last executing test programs: 2m28.160278607s ago: executing program 3 (id=330): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400000000004, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x20000006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xe3589, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x401, 0x0, 0x1, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r0) socketpair(0x1, 0x801, 0x0, &(0x7f0000000100)) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000240)='n', 0x0, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x38) sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x2, 0x4e2b, @multicast2}, 0x10, &(0x7f0000000380), 0x2, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001200)={&(0x7f0000001040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum64={0x3, 0x0, 0x0, 0x13, 0x0, 0x4}]}, {0x0, [0x2e, 0x0, 0x5f, 0x5f, 0x2e]}}, &(0x7f0000001140)=""/178, 0x2b, 0xb2, 0x1}, 0x28) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x40000000}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) 2m27.262052305s ago: executing program 3 (id=333): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000800000000000000000000000077757faa000000000000000000"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x87, 0x87, 0x3, [@datasec={0x6, 0x4, 0x0, 0xf, 0x3, [{0x3, 0xe, 0x81}, {0x2, 0x3, 0xdd}, {0x3, 0x7fff, 0x4}, {0x5, 0x4, 0x8}], "d0b1cc"}, @volatile={0x6, 0x0, 0x0, 0x9, 0x1}, @union={0xc, 0x4, 0x0, 0x5, 0x0, 0x4, [{0x3, 0x4, 0x3}, {0x6, 0x3, 0x4}, {0x6, 0x2, 0x8}, {0xd, 0x1, 0xdb}]}]}, {0x0, [0xe]}}, &(0x7f0000000a40)=""/4096, 0xa3, 0x1000, 0x1, 0x0, 0x10000}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000fcffffff000000000000000095"], &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r4, &(0x7f0000000580), 0x0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81e6972f00fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x6, 0x4, 0x4, 0x8}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r7}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000700)={r8, &(0x7f0000000580), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x6, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x3}, @exit, @map_idx={0x18, 0x2, 0x5, 0x0, 0xc}], &(0x7f0000000040)='GPL\x00', 0x6, 0xc1, &(0x7f0000000300)=""/193, 0x41000, 0x12, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000440)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x6, 0x2, 0x3}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000004c0)=[r0, r6, r0], &(0x7f0000000500)=[{0x0, 0x2, 0x8, 0x3}, {0x0, 0x1, 0xa, 0xc}, {0x0, 0x4, 0x0, 0x5}, {0x3, 0x3, 0x7, 0x3}, {0x1, 0x3, 0xd, 0x1}], 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000000f000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m26.175022892s ago: executing program 3 (id=345): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f00000004000000060000000700000080130000", @ANYRES32, @ANYBLOB="0000000000000000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x50) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xec, 0x0, 0x40, 0x4, 0x0, 0x4, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x5, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0xff, 0x1, 0xffffffff}], 0x10, 0x9}, 0x94) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) close(0xffffffffffffffff) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000380)=@can, 0x80, &(0x7f0000000440)=[{&(0x7f0000001480)=""/4096, 0x1000}], 0x1, &(0x7f0000000480)=""/136, 0x88}, 0xc0002164) socket$kcm(0x10, 0x3, 0x10) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, 0x0, 0x0) (async) r5 = openat$cgroup_freezer_state(r3, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f00000000c0)='THAWED\x00', 0x7) (async) socket$kcm(0xa, 0x5, 0x0) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r6}, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x53}, 0x28) 2m25.75907292s ago: executing program 3 (id=348): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006400002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x4035, 0x43a1bd76, 0x7, 0xb, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000204c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4000010) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x58, &(0x7f00000000c0)}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000900)={0xffffffffffffffff, &(0x7f0000000c00), 0x0}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x10}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90224fc60100c02c000000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2m24.220744036s ago: executing program 3 (id=350): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fcffffff000000000700000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r0}, 0x20) 2m23.994961475s ago: executing program 3 (id=351): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5) syz_clone(0x41333280, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) (async) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0}, 0x766073b3f9440989, 0x30000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = getpid() syz_open_procfs$namespace(r0, &(0x7f0000000180)='ns/ipc\x00') (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000001811f994e25967b298e4a8794e01f0934f717dffe778fabbe3641986b3945900", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000850000000e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1500"/12, @ANYRES32=0x0, @ANYBLOB="4b88"], 0x20) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r5}, 0xc) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x7fffffffffffffff}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) 2m8.976541408s ago: executing program 32 (id=351): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5) syz_clone(0x41333280, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) (async) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0}, 0x766073b3f9440989, 0x30000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = getpid() syz_open_procfs$namespace(r0, &(0x7f0000000180)='ns/ipc\x00') (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000001811f994e25967b298e4a8794e01f0934f717dffe778fabbe3641986b3945900", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000850000000e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1500"/12, @ANYRES32=0x0, @ANYBLOB="4b88"], 0x20) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r5}, 0xc) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x7fffffffffffffff}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) 4.278550787s ago: executing program 0 (id=1155): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400000000004, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x20000006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xe3589, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x401, 0x0, 0x1, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r0) socketpair(0x1, 0x801, 0x0, &(0x7f0000000100)) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000240)='n', 0x0, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x2, 0x4e2b, @multicast2}, 0x10, &(0x7f0000000380), 0x2, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001200)={&(0x7f0000001040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum64={0x3, 0x0, 0x0, 0x13, 0x0, 0x4}]}, {0x0, [0x2e, 0x0, 0x5f, 0x5f, 0x2e]}}, &(0x7f0000001140)=""/178, 0x2b, 0xb2, 0x1}, 0x28) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x40000000}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) 2.890470396s ago: executing