last executing test programs: 2.682646908s ago: executing program 3 (id=477): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000010000000000000000095"], &(0x7f0000000440)='syzkaller\x00'}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8e20, 0xa2a}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x85, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @perf_bp={0x0, 0xc}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000010000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0xffffffff, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x5, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) 2.298545678s ago: executing program 1 (id=481): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x42, 0x0, &(0x7f0000000200)="e460cdfbef2408002900119386dd6a00000000072feb3014cd3ec8a755c1e1380081ffad000030e8d5000000010000001400000500242c100806d320d98a61a90021", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1a1102, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff3) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x2}) ioctl$TUNGETVNETHDRSZ(r3, 0x400454cc, 0xffffffffffffffff) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[], 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r4, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) 2.290199878s ago: executing program 0 (id=482): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}, 0x0) r0 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x10fc}, {&(0x7f00000011c0)="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", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0xff00) 2.260832769s ago: executing program 3 (id=483): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000b80)=ANY=[], 0xfe33) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0xffffffffffffff7f}, 0x111311, 0x1, 0x0, 0x1, 0x20000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004dfff000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x1a, &(0x7f0000000dc0)=ANY=[@ANYBLOB="184b000004000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001865000006000000000000000200000018110000490541de9e7c0968a8f853de4dea4c2a317ee26bb25d324ef20edf0a333e88c02414ab89652dcaee15ae1f1e3cd3b34def2549ff6151e3ec4e22feb09cc0f0be89c6992efc7c2a8320c831ff1a4add8f809242fd6eb7659d1c91c5069ca1bb57fc3622beb7769f92d715ff01f46e4c5c54dc7942ef4b80797bed296a4c436d6319fde6758e37e7ba8597e6e901937e605637271b7497fd52c06f28bfa61371", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018140000", @ANYRES32=r1, @ANYBLOB="0000000000000000185200000f00"/24], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8, 0x4}, 0x50) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x28, 0x1, 0xf9, 0x0, 0x0, 0x400, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x5, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x3, r0, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x0, 0x0, 0x2, 0x14, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xbf, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000007fffffff00000000", @ANYRES32=0x1, @ANYBLOB="00000000001dbbf11c3c0a612100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x39}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) close(r2) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000340)={0x0, &(0x7f0000000200)=""/105, 0x0, &(0x7f0000000580)="bca13f58108937270789108abef62fc69699d33b5b5ef0def2fb77dbb117902c28122e2f2fb8ac793c47db676efd92aeacef4f223cdb490d7eaa0860b0f1abaaad5a58cd7e5855b48a7272e2854fda05f41a005d555f788cac0ce588812f48ec13a49b934fcfa64f4862f43adc0335ee9a202360de774f6123ff", 0x7, r2, 0x4}, 0x38) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0xd}, 0x0, 0x80000, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100e000000103600e12080005007a010401a8001600200003400400", 0x3a}], 0x1}, 0x4000000) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700040005234538ba55"], 0xfe33) r4 = gettid() perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x10, 0x5, 0x0, 0x72, 0x0, 0x8, 0x4009, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000140), 0xa}, 0x200, 0x0, 0x4, 0x5, 0xfffffffffffffffb, 0x2, 0xfffd, 0x0, 0x7fff, 0x0, 0x6}, r4, 0xa, r0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) r6 = getpid() perf_event_open(0x0, r6, 0x8, r0, 0x1) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b80)="d80000001c0081044e81f782db44b904021d080201000000000018a118000c000600142603600e1208000f0100810401a8001600200001400300600803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e0852", 0x84}, {&(0x7f0000000580)="bf49498ca8a07dba000099c311a0bf08264860a910e5b37ab4ad33df43fa70ffc79eeeca2f38ba06e1ee93acd3105800000000000000beffe8a47ad8193b82f36fcbb3f27e052690d0c8ccbd8cbf72db", 0x50}, {&(0x7f0000000a00)="7e29d1a3098934975681c85ab33606d77b4970ba01a81851b3eb4ab5", 0x1c}], 0x3, 0x0, 0x0, 0x7400}, 0x4804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="850030000f0000000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 2.126702632s ago: executing program 0 (id=485): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000080), 0xfe41) sendmsg$unix(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)='=', 0x1}], 0x1, &(0x7f00000002c0)=ANY=[], 0x18, 0x20000084}, 0x40880) bpf$TOKEN_CREATE(0x24, &(0x7f00000011c0), 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f00000027c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r4, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x34}}, @ip_tos_u8={{0x14, 0x29, 0x3e}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0xff00) (fail_nth: 2) 2.048079165s ago: executing program 1 (id=486): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000d40)=ANY=[@ANYRESDEC=r0, @ANYBLOB="c69e2d6fc0970ed31d06094983171b327082ea8c052e03f7bacebc725c52f9c2b227f2ff0b3b19b3bb8041ac7a414f81595eace37ff63ea800a427cb4b79f82c7de575e8349f53be1912d5510aba6fc6d5a2104270941732521648923f0eecc814068be05290f67c913cc2d0b78e8e7db1d35aa0", @ANYBLOB="07732f6a1cc324c3bfb2d3844d4825", @ANYRES16=r0, @ANYRESDEC=0x0, @ANYRES16=r1, @ANYBLOB="fe4c16e61c37f0836201796b5aa6cbc19d561cb89301593f89a3e6c08a84741ed2916d98737977e39541c29e992e5863eeabe5207d8392a0a6db46e04f79dc4fd5978b0bb5d848482fe51de586e5d5deeb01d075be7341b255ea35d12347ce49d1fcaa948c3df33a4b00aadee6713be89d9f5c6099d4739873691d4e7f562f771758a7ea99294e838983ea823f59cde9a322b4a4df01", @ANYRES8=r1, @ANYRES64=r0, @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x80, 0x0, 0xfc, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe7e2, 0xe, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xf}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) r3 = perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x6, 0x6}, 0xc634, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x1c1, &(0x7f0000000480)=ANY=[@ANYRESOCT=r3], 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x102) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='rdma.current\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f00000000c0), 0x12) write$cgroup_int(r5, &(0x7f0000000100)=0x1, 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xad, &(0x7f0000000680)='cgroup\x00\x9a\f\xad\xd6\x04\xd5^g\x8c\xd6\t.L\xbag\xc5\ts\xb6\x8bo\x90\xdf\v\x84P>f\r8\x8bZ\x8b\x10\bi\xab#\xa0\xbc.w\x1c\x90\xd1\x96\xb03\x7f\xd5\xb3\xff*\xe3\xc2\xdad\xa5\x86\x8c`GTC\x00\x14\xdeUfO\xda\a\x8e\xdd3\xceC\xee0\x7fpyiV\x8e\x8e\xc3\x9e\xfd\xf8\xc2~\x87\x04\x10M\xb8aJP\xe7{\xcc\xe1\x11\xac\x13\x13\xe9w\xa6EY<\xaa\x8crz\v\xd7\xa8\xde_z\xcc\xce&\f\xbb\xd1\x9d\x83\xd7=\xcb\x02%\x1f\\\xdc\x18V\xa4\xb3/\x8a\xb6}.\xb8\x7fy\x8a\x8dc\x12*\xb7\xba0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000a80)=""/249, 0xf9}], 0x1}, 0x1f00) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x8a, &(0x7f00000000c0), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000380)=[{0x2, 0x0, 0x3, 0xfff}, {0x4, 0x4, 0x7, 0x81}, {0x8, 0x81, 0xfc, 0x7}, {0x2, 0xd7, 0x6, 0x3}]}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000340)={'\x00', 0x200}) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb01001800000000000000cf000000cf00000006000000000000000300000d000000000f000000050000000a000000040000000d00000001e604cde100000002000013010000000f0000000e00000005000000020000000600000000100000090000000500000f030000000100000008000000a900000003000000002c00004b000000010000000200000004000000010000000700000002000000040000008d00000010000000b00ef305000000020000053e0000000200000004000000110000000800000003000000010000000c0000000000000a0000ebff0c000000000000090200000000005f6100000008fd76920f798b1897f2336b61ec7b9bae053ecaf79498ac2e1a4e2a2e94f64ae4c9e713f5c522b884db38974532a5fc2f11b1cc6ebc9f97f9042b8e4b"], &(0x7f0000001340)=""/4096, 0xee, 0x1000, 0x2, 0x7}, 0x28) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x8953, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 1.683162404s ago: executing program 3 (id=487): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000080), 0xfe41) sendmsg$unix(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)='=', 0x1}], 0x1, &(0x7f00000002c0)=ANY=[], 0x18, 0x20000084}, 0x40880) bpf$TOKEN_CREATE(0x24, &(0x7f00000011c0), 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f00000027c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r4, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x34}}, @ip_tos_u8={{0x14, 0x29, 0x3e}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0xff00) 1.410677062s ago: executing program 0 (id=488): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffc}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90f24fc60", 0x14}], 0x1}, 0x2404c084) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000080), 0xfe41) sendmsg$unix(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)='=', 0x1}], 0x1, &(0x7f00000002c0)=ANY=[], 0x18, 0x20000084}, 0x40880) bpf$TOKEN_CREATE(0x24, &(0x7f00000011c0), 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f00000027c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r5, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x34}}, @ip_tos_u8={{0x14, 0x29, 0x3e}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0xff00) 1.325207384s ago: executing program 3 (id=490): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) socket$kcm(0x10, 0x2, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="180200000300000000000000d17e00008500000020000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffff", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000950000000000000013331727c56a9f4c3bf8921af5a50a12f8ac9f9b4620fdeb16a3e0de332bfc199e1582cc4d0ac6683e6bb3f6ee2e3f39f43cdcbe3ed00027063d19017991c36ebe19130802874c85bfb57a19c6b4384bdb25fe867f17c9c54f4a286085c63628942d5aac21f065a7a26df893cfb377be1f79e0f952a0e695f0869c33e09af47615d99f72e8aab4c9f2bb515a451d376e3bf8ab265803"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000007c0)={'netdevsim0\x00', @broadcast}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="d3000000f1000000180a000000000000000000000000000095000000000000"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r4}, 0x8) ioctl$TUNSETQUEUE(r5, 0x400454d9, 0x0) openat$cgroup_int(r5, &(0x7f00000000c0)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a000000feb9fb4c5159c48a0500000400000000", @ANYRES32=0x1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000040000000200"/28], 0x50) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000380)="00010000000000000000002f41b09aa4355c1eafacf706e1", 0x18}], 0x1}, 0x20040040) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000044e690085000000a000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) 1.218638087s ago: executing program 0 (id=491): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001040)={0x1b, 0x0, 0x0, 0x9, 0x0, r0, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1}, 0x4) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xb, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000fc0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x50) recvmsg$unix(0xffffffffffffffff, 0x0, 0x60) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x1d, 0x18, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x10, 0x81}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c61}, 0x50) 1.12341198s ago: executing program 0 (id=493): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000040)=r2, 0x4) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000340)) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7fff}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x0, 0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socket$kcm(0xa, 0x3, 0x73) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001140)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000011c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x2, 0x2, 0x2}, 0x50) r5 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0xeaff}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[], 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="00da00000401"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@enum={0x0, 0x5, 0x0, 0x6, 0x4, [{0x0, 0xf07}, {0x3, 0xfff}, {0xc, 0x2}, {0x3, 0x401}, {0x0, 0x3}]}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f00000001c0)=""/45, 0x51, 0x2d, 0x1, 0x64a}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000007920480000000000630a04ff0000000095000000f9ffbdff"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 1.043118202s ago: executing program 3 (id=494): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'macsec0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x628200, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_macvtap\x00', 0x2000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r2) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{0x0}], 0x1}, 0x408c4) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x5}, 0xc20, 0x10000, 0x0, 0x6, 0x8, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x40, 0x1000001000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x43e90bacaf4f4c62, @perf_bp={0x0, 0x6600000000000000}, 0x104260, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffbfffffffff, r5, 0x0) 1.011889513s ago: executing program 2 (id=495): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000b80)=ANY=[], 0xfe33) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0xffffffffffffff7f}, 0x111311, 0x1, 0x0, 0x1, 0x20000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004dfff000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x1a, &(0x7f0000000dc0)=ANY=[@ANYBLOB="184b000004000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001865000006000000000000000200000018110000490541de9e7c0968a8f853de4dea4c2a317ee26bb25d324ef20edf0a333e88c02414ab89652dcaee15ae1f1e3cd3b34def2549ff6151e3ec4e22feb09cc0f0be89c6992efc7c2a8320c831ff1a4add8f809242fd6eb7659d1c91c5069ca1bb57fc3622beb7769f92d715ff01f46e4c5c54dc7942ef4b80797bed296a4c436d6319fde6758e37e7ba8597e6e901937e605637271b7497fd52c06f28bfa61371", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018140000", @ANYRES32=r1, @ANYBLOB="0000000000000000185200000f00"/24], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8, 0x4}, 0x50) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x28, 