 'syz.2.1476': attribute type 3 has an invalid length. [ 257.890353][ T8950] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1476'. [ 258.268743][ T8968] FAULT_INJECTION: forcing a failure. [ 258.268743][ T8968] name failslab, interval 1, probability 0, space 0, times 0 [ 258.290542][ T8968] CPU: 0 PID: 8968 Comm: syz.2.1481 Not tainted 5.15.189-syzkaller #0 [ 258.298759][ T8968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 258.308854][ T8968] Call Trace: [ 258.312164][ T8968] [ 258.315108][ T8968] dump_stack_lvl+0x168/0x230 [ 258.319828][ T8968] ? show_regs_print_info+0x20/0x20 [ 258.325062][ T8968] ? load_image+0x3b0/0x3b0 [ 258.329605][ T8968] ? __lock_acquire+0x7c60/0x7c60 [ 258.334672][ T8968] ? __netlink_dump_start+0x11f/0x700 [ 258.340094][ T8968] should_fail+0x38c/0x4c0 [ 258.344559][ T8968] should_failslab+0x5/0x20 [ 258.349217][ T8968] slab_pre_alloc_hook+0x51/0xc0 [ 258.354201][ T8968] __kmalloc+0x6b/0x330 [ 258.358374][ T8968] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 258.364663][ T8968] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 258.370777][ T8968] genl_start+0x2b2/0x4a0 [ 258.375148][ T8968] __netlink_dump_start+0x3e8/0x700 [ 258.380399][ T8968] genl_rcv_msg+0x93b/0xf40 [ 258.384946][ T8968] ? smc_clc_prfx_set4_rcu+0x490/0x490 [ 258.390450][ T8968] ? genl_bind+0x370/0x370 [ 258.395012][ T8968] ? __dev_queue_xmit+0x1bc5/0x2ed0 [ 258.400254][ T8968] ? genl_rcv_msg+0xf40/0xf40 [ 258.404980][ T8968] ? genl_start+0x4a0/0x4a0 [ 258.409680][ T8968] ? genl_lock_dumpit+0x90/0x90 [ 258.414570][ T8968] ? perf_trace_lock+0xdf/0x370 [ 258.419462][ T8968] ? smc_clc_prfx_set4_rcu+0x490/0x490 [ 258.424976][ T8968] netlink_rcv_skb+0x1e0/0x430 [ 258.429774][ T8968] ? genl_bind+0x370/0x370 [ 258.434217][ T8968] ? netlink_ack+0xb60/0xb60 [ 258.438837][ T8968] ? __lock_acquire+0x7c60/0x7c60 [ 258.443894][ T8968] ? preempt_count_add+0x8d/0x190 [ 258.449041][ T8968] ? down_read+0x1aa/0x2e0 [ 258.453575][ T8968] genl_rcv+0x24/0x40 [ 258.457584][ T8968] netlink_unicast+0x774/0x920 [ 258.462475][ T8968] netlink_sendmsg+0x8ab/0xbc0 [ 258.467282][ T8968] ? netlink_getsockopt+0x560/0x560 [ 258.472516][ T8968] ? aa_sock_msg_perm+0x94/0x150 [ 258.477488][ T8968] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 258.482811][ T8968] ? security_socket_sendmsg+0x7c/0xa0 [ 258.488309][ T8968] ? netlink_getsockopt+0x560/0x560 [ 258.493543][ T8968] ____sys_sendmsg+0x5a2/0x8c0 [ 258.498344][ T8968] ? memset+0x1e/0x40 [ 258.502359][ T8968] ? __sys_sendmsg_sock+0x30/0x30 [ 258.507429][ T8968] ? import_iovec+0x6f/0xa0 [ 258.511961][ T8968] ___sys_sendmsg+0x1f0/0x260 [ 258.516671][ T8968] ? __sys_sendmsg+0x250/0x250 [ 258.521490][ T8968] ? trace_event_raw_event_lock+0x250/0x250 [ 258.527427][ T8968] ? vfs_write+0x84d/0xd00 [ 258.531882][ T8968] ? __fdget+0x18b/0x210 [ 258.536162][ T8968] __se_sys_sendmsg+0x190/0x250 [ 258.541060][ T8968] ? __x64_sys_sendmsg+0x80/0x80 [ 258.546028][ T8968] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 258.552056][ T8968] ? lockdep_hardirqs_on+0x94/0x140 [ 258.557287][ T8968] do_syscall_64+0x4c/0xa0 [ 258.561733][ T8968] ? clear_bhb_loop+0x30/0x80 [ 258.566433][ T8968] ? clear_bhb_loop+0x30/0x80 [ 258.571148][ T8968] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 258.577072][ T8968] RIP: 0033:0x7f7abe10b9a9 [ 258.581512][ T8968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.601160][ T8968] RSP: 002b:00007f7abbf73038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.609611][ T8968] RAX: ffffffffffffffda RBX: 00007f7abe332fa0 RCX: 00007f7abe10b9a9 [ 258.617623][ T8968] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 258.625626][ T8968] RBP: 00007f7abbf73090 R08: 0000000000000000 R09: 0000000000000000 [ 258.633717][ T8968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.641806][ T8968] R13: 0000000000000000 R14: 00007f7abe332fa0 R15: 00007ffc085a7628 [ 258.649920][ T8968] [ 258.952124][ T8977] netlink: 'syz.2.1485': attribute type 3 has an invalid length. [ 259.057474][ T8977] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1485'. [ 259.666379][ T9003] netlink: 'syz.0.1493': attribute type 3 has an invalid length. [ 259.708810][ T9003] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1493'. [ 259.821898][ T9014] FAULT_INJECTION: forcing a failure. [ 259.821898][ T9014] name failslab, interval 1, probability 0, space 0, times 0 [ 259.875246][ T9009] netlink: 'syz.1.1495': attribute type 21 has an invalid length. [ 259.901739][ T9014] CPU: 0 PID: 9014 Comm: syz.2.1496 Not tainted 5.15.189-syzkaller #0 [ 259.909963][ T9014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 259.920048][ T9014] Call Trace: [ 259.923356][ T9014] [ 259.926229][ T9009] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1495'. [ 259.926304][ T9014] dump_stack_lvl+0x168/0x230 [ 259.926371][ T9014] ? show_regs_print_info+0x20/0x20 [ 259.926397][ T9014] ? load_image+0x3b0/0x3b0 [ 259.926426][ T9014] ? __might_sleep+0xf0/0xf0 [ 259.926450][ T9014] ? __lock_acquire+0x7c60/0x7c60 [ 259.926484][ T9014] should_fail+0x38c/0x4c0 [ 259.926515][ T9014] should_failslab+0x5/0x20 [ 259.926535][ T9014] slab_pre_alloc_hook+0x51/0xc0 [ 259.926559][ T9014] kmem_cache_alloc_node+0x47/0x2d0 [ 259.926579][ T9014] ? __alloc_skb+0xf4/0x750 [ 259.926601][ T9014] ? __netlink_dump_start+0x11f/0x700 [ 259.926632][ T9014] __alloc_skb+0xf4/0x750 [ 259.926661][ T9014] netlink_dump+0x1d3/0xcd0 [ 259.926696][ T9014] ? mutex_lock_io_nested+0x60/0x60 [ 259.926722][ T9014] ? netlink_lookup+0x1d0/0x1d0 [ 259.926767][ T9014] __netlink_dump_start+0x523/0x700 [ 259.926804][ T9014] unix_diag_handler_dump+0x1c0/0x8b0 [ 259.926841][ T9014] ? mutex_lock_io_nested+0x60/0x60 [ 259.926866][ T9014] ? rcu_lock_release+0x20/0x20 [ 259.926888][ T9014] ? unix_diag_handler_dump+0x8b0/0x8b0 [ 259.926915][ T9014] ? memcpy+0x3c/0x60 [ 259.926947][ T9014] ? sock_diag_rcv+0x17/0x40 [ 259.926972][ T9014] ? sock_diag_rcv+0x17/0x40 [ 259.926999][ T9014] ? rcu_lock_release+0x20/0x20 [ 259.927021][ T9014] sock_diag_rcv_msg+0x164/0x3e0 [ 259.927052][ T9014] netlink_rcv_skb+0x1e0/0x430 [ 259.927078][ T9014] ? sock_diag_bind+0xa0/0xa0 [ 259.927106][ T9014] ? netlink_ack+0xb60/0xb60 [ 259.927134][ T9014] ? __lock_acquire+0x7c60/0x7c60 [ 260.076619][ T9014] sock_diag_rcv+0x26/0x40 [ 260.081086][ T9014] netlink_unicast+0x774/0x920 [ 260.085904][ T9014] netlink_sendmsg+0x8ab/0xbc0 [ 260.090798][ T9014] ? netlink_getsockopt+0x560/0x560 [ 260.096145][ T9014] ? aa_sock_msg_perm+0x94/0x150 [ 260.101141][ T9014] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 260.106482][ T9014] ? security_socket_sendmsg+0x7c/0xa0 [ 260.111974][ T9014] ? netlink_getsockopt+0x560/0x560 [ 