program 0 (id=1162): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021db00006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8000900080008400400027c9c000461c1d67f6f94001600cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0x12b}], 0x1}, 0x0) 2.721340064s ago: executing program 1 (id=1163): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000100)) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x3d, 0x0, 0x1, 0x20}, {0x1d}, {0x6, 0x0, 0xfe}]}) 2.57092071s ago: executing program 4 (id=1164): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0x7f, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x0, 0x0, 0x0, 0xfa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffffffffffc}, 0x0, 0x8, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xb0, 0x25108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x5}, 0x2a10, 0x3, 0x3, 0x0, 0x400da4f, 0x2000a, 0x0, 0x0, 0xfffffff8}, 0x0, 0x3, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r0, &(0x7f0000001240)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000010000000500"/28], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000740)={r1, &(0x7f0000000700)="3a8e55de89133a1a196cdf8633f4584b6be539933296fea80e9b93048e26293c5083fb8d909e557eae53af369c1ce41b43d4f5c6a9371442"}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000b34edc9bc3854fb2f5b443f66c0f61261bf070eb7f38d8da1c33d84a52b8efc00b31f865ceb8c0ce8128012fb06d4d4038d73d83bde32fbf68dd8bea45f7708b32d9fddee307321abe88d48f2b73ebc159da5048c9c39171c0458a4fd2eeb480539993b8e825ce8c9d745306ad561a8a3a506dffb9c36411ee065a6ad5a91f1c5aa09f2ff073c26da7aa36a0e0e3fa99d0a47a0d02bbb705539887f9ce98b64064953f567b6ac492963149a7ac59754dd4183563d2c342a77ff6856032a5614f3e0000000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r2, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000002006b1387e5acf978e73300"], &(0x7f0000000640)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x28, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e0000000a000000030000000500000080100400", @ANYRES32=0x1, @ANYBLOB="08000100000000000000007b0000000000000000", @ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="0100000005000000010000000700"/28], 0x50) r5 = socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r5, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x24000800) socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x5, 0x1, 0x0, 0x0, 0x0, 0x3fffd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x4, @perf_bp={0x0}, 0x10130, 0x9, 0x0, 0x0, 0x0, 0xffffffff, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000008c0)=r9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0x0, 0x0, 0x0, 0x15b76fa0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x3, 0x0, 0x3}, 0x10}, 0x94) r10 = socket$kcm(0x1e, 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000900)='memory.stat\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/43, 0x2b}], 0x1}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) 2.525166852s ago: executing program 0 (id=1166): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x5, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0a000000020000006d05000003"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$sock(r0, &(0x7f00000002c0)={&(0x7f0000000180)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @rand_addr=0x64010102}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000005c0)="10d35feee065e060c085d1a785acee65ed307ffbedd5d6f44f2ba5809f8977078b3fc6c5549ab5f69a3cefa8c71d51853176fb6c59ad84688e65395efdf7ead05f4c85cdaa6a045786e42b970ce568daac03ef254ab4240042e030272bbec09e9e82d7293aabe4a22963ba62099d614fc7d06738f105c9e36a12f4d7e886ab0c336283bd78f0fbc19c3c79ef6d6e4d4bccca106f62036e5ce621deb6ec7ca370c176dcf648c053f3", 0xa8}, {&(0x7f0000000000)="5c9a643ad7f3dffc8f", 0x9}, {&(0x7f0000000080)="acc9ba399d017c9e0ddc9a61ef440d9939f06a5a49de3ed38e5990fe6aed9aff49fa7c9c891f617b", 0x28}, {&(0x7f0000000100)="1a4f7cdc02795c0f7745109f11aa97e64718", 0x12}], 0x4}, 0x48c1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) socket$kcm(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18e7ffffffffffffff000000020094cac9b5d0fc327400000f2f207ddd7af95f9500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.307137071s ago: executing program 1 (id=1167): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) socket$kcm(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@fallback=r1, r1, 0x2f}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x18000000000002a0, 0x34, 0x0, &(0x7f0000002140)="b9ff030711a5268c019e14f088a847e0ffff00124000632177fbac141416e000030a94029f030301800000ca6aab840000008100", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.306664131s ago: executing program 2 (id=1168): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000040000000400000005"], 0x50) socketpair(0x27, 0x800, 0x9, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000006c0)={&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000380)=""/87, 0x57}, {&(0x7f00000004c0)=""/18, 0x12}, {&(0x7f0000000540)=""/105, 0x69}, {&(0x7f00000005c0)=""/53, 0x35}], 0x4, &(0x7f0000000640)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}, 0x40) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000008000000080000000600000001"], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895c679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c048d46362ea0d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d120ea257bba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337dbcf3456ff6cd0d6b98a258e3509a7d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f009db49c6b8b19613e4d792cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2bc30a96767f500b9e26e3b12854da63083320d8bfe49d85e0842803dc59d6375bce2b8a93caf39c0ba767880bbb9bf9407e6a6c0f9a43d1ab51dabf9423b482e848fbe1653ff0c6161fa43543546ce17a42e6cddadaf0767d84407478ffe2d0b567d81201efc81e800d4c0874235ff5cd7f5f0ee71cc2b0193bfc9290627ceaeb0b02931a817688f3a51fa2861e70cbab50a5d434ed8d8841694dba46f3d5a95ae86e4d471684ccf427b2ba53a157b2a7cf7a4c10051bb77822190a14c2ab1f271a7cf9c240b99"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000200)=r7, 0x4) sendmsg$sock(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000700)={0x49, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={r9, 0x680, 0x30}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) 2.217809675s ago: executing program 4 (id=1169): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000), 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x14, 0x15, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4e9, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x3b6, 0x1000, &(0x7f0000000140)=""/4096, 0x41000, 0x61, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000001180)={0x1, 0x1, 0x7, 0x4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f00000011c0)=[0xffffffffffffffff], &(0x7f0000001200)=[{0x5, 0x5, 0x8, 0x6}], 0x10, 0x2}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@fallback=0xffffffffffffffff, 0x22, 0x0, 0x4, &(0x7f0000001300)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000001340)=[0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000014c0)={0x0, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000001480)='],\x00', 0x0}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001440)={@fallback, r0, 0x37, 0x38, 0x0, @void, @void, @void, @value=r3, r2}, 0x20) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001500)=r1, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r1) recvmsg$kcm(r1, &(0x7f00000017c0)={&(0x7f0000001540)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000001700)=[{&(0x7f00000015c0)=""/219, 