0x1, 0xf9, 0x0, 0x0, 0x400, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x5, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x3, r0, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x0, 0x0, 0x2, 0x14, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xbf, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000007fffffff00000000", @ANYRES32=0x1, @ANYBLOB="00000000001dbbf11c3c0a612100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x39}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) close(r2) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000340)={0x0, &(0x7f0000000200)=""/105, 0x0, &(0x7f0000000580)="bca13f58108937270789108abef62fc69699d33b5b5ef0def2fb77dbb117902c28122e2f2fb8ac793c47db676efd92aeacef4f223cdb490d7eaa0860b0f1abaaad5a58cd7e5855b48a7272e2854fda05f41a005d555f788cac0ce588812f48ec13a49b934fcfa64f4862f43adc0335ee9a202360de774f6123ff", 0x7, r2, 0x4}, 0x38) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0xd}, 0x0, 0x80000, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100e000000103600e12080005007a010401a8001600200003400400", 0x3a}], 0x1}, 0x4000000) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700040005234538ba55"], 0xfe33) r4 = gettid() perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x10, 0x5, 0x0, 0x72, 0x0, 0x8, 0x4009, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000140), 0xa}, 0x200, 0x0, 0x4, 0x5, 0xfffffffffffffffb, 0x2, 0xfffd, 0x0, 0x7fff, 0x0, 0x6}, r4, 0xa, r0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) r6 = getpid() perf_event_open(0x0, r6, 0x8, r0, 0x1) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b80)="d80000001c0081044e81f782db44b904021d080201000000000018a118000c000600142603600e1208000f0100810401a8001600200001400300600803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e0852", 0x84}, {&(0x7f0000000580)="bf49498ca8a07dba000099c311a0bf08264860a910e5b37ab4ad33df43fa70ffc79eeeca2f38ba06e1ee93acd3105800000000000000beffe8a47ad8193b82f36fcbb3f27e052690d0c8ccbd8cbf72db", 0x50}, {&(0x7f0000000a00)="7e29d1a3098934975681c85ab33606d77b4970ba01a81851b3eb4ab5", 0x1c}], 0x3, 0x0, 0x0, 0x7400}, 0x4804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="850030000f0000000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 861.385787ms ago: executing program 1 (id=496): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000100730109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1, 0x0, 0x0, 0x38340300}, 0x0) 723.32565ms ago: executing program 1 (id=497): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="1400000016000b56d072c00a000000f90c000000", 0x14}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0xf, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) mkdir(&(0x7f00000001c0)='./cgroup/../file0\x00', 0x200) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000033000b35d25a806c8c6f94f90c24fc60", 0x14}], 0x1}, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="181200"/15, @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095000000000000009a17f5f6aff3067928d10f3afde7dc99dcc1bd59"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000600)='ns/ipc\x00') ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0xa) r8 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x200, 0x10, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85a, 0x0, @perf_config_ext={0x8a15, 0x5}, 0x411, 0x1, 0xb, 0x5, 0xe4c2, 0x0, 0x0, 0x0, 0x2}, r8, 0x0, 0xffffffffffffffff, 0x6) sendmsg$kcm(r3, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000000150084000000000000007200000000000000"], 0x18}, 0x41) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001780)={r8}, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20501, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x94, 0x2, 0x0, 0x0, 0x0, 0x0, 0x181, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x4, @perf_config_ext={0x0, 0x772}, 0x108500, 0xe9a, 0x7baf376b, 0x3, 0x5, 0x0, 0x5}, 0x0, 0xfffffffc00000000, 0xffffffffffffffff, 0x8) r9 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0xe249d, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x41a0, 0x2e, 0xfffffbff, 0x7, 0x2, 0xeca, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, r9, 0x0) 609.188764ms ago: executing program 2 (id=498): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000026000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r1, &(0x7f0000000240)}, 0x20) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000a80)="d80000001d0081044e81f777db44b904021d080201000000040000a1bc0001000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c16fb4007134cf6ee08000a0e408e8d8ef075c11503c6bbace801bcb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322107c9fd6", 0x81}, {&(0x7f00000006c0)="54f6d4d87eb3f140c5", 0x9}, {&(0x7f0000000980)="027a64c0072ebbb1512b328dda11b4efd4ba07fc642b7e012bea071dbbdea51e41958755533ccce04d3e635cbe848495e723490d8e93db224d82d4fbfe76bd22fd358cd467795ad7febfc220d72f", 0x4e}], 0x3, 0x0, 0x0, 0x7400}, 0x10) 382.55512ms ago: executing program 2 (id=499): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9f15eb01001800000000000000200000002000000008000000000000000100000d00000000000000000200000003000000000000021000000000305f2e004f5f"], &(0x7f0000000b80)=""/230, 0x40, 0xe6, 0x1}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10900, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0}, 0x10009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, @perf_config_ext, 0x110a90, 0x89, 0x2, 0x7, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x40000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x104247, 0x0, 0x0, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffdfffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r1, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) recvmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2063) recvmsg(0xffffffffffffffff, 0x0, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000180), &(0x7f0000000280)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000006e40)=@base={0x5, 0x5, 0x2, 0xc2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000012c0)={{r2}, &(0x7f0000000200), &(0x7f0000000240), 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x4}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x1000000000000032, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000040000000080a1f5e7fe85ca250b780beec3051137000019000000fe4aa12aa4c452221ed81c2512504163073487fa060beaec7205d98bd85f8d9ec4c4ae1f647b72330567d75536fc621b48cf368817f542e6c4adc9f9670b9f6b1e67cd98e3a327f7a1cd44186fad7a77e813145259252a28a8f4579d280aa52bf146aae2b9706d5a7d82e79fe941f9c1598af2fd87d758488ff2aa5c8c812f21de1de85d1f7f75d9394640f0907b6e8841ab05a9ac9cb66d", @ANYRES32=r3, @ANYRES32=r4], 0x18, 0xcc040}, 0x64004084) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 331.370451ms ago: executing program 1 (id=500): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x24, &(0x7f00000004c0)=[{&(0x7f0000000000)="3772cc9f1ba1f8481100003864000000000602000000000e000a001000070002900000121fb694920fb769c45c30aa0a85506a998871e81559bb1d748274a41cce9cf408abe280772dd619f2c599ae9cd0032f660b1e03a4c5d9db229d175425a2a0c9c5045b51f2de975170a8e91337e8c92743649273053c90926642b25f33eeee8398e0237a0f22a830a7fc3bc1c82ef5c11d1b842eaf5c2b152a64d50ddd1f341a1365c29716524234d55505b6", 0x2e}], 0x1}, 0x584c09e47627a711) 289.345432ms ago: executing program 2 (id=501): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800067c7c09e8fe0ba1bc000800b800000003600e120800100002000401a8000600200e02400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7c, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000040012000a0003000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) 182.642665ms ago: executing program 1 (id=502): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) socket$kcm(0x10, 0x2, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="180200000300000000000000d17e00008500000020000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffff", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000950000000000000013331727c56a9f4c3bf8921af5a50a12f8ac9f9b4620fdeb16a3e0de332bfc199e1582cc4d0ac6683e6bb3f6ee2e3f39f43cdcbe3ed00027063d19017991c36ebe19130802874c85bfb57a19c6b4384bdb25fe867f17c9c54f4a286085c63628942d5aac21f065a7a26df893cfb377be1f79e0f952a0e695f0869c33e09af47615d99f72e8aab4c9f2bb515a451d376e3bf8ab265803"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000007c0)={'netdevsim0\x00', @broadcast}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="d3000000f1000000180a000000000000000000000000000095000000000000"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r4}, 0x8) ioctl$TUNSETQUEUE(r5, 0x400454d9, 0x0) openat$cgroup_int(r5, &(0x7f00000000c0)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a000000feb9fb4c5159c48a0500000400000000", @ANYRES32=0x1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000040000000200"/28], 0x50) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000380)="00010000000000000000002f41b09aa4355c1eafacf706e1", 0x18}], 0x1}, 0x20040040) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000044e690085000000a000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) 182.214955ms ago: executing program 2 (id=503): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000640)=ANY=[], 0x0, 0x2d, 0x0, 0x1, 0x7fffffff}, 0x28) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xf}, 0x0, 0x3, 0x7fff, 0x6, 0x0, 0x10000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x9, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10, 0x0}, 0x300080c1) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000000500)=""/151, 0x97}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 158.403306ms ago: executing program 0 (id=504): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x4, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r3, &(0x7f0000000000)="d7a0", &(0x7f00000000c0)=""/131}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x11, 0x2, 0x0) r5 = socket$kcm(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x801c581f, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@dbg={0x25, 0x4, 0x6}, 0x80, 0x0}, 0x4008000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r6) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1, 0x6, 0x5a, 0xd, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfff, 0x1, @perf_config_ext={0x261, 0x3}, 0x110000, 0x5, 0x0, 0x7, 0x9, 0x68, 0x4eaa, 0x0, 0x120000, 0x0, 0x916}, r1, 0xc, r2, 0x1) r7 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r7, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r9}, &(0x7f0000000000), &(0x7f00000000c0)=r0}, 0x20) 64.341048ms ago: executing program 3 (id=505): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6c0b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x20000, 0x0, 0x4000000000}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r5 = socket$kcm(0xa, 0x922000000003, 0x11) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x21400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x186a8, 0x4, 0x1, 0x0, 0x0, 0x4000000, 0x790c, 0x0, 0x1000}, 0xffffffffffffffff, 0x0, r4, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r10, 0x401c5820, &(0x7f0000000580)=0xa4) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="120000000f0000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r11}, &(0x7f0000000080), &(0x7f0000000380)=r9}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40) recvmsg(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r12 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) recvmsg(r5, &(0x7f0000003a00)={&(0x7f0000000b00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000002980)=[{&(0x7f0000000b80)=""/44, 0x2c}, {&(0x7f0000000bc0)=""/48, 0x30}, {&(0x7f0000000c00)=""/13, 0xd}, {&(0x7f0000000c40)=""/44, 0x2c}, {&(0x7f0000000c80)=""/33, 0x21}, {&(0x7f0000000cc0)=""/111, 0x6f}, {&(0x7f0000000d40)=""/197, 0xc5}], 0x7, &(0x7f0000002a00)=""/4096, 0x1000}, 0x10023) setsockopt$sock_attach_bpf(r12, 0x84, 0x79, &(0x7f0000000000)=r14, 0x8) ioctl$TUNSETVNETBE(r14, 0x400454de, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r14, 0x89e2, &(0x7f00000000c0)={r8}) sendmsg$kcm(r15, &(0x7f0000000500)={&(0x7f0000000f00)=@hci={0x1f, 0x1, 0x3}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000280)="ff71dbf4f7a23441ad76a3816f894c7a5b195b3068866292d915009205b7c122f45bf3b17c2da8b64c1d5dc58d367b8612a5bd5a8cf1560a38ba", 0x3a}, {&(0x7f00000002c0)}, {&(0x7f0000000300)="9d3462270220ab7f442a92a9c669de16", 0x10}, {&(0x7f0000000140)="97825b349b85573722a1d0bd7d8d7bd47a777d7a3ec1446a9a710e3435144298352a74b0c0ca38b123cdcd364dbe", 0x2e}], 0x4}, 0x10) recvmsg(r15, &(0x7f0000000ac0)={&(0x7f0000000540)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000005c0)=""/159, 0x9f}, {&(0x7f0000000740)=""/136, 0x88}, {&(0x7f0000000800)=""/82, 0x52}, {&(0x7f0000000880)=""/235, 0xeb}, {&(0x7f0000000980)=""/29, 0x1d}], 0x5, &(0x7f0000000a40)=""/85, 0x55}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 0s ago: executing program 2 (id=506): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffe7d9f527}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x5, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="180400000400000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc4fc}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x80001, 0x1, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x8, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='-4'], 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)="c6d3ddca886199f5af98", &(0x7f0000000340), 0xffffffff, r0}, 0x38) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 57.105194][ T5434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.117525][ T5434] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.34' (ED25519) to the list of known hosts. syzkaller login: [ 75.539802][ T5752] cgroup: Unknown subsys name 'net' [ 75.672138][ T5752] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.142044][ T5752] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.599338][ T5771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.600117][ T5767] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.615447][ T5771] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.625121][ T5770] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.629385][ T5775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.632622][ T5770] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.641049][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.648915][ T5770] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.656154][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.661882][ T5770] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.668389][ T5775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.676112][ T5770] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.684147][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.689380][ T5770] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.703187][ T5770] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.711262][ T5770] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.714958][ T5777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.719170][ T5770] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.733135][ T5770] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.773958][ T5776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.782876][ T5771] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.790260][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.798059][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.805802][ T5771] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.136783][ T5763] chnl_net:caif_netlink_parms(): no params data found [ 79.244833][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 79.322131][ T5763] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.330013][ T5763] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.337855][ T5763] bridge_slave_0: entered allmulticast mode [ 79.345958][ T5763] bridge_slave_0: entered promiscuous mode [ 79.354148][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 79.373655][ T5763] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.380920][ T5763] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.388439][ T5763] bridge_slave_1: entered allmulticast mode [ 79.396474][ T5763] bridge_slave_1: entered promiscuous mode [ 79.486797][ T5763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.500579][ T5764] chnl_net:caif_netlink_parms(): no params data found [ 79.511288][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.518522][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.526052][ T5765] bridge_slave_0: entered allmulticast mode [ 79.532753][ T5765] bridge_slave_0: entered promiscuous mode [ 79.542107][ T5763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.569974][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.577254][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.584483][ T5765] bridge_slave_1: entered allmulticast mode [ 79.592313][ T5765] bridge_slave_1: entered promiscuous mode [ 79.640114][ T5763] team0: Port device team_slave_0 added [ 79.671770][ T5763] team0: Port device team_slave_1 added [ 79.693795][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.713197][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.721636][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.729268][ T5766] bridge_slave_0: entered allmulticast mode [ 79.736725][ T5766] bridge_slave_0: entered promiscuous mode [ 79.751049][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.779739][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.787280][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.794448][ T5766] bridge_slave_1: entered allmulticast mode [ 79.801430][ T5766] bridge_slave_1: entered promiscuous mode [ 79.839829][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.846923][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.873132][ T5763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.893318][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.900573][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.908118][ T5764] bridge_slave_0: entered allmulticast mode [ 79.915192][ T5764] bridge_slave_0: entered promiscuous mode [ 79.923224][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.930555][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.938180][ T5764] bridge_slave_1: entered allmulticast mode [ 79.945343][ T5764] bridge_slave_1: entered promiscuous mode [ 79.953903][ T5765] team0: Port device team_slave_0 added [ 79.961184][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.970621][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.999000][ T5763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.035954][ T5765] team0: Port device team_slave_1 added [ 80.054078][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.066751][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.079201][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.119060][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.126267][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.152261][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.167608][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.209882][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.217042][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.243606][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.275776][ T5766] team0: Port device team_slave_0 added [ 80.296886][ T5763] hsr_slave_0: entered promiscuous mode [ 80.304039][ T5763] hsr_slave_1: entered promiscuous mode [ 80.322036][ T5764] team0: Port device team_slave_0 added [ 80.332957][ T5766] team0: Port device team_slave_1 added [ 80.356462][ T5764] team0: Port device team_slave_1 added [ 80.423868][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.431948][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.458148][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.474024][ T5765] hsr_slave_0: entered promiscuous mode [ 80.481391][ T5765] hsr_slave_1: entered promiscuous mode [ 80.487596][ T5765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.495570][ T5765] Cannot create hsr debugfs directory [ 80.506792][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.513771][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.540591][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.553100][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.560448][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.586483][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.626215][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.633196][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.659693][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.681840][ T5766] hsr_slave_0: entered promiscuous mode [ 80.688324][ T5766] hsr_slave_1: entered promiscuous mode [ 80.694570][ T5766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.702458][ T5766] Cannot create hsr debugfs directory [ 80.816220][ T5767] Bluetooth: hci0: command tx timeout [ 80.850260][ T5764] hsr_slave_0: entered promiscuous mode [ 80.857130][ T5764] hsr_slave_1: entered promiscuous mode [ 80.863232][ T5764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.871554][ T5764] Cannot create hsr debugfs directory [ 80.895109][ T5767] Bluetooth: hci3: command tx timeout [ 80.900532][ T5084] Bluetooth: hci1: command tx timeout [ 80.901000][ T5771] Bluetooth: hci2: command tx timeout [ 81.110939][ T5763] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.130047][ T5763] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.139960][ T5763] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.150083][ T5763] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.217546][ T5766] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.239173][ T5766] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.249301][ T5766] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.266185][ T5766] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.341764][ T5765] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.361515][ T5765] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.378905][ T5765] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.390922][ T5765] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.474166][ T5764] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.495113][ T5763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.502067][ T5764] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.514046][ T5764] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.529093][ T5764] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.591668][ T5763] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.642848][ T1072] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.650286][ T1072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.662304][ T1072] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.669453][ T1072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.699077][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.753014][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.786790][ T2883] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.793951][ T2883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.807068][ T2883] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.814188][ T2883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.851863][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.891896][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.914165][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.951809][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.958998][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.994419][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.001554][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.043831][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.063078][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.070290][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.093087][ T2927] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.100284][ T2927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.151359][ T5765] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.330575][ T5763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.441894][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.491500][ T5763] veth0_vlan: entered promiscuous mode [ 82.550244][ T5763] veth1_vlan: entered promiscuous mode [ 82.624277][ T5766] veth0_vlan: entered promiscuous mode [ 82.652029][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.667459][ T5766] veth1_vlan: entered promiscuous mode [ 82.688243][ T5763] veth0_macvtap: entered promiscuous mode [ 82.699261][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.716874][ T5763] veth1_macvtap: entered promiscuous mode [ 82.772005][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.783023][ T5766] veth0_macvtap: entered promiscuous mode [ 82.805310][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.819864][ T5765] veth0_vlan: entered promiscuous mode [ 82.840677][ T5763] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.850580][ T5763] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.859481][ T5763] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.868668][ T5763] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.880164][ T5766] veth1_macvtap: entered promiscuous mode [ 82.894022][ T5765] veth1_vlan: entered promiscuous mode [ 82.894870][ T5771] Bluetooth: hci0: command tx timeout [ 82.941605][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.953508][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.965887][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.975090][ T5771] Bluetooth: hci2: command tx timeout [ 82.980552][ T5767] Bluetooth: hci3: command tx timeout [ 82.985631][ T5084] Bluetooth: hci1: command tx timeout [ 82.999542][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.017962][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.030142][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.039137][ T5764] veth0_vlan: entered promiscuous mode [ 83.069071][ T5766] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.082191][ T5766] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.091320][ T5766] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.100121][ T5766] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.159294][ T5765] veth0_macvtap: entered promiscuous mode [ 83.171880][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.182667][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.198495][ T5765] veth1_macvtap: entered promiscuous mode [ 83.210192][ T5764] veth1_vlan: entered promiscuous mode [ 83.291366][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.292386][ T5764] veth0_macvtap: entered promiscuous mode [ 83.313190][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.333223][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.343846][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.353872][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.364514][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.386240][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.406504][ T5764] veth1_macvtap: entered promiscuous mode [ 83.415922][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.427221][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.437212][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.447774][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.460802][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.479985][ T2984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.491632][ T2984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.508104][ T5765] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.517398][ T5765] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.527297][ T5765] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.537190][ T5765] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.591979][ T2927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.612634][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.627091][ T2927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.664688][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.674553][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.685249][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.696856][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.707400][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.719077][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.730826][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.742417][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.752672][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.764115][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.774287][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.786022][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.802555][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.806719][ C1] hrtimer: interrupt took 58117 ns [ 83.861809][ T5764] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.894181][ T5764] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.907950][ T5764] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.919149][ T5764] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.139917][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.169077][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.312027][ T2984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.354889][ T2984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.404163][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.439839][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.586927][ T2984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.603482][ T2984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.861343][ T5834] netlink: 'syz.1.2': attribute type 12 has an invalid length. [ 84.896835][ T5834] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.2'. [ 84.976216][ T5084] Bluetooth: hci0: command tx timeout [ 85.055804][ T5084] Bluetooth: hci1: command tx timeout [ 85.061337][ T5084] Bluetooth: hci3: command tx timeout [ 85.068654][ T5084] Bluetooth: hci2: command tx timeout [ 85.151211][ T5840] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.7'. [ 85.392179][ T5837] netlink: 'syz.0.6': attribute type 21 has an invalid length. [ 85.482250][ T5847] netlink: 'syz.2.8': attribute type 39 has an invalid length. [ 85.629018][ T5847] hsr_slave_1 (unregistering): left promiscuous mode [ 85.914406][ T5849] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.9'. [ 86.066218][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 86.163044][ T5854] netlink: 'syz.1.11': attribute type 21 has an invalid length. [ 86.243828][ T5854] netlink: 156 bytes leftover after parsing attributes in process `syz.1.11'. [ 86.476564][ T5864] netlink: 128 bytes leftover after parsing attributes in process `syz.0.14'. [ 86.496951][ T5864] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 86.582552][ T5853] warning: `syz.1.11' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.793008][ T5867] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.055043][ T5767] Bluetooth: hci0: command tx timeout [ 87.135256][ T5767] Bluetooth: hci2: command tx timeout [ 87.136013][ T5084] Bluetooth: hci3: command tx timeout [ 87.140707][ T5767] Bluetooth: hci1: command tx timeout [ 89.468243][ T5875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16'. [ 89.491189][ T5878] Zero length message leads to an empty skb [ 89.502556][ T5879] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.18'. [ 90.020706][ T5888] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.20'. [ 90.162503][ T5893] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.22'. [ 90.269114][ T5894] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 90.311717][ T5896] netlink: 'syz.1.23': attribute type 2 has an invalid length. [ 90.338223][ T5896] netlink: 14 bytes leftover after parsing attributes in process `syz.1.23'. [ 90.374550][ T5894] macvlan0: entered promiscuous mode [ 90.405190][ T5894] macvlan0: entered allmulticast mode [ 90.478513][ T5894] veth1_vlan: entered allmulticast mode [ 90.512029][ T5900] netlink: 'syz.3.24': attribute type 1 has an invalid length. [ 90.530584][ T5900] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.24'. [ 90.585510][ T5894] team0: Port device macvlan0 added [ 91.831670][ T5917] netlink: 'syz.2.27': attribute type 10 has an invalid length. [ 91.859799][ T5917] netlink: 144 bytes leftover after parsing attributes in process `syz.2.27'. [ 91.877722][ T5917] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 92.200710][ T5922] netlink: 'syz.1.28': attribute type 29 has an invalid length. [ 93.022867][ T5922] netlink: 'syz.1.28': attribute type 29 has an invalid length. [ 93.072097][ T5927] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 93.108927][ T5924] netlink: 'syz.1.28': attribute type 29 has an invalid length. [ 93.449048][ T5934] netlink: 'syz.2.33': attribute type 2 has an invalid length. [ 93.467919][ T5935] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.32'. [ 93.796845][ T5936] syz.2.33[5936] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.797000][ T5936] syz.2.33[5936] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.917817][ T5938] netlink: 830 bytes leftover after parsing attributes in process `syz.3.34'. [ 94.546852][ T5945] netlink: 14 bytes leftover after parsing attributes in process `syz.3.37'. [ 95.109755][ T5945] hsr_slave_0: left promiscuous mode [ 95.346320][ T5945] hsr_slave_1: left promiscuous mode [ 95.628038][ T5955] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.39'. [ 95.774954][ T5957] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.42'. [ 95.803233][ T5957] netlink: 'syz.0.42': attribute type 4 has an invalid length. [ 95.830211][ T5957] netlink: 152 bytes leftover after parsing attributes in process `syz.0.42'. [ 95.847746][ T5959] netlink: 'syz.3.43': attribute type 9 has an invalid length. [ 95.884824][ T5959] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.43'. [ 95.964035][ T27] cfg80211: failed to load regulatory.db [ 96.051372][ T5962] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.45'. [ 96.052486][ T5957] .`: renamed from bond0 (while UP) [ 96.242564][ T5963] netlink: 'syz.3.43': attribute type 9 has an invalid length. [ 96.251332][ T5957] syz.0.42 (5957) used greatest stack depth: 19816 bytes left [ 96.299804][ T5963] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.43'. [ 96.368295][ T5968] netlink: 'syz.2.46': attribute type 10 has an invalid length. [ 96.379140][ T5968] netlink: 2 bytes leftover after parsing attributes in process `syz.2.46'. [ 96.402652][ T5968] bond0: entered promiscuous mode [ 96.415706][ T5968] bond_slave_0: entered promiscuous mode [ 96.423374][ T5968] bond_slave_1: entered promiscuous mode [ 96.431541][ T5971] netlink: 60 bytes leftover after parsing attributes in process `syz.2.46'. [ 96.442749][ T5968] bridge0: port 3(bond0) entered blocking state [ 96.454448][ T5968] bridge0: port 3(bond0) entered disabled state [ 96.462764][ T5968] bond0: entered allmulticast mode [ 96.470753][ T5968] bond_slave_0: entered allmulticast mode [ 96.477628][ T5968] bond_slave_1: entered allmulticast mode [ 96.497661][ T5968] bridge0: port 3(bond0) entered blocking state [ 96.504397][ T5968] bridge0: port 3(bond0) entered forwarding state [ 96.568943][ T5971] netlink: 60 bytes leftover after parsing attributes in process `syz.2.46'. [ 96.583838][ T5970] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 97.321173][ T5985] netlink: 830 bytes leftover after parsing attributes in process `syz.2.52'. [ 97.672258][ T5995] netlink: 'syz.1.57': attribute type 4 has an invalid length. [ 97.806137][ T5995] .`: renamed from bond0 (while UP) [ 97.842081][ T5997] netlink: 'syz.0.58': attribute type 1 has an invalid length. [ 98.132321][ T6004] netlink: 'syz.2.59': attribute type 9 has an invalid length. [ 98.243527][ T6008] netlink: 'syz.2.59': attribute type 9 has an invalid length. [ 98.883632][ T6012] netlink: 'syz.3.63': attribute type 2 has an invalid length. [ 99.549670][ T6028] netlink: 'syz.3.66': attribute type 29 has an invalid length. [ 100.245367][ T6031] .`: entered promiscuous mode [ 100.250397][ T6031] bond_slave_0: entered promiscuous mode [ 100.265429][ T6031] bond_slave_1: entered promiscuous mode [ 100.280932][ T6031] 8021q: adding VLAN 0 to HW filter on device .` [ 100.311458][ T6031] bridge0: port 3(.`) entered blocking state [ 100.330662][ T6031] bridge0: port 3(.`) entered disabled state [ 100.356044][ T6031] .`: entered allmulticast mode [ 100.371154][ T6031] bond_slave_0: entered allmulticast mode [ 100.383532][ T6031] bond_slave_1: entered allmulticast mode [ 100.417361][ T6031] bridge0: port 3(.`) entered blocking state [ 100.424114][ T6031] bridge0: port 3(.`) entered forwarding state [ 100.655531][ T6038] .`: renamed from bond0 (while UP) [ 100.715957][ T6038] bridge0: port 3(.`) entered disabled state [ 100.812991][ T6038] syz.2.70 (6038) used greatest stack depth: 19048 bytes left [ 101.024465][ T6046] __nla_validate_parse: 16 callbacks suppressed [ 101.041714][ T6046] netlink: 14 bytes leftover after parsing attributes in process `syz.0.71'. [ 101.070366][ T6046] hsr_slave_0: left promiscuous mode [ 101.097165][ T6046] hsr_slave_1: left promiscuous mode [ 101.289997][ T6048] validate_nla: 4 callbacks suppressed [ 101.290066][ T6048] netlink: 'syz.3.72': attribute type 10 has an invalid length. [ 101.332097][ T6048] netlink: 144 bytes leftover after parsing attributes in process `syz.3.72'. [ 101.374422][ T6048] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 101.576940][ T6053] netlink: 'syz.0.74': attribute type 9 has an invalid length. [ 101.584950][ T6053] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.74'. [ 101.690512][ T6053] netlink: 'syz.0.74': attribute type 9 has an invalid length. [ 101.698699][ T6053] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.74'. [ 101.986311][ T6056] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.84'. [ 102.013123][ T6058] netlink: 'syz.3.75': attribute type 39 has an invalid length. [ 102.100369][ T6060] netlink: 209560 bytes leftover after parsing attributes in process `syz.1.76'. [ 105.654812][ T6069] netlink: 'syz.2.81': attribute type 21 has an invalid length. [ 105.681773][ T6068] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.88'. [ 105.689670][ T6069] netlink: 156 bytes leftover after parsing attributes in process `syz.2.81'. [ 106.603635][ T6069] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 106.698061][ T6080] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.93'. [ 106.843604][ T6082] netlink: 'syz.1.83': attribute type 10 has an invalid length. [ 106.864053][ T6082] netlink: 2 bytes leftover after parsing attributes in process `syz.1.83'. [ 106.897699][ T6082] .`: entered promiscuous mode [ 106.906836][ T6089] netlink: 60 bytes leftover after parsing attributes in process `syz.1.83'. [ 106.915045][ T6082] bond_slave_0: entered promiscuous mode [ 106.922399][ T6082] bond_slave_1: entered promiscuous mode [ 106.973548][ T6082] 8021q: adding VLAN 0 to HW filter on device .` [ 106.996354][ T6082] bridge0: port 3(.`) entered blocking state [ 107.012536][ T6082] bridge0: port 3(.`) entered disabled state [ 107.047433][ T6082] .`: entered allmulticast mode [ 107.063167][ T6082] bond_slave_0: entered allmulticast mode [ 107.069769][ T6082] bond_slave_1: entered allmulticast mode [ 107.123073][ T6082] bridge0: port 3(.`) entered blocking state [ 107.130256][ T6082] bridge0: port 3(.`) entered forwarding state [ 107.196281][ T6089] netlink: 60 bytes leftover after parsing attributes in process `syz.1.83'. [ 107.238828][ T6086] netlink: 'syz.0.86': attribute type 10 has an invalid length. [ 107.254369][ T6086] netlink: 144 bytes leftover after parsing attributes in process `syz.0.86'. [ 107.308150][ T6086] .`: left allmulticast mode [ 107.322447][ T6086] bond_slave_0: left allmulticast mode [ 107.331666][ T6086] bond_slave_1: left allmulticast mode [ 107.344971][ T6086] bridge0: port 3(.`) entered disabled state [ 107.368221][ T6086] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 107.560290][ T6102] netlink: 'syz.1.89': attribute type 39 has an invalid length. [ 110.703026][ T6102] hsr_slave_1 (unregistering): left promiscuous mode [ 110.865159][ T6115] syz.3.96 uses obsolete (PF_INET,SOCK_PACKET) [ 110.975548][ T6119] netlink: 14 bytes leftover after parsing attributes in process `syz.3.96'. [ 111.027423][ T6117] netlink: 'syz.0.97': attribute type 21 has an invalid length. [ 111.058826][ T6117] netlink: 156 bytes leftover after parsing attributes in process `syz.0.97'. [ 112.173281][ T6117] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 112.541903][ T6141] netlink: 14 bytes leftover after parsing attributes in process `syz.2.103'. [ 112.767731][ T6141] .` (unregistering): left allmulticast mode [ 112.820712][ T6141] bond_slave_0: left allmulticast mode [ 112.846195][ T6141] bond_slave_1: left allmulticast mode [ 112.855085][ T6141] bridge0: port 3(.`) entered disabled state [ 113.117313][ T6141] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.134051][ T6141] bond_slave_0: left promiscuous mode [ 113.206883][ T6141] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.223180][ T6141] bond_slave_1: left promiscuous mode [ 113.242278][ T6141] .` (unregistering): Released all slaves [ 113.256415][ T6149] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.103'. [ 113.306036][ T6141] syz.2.103 (6141) used greatest stack depth: 18952 bytes left [ 113.317952][ T6150] netlink: 'syz.2.103': attribute type 2 has an invalid length. [ 113.336420][ T6150] netlink: 132 bytes leftover after parsing attributes in process `syz.2.103'. [ 114.700391][ T6194] netlink: 14 bytes leftover after parsing attributes in process `syz.1.120'. [ 114.762230][ T6194] bridge0: port 3(.`) entered disabled state [ 114.803818][ T6194] .` (unregistering): left allmulticast mode [ 114.810191][ T6194] bond_slave_0: left allmulticast mode [ 114.816312][ T6194] bond_slave_1: left allmulticast mode [ 114.823052][ T6194] bridge0: port 3(.`) entered disabled state [ 114.847146][ T6194] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.861226][ T6194] bond_slave_0: left promiscuous mode [ 114.880675][ T6194] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.890511][ T6194] bond_slave_1: left promiscuous mode [ 114.902196][ T6194] .` (unregistering): Released all slaves [ 114.914537][ T6197] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.120'. [ 115.148832][ T6204] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 115.407275][ T6209] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 115.745029][ T6213] netlink: 'syz.3.125': attribute type 10 has an invalid length. [ 115.808741][ T6213] netlink: 2 bytes leftover after parsing attributes in process `syz.3.125'. [ 116.240913][ T6227] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.130'. [ 116.502344][ T6233] FAULT_INJECTION: forcing a failure. [ 116.502344][ T6233] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 116.524841][ T6233] CPU: 0 PID: 6233 Comm: syz.2.133 Not tainted syzkaller #0 [ 116.532193][ T6233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 116.542307][ T6233] Call Trace: [ 116.545639][ T6233] [ 116.548601][ T6233] dump_stack_lvl+0x18c/0x250 [ 116.553346][ T6233] ? show_regs_print_info+0x20/0x20 [ 116.558599][ T6233] ? load_image+0x420/0x420 [ 116.563138][ T6233] ? __lock_acquire+0x7d40/0x7d40 [ 116.568207][ T6233] should_fail_ex+0x39d/0x4d0 [ 116.572927][ T6233] prepare_alloc_pages+0x1e2/0x5f0 [ 116.578067][ T6233] __alloc_pages+0x134/0x460 [ 116.582682][ T6233] ? zone_statistics+0x170/0x170 [ 116.587654][ T6233] ? alloc_pages+0x4dc/0x740 [ 116.592271][ T6233] ? do_raw_spin_unlock+0x121/0x230 [ 116.597501][ T6233] __get_free_pages+0xc/0x30 [ 116.602113][ T6233] kasan_populate_vmalloc_pte+0x35/0x100 [ 116.607790][ T6233] __apply_to_page_range+0x860/0xdd0 [ 116.613121][ T6233] ? kasan_populate_vmalloc+0x70/0x70 [ 116.618536][ T6233] ? apply_to_page_range+0x50/0x50 [ 116.623686][ T6233] ? do_raw_spin_unlock+0x121/0x230 [ 116.628916][ T6233] alloc_vmap_area+0x1d0c/0x1e30 [ 116.633921][ T6233] ? vm_map_ram+0xcb0/0xcb0 [ 116.638456][ T6233] ? rcu_is_watching+0x15/0xb0 [ 116.643249][ T6233] __get_vm_area_node+0x162/0x370 [ 116.648306][ T6233] ? map_create+0x877/0x12f0 [ 116.652922][ T6233] __vmalloc_node_range+0x36e/0x1330 [ 116.658239][ T6233] ? array_map_alloc+0x280/0x6f0 [ 116.663328][ T6233] ? end_current_label_crit_section+0x170/0x170 [ 116.669612][ T6233] ? free_vm_area+0x50/0x50 [ 116.674150][ T6233] ? apparmor_capable+0x137/0x1a0 [ 116.679206][ T6233] ? bpf_lsm_capable+0x9/0x10 [ 116.683913][ T6233] bpf_map_area_alloc+0xf1/0x110 [ 116.688881][ T6233] ? array_map_alloc+0x280/0x6f0 [ 116.693844][ T6233] array_map_alloc+0x280/0x6f0 [ 116.698642][ T6233] ? bpf_map_meta_alloc+0x4d1/0x740 [ 116.703874][ T6233] array_of_map_alloc+0x55/0xc0 [ 116.708758][ T6233] map_create+0x877/0x12f0 [ 116.713201][ T6233] ? bpf_lsm_bpf+0x9/0x10 [ 116.717575][ T6233] __sys_bpf+0x651/0x890 [ 116.721852][ T6233] ? bpf_link_show_fdinfo+0x390/0x390 [ 116.727266][ T6233] ? lock_chain_count+0x20/0x20 [ 116.732151][ T6233] __x64_sys_bpf+0x7c/0x90 [ 116.736605][ T6233] do_syscall_64+0x55/0xa0 [ 116.741044][ T6233] ? clear_bhb_loop+0x40/0x90 [ 116.745763][ T6233] ? clear_bhb_loop+0x40/0x90 [ 116.750471][ T6233] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.756458][ T6233] RIP: 0033:0x7fdb6b39cdd9 [ 116.760913][ T6233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.780564][ T6233] RSP: 002b:00007fdb6c27f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 116.789017][ T6233] RAX: ffffffffffffffda RBX: 00007fdb6b616090 RCX: 00007fdb6b39cdd9 [ 116.797128][ T6233] RDX: 0000000000000050 RSI: 0000200000000740 RDI: 0000000000000000 [ 116.805135][ T6233] RBP: 00007fdb6c27f090 R08: 0000000000000000 R09: 0000000000000000 [ 116.813139][ T6233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 116.821136][ T6233] R13: 00007fdb6b616128 R14: 00007fdb6b616090 R15: 00007ffd69f2d2f8 [ 116.829152][ T6233] [ 117.145510][ T6239] netlink: 'syz.0.137': attribute type 2 has an invalid length. [ 117.153247][ T6239] netlink: 'syz.0.137': attribute type 4 has an invalid length. [ 117.185033][ T6239] netlink: 132 bytes leftover after parsing attributes in process `syz.0.137'. [ 117.205644][ T6237] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 117.497359][ T6252] syzkaller0: entered promiscuous mode [ 117.502894][ T6252] syzkaller0: entered allmulticast mode [ 118.502092][ T6268] netlink: 'syz.3.144': attribute type 10 has an invalid length. [ 118.590855][ T6268] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.640620][ T6268] bond0: (slave team0): Enslaving as an active interface with an up link [ 118.696125][ T6273] sock: sock_timestamping_bind_phc: sock not bind to device [ 118.911535][ T6283] FAULT_INJECTION: forcing a failure. [ 118.911535][ T6283] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 118.944210][ T6283] CPU: 0 PID: 6283 Comm: syz.2.148 Not tainted syzkaller #0 [ 118.951573][ T6283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 118.961653][ T6283] Call Trace: [ 118.964957][ T6283] [ 118.967913][ T6283] dump_stack_lvl+0x18c/0x250 [ 118.972622][ T6283] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 118.978810][ T6283] ? show_regs_print_info+0x20/0x20 [ 118.984040][ T6283] ? load_image+0x420/0x420 [ 118.988585][ T6283] should_fail_ex+0x39d/0x4d0 [ 118.993309][ T6283] _copy_from_user+0x2f/0xe0 [ 118.997988][ T6283] btf_new_fd+0x366/0x9f0 [ 119.002355][ T6283] ? bpf_btf_show_fdinfo+0x80/0x80 [ 119.007489][ T6283] ? capable+0x88/0xe0 [ 119.011566][ T6283] __sys_bpf+0x670/0x890 [ 119.015817][ T6283] ? bpf_link_show_fdinfo+0x390/0x390 [ 119.021200][ T6283] ? lock_chain_count+0x20/0x20 [ 119.026057][ T6283] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 119.032042][ T6283] __x64_sys_bpf+0x7c/0x90 [ 119.036461][ T6283] do_syscall_64+0x55/0xa0 [ 119.040874][ T6283] ? clear_bhb_loop+0x40/0x90 [ 119.045586][ T6283] ? clear_bhb_loop+0x40/0x90 [ 119.050288][ T6283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 119.056178][ T6283] RIP: 0033:0x7fdb6b39cdd9 [ 119.060591][ T6283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.080212][ T6283] RSP: 002b:00007fdb6c2a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 119.088628][ T6283] RAX: ffffffffffffffda RBX: 00007fdb6b615fa0 RCX: 00007fdb6b39cdd9 [ 119.096595][ T6283] RDX: 0000000000000028 RSI: 0000200000000140 RDI: 0000000000000012 [ 119.104562][ T6283] RBP: 00007fdb6c2a0090 R08: 0000000000000000 R09: 0000000000000000 [ 119.112533][ T6283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.120504][ T6283] R13: 00007fdb6b616038 R14: 00007fdb6b615fa0 R15: 00007ffd69f2d2f8 [ 119.128489][ T6283] [ 119.671168][ T6290] netlink: 'syz.2.153': attribute type 6 has an invalid length. [ 119.699166][ T6290] netlink: 164 bytes leftover after parsing attributes in process `syz.2.153'. [ 119.732499][ T6295] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.152'. [ 119.926195][ T6301] netlink: 21 bytes leftover after parsing attributes in process `syz.2.153'. [ 119.939395][ T6301] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 120.191286][ T6297] netlink: 14546 bytes leftover after parsing attributes in process `syz.2.153'. [ 120.472389][ T6318] netlink: 'syz.0.159': attribute type 29 has an invalid length. [ 120.510155][ T6318] netlink: 'syz.0.159': attribute type 29 has an invalid length. [ 120.531035][ T6321] netlink: 'syz.0.159': attribute type 29 has an invalid length. [ 120.574761][ T6318] netlink: 'syz.0.159': attribute type 29 has an invalid length. [ 120.839567][ T6327] netlink: 'syz.3.161': attribute type 10 has an invalid length. [ 120.880659][ T6327] netlink: 40 bytes leftover after parsing attributes in process `syz.3.161'. [ 122.943474][ T6341] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.165'. [ 123.782227][ T6347] netlink: 'syz.1.168': attribute type 6 has an invalid length. [ 123.793101][ T6347] netlink: 164 bytes leftover after parsing attributes in process `syz.1.168'. [ 123.909513][ T6352] netlink: 'syz.3.170': attribute type 29 has an invalid length. [ 123.948767][ T6347] netlink: 14546 bytes leftover after parsing attributes in process `syz.1.168'. [ 123.965858][ T6353] netlink: 21 bytes leftover after parsing attributes in process `syz.1.168'. [ 123.979472][ T6352] netlink: 'syz.3.170': attribute type 29 has an invalid length. [ 123.985125][ T6353] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 123.997002][ T6354] netlink: 'syz.3.170': attribute type 29 has an invalid length. [ 124.053525][ T6352] netlink: 'syz.3.170': attribute type 29 has an invalid length. [ 124.351450][ T6362] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.172'. [ 124.413420][ T6365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.595466][ T6365] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.643863][ T6368] Dead loop on virtual device ip6_vti0, fix it urgently! [ 125.244523][ T6383] netlink: 'syz.1.179': attribute type 29 has an invalid length. [ 125.277940][ T6383] netlink: 'syz.1.179': attribute type 29 has an invalid length. [ 125.297943][ T6388] netlink: 'syz.1.179': attribute type 29 has an invalid length. [ 125.342784][ T6383] netlink: 'syz.1.179': attribute type 29 has an invalid length. [ 125.646246][ T6396] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.182'. [ 125.672771][ T6396] netlink: 'syz.2.182': attribute type 1 has an invalid length. [ 125.681068][ T6396] netlink: 132 bytes leftover after parsing attributes in process `syz.2.182'. [ 126.174475][ T6419] syzkaller0: entered promiscuous mode [ 126.532466][ T6428] sock: sock_timestamping_bind_phc: sock not bind to device [ 127.247817][ T6438] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.199'. [ 128.866221][ T6460] validate_nla: 2 callbacks suppressed [ 128.866239][ T6460] netlink: 'syz.1.205': attribute type 29 has an invalid length. [ 128.924852][ T6460] netlink: 'syz.1.205': attribute type 29 has an invalid length. [ 128.943834][ T6453] cgroup: fork rejected by pids controller in /syz2 [ 128.950283][ T6461] netlink: 'syz.1.205': attribute type 29 has an invalid length. [ 128.988587][ T6461] netlink: 'syz.1.205': attribute type 29 has an invalid length. [ 130.001276][ T6570] pim6reg1: entered promiscuous mode [ 130.024193][ T6570] pim6reg1: entered allmulticast mode [ 130.393831][ T6585] netlink: 16054 bytes leftover after parsing attributes in process `syz.0.216'. [ 130.473091][ T6585] netlink: 'syz.0.216': attribute type 10 has an invalid length. [ 130.494858][ T6585] netlink: 40 bytes leftover after parsing attributes in process `syz.0.216'. [ 130.508109][ T6585] batman_adv: batadv0: Adding interface: vlan1 [ 130.532057][ T6585] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.602381][ T6585] batman_adv: batadv0: Interface activated: vlan1 [ 130.985672][ T6594] netlink: 64 bytes leftover after parsing attributes in process `syz.1.218'. [ 131.612979][ T6602] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.221'. [ 131.890630][ T2883] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.961766][ T6608] netlink: 14 bytes leftover after parsing attributes in process `syz.0.221'. [ 132.095929][ T6608] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.136130][ T6608] bond_slave_0: left promiscuous mode [ 132.171151][ T6608] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.198114][ T6608] bond_slave_1: left promiscuous mode [ 132.257240][ T6608] .` (unregistering): Released all slaves [ 132.369345][ T5771] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 132.389838][ T2883] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.406525][ T5771] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 132.416286][ T5771] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 132.447469][ T5771] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 132.458110][ T5771] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 132.480757][ T5771] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 132.863407][ T6627] FAULT_INJECTION: forcing a failure. [ 132.863407][ T6627] name failslab, interval 1, probability 0, space 0, times 1 [ 132.879718][ T2883] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.943406][ T6627] CPU: 0 PID: 6627 Comm: syz.3.228 Not tainted syzkaller #0 [ 132.950872][ T6627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 132.960983][ T6627] Call Trace: [ 132.964463][ T6627] [ 132.967505][ T6627] dump_stack_lvl+0x18c/0x250 [ 132.972241][ T6627] ? show_regs_print_info+0x20/0x20 [ 132.977510][ T6627] ? load_image+0x420/0x420 [ 132.982135][ T6627] ? __might_sleep+0xe0/0xe0 [ 132.986772][ T6627] ? __lock_acquire+0x7d40/0x7d40 [ 132.991842][ T6627] should_fail_ex+0x39d/0x4d0 [ 132.996573][ T6627] should_failslab+0x9/0x20 [ 133.001135][ T6627] slab_pre_alloc_hook+0x59/0x310 [ 133.006260][ T6627] ? __lock_acquire+0x7d40/0x7d40 [ 133.011443][ T6627] kmem_cache_alloc_node+0x60/0x320 [ 133.016747][ T6627] ? __alloc_skb+0x103/0x2c0 [ 133.021412][ T6627] __alloc_skb+0x103/0x2c0 [ 133.025887][ T6627] netlink_sendmsg+0x66a/0xbf0 [ 133.030758][ T6627] ? netlink_getsockopt+0x590/0x590 [ 133.036002][ T6627] ? aa_sock_msg_perm+0x94/0x150 [ 133.041147][ T6627] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 133.046559][ T6627] ? security_socket_sendmsg+0x80/0xa0 [ 133.052080][ T6627] ? netlink_getsockopt+0x590/0x590 [ 133.057346][ T6627] ____sys_sendmsg+0x5ba/0x960 [ 133.062163][ T6627] ? __asan_memset+0x22/0x40 [ 133.066792][ T6627] ? __sys_sendmsg_sock+0x30/0x30 [ 133.071852][ T6627] ? __import_iovec+0x5f2/0x850 [ 133.076745][ T6627] ? import_iovec+0x73/0xa0 [ 133.081298][ T6627] ___sys_sendmsg+0x2a6/0x360 [ 133.086007][ T6627] ? get_pid_task+0x20/0x1e0 [ 133.090644][ T6627] ? __sys_sendmsg+0x2a0/0x2a0 [ 133.095455][ T6627] ? __lock_acquire+0x7d40/0x7d40 [ 133.100684][ T6627] __se_sys_sendmsg+0x1c2/0x2b0 [ 133.105597][ T6627] ? __x64_sys_sendmsg+0x80/0x80 [ 133.110692][ T6627] ? lockdep_hardirqs_on+0x98/0x150 [ 133.116112][ T6627] do_syscall_64+0x55/0xa0 [ 133.122906][ T6627] ? clear_bhb_loop+0x40/0x90 [ 133.127623][ T6627] ? clear_bhb_loop+0x40/0x90 [ 133.132319][ T6627] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 133.138240][ T6627] RIP: 0033:0x7fc67b79cdd9 [ 133.143019][ T6627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.162662][ T6627] RSP: 002b:00007fc67c6b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.171104][ T6627] RAX: ffffffffffffffda RBX: 00007fc67ba15fa0 RCX: 00007fc67b79cdd9 [ 133.179087][ T6627] RDX: 0000000000080054 RSI: 00002000000000c0 RDI: 0000000000000005 [ 133.187057][ T6627] RBP: 00007fc67c6b3090 R08: 0000000000000000 R09: 0000000000000000 [ 133.195041][ T6627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.203291][ T6627] R13: 00007fc67ba16038 R14: 00007fc67ba15fa0 R15: 00007ffd058ff308 [ 133.211304][ T6627] [ 133.377723][ T2883] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.542472][ T6636] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.231'. [ 133.574861][ T6636] tc_dump_action: action bad kind [ 133.744378][ T6616] chnl_net:caif_netlink_parms(): no params data found [ 133.859991][ T6643] netlink: 'syz.0.233': attribute type 10 has an invalid length. [ 133.909747][ T6643] netlink: 152 bytes leftover after parsing attributes in process `syz.0.233'. [ 134.574793][ T5767] Bluetooth: hci3: command tx timeout [ 134.888016][ T5767] Bluetooth: hci1: ISO packet for unknown connection handle 3075 [ 134.952361][ T6616] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.996903][ T6616] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.004486][ T6616] bridge_slave_0: entered allmulticast mode [ 135.027071][ T6616] bridge_slave_0: entered promiscuous mode [ 135.046920][ T6616] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.054174][ T6616] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.115011][ T6616] bridge_slave_1: entered allmulticast mode [ 135.154840][ T6616] bridge_slave_1: entered promiscuous mode [ 135.161643][ T6676] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.238'. [ 135.351194][ T6616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.502659][ T6616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.525628][ T6676] netlink: 14 bytes leftover after parsing attributes in process `syz.3.238'. [ 136.160752][ T6676] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.213170][ T6676] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.242393][ T6692] netlink: 'syz.0.244': attribute type 3 has an invalid length. [ 136.265210][ T6692] netlink: 'syz.0.244': attribute type 1 has an invalid length. [ 136.295944][ T6676] bond0 (unregistering): (slave team0): Releasing backup interface [ 136.328593][ T6676] bond0 (unregistering): Released all slaves [ 136.655014][ T5767] Bluetooth: hci3: command tx timeout [ 136.782388][ T6616] team0: Port device team_slave_0 added [ 136.813065][ T6616] team0: Port device team_slave_1 added [ 136.906727][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.913626][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.076190][ T6616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.098867][ T6616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.170116][ T6616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.258960][ T6616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.302566][ T6616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.429244][ T6616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.834079][ T6733] FAULT_INJECTION: forcing a failure. [ 137.834079][ T6733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.877651][ T6733] CPU: 1 PID: 6733 Comm: syz.3.255 Not tainted syzkaller #0 [ 137.885087][ T6733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 137.895251][ T6733] Call Trace: [ 137.898558][ T6733] [ 137.901501][ T6733] dump_stack_lvl+0x18c/0x250 [ 137.906200][ T6733] ? show_regs_print_info+0x20/0x20 [ 137.911413][ T6733] ? load_image+0x420/0x420 [ 137.915946][ T6733] ? __might_fault+0xaa/0x120 [ 137.920641][ T6733] ? __lock_acquire+0x7d40/0x7d40 [ 137.925674][ T6733] should_fail_ex+0x39d/0x4d0 [ 137.930359][ T6733] _copy_from_iter+0x1d9/0x12e0 [ 137.935225][ T6733] ? rep_movs_alternative+0x4a/0x90 [ 137.940448][ T6733] ? _copy_from_iter+0x24e/0x12e0 [ 137.945573][ T6733] ? __virt_addr_valid+0x18c/0x540 [ 137.950717][ T6733] ? __lock_acquire+0x7d40/0x7d40 [ 137.955761][ T6733] ? copyout_mc+0x70/0x70 [ 137.960103][ T6733] ? copyout_mc+0x70/0x70 [ 137.964438][ T6733] ? __virt_addr_valid+0x18c/0x540 [ 137.969587][ T6733] ? page_copy_sane+0x16a/0x270 [ 137.974462][ T6733] copy_page_from_iter+0x7b/0x100 [ 137.979518][ T6733] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 137.985341][ T6733] tun_get_user+0x15db/0x3ca0 [ 137.990043][ T6733] ? aa_file_perm+0x11b/0xee0 [ 137.994745][ T6733] ? rcu_read_unlock+0xa0/0xa0 [ 137.999519][ T6733] ? tun_get+0x1c/0x2e0 [ 138.003670][ T6733] ? __lock_acquire+0x7d40/0x7d40 [ 138.008698][ T6733] ? tun_get+0x1c/0x2e0 [ 138.012904][ T6733] tun_chr_write_iter+0x119/0x200 [ 138.017963][ T6733] vfs_write+0x46c/0x990 [ 138.022221][ T6733] ? file_end_write+0x250/0x250 [ 138.027264][ T6733] ? __fget_files+0x43d/0x4b0 [ 138.032052][ T6733] ? __fdget_pos+0x1d8/0x330 [ 138.036647][ T6733] ? ksys_write+0x75/0x260 [ 138.041070][ T6733] ksys_write+0x150/0x260 [ 138.045421][ T6733] ? __ia32_sys_read+0x90/0x90 [ 138.050206][ T6733] ? lockdep_hardirqs_on+0x98/0x150 [ 138.055437][ T6733] do_syscall_64+0x55/0xa0 [ 138.059867][ T6733] ? clear_bhb_loop+0x40/0x90 [ 138.064559][ T6733] ? clear_bhb_loop+0x40/0x90 [ 138.069259][ T6733] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 138.075270][ T6733] RIP: 0033:0x7fc67b79cdd9 [ 138.079694][ T6733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.099334][ T6733] RSP: 002b:00007fc67c6b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 138.107758][ T6733] RAX: ffffffffffffffda RBX: 00007fc67ba15fa0 RCX: 00007fc67b79cdd9 [ 138.115830][ T6733] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 00000000000000c8 [ 138.123806][ T6733] RBP: 00007fc67c6b3090 R08: 0000000000000000 R09: 0000000000000000 [ 138.131879][ T6733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 138.139853][ T6733] R13: 00007fc67ba16038 R14: 00007fc67ba15fa0 R15: 00007ffd058ff308 [ 138.147839][ T6733] [ 138.243322][ T6734] netlink: 'syz.0.254': attribute type 12 has an invalid length. [ 138.263304][ T6734] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.254'. [ 138.281664][ T6616] hsr_slave_0: entered promiscuous mode [ 138.291332][ T6616] hsr_slave_1: entered promiscuous mode [ 138.449507][ T6746] FAULT_INJECTION: forcing a failure. [ 138.449507][ T6746] name failslab, interval 1, probability 0, space 0, times 0 [ 138.485839][ T6746] CPU: 0 PID: 6746 Comm: syz.3.257 Not tainted syzkaller #0 [ 138.486794][ T6731] syzkaller0: entered promiscuous mode [ 138.493192][ T6746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 138.508840][ T6746] Call Trace: [ 138.511067][ T6731] syzkaller0: entered allmulticast mode [ 138.512205][ T6746] [ 138.512246][ T6746] dump_stack_lvl+0x18c/0x250 [ 138.525550][ T6746] ? show_regs_print_info+0x20/0x20 [ 138.530792][ T6746] ? load_image+0x420/0x420 [ 138.535338][ T6746] ? __might_sleep+0xe0/0xe0 [ 138.539965][ T6746] ? __lock_acquire+0x7d40/0x7d40 [ 138.545023][ T6746] should_fail_ex+0x39d/0x4d0 [ 138.549751][ T6746] should_failslab+0x9/0x20 [ 138.554313][ T6746] slab_pre_alloc_hook+0x59/0x310 [ 138.560027][ T6746] kmem_cache_alloc+0x5a/0x2d0 [ 138.564822][ T6746] ? skb_clone+0x1eb/0x370 [ 138.569393][ T6746] skb_clone+0x1eb/0x370 [ 138.573679][ T6746] ? pfkey_broadcast_one+0x7d/0x340 [ 138.578932][ T6746] pfkey_broadcast_one+0x9b/0x340 [ 138.584011][ T6746] ? pfkey_broadcast+0x39c/0x3e0 [ 138.589001][ T6746] pfkey_broadcast+0x3a9/0x3e0 [ 138.593810][ T6746] ? pfkey_broadcast+0x48/0x3e0 [ 138.598699][ T6746] pfkey_sendmsg+0xe92/0x10e0 [ 138.603426][ T6746] ? pfkey_release+0x320/0x320 [ 138.608268][ T6746] ? __lock_acquire+0x1347/0x7d40 [ 138.613347][ T6746] ? aa_sock_msg_perm+0x94/0x150 [ 138.618324][ T6746] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 138.623797][ T6746] ? security_socket_sendmsg+0x80/0xa0 [ 138.629329][ T6746] ? pfkey_release+0x320/0x320 [ 138.634176][ T6746] ____sys_sendmsg+0x5ba/0x960 [ 138.639071][ T6746] ? __asan_memset+0x22/0x40 [ 138.643806][ T6746] ? __sys_sendmsg_sock+0x30/0x30 [ 138.648864][ T6746] ? __import_iovec+0x5f2/0x850 [ 138.653846][ T6746] ? import_iovec+0x73/0xa0 [ 138.658390][ T6746] ___sys_sendmsg+0x2a6/0x360 [ 138.663109][ T6746] ? __sys_sendmsg+0x2a0/0x2a0 [ 138.667956][ T6746] ? __schedule+0x155b/0x45a0 [ 138.672702][ T6746] __se_sys_sendmsg+0x1c2/0x2b0 [ 138.677600][ T6746] ? __x64_sys_sendmsg+0x80/0x80 [ 138.682593][ T6746] ? lockdep_hardirqs_on+0x98/0x150 [ 138.687847][ T6746] do_syscall_64+0x55/0xa0 [ 138.692294][ T6746] ? clear_bhb_loop+0x40/0x90 [ 138.697106][ T6746] ? clear_bhb_loop+0x40/0x90 [ 138.701818][ T6746] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 138.707740][ T6746] RIP: 0033:0x7fc67b79cdd9 [ 138.712182][ T6746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.731816][ T6746] RSP: 002b:00007fc67c6b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.740354][ T6746] RAX: ffffffffffffffda RBX: 00007fc67ba15fa0 RCX: 00007fc67b79cdd9 [ 138.748482][ T6746] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000003 [ 138.756486][ T6746] RBP: 00007fc67c6b3090 R08: 0000000000000000 R09: 0000000000000000 [ 138.764482][ T6746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.772575][ T6746] R13: 00007fc67ba16038 R14: 00007fc67ba15fa0 R15: 00007ffd058ff308 [ 138.780574][ T6746] [ 138.785008][ T5767] Bluetooth: hci3: command tx timeout [ 139.021753][ T6760] netlink: 'syz.1.260': attribute type 21 has an invalid length. [ 139.042440][ T6760] netlink: 168 bytes leftover after parsing attributes in process `syz.1.260'. [ 139.071720][ T6757] netlink: 184 bytes leftover after parsing attributes in process `syz.1.260'. [ 140.819024][ T5767] Bluetooth: hci3: command tx timeout [ 143.833169][ T6757] netlink: 'syz.1.260': attribute type 10 has an invalid length. [ 143.841164][ T6757] netlink: 40 bytes leftover after parsing attributes in process `syz.1.260'. [ 143.850448][ T6757] batadv0: entered promiscuous mode [ 143.855998][ T6757] batadv0: entered allmulticast mode [ 143.861843][ T6757] bridge0: port 3(batadv0) entered blocking state [ 143.868682][ T6757] bridge0: port 3(batadv0) entered disabled state [ 143.877822][ T6757] bridge0: port 3(batadv0) entered blocking state [ 143.884332][ T6757] bridge0: port 3(batadv0) entered forwarding state [ 143.901938][ T2883] hsr_slave_0: left promiscuous mode [ 143.914416][ T2883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.944102][ T2883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.955578][ T2883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.963048][ T2883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.976322][ T2883] bridge_slave_1: left allmulticast mode [ 143.982112][ T2883] bridge_slave_1: left promiscuous mode [ 143.993634][ T2883] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.030763][ T2883] bridge_slave_0: left allmulticast mode [ 144.037416][ T2883] bridge_slave_0: left promiscuous mode [ 144.043967][ T2883] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.045674][ T2927] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 144.060657][ T2927] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 144.096753][ T2883] veth1_macvtap: left promiscuous mode [ 144.104134][ T2883] veth0_macvtap: left promiscuous mode [ 144.121163][ T2883] veth1_vlan: left promiscuous mode [ 144.137479][ T2883] veth0_vlan: left promiscuous mode [ 144.559933][ T6771] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.265'. [ 145.011239][ T2883] team0 (unregistering): Port device team_slave_1 removed [ 145.081184][ T2883] team0 (unregistering): Port device team_slave_0 removed [ 145.542850][ T6773] netlink: 'syz.0.266': attribute type 19 has an invalid length. [ 145.551103][ T6773] netlink: 14524 bytes leftover after parsing attributes in process `syz.0.266'. [ 145.716946][ T6781] syzkaller0: entered promiscuous mode [ 145.722490][ T6781] syzkaller0: entered allmulticast mode [ 146.102175][ T6798] netlink: 'syz.3.272': attribute type 3 has an invalid length. [ 146.112399][ T6798] netlink: 'syz.3.272': attribute type 1 has an invalid length. [ 146.121106][ T6798] netlink: 198800 bytes leftover after parsing attributes in process `syz.3.272'. [ 148.110284][ T6801] veth1_macvtap: left promiscuous mode [ 148.457754][ T6815] netlink: 60 bytes leftover after parsing attributes in process `syz.1.275'. [ 148.607450][ T6808] netlink: 'syz.0.274': attribute type 28 has an invalid length. [ 148.638303][ T6815] netlink: 60 bytes leftover after parsing attributes in process `syz.1.275'. [ 148.675760][ T6818] netlink: 60 bytes leftover after parsing attributes in process `syz.1.275'. [ 148.888974][ T6820] netlink: 60 bytes leftover after parsing attributes in process `syz.1.275'. [ 148.927380][ T6811] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.275'. [ 148.954973][ T6811] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.275'. [ 148.983110][ T6811] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.275'. [ 149.257990][ T6830] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 149.738354][ T6832] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.276'. [ 149.825153][ T6616] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 149.903338][ T6616] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 149.955741][ T6616] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 150.000492][ T6616] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 150.270358][ T6616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.301075][ T6856] netlink: 'syz.3.283': attribute type 3 has an invalid length. [ 150.326168][ T6856] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.283'. [ 150.426498][ T6616] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.453636][ T2883] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.460927][ T2883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.566546][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.574530][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.520020][ T6616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.692803][ T6616] veth0_vlan: entered promiscuous mode [ 151.753315][ T6616] veth1_vlan: entered promiscuous mode [ 151.818814][ T6616] veth0_macvtap: entered promiscuous mode [ 151.856638][ T6616] veth1_macvtap: entered promiscuous mode [ 151.964860][ T6616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.995337][ T6616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.032401][ T6616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.085671][ T6616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.104692][ T6616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.127087][ T6616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.141853][ T6616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.179288][ T6616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.194276][ T6616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.226940][ T6616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.237924][ T6616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.249460][ T6616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.260610][ T6616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.272543][ T6616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.314239][ T6616] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.344036][ T6616] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.367960][ T6616] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.385561][ T6616] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.696158][ T2883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.733937][ T2883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.936683][ T2984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.007267][ T2984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.104119][ T6909] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.292'. [ 153.119372][ T6918] FAULT_INJECTION: forcing a failure. [ 153.119372][ T6918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.164873][ T6918] CPU: 0 PID: 6918 Comm: syz.1.295 Not tainted syzkaller #0 [ 153.172257][ T6918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 153.182366][ T6918] Call Trace: [ 153.185682][ T6918] [ 153.188655][ T6918] dump_stack_lvl+0x18c/0x250 [ 153.193394][ T6918] ? show_regs_print_info+0x20/0x20 [ 153.198658][ T6918] ? load_image+0x420/0x420 [ 153.203215][ T6918] ? __might_fault+0xaa/0x120 [ 153.207937][ T6918] ? __lock_acquire+0x7d40/0x7d40 [ 153.213061][ T6918] should_fail_ex+0x39d/0x4d0 [ 153.217815][ T6918] _copy_from_user+0x2f/0xe0 [ 153.222471][ T6918] mptcp_setsockopt+0x15e0/0x3390 [ 153.227567][ T6918] ? aa_sk_perm+0x83c/0x970 [ 153.232120][ T6918] ? __fget_files+0x28/0x4b0 [ 153.236757][ T6918] ? pm_nl_exit_net+0x230/0x230 [ 153.241671][ T6918] ? aa_af_perm+0x330/0x330 [ 153.246328][ T6918] ? __fget_files+0x28/0x4b0 [ 153.250971][ T6918] ? __fget_files+0x28/0x4b0 [ 153.255631][ T6918] ? sock_common_setsockopt+0x36/0xc0 [ 153.261079][ T6918] ? sock_common_recvmsg+0x190/0x190 [ 153.266439][ T6918] do_sock_setsockopt+0x175/0x1a0 [ 153.271537][ T6918] __x64_sys_setsockopt+0x182/0x200 [ 153.276809][ T6918] do_syscall_64+0x55/0xa0 [ 153.281280][ T6918] ? clear_bhb_loop+0x40/0x90 [ 153.286025][ T6918] ? clear_bhb_loop+0x40/0x90 [ 153.290770][ T6918] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 153.296721][ T6918] RIP: 0033:0x7f079bf9cdd9 [ 153.301189][ T6918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.320848][ T6918] RSP: 002b:00007f079cde2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 153.329325][ T6918] RAX: ffffffffffffffda RBX: 00007f079c215fa0 RCX: 00007f079bf9cdd9 [ 153.337351][ T6918] RDX: 0000000000000024 RSI: 0000000000000001 RDI: 0000000000000003 [ 153.345376][ T6918] RBP: 00007f079cde2090 R08: 0000000000000004 R09: 0000000000000000 [ 153.353404][ T6918] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.361428][ T6918] R13: 00007f079c216038 R14: 00007f079c215fa0 R15: 00007fff72c39888 [ 153.369512][ T6918] [ 154.638012][ T6945] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 155.147121][ T6949] netlink: 'syz.1.297': attribute type 10 has an invalid length. [ 155.165357][ T6949] netlink: 40 bytes leftover after parsing attributes in process `syz.1.297'. [ 155.186530][ T6949] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 155.193623][ T6949] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.271285][ T6949] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 156.623455][ T6942] Driver unsupported XDP return value 0 on prog (id 242) dev N/A, expect packet loss! [ 156.949694][ T6972] netlink: 'syz.3.302': attribute type 2 has an invalid length. [ 156.981059][ T6972] netlink: 'syz.3.302': attribute type 8 has an invalid length. [ 157.031228][ T6972] netlink: 132 bytes leftover after parsing attributes in process `syz.3.302'. [ 157.061311][ T6975] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 157.086672][ T6980] netlink: 60 bytes leftover after parsing attributes in process `syz.1.305'. [ 157.142015][ T6980] netlink: 60 bytes leftover after parsing attributes in process `syz.1.305'. [ 157.151822][ T6983] netlink: 60 bytes leftover after parsing attributes in process `syz.1.305'. [ 157.225694][ T6980] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 157.231726][ T6980] pim6reg1: linktype set to 773 [ 157.238413][ T6980] netlink: 60 bytes leftover after parsing attributes in process `syz.1.305'. [ 157.554366][ T6996] delete_channel: no stack [ 157.570522][ T6996] delete_channel: no stack [ 157.596137][ T6996] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.310'. [ 158.984494][ T7033] netlink: 'syz.3.324': attribute type 13 has an invalid length. [ 159.005727][ T7033] netlink: 172 bytes leftover after parsing attributes in process `syz.3.324'. [ 159.073689][ T7033] erspan0: refused to change device tx_queue_len [ 159.095118][ T7037] netlink: 'syz.2.326': attribute type 10 has an invalid length. [ 159.582026][ T7057] netlink: 'syz.3.330': attribute type 29 has an invalid length. [ 159.637625][ T7039] netlink: 'syz.1.327': attribute type 2 has an invalid length. [ 159.645684][ T7039] netlink: 'syz.1.327': attribute type 8 has an invalid length. [ 159.656244][ T7039] netlink: 132 bytes leftover after parsing attributes in process `syz.1.327'. [ 159.669780][ T7043] netlink: 'syz.1.327': attribute type 10 has an invalid length. [ 159.920916][ T7057] netlink: 'syz.3.330': attribute type 29 has an invalid length. [ 160.291830][ T7072] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.336'. [ 160.755819][ T7082] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.340'. [ 161.100508][ T7095] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.345'. [ 162.195958][ T7102] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.348'. [ 163.239713][ T7119] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.355'. [ 163.307448][ T7122] netlink: 76 bytes leftover after parsing attributes in process `syz.2.354'. [ 163.472264][ T7125] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.352'. [ 163.724251][ T7137] FAULT_INJECTION: forcing a failure. [ 163.724251][ T7137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.750320][ T7137] CPU: 0 PID: 7137 Comm: syz.2.360 Not tainted syzkaller #0 [ 163.757676][ T7137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 163.767761][ T7137] Call Trace: [ 163.771060][ T7137] [ 163.774047][ T7137] dump_stack_lvl+0x18c/0x250 [ 163.778770][ T7137] ? show_regs_print_info+0x20/0x20 [ 163.784012][ T7137] ? load_image+0x420/0x420 [ 163.788558][ T7137] ? __might_fault+0xaa/0x120 [ 163.793272][ T7137] ? __lock_acquire+0x7d40/0x7d40 [ 163.798337][ T7137] should_fail_ex+0x39d/0x4d0 [ 163.803059][ T7137] _copy_from_user+0x2f/0xe0 [ 163.807685][ T7137] bpf_obj_get_info_by_fd+0x477/0x3080 [ 163.813182][ T7137] ? verify_lock_unused+0x140/0x140 [ 163.818414][ T7137] ? bpf_map_get_fd_by_id+0x310/0x310 [ 163.823825][ T7137] ? get_pid_task+0x20/0x1e0 [ 163.826967][ T7129] syzkaller0: entered promiscuous mode [ 163.828499][ T7137] ? file_end_write+0x159/0x250 [ 163.838840][ T7137] ? __might_fault+0xaa/0x120 [ 163.843555][ T7137] ? __might_fault+0xc6/0x120 [ 163.848270][ T7137] ? __might_fault+0xaa/0x120 [ 163.852970][ T7137] ? bpf_lsm_bpf+0x9/0x10 [ 163.857334][ T7137] ? security_bpf+0x7e/0xa0 [ 163.861512][ T7129] syzkaller0: entered allmulticast mode [ 163.861851][ T7137] __sys_bpf+0x7eb/0x890 [ 163.871661][ T7137] ? bpf_link_show_fdinfo+0x390/0x390 [ 163.877084][ T7137] ? lock_chain_count+0x20/0x20 [ 163.881976][ T7137] __x64_sys_bpf+0x7c/0x90 [ 163.886422][ T7137] do_syscall_64+0x55/0xa0 [ 163.890865][ T7137] ? clear_bhb_loop+0x40/0x90 [ 163.895570][ T7137] ? clear_bhb_loop+0x40/0x90 [ 163.900296][ T7137] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 163.906220][ T7137] RIP: 0033:0x7fce89d9cdd9 [ 163.910659][ T7137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.930289][ T7137] RSP: 002b:00007fce8ad35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 163.938733][ T7137] RAX: ffffffffffffffda RBX: 00007fce8a015fa0 RCX: 00007fce89d9cdd9 [ 163.946734][ T7137] RDX: 0000000000000010 RSI: 0000200000001440 RDI: 000000000000000f [ 163.954723][ T7137] RBP: 00007fce8ad35090 R08: 0000000000000000 R09: 0000000000000000 [ 163.962721][ T7137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.970724][ T7137] R13: 00007fce8a016038 R14: 00007fce8a015fa0 R15: 00007ffe17311128 [ 163.978756][ T7137] [ 173.577266][ T49] tipc: Subscription rejected, illegal request [ 174.343852][ T7143] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.362'. [ 174.658018][ T7172] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.369'. [ 176.110167][ T7206] netlink: 'syz.3.380': attribute type 10 has an invalid length. [ 176.225215][ T12] tipc: Subscription rejected, illegal request [ 178.567259][ T7206] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.584924][ T7206] bridge_slave_1: left allmulticast mode [ 178.590695][ T7206] bridge_slave_1: left promiscuous mode [ 178.596805][ T7206] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.647523][ T7208] netlink: 'syz.1.379': attribute type 10 has an invalid length. [ 178.804556][ T7208] team0: Port device wlan1 added [ 179.009505][ T7217] netlink: 65027 bytes leftover after parsing attributes in process `syz.2.382'. [ 179.035567][ T7216] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.383'. [ 183.287814][ T7270] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.394'. [ 184.117441][ T42] tipc: Subscription rejected, illegal request [ 184.162960][ T7277] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.406'. [ 184.409078][ T7281] netlink: 65027 bytes leftover after parsing attributes in process `syz.1.398'. [ 184.417007][ T7289] netlink: 'syz.2.401': attribute type 9 has an invalid length. [ 184.426759][ T7289] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.401'. [ 185.931661][ T7317] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.411'. [ 186.038836][ T7319] delete_channel: no stack [ 186.054962][ T7319] delete_channel: no stack [ 186.298894][ T7331] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.416'. [ 186.582743][ T7337] netlink: 'syz.3.418': attribute type 10 has an invalid length. [ 186.928330][ T7351] netlink: 'syz.3.422': attribute type 10 has an invalid length. [ 186.937257][ T7351] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.422'. [ 186.943662][ T7347] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.421'. [ 186.946791][ T7351] openvswitch: netlink: Flow key attr not present in new flow. [ 187.401057][ T7363] netlink: 'syz.0.424': attribute type 10 has an invalid length. [ 187.450322][ T7363] netlink: 40 bytes leftover after parsing attributes in process `syz.0.424'. [ 187.756882][ T7372] netlink: 144 bytes leftover after parsing attributes in process `syz.0.429'. [ 187.785024][ T7371] netlink: 'syz.2.430': attribute type 25 has an invalid length. [ 187.793802][ T7371] netlink: 'syz.2.430': attribute type 29 has an invalid length. [ 188.179745][ T7382] FAULT_INJECTION: forcing a failure. [ 188.179745][ T7382] name failslab, interval 1, probability 0, space 0, times 0 [ 188.193097][ T7382] CPU: 1 PID: 7382 Comm: syz.0.433 Not tainted syzkaller #0 [ 188.200426][ T7382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 188.210485][ T7382] Call Trace: [ 188.213765][ T7382] [ 188.216725][ T7382] dump_stack_lvl+0x18c/0x250 [ 188.221413][ T7382] ? show_regs_print_info+0x20/0x20 [ 188.226613][ T7382] ? load_image+0x420/0x420 [ 188.231117][ T7382] ? __might_sleep+0xe0/0xe0 [ 188.235810][ T7382] ? __lock_acquire+0x7d40/0x7d40 [ 188.240890][ T7382] ? mark_lock+0x94/0x320 [ 188.245223][ T7382] should_fail_ex+0x39d/0x4d0 [ 188.250005][ T7382] should_failslab+0x9/0x20 [ 188.254515][ T7382] slab_pre_alloc_hook+0x59/0x310 [ 188.259553][ T7382] ? __get_vm_area_node+0x125/0x370 [ 188.264753][ T7382] __kmem_cache_alloc_node+0x53/0x250 [ 188.270135][ T7382] ? __get_vm_area_node+0x125/0x370 [ 188.275331][ T7382] kmalloc_node_trace+0x26/0xe0 [ 188.280187][ T7382] __get_vm_area_node+0x125/0x370 [ 188.285213][ T7382] __vmalloc_node_range+0x36e/0x1330 [ 188.290500][ T7382] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 188.296050][ T7382] ? mark_lock+0x94/0x320 [ 188.300378][ T7382] ? __lock_acquire+0x1347/0x7d40 [ 188.305397][ T7382] ? verify_lock_unused+0x140/0x140 [ 188.310600][ T7382] ? free_vm_area+0x50/0x50 [ 188.315100][ T7382] ? end_current_label_crit_section+0x170/0x170 [ 188.321356][ T7382] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 188.326899][ T7382] __vmalloc+0x7a/0x90 [ 188.330972][ T7382] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 188.336519][ T7382] bpf_prog_alloc_no_stats+0x47/0x440 [ 188.341891][ T7382] ? bpf_prog_alloc+0x2b/0x1a0 [ 188.346657][ T7382] bpf_prog_alloc+0x3d/0x1a0 [ 188.351252][ T7382] bpf_prog_load+0x6eb/0x1670 [ 188.355948][ T7382] ? map_freeze+0x420/0x420 [ 188.360459][ T7382] ? __might_fault+0xaa/0x120 [ 188.365131][ T7382] ? __lock_acquire+0x7d40/0x7d40 [ 188.370150][ T7382] ? file_end_write+0x159/0x250 [ 188.375000][ T7382] ? __might_fault+0xaa/0x120 [ 188.379670][ T7382] ? __might_fault+0xc6/0x120 [ 188.384337][ T7382] ? __might_fault+0xaa/0x120 [ 188.389011][ T7382] ? bpf_lsm_bpf+0x9/0x10 [ 188.393337][ T7382] ? security_bpf+0x7e/0xa0 [ 188.397837][ T7382] __sys_bpf+0x5ba/0x890 [ 188.402076][ T7382] ? bpf_link_show_fdinfo+0x390/0x390 [ 188.407449][ T7382] ? lock_chain_count+0x20/0x20 [ 188.412332][ T7382] __x64_sys_bpf+0x7c/0x90 [ 188.416745][ T7382] do_syscall_64+0x55/0xa0 [ 188.421159][ T7382] ? clear_bhb_loop+0x40/0x90 [ 188.425919][ T7382] ? clear_bhb_loop+0x40/0x90 [ 188.430595][ T7382] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.436484][ T7382] RIP: 0033:0x7f38d6b9cdd9 [ 188.440900][ T7382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.460595][ T7382] RSP: 002b:00007f38d7a6c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 188.469009][ T7382] RAX: ffffffffffffffda RBX: 00007f38d6e15fa0 RCX: 00007f38d6b9cdd9 [ 188.476975][ T7382] RDX: 0000000000000094 RSI: 00002000000010c0 RDI: 0000000000000005 [ 188.484940][ T7382] RBP: 00007f38d7a6c090 R08: 0000000000000000 R09: 0000000000000000 [ 188.492903][ T7382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.500870][ T7382] R13: 00007f38d6e16038 R14: 00007f38d6e15fa0 R15: 00007ffdf5d4b7a8 [ 188.508877][ T7382] [ 188.523838][ T7382] syz.0.433: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 188.545885][ T7382] CPU: 0 PID: 7382 Comm: syz.0.433 Not tainted syzkaller #0 [ 188.553227][ T7382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 188.563281][ T7382] Call Trace: [ 188.566561][ T7382] [ 188.569486][ T7382] dump_stack_lvl+0x18c/0x250 [ 188.574169][ T7382] ? show_regs_print_info+0x20/0x20 [ 188.579367][ T7382] ? load_image+0x420/0x420 [ 188.583901][ T7382] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 188.590313][ T7382] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 188.596808][ T7382] warn_alloc+0x246/0x340 [ 188.601138][ T7382] ? __get_vm_area_node+0x125/0x370 [ 188.606334][ T7382] ? zone_watermark_ok_safe+0x230/0x230 [ 188.611877][ T7382] ? rcu_is_watching+0x15/0xb0 [ 188.616640][ T7382] ? __get_vm_area_node+0x356/0x370 [ 188.621838][ T7382] __vmalloc_node_range+0x393/0x1330 [ 188.627118][ T7382] ? mark_lock+0x94/0x320 [ 188.631441][ T7382] ? __lock_acquire+0x1347/0x7d40 [ 188.636461][ T7382] ? verify_lock_unused+0x140/0x140 [ 188.641656][ T7382] ? free_vm_area+0x50/0x50 [ 188.646151][ T7382] ? end_current_label_crit_section+0x170/0x170 [ 188.652394][ T7382] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 188.657949][ T7382] __vmalloc+0x7a/0x90 [ 188.662019][ T7382] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 188.667560][ T7382] bpf_prog_alloc_no_stats+0x47/0x440 [ 188.672930][ T7382] ? bpf_prog_alloc+0x2b/0x1a0 [ 188.677690][ T7382] bpf_prog_alloc+0x3d/0x1a0 [ 188.682293][ T7382] bpf_prog_load+0x6eb/0x1670 [ 188.686970][ T7382] ? map_freeze+0x420/0x420 [ 188.691470][ T7382] ? __might_fault+0xaa/0x120 [ 188.696172][ T7382] ? __lock_acquire+0x7d40/0x7d40 [ 188.701221][ T7382] ? file_end_write+0x159/0x250 [ 188.706073][ T7382] ? __might_fault+0xaa/0x120 [ 188.710742][ T7382] ? __might_fault+0xc6/0x120 [ 188.715414][ T7382] ? __might_fault+0xaa/0x120 [ 188.720082][ T7382] ? bpf_lsm_bpf+0x9/0x10 [ 188.724420][ T7382] ? security_bpf+0x7e/0xa0 [ 188.728921][ T7382] __sys_bpf+0x5ba/0x890 [ 188.733159][ T7382] ? bpf_link_show_fdinfo+0x390/0x390 [ 188.738533][ T7382] ? lock_chain_count+0x20/0x20 [ 188.743381][ T7382] __x64_sys_bpf+0x7c/0x90 [ 188.747790][ T7382] do_syscall_64+0x55/0xa0 [ 188.752197][ T7382] ? clear_bhb_loop+0x40/0x90 [ 188.756867][ T7382] ? clear_bhb_loop+0x40/0x90 [ 188.761542][ T7382] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.767522][ T7382] RIP: 0033:0x7f38d6b9cdd9 [ 188.771932][ T7382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.791535][ T7382] RSP: 002b:00007f38d7a6c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 188.799963][ T7382] RAX: ffffffffffffffda RBX: 00007f38d6e15fa0 RCX: 00007f38d6b9cdd9 [ 188.807952][ T7382] RDX: 0000000000000094 RSI: 00002000000010c0 RDI: 0000000000000005 [ 188.816018][ T7382] RBP: 00007f38d7a6c090 R08: 0000000000000000 R09: 0000000000000000 [ 188.823982][ T7382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.831947][ T7382] R13: 00007f38d6e16038 R14: 00007f38d6e15fa0 R15: 00007ffdf5d4b7a8 [ 188.839932][ T7382] [ 188.867584][ T7382] Mem-Info: [ 188.870770][ T7382] active_anon:5690 inactive_anon:0 isolated_anon:0 [ 188.870770][ T7382] active_file:17957 inactive_file:39972 isolated_file:0 [ 188.870770][ T7382] unevictable:768 dirty:156 writeback:0 [ 188.870770][ T7382] slab_reclaimable:9808 slab_unreclaimable:92197 [ 188.870770][ T7382] mapped:24352 shmem:1361 pagetables:486 [ 188.870770][ T7382] sec_pagetables:0 bounce:0 [ 188.870770][ T7382] kernel_misc_reclaimable:0 [ 188.870770][ T7382] free:1344465 free_pcp:12315 free_cma:0 [ 188.929426][ T7382] Node 0 active_anon:22724kB inactive_anon:0kB active_file:71828kB inactive_file:159688kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97364kB dirty:624kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10376kB pagetables:2076kB sec_pagetables:0kB all_unreclaimable? no [ 188.967101][ T7382] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 