260.117212][ T9014] ____sys_sendmsg+0x5a2/0x8c0 [ 260.122023][ T9014] ? memset+0x1e/0x40 [ 260.126136][ T9014] ? __sys_sendmsg_sock+0x30/0x30 [ 260.131211][ T9014] ? import_iovec+0x6f/0xa0 [ 260.135748][ T9014] ___sys_sendmsg+0x1f0/0x260 [ 260.140468][ T9014] ? __sys_sendmsg+0x250/0x250 [ 260.145289][ T9014] ? trace_event_raw_event_lock+0x250/0x250 [ 260.151213][ T9014] ? vfs_write+0x84d/0xd00 [ 260.155680][ T9014] ? __fdget+0x18b/0x210 [ 260.159946][ T9014] __se_sys_sendmsg+0x190/0x250 [ 260.164838][ T9014] ? __x64_sys_sendmsg+0x80/0x80 [ 260.169811][ T9014] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 260.175862][ T9014] ? lockdep_hardirqs_on+0x94/0x140 [ 260.181117][ T9014] do_syscall_64+0x4c/0xa0 [ 260.185571][ T9014] ? clear_bhb_loop+0x30/0x80 [ 260.190374][ T9014] ? clear_bhb_loop+0x30/0x80 [ 260.195078][ T9014] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 260.201009][ T9014] RIP: 0033:0x7f7abe10b9a9 [ 260.205452][ T9014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.225089][ T9014] RSP: 002b:00007f7abbf73038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.233544][ T9014] RAX: ffffffffffffffda RBX: 00007f7abe332fa0 RCX: 00007f7abe10b9a9 [ 260.241650][ T9014] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 260.249656][ T9014] RBP: 00007f7abbf73090 R08: 0000000000000000 R09: 0000000000000000 [ 260.257748][ T9014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.265931][ T9014] R13: 0000000000000000 R14: 00007f7abe332fa0 R15: 00007ffc085a7628 [ 260.273952][ T9014] [ 261.004986][ T9024] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1499'. [ 261.625826][ T9034] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1503'. [ 262.314248][ T9045] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1507'. [ 263.259919][ T9080] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1520'. [ 263.400307][ T9085] netlink: 'syz.0.1521': attribute type 21 has an invalid length. [ 263.444130][ T9085] IPv6: NLM_F_CREATE should be specified when creating new route [ 263.462878][ T9089] FAULT_INJECTION: forcing a failure. [ 263.462878][ T9089] name failslab, interval 1, probability 0, space 0, times 0 [ 263.497274][ T9085] IPv6: Can't replace route, no match found [ 263.519706][ T9089] CPU: 0 PID: 9089 Comm: syz.4.1523 Not tainted 5.15.189-syzkaller #0 [ 263.527921][ T9089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 263.538006][ T9089] Call Trace: [ 263.541310][ T9089] [ 263.544267][ T9089] dump_stack_lvl+0x168/0x230 [ 263.548976][ T9089] ? show_regs_print_info+0x20/0x20 [ 263.554201][ T9089] ? load_image+0x3b0/0x3b0 [ 263.558733][ T9089] ? __might_sleep+0xf0/0xf0 [ 263.563350][ T9089] ? __lock_acquire+0x7c60/0x7c60 [ 263.568414][ T9089] should_fail+0x38c/0x4c0 [ 263.572860][ T9089] should_failslab+0x5/0x20 [ 263.577382][ T9089] slab_pre_alloc_hook+0x51/0xc0 [ 263.582352][ T9089] __kmalloc_node_track_caller+0x68/0x3a0 [ 263.588094][ T9089] ? netlink_sendmsg+0x645/0xbc0 [ 263.593062][ T9089] ? kmem_cache_alloc_node+0x162/0x2d0 [ 263.598541][ T9089] ? __alloc_skb+0xf4/0x750 [ 263.603167][ T9089] ? netlink_sendmsg+0x645/0xbc0 [ 263.608229][ T9089] __alloc_skb+0x22c/0x750 [ 263.612686][ T9089] netlink_sendmsg+0x645/0xbc0 [ 263.617492][ T9089] ? netlink_getsockopt+0x560/0x560 [ 263.622731][ T9089] ? aa_sock_msg_perm+0x94/0x150 [ 263.627701][ T9089] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 263.633014][ T9089] ? security_socket_sendmsg+0x7c/0xa0 [ 263.638523][ T9089] ? netlink_getsockopt+0x560/0x560 [ 263.643763][ T9089] ____sys_sendmsg+0x5a2/0x8c0 [ 263.648559][ T9089] ? memset+0x1e/0x40 [ 263.652576][ T9089] ? __sys_sendmsg_sock+0x30/0x30 [ 263.657640][ T9089] ? import_iovec+0x6f/0xa0 [ 263.662173][ T9089] ___sys_sendmsg+0x1f0/0x260 [ 263.666889][ T9089] ? __sys_sendmsg+0x250/0x250 [ 263.671703][ T9089] ? trace_event_raw_event_lock+0x250/0x250 [ 263.677644][ T9089] ? vfs_write+0x84d/0xd00 [ 263.682105][ T9089] ? __fdget+0x18b/0x210 [ 263.686374][ T9089] __se_sys_sendmsg+0x190/0x250 [ 263.691338][ T9089] ? __x64_sys_sendmsg+0x80/0x80 [ 263.696300][ T9089] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 263.702326][ T9089] ? lockdep_hardirqs_on+0x94/0x140 [ 263.707557][ T9089] do_syscall_64+0x4c/0xa0 [ 263.712003][ T9089] ? clear_bhb_loop+0x30/0x80 [ 263.716696][ T9089] ? clear_bhb_loop+0x30/0x80 [ 263.721393][ T9089] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 263.727321][ T9089] RIP: 0033:0x7f83ec4089a9 [ 263.731766][ T9089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.751395][ T9089] RSP: 002b:00007f83ea270038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 263.759839][ T9089] RAX: ffffffffffffffda RBX: 00007f83ec62ffa0 RCX: 00007f83ec4089a9 [ 263.767848][ T9089] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 263.775848][ T9089] RBP: 00007f83ea270090 R08: 0000000000000000 R09: 0000000000000000 [ 263.783836][ T9089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.791823][ T9089] R13: 0000000000000000 R14: 00007f83ec62ffa0 R15: 00007ffc396b5d58 [ 263.799828][ T9089] [ 264.516074][ T9108] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1528'. [ 264.603054][ T9108] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 265.020702][ T9118] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1533'. [ 265.975144][ T9144] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1541'. [ 266.046155][ T9144] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1541'. [ 266.056350][ T9144] netlink: 13 bytes leftover after parsing attributes in process `syz.4.1541'. [ 266.102301][ T9148] FAULT_INJECTION: forcing a failure. [ 266.102301][ T9148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.125056][ T9148] CPU: 1 PID: 9148 Comm: syz.2.1542 Not tainted 5.15.189-syzkaller #0 [ 266.133269][ T9148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 266.143364][ T9148] Call Trace: [ 266.146678][ T9148] [ 266.149641][ T9148] dump_stack_lvl+0x168/0x230 [ 266.154365][ T9148] ? show_regs_print_info+0x20/0x20 [ 266.159599][ T9148] ? load_image+0x3b0/0x3b0 [ 266.164171][ T9148] ? __lock_acquire+0x7c60/0x7c60 [ 266.169250][ T9148] should_fail+0x38c/0x4c0 [ 266.173711][ T9148] _copy_to_user+0x2e/0x130 [ 266.178245][ T9148] simple_read_from_buffer+0xe3/0x150 [ 266.183668][ T9148] proc_fail_nth_read+0x19a/0x210 [ 266.188744][ T9148] ? proc_fault_inject_write+0x2f0/0x2f0 [ 266.194427][ T9148] ? fsnotify_perm+0x254/0x560 [ 266.199308][ T9148] ? proc_fault_inject_write+0x2f0/0x2f0 [ 266.204973][ T9148] vfs_read+0x2f6/0xcf0 [ 266.209179][ T9148] ? kernel_read+0x1e0/0x1e0 [ 266.213793][ T9148] ? rcu_nmi_exit+0x6f/0xf0 [ 266.218337][ T9148] ? __fget_files+0x40f/0x480 [ 266.223055][ T9148] ? mutex_lock_nested+0x17/0x20 [ 266.228027][ T9148] ? __fdget_pos+0x2bf/0x370 [ 266.232653][ T9148] ? ksys_read+0x71/0x250 [ 266.237022][ T9148] ksys_read+0x14d/0x250 [ 266.241316][ T9148] ? vfs_write+0xd00/0xd00 [ 266.245773][ T9148] ? syscall_enter_from_user_mode+0x2a/0x70 [ 266.251709][ T9148] do_syscall_64+0x4c/0xa0 [ 266.256160][ T9148] ? clear_bhb_loop+0x30/0x80 [ 266.260859][ T9148] ? clear_bhb_loop+0x30/0x80 [ 266.265564][ T9148] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 266.271486][ T9148] RIP: 0033:0x7f7abe10a3bc [ 266.275936][ T9148] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 266.295568][ T9148] RSP: 002b:00007f7abbf73030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 266.304019][ T9148] RAX: ffffffffffffffda RBX: 00007f7abe332fa0 RCX: 00007f7abe10a3bc [ 266.312020][ T9148] RDX: 000000000000000f RSI: 00007f7abbf730a0 RDI: 0000000000000006 [ 266.320022][ T9148] RBP: 00007f7abbf73090 R08: 0000000000000000 R09: 0000000000000000 [ 266.328025][ T9148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 266.336039][ T9148] R13: 0000000000000000 R14: 00007f7abe332fa0 R15: 00007ffc085a7628 [ 266.344086][ T9148] [ 266.379880][ T9152] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1543'. [ 267.666053][ T9179] netlink: 'syz.1.1550': attribute type 10 has an invalid length. [ 267.696990][ T9179] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1550'. [ 267.805894][ T9179] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 267.932610][ T9190] netlink: 'syz.0.1553': attribute type 10 has an invalid length. [ 267.997201][ T9192] netlink: 'syz.3.1554': attribute type 29 has an invalid length. [ 268.005489][ T9192] netlink: 'syz.3.1554': attribute type 29 has an invalid length. [ 268.028849][ T9192] netlink: 'syz.3.1554': attribute type 29 has an invalid length. [ 268.194623][ T9201] netlink: 38831 bytes leftover after parsing attributes in process `syz.2.1556'. [ 268.300577][ T9206] device wlan0 entered promiscuous mode [ 268.433856][ T9211] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1561'. [ 268.508381][ T9214] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.1563'. [ 268.867939][ T9229] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1568'. [ 268.975601][ T9197] delete_channel: no stack [ 284.245858][ T9262] chnl_net:caif_netlink_parms(): no params data found [ 286.087434][ T21] Bluetooth: hci5: command 0x0409 tx timeout [ 287.207691][ T21] Bluetooth: hci6: command 0x0409 tx timeout [ 287.367630][ T21] Bluetooth: hci7: command 0x0409 tx timeout [ 287.607521][ T21] Bluetooth: hci8: command 0x0409 tx timeout [ 287.767396][ T21] Bluetooth: hci9: command 0x0409 tx timeout [ 288.167402][ T21] Bluetooth: hci5: command 0x041b tx timeout [ 289.287427][ T21] Bluetooth: hci6: command 0x041b tx timeout [ 289.447472][ T21] Bluetooth: hci7: command 0x041b tx timeout [ 289.687489][ T21] Bluetooth: hci8: command 0x041b tx timeout [ 289.847420][ T21] Bluetooth: hci9: command 0x041b tx timeout [ 290.248694][ T21] Bluetooth: hci5: command 0x040f tx timeout [ 291.367454][ T21] Bluetooth: hci6: command 0x040f tx timeout [ 291.527813][ T21] Bluetooth: hci7: command 0x040f tx timeout [ 291.767512][ T21] Bluetooth: hci8: command 0x040f tx timeout [ 291.927603][ T21] Bluetooth: hci9: command 0x040f tx timeout [ 292.327403][ T21] Bluetooth: hci5: command 0x0419 tx timeout [ 293.447447][ T21] Bluetooth: hci6: command 0x0419 tx timeout [ 293.607635][ T21] Bluetooth: hci7: command 0x0419 tx timeout [ 293.847514][ T21] Bluetooth: hci8: command 0x0419 tx timeout [ 294.008184][ T21] Bluetooth: hci9: command 0x0419 tx timeout [ 347.047310][ T4810] Bluetooth: hci10: command 0x0409 tx timeout [ 348.007360][ T4810] Bluetooth: hci11: command 0x0409 tx timeout [ 348.247522][ T4810] Bluetooth: hci12: command 0x0409 tx timeout [ 348.407325][ T4810] Bluetooth: hci13: command 0x0409 tx timeout [ 348.647557][ T4810] Bluetooth: hci14: command 0x0409 tx timeout [ 349.127429][ T4810] Bluetooth: hci10: command 0x041b tx timeout [ 350.087397][ T4810] Bluetooth: hci11: command 0x041b tx timeout [ 350.328119][ T4810] Bluetooth: hci12: command 0x041b tx timeout [ 350.487324][ T4810] Bluetooth: hci13: command 0x041b tx timeout [ 350.727303][ T4810] Bluetooth: hci14: command 0x041b tx timeout [ 351.207338][ T4810] Bluetooth: hci10: command 0x040f tx timeout [ 352.167376][ T4810] Bluetooth: hci11: command 0x040f tx timeout [ 352.407390][ T4810] Bluetooth: hci12: command 0x040f tx timeout [ 352.567289][ T4810] Bluetooth: hci13: command 0x040f tx timeout [ 352.807353][ T4810] Bluetooth: hci14: command 0x040f tx timeout [ 353.287311][ T4810] Bluetooth: hci10: command 0x0419 tx timeout [ 354.247338][ T4810] Bluetooth: hci11: command 0x0419 tx timeout [ 354.487298][ T4810] Bluetooth: hci12: command 0x0419 tx timeout [ 354.647293][ T4810] Bluetooth: hci13: command 0x0419 tx timeout [ 354.887365][ T4810] Bluetooth: hci14: command 0x0419 tx timeout [ 377.147217][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 377.154221][ C1] rcu: 0-....: (1 GPs behind) idle=11d/1/0x4000000000000000 softirq=23009/23010 fqs=5249 [ 377.165193][ C1] (detected by 1, t=10502 jiffies, g=30249, q=1521) [ 377.171905][ C1] Sending NMI from CPU 1 to CPUs 0: [ 377.177132][ C0] NMI backtrace for cpu 0 [ 377.177143][ C0] CPU: 0 PID: 9254 Comm: syz.4.1575 Not tainted 5.15.189-syzkaller #0 [ 377.177165][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 377.177175][ C0] RIP: 0010:perf_tp_event+0x345/0xb50 [ 377.177198][ C0] Code: 8d 94 24 80 00 00 00 48 8b 4c 24 18 e8 24 08 00 00 49 83 c5 60 4c 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 <74> 08 4c 89 ef e8 21 4b 25 00 4d 8b 6d 00 4d 85 ed 0f 84 06 01 00 [ 377.177212][ C0] RSP: 0018:ffffc900000072c0 EFLAGS: 00000046 [ 377.177227][ C0] RAX: 1ffff1100e6343c7 RBX: 1ffff11017206a40 RCX: dffffc0000000000 [ 377.177239][ C0] RDX: 0000000000000100 RSI: ffffffff8a0b2860 RDI: ffff8880731a20b8 [ 377.177251][ C0] RBP: ffffc90000007548 R08: dffffc0000000000 R09: fffffbfff1ad2dd6 [ 377.177263][ C0] R10: fffffbfff1ad2dd6 R11: 1ffffffff1ad2dd5 R12: ffff8880b9035200 [ 377.177275][ C0] R13: ffff8880731a1e38 R14: 0000000000000000 R15: 0000000000000000 [ 377.177286][ C0] FS: 00007f83ea2706c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 377.177300][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 377.177312][ C0] CR2: 00007fcb7992a218 CR3: 000000007ac8f000 CR4: 00000000003506f0 [ 377.177326][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 377.177335][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 377.177345][ C0] Call Trace: [ 377.177353][ C0] [ 377.177366][ C0] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 377.177384][ C0] ? __perf_event_overflow+0x415/0x530 [ 377.177428][ C0] perf_trace_run_bpf_submit+0xf3/0x1c0 [ 377.177448][ C0] perf_trace_preemptirq_template+0x2be/0x380 [ 377.177468][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 377.177486][ C0] ? trace_event_raw_event_preemptirq_template+0x270/0x270 [ 377.177505][ C0] ? __irq_exit_rcu+0x13b/0x220 [ 377.177521][ C0] ? irq_exit_rcu+0x20/0x20 [ 377.177537][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 377.177552][ C0] trace_irq_enable_rcuidle+0x108/0x180 [ 377.177571][ C0] trace_hardirqs_on+0x57/0x80 [ 377.177587][ C0] asm_sysvec_irq_work+0x16/0x20 [ 377.177602][ C0] RIP: 0010:rcu_read_unlock_special+0x84/0x480 [ 377.177619][ C0] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 7d 16 9e 7e 41 f7 c6 00 00 f0 00 74 45 <48> c7 44 24 20 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b [ 377.177632][ C0] RSP: 0018:ffffc900000077a0 EFLAGS: 00000206 [ 377.177644][ C0] RAX: faac4dda8d5a3000 RBX: 1ffff92000000ef8 RCX: faac4dda8d5a3000 [ 377.177657][ C0] RDX: dffffc0000000000 RSI: ffffffff8a0b15c0 RDI: ffffffff8a599340 [ 377.177669][ C0] RBP: ffffc90000007880 R08: dffffc0000000000 R09: ffffed101720765a [ 377.177680][ C0] R10: ffffed101720765a R11: 1ffff11017207659 R12: ffffffff8c120800 [ 377.177692][ C0] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000001 [ 377.177715][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 377.177734][ C0] ? __netif_receive_skb+0x290/0x290 [ 377.177756][ C0] __rcu_read_unlock+0x78/0xd0 [ 377.177771][ C0] netif_receive_skb_list_internal+0x93a/0xb90 [ 377.177792][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 377.177812][ C0] ? netif_receive_skb_list+0x3e0/0x3e0 [ 377.177828][ C0] ? lock_chain_count+0x20/0x20 [ 377.177847][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 377.177864][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 377.177880][ C0] ? detach_buf_split+0x8a9/0xab0 [ 377.177899][ C0] napi_complete_done+0x37d/0x830 [ 377.177918][ C0] ? __napi_schedule_irqoff+0x230/0x230 [ 377.177934][ C0] ? virtqueue_get_buf_ctx+0x4a7/0xfd0 [ 377.177953][ C0] ? virtqueue_enable_cb_prepare+0x22e/0x560 [ 377.177973][ C0] virtnet_poll+0x912/0xef0 [ 377.178001][ C0] ? refill_work+0x210/0x210 [ 377.178017][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 377.178035][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 377.178055][ C0] __napi_poll+0xc0/0x430 [ 377.178074][ C0] net_rx_action+0x4a8/0x9c0 [ 377.178091][ C0] ? lock_chain_count+0x20/0x20 [ 377.178112][ C0] ? net_tx_action+0x870/0x870 [ 377.178129][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 377.178146][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 377.178176][ C0] handle_softirqs+0x328/0x820 [ 377.178193][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 377.178211][ C0] ? do_softirq+0x200/0x200 [ 377.178231][ C0] __irq_exit_rcu+0x12f/0x220 [ 377.178246][ C0] ? irq_exit_rcu+0x20/0x20 [ 377.178260][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 377.178281][ C0] irq_exit_rcu+0x5/0x20 [ 377.178294][ C0] common_interrupt+0xb5/0xd0 [ 377.178309][ C0] [ 377.178314][ C0] [ 377.178319][ C0] asm_common_interrupt+0x22/0x40 [ 377.178334][ C0] RIP: 0010:__should_failslab+0x8f/0xe0 [ 377.178354][ C0] Code: 8d 73 08 4c 89 f0 48 c1 e8 03 42 0f b6 04 38 84 c0 75 45 41 f6 46 03 02 74 d3 48 83 c3 1c 48 89 d8 48 