0xdb}, {&(0x7f00000016c0)=""/40, 0x28}], 0x2, &(0x7f0000001740)=""/97, 0x61}, 0x40) r4 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001800)={r0, r1}, 0xc) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001840)={@fallback=r4, r1, 0x26, 0x0, 0x0, @void, @value=r0, @void, @void, r2}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001880)={0x8}, 0x8) recvmsg$kcm(r4, &(0x7f0000001b40)={&(0x7f00000018c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001940)=""/125, 0x7d}, {&(0x7f00000019c0)=""/210, 0xd2}, {&(0x7f0000001ac0)=""/34, 0x22}], 0x3}, 0x10060) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001bc0)=@o_path={&(0x7f0000001b80)='./file0\x00', 0x0, 0x4000, r0}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000001c00)='\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000001c40)='}}\'@*}-#@&\x00') r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001c80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, r1, 0x5, 0x3}, 0x50) r7 = syz_clone(0x80000000, &(0x7f0000001dc0)="3ae19498a8c31dd97685caeaff30670e5c82a4ef1b8ed8455cd2bcd169435a0edd84262f788453b636acc0767fce866928adceb4a29dd47a3ac227cb66891215af61f46da0050c23980ae2fbc50270efc4b468cd7b4efa7cf2fa3dec339ac59647c1506d49855563a5d0ae978cb0f94f970310e2664a875a541f09161d8f9f2116384f4ccfc6d4b74ecae28cbc0d6cc9332e813be35b38d75f7ff43527a75f55e67c8be9c2f4675ae08ec91d61d77e47873e63d78dc4d0eb5c7ea51b04de", 0xbe, &(0x7f0000001e80), &(0x7f0000001ec0), &(0x7f0000001f00)="4309819308ab01e6057a2157911c25c1d3ae284b0c821ef9e2e6f83568f06c3050eeac143e23ef88cc5923e4bdf9d8325827b0caf540ad3f2acd98314d5e0b4616265052b0c2f6fc3c4e869ed6b8d88475a4b638eaee378a737c6c8b1405168d4c7057c4049f89d45976e175d6f241ec582c4401cedce42c990850ed8bcf32a58f7ebe49653ee29ee877ee29557965e64704f5e46e97d010471fe7054f0f7fba6c31927c835887ebebcafffb928f92c6f8bac52f86e69f984d0a9a0d08672a9d0cc7159466110191be6ab4789f5570579552023f503e5c31273a7cf1a5") perf_event_open(&(0x7f0000001d40)={0x0, 0x80, 0xfb, 0x3, 0x10, 0x9, 0x0, 0x4, 0xe0a4, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb5, 0x0, @perf_bp={&(0x7f0000001d00), 0x4}, 0x8, 0x2e1, 0xffff, 0x4, 0x0, 0x6, 0x0, 0x0, 0xb, 0x0, 0x3}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002340)={r5, 0xe0, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000002040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, &(0x7f0000002080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002100)=[0x0], 0x0, 0xdc, &(0x7f0000002140)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000002180), &(0x7f00000021c0), 0x8, 0x6a, 0x8, 0x8, &(0x7f0000002200)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002000)={@ifindex=r8, r0, 0x1b, 0x200c, 0x0, @value=r1, @void, @void, @void, r2}, 0x20) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000023c0)=@generic={&(0x7f0000002380)='./file0\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002480)={{r1, 0xffffffffffffffff}, &(0x7f0000002400), &(0x7f0000002440)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002540)={{0x1, 0xffffffffffffffff}, &(0x7f00000024c0), &(0x7f0000002500)=r1}, 0x20) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002980)={0x18, 0x29, &(0x7f0000002580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc01}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x8}, @jmp={0x5, 0x0, 0x5, 0x8, 0x0, 0x5d, 0x10}, @map_fd={0x18, 0x1, 0x1, 0x0, r10}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r11}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xff}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x7f}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002700)='GPL\x00', 0x2, 0xf8, &(0x7f0000002740)=""/248, 0x41100, 0x26, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002840)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000002880)={0x1, 0x4, 0x6, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000028c0)=[r6, r1, r1, 0x1, r1, r1], &(0x7f0000002900)=[{0x2, 0x4, 0x8, 0xc}, {0x0, 0x2, 0xa, 0xa}, {0x4, 0x1, 0x1, 0x5}, {0x1, 0x5, 0x5, 0x1}, {0x0, 0x3, 0x8}], 0x10, 0x3}, 0x94) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002a40)=r9, 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000002a80)={r12, r10}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x7fffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002d40)={0x6, 0x20, &(0x7f0000002ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @map_idx={0x18, 0xd, 0x5, 0x0, 0xa}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x916}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3}, @alu={0x7, 0x1, 0xd, 0x6, 0xb, 0xfffffffffffffffc, 0xfffffffffffffff4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002bc0)='syzkaller\x00', 0x4, 0xa6, &(0x7f0000002c00)=""/166, 0x41100, 0x8, '\x00', 0x0, 0x25, r13, 0x8, &(0x7f0000002cc0)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=[r1, r1, r6, r6, r11, r11], 0x0, 0x10, 0x10000}, 0x94) 1.990006055s ago: executing program 0 (id=1170): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400000000004, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x20000006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xe3589, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x401, 0x0, 0x1, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r0) socketpair(0x1, 0x801, 0x0, &(0x7f0000000100)) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000240)='n', 0x0, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x2, 0x4e2b, @multicast2}, 0x10, &(0x7f0000000380), 0x2, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001200)={&(0x7f0000001040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum64={0x3, 0x0, 0x0, 0x13, 0x0, 0x4}]}, {0x0, [0x2e, 0x0, 0x5f, 0x5f, 0x2e]}}, &(0x7f0000001140)=""/178, 0x2b, 0xb2, 0x1}, 0x28) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x40000000}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) 1.890798019s ago: executing program 1 (id=1171): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000380)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000480)='xprtrdma_mrs_zap\x00', r0, 0x0, 0xfffffffffffffffa}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa71c6fc01ae7f902, 0x16, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1f}, 0x5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x1ff}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) bpf$OBJ_GET_MAP(0x7, 0x0, 0xfffffffffffffe1d) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64039, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7a, 0x2, @perf_config_ext={0x0, 0x80003fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x4, 0x6, 0x2, 0x0, 0x4842, 0x0, 0xcd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r2}, 0x18) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x8, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb904021d080000000000000000070a000a000900142603600e1208001e0000050401a8000500027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4edef3985000092954b43370e970392", 0xd8}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x4f}, 0x10000) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYRES8=r8, @ANYBLOB="3eca", @ANYRES8], 0x9a) ioctl$TUNATTACHFILTER(r9, 0x401054d5, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x6, 0x9, 0x2, 0x800}]}) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x4f247356b7fbc719, 0x0) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x110e22fff6) r11 = socket$kcm(0x2, 0x200000000000001, 0x106) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x60001, 0x0) ioctl$TUNSETDEBUG(r12, 0x400454c9, &(0x7f0000000340)=0x461) setsockopt$sock_attach_bpf(r11, 0x1, 0x8, &(0x7f0000000100), 0x4) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) 1.889609349s ago: executing program 2 (id=1172): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000a00)=""/254, 0xfe}, {&(0x7f0000000f00)=""/188, 0xbc}, {&(0x7f0000000780)=""/238, 0xee}, {&(0x7f0000000fc0)=""/4077, 0xfed}, {&(0x7f0000000480)=""/222, 0xde}, {&(0x7f0000000940)=""/167, 0xa7}, {&(0x7f0000000700)=""/108, 0x6c}], 0x7}, 0x40012100) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0], 0x0, 0xfa, &(0x7f0000000480), 0x0, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x85, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) recvmsg$unix(0xffffffffffffffff, &(0x7f00000024c0)={&(0x7f0000000d40), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000001fc0)=""/216, 0xd8}, {&(0x7f00000020c0)=""/152, 0x98}, {&(0x7f0000000dc0)=""/91, 0x5b}, {&(0x7f0000002180)=""/189, 0xbd}, {&(0x7f0000002240)=""/74, 0x4a}, {&(0x7f00000022c0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/3, 0x3}], 0x7, &(0x7f0000002440)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}, 0x10000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0xa, 0x922000000003, 0x11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000800) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x18, 0x12, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xb2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@jmp={0x5, 0x1, 0x6, 0x5, 0x8, 0xfffffffffffffff0, 0x8}, @generic={0x6, 0xc, 0xb, 0x3, 0x7fffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x7, 0xe5, &(0x7f0000000240)=""/229, 0x40f00, 0x8, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000b80)=[r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, r0, r0, r9, r0, r0], &(0x7f0000000bc0)=[{0x3, 0x3, 0xf, 0x4}, {0x2, 0x2, 0x0, 0x8}, {0x4, 0x1, 0xd, 0xb}, {0x1, 0x4, 0x9}, {0x3, 0x5, 0x2, 0x8}], 0x10, 0x7}, 0x94) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) sendmsg$kcm(r1, &(0x7f0000000740)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x80, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="10a3c63000000000b705000008000000850000006a0000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.685436318s ago: executing program 4 (id=1173): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7578}, [@call={0x85, 0x0, 0x0, 0x9b}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) r2 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)='%ps \x00'}, 0x20) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000, r2}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x42, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.500527176s ago: executing program 1 (id=1174): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000045000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0xb, 0x0, 0x0, 0x95, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f97c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000004}, 0x94) r4 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x4008050) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8000900080008400400027c9c000461c1d67f6f94001600cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0x12b}], 0x1}, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', r3, 0x4000, r1}, 0x18) 1.340374743s ago: executing program 2 (id=1175): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a1bc0015000500142603600e1208000f0000000401a8000900080008400400027c9c000461c1d67f6f94001600cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0x12b}], 0x1}, 0x0) 1.267003096s ago: executing program 4 (id=1176): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) (async) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) (async) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) (async) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="80", 0x1}], 0x1, &(0x7f0000003280)=ANY=[@ANYBLOB="20000000000000008400000008000000941f6721e757691d020000faffffff001800000000000000840000000700000062"], 0x38}, 0x41) syz_open_procfs$namespace(0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002f0000801600"/32], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002f0000801600"/32], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x94) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB], 0x10b8}, 0x146) (async) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB], 0x10b8}, 0x146) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="0213020902000000e4a17c4e2ca18b", 0xf}], 0x1}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="0213020902000000e4a17c4e2ca18b", 0xf}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000740)="3701dad0983538dcbb5f55c25037ac5f472d23c4a8452c94dcd03bd5b9eb8c85f83cbc29fdbf10fa795c0ab0237d022bcd35ced39f55f0fdfaa227d1f979e02b55813af5ed5d5c159a70dee36ac038d85b373df88a1655abb34ece10b2defe8fbe80ee7db89221ec9e89a902bdd3dc9478308a91e24e626238ffc85bc069fd76339106e8557c378c809c0f2d9c408ea16e5841e0e9d4cae5d9279bface82335d684fdf3e42f53b710560bcbe58a3052b55f7edafcfcf0ae404c55053b617218c18167180c877214827044f67f8f61468ea017c5ded4085a80a26fa588af930bcfbfacee077fff34ba7a7cda43df0", 0xee}], 0x1, 0x0, 0x1340}, 0x8040) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000040)="b90103606989068c3c270040f0832f9e", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, &(0x7f0000000400), 0x0}, 0x50) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x4008240b, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000580)={r3}) socketpair(0x18, 0x5, 0x5, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[], 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b1a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000a00000000000000fdffffff940a000020007dc59500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8}, 0x94) 1.210336658s ago: executing program 0 (id=1177): r0 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x2, @perf_bp={0x0}, 0x14105, 0x6, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000240)={r2, r1, 0x4}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1d, 0x12, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000008000000000000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018250000", @ANYRES32=r3, @ANYBLOB="00000000a40000003c24010004000000bf91000000000000b7020000020000008500000085000000b7000000000000f4b962ac0000000000"], &(0x7f0000000400)='GPL\x00', 0x80, 0xa, &(0x7f0000000440)=""/10, 0x40f00, 0x40, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0xf, 0x0, 0x2}, 0x10, 0xffffffffffffffff, r3, 0x5, &(0x7f0000000840)=[0xffffffffffffffff, r3], &(0x7f0000000940)=[{0x0, 0x1, 0x7, 0x4}, {0x5, 0x1, 0x1, 0x5}, {0x1, 0x5, 0xc, 0x7}, {0x5, 0x2, 0x6, 0x3}, {0x5, 0x5, 0xd}], 0x10, 0x100}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r7) ioctl$SIOCSIFHWADDR(r7, 0x8b28, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="07000000000000000000000000000000000000000ae96a086eec3abbd0335a6f185fe0456704daf067ec5d891f8d34b5fc16dea59c243a6265dc65d2aa6251ab0158b3ff842383d647266c807651ccf46bd659fc190f7fb13a1732b35c5cf10608da5f30caf4167064536a978668e711b30465480457f86db83ff7d6b1ddce014a1ae3a26511a9c8c2284d9629ac87df44eeab87", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="01000000010000000200"/28], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0x80, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xb, 