189.005873][ T7382] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 189.041936][ T7382] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 189.048291][ T7382] Node 0 DMA32 free:1469524kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:22736kB inactive_anon:0kB active_file:71828kB inactive_file:158864kB unevictable:1536kB writepending:624kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:29208kB local_pcp:13640kB free_cma:0kB [ 189.097485][ T7382] lowmem_reserve[]: 0 0 0 0 0 [ 189.102396][ T7382] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 189.147390][ T7382] lowmem_reserve[]: 0 0 0 0 0 [ 189.155658][ T7382] Node 1 Normal free:3892968kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19588kB local_pcp:7040kB free_cma:0kB [ 189.158711][ T7392] ªªªªªª: renamed from vlan0 (while UP) [ 189.186702][ T7382] lowmem_reserve[]: 0 0 0 0 0 [ 189.197726][ T7382] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 189.211502][ T7382] Node 0 DMA32: 637*4kB (UME) 1088*8kB (UME) 803*16kB (UME) 1978*32kB (UME) 862*64kB (UME) 639*128kB (UME) 483*256kB (UM) 132*512kB (UME) 21*1024kB (UME) 20*2048kB (UME) 242*4096kB (UM) = 1469284kB [ 189.233736][ T7382] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 189.251195][ T7382] Node 1 Normal: 234*4kB (UME) 52*8kB (UME) 34*16kB (UME) 66*32kB (UME) 19*64kB (UME) 5*128kB (UM) 2*256kB (ME) 1*512kB (E) 1*1024kB (E) 1*2048kB (E) 948*4096kB (UM) = 3892968kB [ 189.270786][ T7382] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 189.281358][ T7382] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 189.291626][ T7382] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 189.394891][ T7382] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 189.405776][ T7382] 59290 total pagecache pages [ 189.421153][ T7382] 0 pages in swap cache [ 189.426358][ T7382] Free swap = 124996kB [ 189.430815][ T7382] Total swap = 124996kB [ 189.435909][ T7382] 2097051 pages RAM [ 189.439919][ T7382] 0 pages HighMem/MovableOnly [ 189.445496][ T7382] 416927 pages reserved [ 189.449848][ T7382] 0 pages cma reserved [ 189.951128][ T7402] netlink: 'syz.3.441': attribute type 1 has an invalid length. [ 189.969527][ T7402] __nla_validate_parse: 1 callbacks suppressed [ 189.969541][ T7402] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.441'. [ 190.343628][ T7420] netlink: 164 bytes leftover after parsing attributes in process `syz.1.445'. [ 190.381100][ T7421] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.446'. [ 191.680678][ T7451] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.457'. [ 192.571257][ T7470] FAULT_INJECTION: forcing a failure. [ 192.571257][ T7470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.613022][ T7470] CPU: 0 PID: 7470 Comm: syz.1.464 Not tainted syzkaller #0 [ 192.620397][ T7470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 192.630483][ T7470] Call Trace: [ 192.633790][ T7470] [ 192.636738][ T7470] dump_stack_lvl+0x18c/0x250 [ 192.641455][ T7470] ? show_regs_print_info+0x20/0x20 [ 192.646778][ T7470] ? load_image+0x420/0x420 [ 192.651326][ T7470] ? __lock_acquire+0x7d40/0x7d40 [ 192.656384][ T7470] ? snprintf+0xe9/0x140 [ 192.660661][ T7470] should_fail_ex+0x39d/0x4d0 [ 192.665389][ T7470] _copy_to_user+0x2f/0xa0 [ 192.669830][ T7470] simple_read_from_buffer+0xe7/0x150 [ 192.675273][ T7470] proc_fail_nth_read+0x1e8/0x260 [ 192.680347][ T7470] ? proc_fault_inject_write+0x360/0x360 [ 192.686023][ T7470] ? fsnotify_perm+0x271/0x5e0 [ 192.690832][ T7470] ? proc_fault_inject_write+0x360/0x360 [ 192.696512][ T7470] vfs_read+0x28b/0x970 [ 192.700707][ T7470] ? kernel_read+0x1e0/0x1e0 [ 192.705329][ T7470] ? __fget_files+0x28/0x4b0 [ 192.709941][ T7470] ? __fget_files+0x28/0x4b0 [ 192.714566][ T7470] ? __fget_files+0x43d/0x4b0 [ 192.719278][ T7470] ? __fdget_pos+0x2a3/0x330 [ 192.723894][ T7470] ? ksys_read+0x75/0x260 [ 192.728253][ T7470] ksys_read+0x150/0x260 [ 192.732525][ T7470] ? vfs_write+0x990/0x990 [ 192.736981][ T7470] ? lockdep_hardirqs_on+0x98/0x150 [ 192.742213][ T7470] do_syscall_64+0x55/0xa0 [ 192.746651][ T7470] ? clear_bhb_loop+0x40/0x90 [ 192.751357][ T7470] ? clear_bhb_loop+0x40/0x90 [ 192.756056][ T7470] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.761969][ T7470] RIP: 0033:0x7f079bf5d60e [ 192.766407][ T7470] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 192.786044][ T7470] RSP: 002b:00007f079cde1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 192.794496][ T7470] RAX: ffffffffffffffda RBX: 00007f079cde26c0 RCX: 00007f079bf5d60e [ 192.802499][ T7470] RDX: 000000000000000f RSI: 00007f079cde20a0 RDI: 0000000000000006 [ 192.810489][ T7470] RBP: 00007f079cde2090 R08: 0000000000000000 R09: 0000000000000000 [ 192.818495][ T7470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.826480][ T7470] R13: 00007f079c216038 R14: 00007f079c215fa0 R15: 00007fff72c39888 [ 192.834498][ T7470] [ 193.262929][ T7481] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.467'. [ 193.320005][ T7485] syz.2.469[7485] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 193.737344][ T7501] netlink: 65027 bytes leftover after parsing attributes in process `syz.2.473'. [ 196.519425][ T7519] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.479'. [ 196.795854][ T7530] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 196.817100][ T7530] netlink: 'syz.3.483': attribute type 3 has an invalid length. [ 196.836913][ T7530] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.483'. [ 196.862846][ T7530] netlink: 'syz.3.483': attribute type 12 has an invalid length. [ 196.885077][ T7530] netlink: 132 bytes leftover after parsing attributes in process `syz.3.483'. [ 196.940609][ T7535] FAULT_INJECTION: forcing a failure. [ 196.940609][ T7535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.012102][ T7535] CPU: 1 PID: 7535 Comm: syz.0.485 Not tainted syzkaller #0 [ 197.019489][ T7535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 197.029582][ T7535] Call Trace: [ 197.032879][ T7535] [ 197.035831][ T7535] dump_stack_lvl+0x18c/0x250 [ 197.040538][ T7535] ? show_regs_print_info+0x20/0x20 [ 197.045768][ T7535] ? load_image+0x420/0x420 [ 197.050363][ T7535] ? __lock_acquire+0x7d40/0x7d40 [ 197.055449][ T7535] should_fail_ex+0x39d/0x4d0 [ 197.060178][ T7535] _copy_from_user+0x2f/0xe0 [ 197.064807][ T7535] __copy_msghdr+0x3bb/0x580 [ 197.069423][ T7535] ___sys_sendmsg+0x214/0x360 [ 197.074291][ T7535] ? __sys_sendmsg+0x2a0/0x2a0 [ 197.079315][ T7535] ? trace_call_bpf+0xc3/0x6c0 [ 197.084171][ T7535] __se_sys_sendmsg+0x1c2/0x2b0 [ 197.089050][ T7535] ? __x64_sys_sendmsg+0x80/0x80 [ 197.094021][ T7535] ? lockdep_hardirqs_on+0x98/0x150 [ 197.099246][ T7535] do_syscall_64+0x55/0xa0 [ 197.103681][ T7535] ? clear_bhb_loop+0x40/0x90 [ 197.108374][ T7535] ? clear_bhb_loop+0x40/0x90 [ 197.113075][ T7535] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.119007][ T7535] RIP: 0033:0x7f38d6b9cdd9 [ 197.123452][ T7535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.143096][ T7535] RSP: 002b:00007f38d7a4b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.151557][ T7535] RAX: ffffffffffffffda RBX: 00007f38d6e16090 RCX: 00007f38d6b9cdd9 [ 197.159563][ T7535] RDX: 000000000000ff00 RSI: 0000200000001180 RDI: 0000000000000008 [ 197.167555][ T7535] RBP: 00007f38d7a4b090 R08: 0000000000000000 R09: 0000000000000000 [ 197.175544][ T7535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.183538][ T7535] R13: 00007f38d6e16128 R14: 00007f38d6e16090 R15: 00007ffdf5d4b7a8 [ 197.191548][ T7535] [ 197.848062][ T7554] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.492'. [ 198.149959][ T7561] mac80211_hwsim hwsim14 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 198.171561][ T7565] netlink: 'syz.2.495': attribute type 3 has an invalid length. [ 198.185870][ T7565] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.495'. [ 198.213160][ T7561] netlink: 'syz.2.495': attribute type 12 has an invalid length. [ 198.234837][ T7561] netlink: 132 bytes leftover after parsing attributes in process `syz.2.495'. [ 198.346152][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.352577][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.668869][ T7576] netlink: 'syz.2.501': attribute type 4 has an invalid length. [ 198.799187][ T7579] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.503'. [ 199.160383][ C0] [ 199.160396][ C0] ================================ [ 199.160399][ C0] WARNING: inconsistent lock state [ 199.160406][ C0] syzkaller #0 Not tainted [ 199.160411][ C0] -------------------------------- [ 199.160413][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 199.160417][ C0] syz.2.506/7590 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 199.160427][ C0] ffff888029e60218 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300 [ 199.160459][ C0] {INITIAL USE} state was registered at: [ 199.160465][ C0] lock_acquire+0x19e/0x420 [ 199.160476][ C0] _raw_spin_lock+0x2e/0x40 [ 199.160486][ C0] htab_lock_bucket+0x17d/0x300 [ 199.160494][ C0] htab_map_update_elem+0x229/0x1040 [ 199.160522][ C0] bpf_map_update_value+0x660/0x720 [ 199.160530][ C0] generic_map_update_batch+0x5ec/0x810 [ 199.160537][ C0] bpf_map_do_batch+0x3d7/0x610 [ 199.160545][ C0] __sys_bpf+0x381/0x890 [ 199.160552][ C0] __x64_sys_bpf+0x7c/0x90 [ 199.160559][ C0] do_syscall_64+0x55/0xa0 [ 199.160566][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.160598][ C0] irq event stamp: 12712 [ 199.160601][ C0] hardirqs last enabled at (12711): [] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 199.160615][ C0] hardirqs last disabled at (12712): [] exc_debug+0x73/0x140 [ 199.160625][ C0] softirqs last enabled at (12454): [] __irq_exit_rcu+0xd3/0x190 [ 199.160635][ C0] softirqs last disabled at (12395): [] __irq_exit_rcu+0xd3/0x190 [ 199.160644][ C0] [ 199.160644][ C0] other info that might help us debug this: [ 199.160647][ C0] Possible unsafe locking scenario: [ 199.160647][ C0] [ 199.160648][ C0] CPU0 [ 199.160650][ C0] ---- [ 199.160655][ C0] lock(&htab->lockdep_key); [ 199.160660][ C0] [ 199.160662][ C0] lock(&htab->lockdep_key); [ 199.160666][ C0] [ 199.160666][ C0] *** DEADLOCK *** [ 199.160666][ C0] [ 199.160668][ C0] no locks held by syz.2.506/7590. [ 199.160672][ C0] [ 199.160672][ C0] stack backtrace: [ 199.160674][ C0] CPU: 0 PID: 7590 Comm: syz.2.506 Not tainted syzkaller #0 [ 199.160682][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 199.160748][ C0] Call Trace: [ 199.160764][ C0] <#DB> [ 199.160773][ C0] dump_stack_lvl+0x18c/0x250 [ 199.160788][ C0] ? show_regs_print_info+0x20/0x20 [ 199.160803][ C0] ? print_usage_bug+0x475/0x690 [ 199.160812][ C0] ? verify_lock_unused+0x18/0x140 [ 199.160823][ C0] lock_acquire+0x2c2/0x420 [ 199.160833][ C0] ? htab_lock_bucket+0x17d/0x300 [ 199.160843][ C0] ? read_lock_is_recursive+0x20/0x20 [ 199.160856][ C0] _raw_spin_lock+0x2e/0x40 [ 199.160866][ C0] ? htab_lock_bucket+0x17d/0x300 [ 199.160874][ C0] htab_lock_bucket+0x17d/0x300 [ 199.160884][ C0] ? htab_lru_map_delete_node+0x760/0x760 [ 199.160893][ C0] ? look_up_lock_class+0x75/0x140 [ 199.160904][ C0] ? verify_lock_unused+0x18/0x140 [ 199.160913][ C0] ? htab_map_hash+0x1d7/0x330 [ 199.160923][ C0] htab_map_delete_elem+0x1a4/0x650 [ 199.160933][ C0] ? htab_map_update_elem+0x1040/0x1040 [ 199.160941][ C0] ? perf_callchain+0x220/0x220 [ 199.160953][ C0] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 199.160964][ C0] bpf_overflow_handler+0x43f/0x510 [ 199.160981][ C0] ? bpf_overflow_handler+0xde/0x510 [ 199.160992][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 199.161005][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 199.161015][ C0] __perf_event_overflow+0x447/0x630 [ 199.161027][ C0] perf_swevent_overflow+0x268/0x340 [ 199.161039][ C0] ? perf_event_switch_output+0x790/0x790 [ 199.161054][ C0] perf_swevent_event+0x45c/0x570 [ 199.161064][ C0] ? perf_tp_event+0x1520/0x1520 [ 199.161073][ C0] ? perf_trace_lock+0xfc/0x3b0 [ 199.161083][ C0] perf_bp_event+0x319/0x430 [ 199.161100][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 199.161115][ C0] ? rcu_is_watching+0x15/0xb0 [ 199.161126][ C0] ? trace_call_bpf+0xc3/0x6c0 [ 199.161139][ C0] ? lock_release+0xb5/0x8c0 [ 199.161177][ C0] ? lock_acquire+0x2c2/0x420 [ 199.161189][ C0] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 199.161203][ C0] notifier_call_chain+0x197/0x380 [ 199.161218][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 199.161229][ C0] atomic_notifier_call_chain+0xda/0x180 [ 199.161240][ C0] notify_die+0x145/0x1a0 [ 199.161251][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 199.161270][ C0] ? rcu_is_watching+0x15/0xb0 [ 199.161281][ C0] notify_debug+0x2e/0x50 [ 199.161290][ C0] exc_debug+0xde/0x140 [ 199.161300][ C0] asm_exc_debug+0x1e/0x40 [ 199.161310][ C0] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 199.161321][ C0] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 199.161328][ C0] RSP: 0018:ffffc90010b77d50 EFLAGS: 00050206 [ 199.161336][ C0] RAX: ffffffff842a2a01 RBX: 0000000000000090 RCX: 000000000000000c [ 199.161342][ C0] RDX: 0000000000000001 RSI: 0000200000000304 RDI: ffffc90010b77e44 [ 199.161347][ C0] RBP: ffffc90010b77ee8 R08: ffffc90010b77e4f R09: 1ffff9200216efc9 [ 199.161353][ C0] R10: dffffc0000000000 R11: fffff5200216efca R12: 0000200000000310 [ 199.161359][ C0] R13: 0000000000000090 R14: ffffc90010b77dc0 R15: 0000200000000280 [ 199.161367][ C0] ? _copy_from_user+0x11/0xe0 [ 199.161381][ C0] [ 199.161384][ C0] [ 199.161386][ C0] _copy_from_user+0x8b/0xe0 [ 199.161397][ C0] __sys_bpf+0x23e/0x890 [ 199.161407][ C0] ? bpf_link_show_fdinfo+0x390/0x390 [ 199.161421][ C0] ? perf_trace_sys_enter+0x12f/0x140 [ 199.161435][ C0] __x64_sys_bpf+0x7c/0x90 [ 199.161443][ C0] do_syscall_64+0x55/0xa0 [ 199.161451][ C0] ? clear_bhb_loop+0x40/0x90 [ 199.161460][ C0] ? clear_bhb_loop+0x40/0x90 [ 199.161471][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.161480][ C0] RIP: 0033:0x7fce89d9cdd9 [ 199.161487][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.161494][ C0] RSP: 002b:00007fce8ad35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 199.161502][ C0] RAX: ffffffffffffffda RBX: 00007fce8a015fa0 RCX: 00007fce89d9cdd9 [ 199.161507][ C0] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 199.161513][ C0] RBP: 00007fce89e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 199.161518][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.161522][ C0] R13: 00007fce8a016038 R14: 00007fce8a015fa0 R15: 00007ffe17311128 [ 199.161532][ C0] [ 200.975097][ T12] wlan1: Trigger new scan to find an IBSS to join [ 203.934798][ T12] wlan1: Trigger new scan to find an IBSS to join [ 205.535475][ T5771] Bluetooth: hci0: command 0x0406 tx timeout [ 205.539952][ T5776] Bluetooth: hci1: command 0x0406 tx timeout [ 205.541644][ T5771] Bluetooth: hci2: command 0x0406 tx timeout [ 206.974743][ T2927] wlan1: Trigger new scan to find an IBSS to join [ 207.904905][ T2984] wlan1: Creating new IBSS network, BSSID 26:77:cc:01:67:a8