c1 e8 03 42 0f b6 04 38 <84> c0 75 14 8b 33 48 c7 c7 c0 0a 1f 8c 5b 41 5e 41 5f 5d e9 a9 41 [ 377.178367][ C0] RSP: 0018:ffffc90002f9fb98 EFLAGS: 00000a07 [ 377.178380][ C0] RAX: 0000000000000000 RBX: ffff888016841c9c RCX: faac4dda8d5a3000 [ 377.178391][ C0] RDX: ffff888028913b80 RSI: 0000000000100dc0 RDI: ffff888016841c80 [ 377.178402][ C0] RBP: 0000000000100dc0 R08: dffffc0000000000 R09: fffffbfff1ad2dd6 [ 377.178415][ C0] R10: fffffbfff1ad2dd6 R11: 1ffffffff1ad2dd5 R12: 0000000000000014 [ 377.178426][ C0] R13: 0000000000000014 R14: ffff888016841c80 R15: dffffc0000000000 [ 377.178449][ C0] should_failslab+0x5/0x20 [ 377.178464][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 377.178480][ C0] __kmalloc+0x6b/0x330 [ 377.178494][ C0] ? bpf_test_init+0xf8/0x1b0 [ 377.178509][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 377.178529][ C0] bpf_test_init+0xf8/0x1b0 [ 377.178547][ C0] bpf_prog_test_run_skb+0x181/0x1180 [ 377.178564][ C0] ? __fget_files+0x40f/0x480 [ 377.178586][ C0] ? cpu_online+0x60/0x60 [ 377.178601][ C0] bpf_prog_test_run+0x31e/0x390 [ 377.178621][ C0] __sys_bpf+0x535/0x670 [ 377.178638][ C0] ? bpf_link_show_fdinfo+0x340/0x340 [ 377.178668][ C0] __x64_sys_bpf+0x78/0x90 [ 377.178685][ C0] do_syscall_64+0x4c/0xa0 [ 377.178703][ C0] ? clear_bhb_loop+0x30/0x80 [ 377.178718][ C0] ? clear_bhb_loop+0x30/0x80 [ 377.178733][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 377.178753][ C0] RIP: 0033:0x7f83ec4089a9 [ 377.178769][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.178782][ C0] RSP: 002b:00007f83ea270038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 377.178798][ C0] RAX: ffffffffffffffda RBX: 00007f83ec62ffa0 RCX: 00007f83ec4089a9 [ 377.178810][ C0] RDX: 0000000000000050 RSI: 0000200000000a40 RDI: 000000000000000a [ 377.178820][ C0] RBP: 00007f83ec48ad69 R08: 0000000000000000 R09: 0000000000000000 [ 377.178830][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.178839][ C0] R13: 0000000000000000 R14: 00007f83ec62ffa0 R15: 00007ffc396b5d58 [ 377.178859][ C0] [ 378.567360][ T4221] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-... } 10906 jiffies s: 14865 root: 0x1/. [ 378.589083][ T4221] rcu: blocking rcu_node structures (internal RCU debug): [ 378.596258][ T4221] Task dump for CPU 0: [ 378.600515][ T4221] task:syz.4.1575 state:R running task stack:23456 pid: 9254 ppid: 4192 flags:0x0000000c [ 378.611423][ T4221] Call Trace: [ 378.614725][ T4221] [ 378.617727][ T4221] ? should_failslab+0x5/0x20 [ 378.622423][ T4221] ? slab_pre_alloc_hook+0x51/0xc0 [ 378.627615][ T4221] ? __kmalloc+0x6b/0x330 [ 378.631959][ T4221] ? bpf_test_init+0xf8/0x1b0 [ 378.636653][ T4221] ? __lock_acquire+0x7c60/0x7c60 [ 378.641776][ T4221] ? bpf_test_init+0xf8/0x1b0 [ 378.646477][ T4221] ? bpf_prog_test_run_skb+0x181/0x1180 [ 378.652119][ T4221] ? __fget_files+0x40f/0x480 [ 378.656833][ T4221] ? cpu_online+0x60/0x60 [ 378.661249][ T4221] ? bpf_prog_test_run+0x31e/0x390 [ 378.666388][ T4221] ? __sys_bpf+0x535/0x670 [ 378.670882][ T4221] ? bpf_link_show_fdinfo+0x340/0x340 [ 378.676301][ T4221] ? __x64_sys_bpf+0x78/0x90 [ 378.681299][ T4221] ? do_syscall_64+0x4c/0xa0 [ 378.685950][ T4221] ? clear_bhb_loop+0x30/0x80 [ 378.690754][ T4221] ? clear_bhb_loop+0x30/0x80 [ 378.695476][ T4221] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 378.701682][ T4221]