0x26, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0xa}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @cb_func={0x18, 0x8}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8e1a}}, @map_val={0x18, 0x1, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xe8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0x2, 0x39, &(0x7f00000002c0)=""/57, 0x41000, 0x1, '\x00', r6, @fallback=0x23, r3, 0x8, &(0x7f0000000300)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0x7, 0x200, 0x7}, 0x10, r8, r3, 0x8, 0x0, &(0x7f0000000880)=[{0x0, 0x3, 0x9, 0xb}, {0x0, 0x4, 0x8, 0x9}, {0x5, 0x4, 0x2, 0xb}, {0x4, 0x2, 0x5, 0xb}, {0x1, 0x5, 0xf, 0x5}, {0x2, 0x4, 0xb, 0x1}, {0x1, 0x5, 0x1, 0x8}, {0x3, 0x5, 0x8, 0x1}], 0x10, 0x3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB='\x00'/16, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28, @ANYRES8=r6, @ANYRES32, @ANYRES64=r5, @ANYRES16, @ANYRESHEX, @ANYRESDEC, @ANYBLOB="9dd5520958156c36e533babd2f455a5f6559968f939fccbe2c992d1d724a61e039eae96ce77396bb28d222fc9bd216d142f557722420cf7aa196725939a352be72993ffe655a199c67ef8b41274778cdb8307bbe4f2575ebfc2bdc8c585d6dd1361394f8ce699dd890ef2e5d8b60ae963eaa77859912a242e13c9dd2983ee344851fec1a6620e03c48390d293779b761ac617fbb11aab330c490d190fdf1778cf1da6fc380d6669316136fd2af17bcf58762d394b83091792df9af2a2c0e59c756d68b898bd90891b2ca27688cd6e1f7ed05cc3577013bdae83dc66710b453bf3020740b0559a517a7808be3fb01f0a95bb146707e61a9", @ANYRESHEX], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x12, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0xc}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}, @map_fd={0x18, 0xc, 0x1, 0x0, r2}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @generic={0x8, 0xf, 0x5, 0x1, 0x1}, @map_fd={0x18, 0x9, 0x1, 0x0, r2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000280)='syzkaller\x00', 0xbfc, 0x1000, &(0x7f0000000580)=""/4096, 0x40f00, 0x4c, '\x00', r6, @fallback=0x30, r2, 0x8, &(0x7f00000002c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0xb, 0x3, 0x3}, 0x10, 0x0, r2, 0x4, &(0x7f0000000340)=[r2], &(0x7f0000000380)=[{0x4, 0x5, 0xb, 0x8}, {0x3, 0x3, 0x5, 0x9}, {0x2, 0x5, 0x3, 0xb}, {0x1, 0x1, 0xf, 0x7}], 0x10, 0xf743}, 0x94) r9 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.108568332s ago: executing program 1 (id=1178): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317040000000400fef2000e40004d59875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="2d63707561636374202b6e650300630673202d6465766963657320"], 0x1b) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@fallback, 0xffffffffffffffff, 0x12, 0x20}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0xd, 0x9, &(0x7f000000a1c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000005000000850000008c000000a7000000000000001800000000000000000000000000000095000000002c8c5a26"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xecf8}, 0x94) 1.030782046s ago: executing program 2 (id=1179): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) socket$kcm(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@fallback=r1, r1, 0x2f}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x18000000000002a0, 0x34, 0x0, &(0x7f0000002140)="b9ff030711a5268c019e14f088a847e0ffff00124000632177fbac141416e000030a94029f030301800000ca6aab840000008100", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 769.885127ms ago: executing program 4 (id=1180): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0xfffffffd, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x1b, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000a00000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0xfffffffd, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x1b, &(0x7f0000000040), 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000a00000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) 750.076078ms ago: executing program 2 (id=1181): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x1ffffff6, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdd6, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0x8101000000000002}, 0x5, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8cffffffffffffff}, 0x3b35}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 450.947861ms ago: executing program 0 (id=1182): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000002540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) socket$kcm(0x29, 0x2, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000200000000000000020033000d02000000fcffffff0200000002000000000000000000000000000004fcffffff00"], 0x0, 0x42, 0x0, 0x1}, 0x28) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xb, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000900000000000000", @ANYRES32=0x1, @ANYBLOB="d300"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="01000000030000000200"/24], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r2, &(0x7f0000000500)="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", &(0x7f0000000340)=""/161, 0x4}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0xfc, 0xfffff000}, {0x6, 0x22, 0x0, 0xd}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40000040) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x2, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0x2a979d) r5 = gettid() perf_event_open(&(0x7f0000004600)={0x2, 0x80, 0xd0, 0x0, 0xfe, 0x0, 0x0, 0x80000100000001, 0x82c0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5d22, 0xcb}, 0x11fe65, 0x3, 0x10000000, 0x0, 0xd6ae, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xffe0000000400000}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) 450.268261ms ago: executing program 2 (id=1183): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000a00)=""/254, 0xfe}, {&(0x7f0000000f00)=""/188, 0xbc}, {&(0x7f0000000780)=""/238, 0xee}, {&(0x7f0000000fc0)=""/4077, 0xfed}, {&(0x7f0000000480)=""/222, 0xde}, {&(0x7f0000000940)=""/167, 0xa7}, {&(0x7f0000000700)=""/108, 0x6c}], 0x7}, 0x40012100) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0], 0x0, 0xfa, &(0x7f0000000480), 0x0, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x85, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) recvmsg$unix(0xffffffffffffffff, &(0x7f00000024c0)={&(0x7f0000000d40), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000001fc0)=""/216, 0xd8}, {&(0x7f00000020c0)=""/152, 0x98}, {&(0x7f0000000dc0)=""/91, 0x5b}, {&(0x7f0000002180)=""/189, 0xbd}, {&(0x7f0000002240)=""/74, 0x4a}, {&(0x7f00000022c0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/3, 0x3}], 0x7, &(0x7f0000002440)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}, 0x10000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0xa, 0x922000000003, 0x11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000800) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x18, 0x12, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xb2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@jmp={0x5, 0x1, 0x6, 0x5, 0x8, 0xfffffffffffffff0, 0x8}, @generic={0x6, 0xc, 0xb, 0x3, 0x7fffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x7, 0xe5, &(0x7f0000000240)=""/229, 0x40f00, 0x8, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000b80)=[r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, r0, r0, r9, r0, r0], &(0x7f0000000bc0)=[{0x3, 0x3, 0xf, 0x4}, {0x2, 0x2, 0x0, 0x8}, {0x4, 0x1, 0xd, 0xb}, {0x1, 0x4, 0x9}, {0x3, 0x5, 0x2, 0x8}], 0x10, 0x7}, 0x94) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) sendmsg$kcm(r1, &(0x7f0000000740)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x80, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="10a3c63000000000b705000008000000850000006a0000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 41.710088ms ago: executing program 4 (id=1184): r0 = getpid() perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000500000000000000000000008500000017000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r1, 0x20, &(0x7f0000000400)={&(0x7f0000000200)=""/87, 0x57, 0x0, &(0x7f0000000380)=""/99, 0x63}}, 0x10) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='afs_reload_dir\x00', r3}, 0x18) syz_clone(0x81066000, 0x0, 0x64, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x92000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x9}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000000040)=0x40) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) gettid() bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x13240, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r9, 0x8010743f, 0xf0ff1f00000000) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) 0s ago: executing program 1 (id=1185): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000006c0)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x700, 0x12) r2 = socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8993, &(0x7f0000000080)) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.18' (ED25519) to the list of known hosts. [ 72.126263][ T5775] cgroup: Unknown subsys name 'net' [ 72.264045][ T5775] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.981987][ T5775] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.519792][ T5793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.522531][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.537726][ T5795] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.538069][ T5796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.546456][ T5795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.554495][ T5796] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.560299][ T5795] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.574996][ T5795] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.583803][ T5796] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.584379][ T5795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.599318][ T5795] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.606641][ T5796] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.606947][ T5795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.626246][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.626448][ T5799] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.634590][ T5793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.641763][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.649295][ T5793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.656072][ T5799] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.662959][ T5793] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.681191][ T5793] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.682516][ T5799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.689343][ T5793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.697139][ T5799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.239711][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 76.261358][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 76.294892][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 76.397277][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 76.512780][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.520182][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.527686][ T5785] bridge_slave_0: entered allmulticast mode [ 76.534554][ T5785] bridge_slave_0: entered promiscuous mode [ 76.559162][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.566637][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.573774][ T5787] bridge_slave_0: entered allmulticast mode [ 76.581008][ T5787] bridge_slave_0: entered promiscuous mode [ 76.590535][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.597909][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.605107][ T5787] bridge_slave_1: entered allmulticast mode [ 76.612688][ T5787] bridge_slave_1: entered promiscuous mode [ 76.620021][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.627220][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.634897][ T5785] bridge_slave_1: entered allmulticast mode [ 76.642284][ T5785] bridge_slave_1: entered promiscuous mode [ 76.701130][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.710476][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.718493][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.725884][ T5786] bridge_slave_0: entered allmulticast mode [ 76.732753][ T5786] bridge_slave_0: entered promiscuous mode [ 76.764164][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.788385][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.796993][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.804198][ T5786] bridge_slave_1: entered allmulticast mode [ 76.811613][ T5786] bridge_slave_1: entered promiscuous mode [ 76.833008][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.880995][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.889047][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.896776][ T5788] bridge_slave_0: entered allmulticast mode [ 76.903626][ T5788] bridge_slave_0: entered promiscuous mode [ 76.913844][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.937929][ T5785] team0: Port device team_slave_0 added [ 76.961444][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.973134][ T5785] team0: Port device team_slave_1 added [ 76.979749][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.987352][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.994720][ T5788] bridge_slave_1: entered allmulticast mode [ 77.002722][ T5788] bridge_slave_1: entered promiscuous mode [ 77.012146][ T5787] team0: Port device team_slave_0 added [ 77.022109][ T5787] team0: Port device team_slave_1 added [ 77.030117][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.109610][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.116794][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.144037][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.183524][ T5786] team0: Port device team_slave_0 added [ 77.197933][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.204935][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.231567][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.252248][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.265287][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.275563][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.282693][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.309215][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.322483][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.329626][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.355847][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.368537][ T5786] team0: Port device team_slave_1 added [ 77.451037][ T5787] hsr_slave_0: entered promiscuous mode [ 77.458005][ T5787] hsr_slave_1: entered promiscuous mode [ 77.488674][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.496424][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.523192][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.536270][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.543252][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.569475][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.583358][ T5788] team0: Port device team_slave_0 added [ 77.593641][ T5788] team0: Port device team_slave_1 added [ 77.662480][ T5785] hsr_slave_0: entered promiscuous mode [ 77.669552][ T5785] hsr_slave_1: entered promiscuous mode [ 77.676340][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.684182][ T5785] Cannot create hsr debugfs directory [ 77.696661][ T51] Bluetooth: hci2: command tx timeout [ 77.751048][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.759039][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.785186][ T5799] Bluetooth: hci1: command tx timeout [ 77.785699][ T5793] Bluetooth: hci3: command tx timeout [ 77.796404][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.797441][ T51] Bluetooth: hci0: command tx timeout [ 77.824888][ T5786] hsr_slave_0: entered promiscuous mode [ 77.831982][ T5786] hsr_slave_1: entered promiscuous mode [ 77.838678][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.846706][ T5786] Cannot create hsr debugfs directory [ 77.852964][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.860142][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.886308][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.106934][ T5788] hsr_slave_0: entered promiscuous mode [ 78.115586][ T5788] hsr_slave_1: entered promiscuous mode [ 78.122297][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.130580][ T5788] Cannot create hsr debugfs directory [ 78.289155][ T5787] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.300360][ T5787] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.322928][ T5787] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.334774][ T5787] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.434023][ T5785] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.460985][ T5785] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.472841][ T5785] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.483108][ T5785] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.578385][ T5786] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.589782][ T5786] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.602233][ T5786] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.618492][ T5786] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.714708][ T5788] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.727815][ T5788] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.738613][ T5788] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.761465][ T5788] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.893908][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.914664][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.970263][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.005225][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.017523][ T2990] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.025374][ T2990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.050974][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.063920][ T2990] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.071226][ T2990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.097267][ T2990] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.104538][ T2990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.119729][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.153818][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.164930][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.172144][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.197921][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.240748][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.248090][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.287793][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.295241][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.328456][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.335696][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.349427][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.356599][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.461699][ T5786] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.500993][ T5786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.776048][ T51] Bluetooth: hci2: command tx timeout [ 79.784914][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.857830][ T51] Bluetooth: hci3: command tx timeout [ 79.863501][ T51] Bluetooth: hci0: command tx timeout [ 79.865849][ T5793] Bluetooth: hci1: command tx timeout [ 79.935692][ T5785] veth0_vlan: entered promiscuous mode [ 79.988847][ T5785] veth1_vlan: entered promiscuous mode [ 80.049932][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.073966][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.113427][ T5785] veth0_macvtap: entered promiscuous mode [ 80.128101][ T5785] veth1_macvtap: entered promiscuous mode [ 80.165023][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.202678][ T5787] veth0_vlan: entered promiscuous mode [ 80.224693][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.242457][ T5788] veth0_vlan: entered promiscuous mode [ 80.261606][ T5787] veth1_vlan: entered promiscuous mode [ 80.288922][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.301020][ T5785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.311785][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.320954][ T5785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.330521][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.343878][ T5788] veth1_vlan: entered promiscuous mode [ 80.484612][ T5786] veth0_vlan: entered promiscuous mode [ 80.484741][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.507251][ T5787] veth0_macvtap: entered promiscuous mode [ 80.513713][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.559532][ T5787] veth1_macvtap: entered promiscuous mode [ 80.569469][ T5788] veth0_macvtap: entered promiscuous mode [ 80.589524][ T5786] veth1_vlan: entered promiscuous mode [ 80.606392][ T5788] veth1_macvtap: entered promiscuous mode [ 80.623107][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.634783][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.687701][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.700060][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.712984][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.742193][ T5786] veth0_macvtap: entered promiscuous mode [ 80.755413][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.766999][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.777324][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.788156][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.800608][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.813082][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.824146][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.837110][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.849057][ T5787] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.858417][ T5787] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.867397][ T5787] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.876607][ T5787] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.907959][ T5786] veth1_macvtap: entered promiscuous mode [ 80.929959][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.955084][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.971372][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.982862][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.004891][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.047163][ T5788] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.059330][ T5788] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.070670][ T5788] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.080203][ T5788] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.175103][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.199940][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.219943][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.238932][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.254302][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.271116][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.284199][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.350898][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.372348][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.394717][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.405664][ C1] hrtimer: interrupt took 61657 ns [ 81.410746][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.422001][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.439405][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.477295][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.572340][ T5786] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.585265][ T5786] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.599321][ T5786] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.608251][ T5786] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.633463][ T3443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.645124][ T3443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.865866][ T5799] Bluetooth: hci2: command tx timeout [ 81.881801][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.904661][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.936594][ T5799] Bluetooth: hci1: command tx timeout [ 81.946797][ T5793] Bluetooth: hci3: command tx timeout [ 81.952343][ T5799] Bluetooth: hci0: command tx timeout [ 82.003115][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.022331][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.137877][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.248590][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.357929][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.401968][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.663121][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.741636][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.199452][ T5883] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 83.937071][ T5799] Bluetooth: hci2: command tx timeout [ 84.032329][ T5799] Bluetooth: hci0: command tx timeout [ 84.037876][ T5793] Bluetooth: hci3: command tx timeout [ 84.043315][ T5793] Bluetooth: hci1: command tx timeout [ 84.147670][ T5890] netlink: 'syz.3.4': attribute type 10 has an invalid length. [ 84.320288][ T5890] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 84.976929][ C0] Illegal XDP return value 16128 on prog (id 4) dev veth0_to_bond, expect packet loss! [ 85.986959][ T5902] netlink: 'syz.2.8': attribute type 10 has an invalid length. [ 86.037272][ T5902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.047379][ T5902] team0: Port device bond0 added [ 86.220671][ T5900] syz.3.7 uses obsolete (PF_INET,SOCK_PACKET) [ 87.162533][ T967] cfg80211: failed to load regulatory.db [ 87.365317][ T5913] netlink: 'syz.3.11': attribute type 39 has an invalid length. [ 88.335160][ T5915] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.343586][ T5915] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.354196][ T5915] bridge0: entered allmulticast mode [ 88.410644][ T5915] bridge_slave_1: left allmulticast mode [ 88.425490][ T5915] bridge_slave_1: left promiscuous mode [ 88.435525][ T5915] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.452999][ T5915] bridge_slave_0: left allmulticast mode [ 88.461528][ T5915] bridge_slave_0: left promiscuous mode [ 88.470426][ T5915] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.222039][ T5936] netlink: 'syz.2.20': attribute type 21 has an invalid length. [ 91.914272][ T5939] netlink: 'syz.0.19': attribute type 10 has an invalid length. [ 92.080638][ T5939] batman_adv: batadv0: Adding interface: wlan0 [ 96.582638][ T5939] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.794979][ T5939] batman_adv: batadv0: Interface activated: wlan0 [ 97.512311][ T5952] netlink: 'syz.2.23': attribute type 10 has an invalid length. [ 97.583659][ T5952] batman_adv: batadv0: Adding interface: wlan0 [ 97.616967][ T5952] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.658990][ T5952] batman_adv: batadv0: Interface activated: wlan0 [ 97.668521][ T5953] netlink: 830 bytes leftover after parsing attributes in process `syz.0.24'. [ 97.855599][ T5957] netlink: 'syz.1.25': attribute type 21 has an invalid length. [ 97.868414][ T5957] netlink: 128 bytes leftover after parsing attributes in process `syz.1.25'. [ 97.879162][ T5957] netlink: 'syz.1.25': attribute type 4 has an invalid length. [ 97.891703][ T5957] netlink: 'syz.1.25': attribute type 3 has an invalid length. [ 97.901083][ T5957] netlink: 3 bytes leftover after parsing attributes in process `syz.1.25'. [ 98.721989][ T5976] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.31'. [ 98.736895][ T5976] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.31'. [ 98.748331][ T5973] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.31'. [ 98.783022][ T5973] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.31'. [ 98.881435][ T5978] netlink: 'syz.2.32': attribute type 9 has an invalid length. [ 98.893170][ T5978] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.32'. [ 99.014399][ T5981] netlink: 'syz.1.33': attribute type 21 has an invalid length. [ 99.130537][ T5979] netlink: 'syz.2.32': attribute type 9 has an invalid length. [ 99.146108][ T5979] netlink: 154584 bytes leftover after parsing attributes in process `syz.2.32'. [ 99.832231][ T5977] delete_channel: no stack [ 99.860199][ T5988] netlink: 'syz.0.36': attribute type 21 has an invalid length. [ 99.874551][ T5988] netlink: 128 bytes leftover after parsing attributes in process `syz.0.36'. [ 99.891390][ T5988] netlink: 'syz.0.36': attribute type 4 has an invalid length. [ 99.900721][ T5988] netlink: 'syz.0.36': attribute type 3 has an invalid length. [ 102.511091][ T6027] delete_channel: no stack [ 103.094900][ T6044] __nla_validate_parse: 9 callbacks suppressed [ 103.094920][ T6044] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.54'. [ 103.123750][ T6034] sctp: [Deprecated]: syz.1.52 (pid 6034) Use of struct sctp_assoc_value in delayed_ack socket option. [ 103.123750][ T6034] Use struct sctp_sack_info instead [ 103.600233][ T6045] validate_nla: 4 callbacks suppressed [ 103.600254][ T6045] netlink: 'syz.3.55': attribute type 3 has an invalid length. [ 103.633965][ T6045] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.55'. [ 104.304766][ T6057] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.57'. [ 105.802475][ T6043] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.55'. [ 105.825709][ T6057] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.57'. [ 105.836561][ T6060] netlink: 'syz.0.58': attribute type 21 has an invalid length. [ 106.444653][ T6083] netlink: 830 bytes leftover after parsing attributes in process `syz.1.67'. [ 106.658127][ T6085] netlink: 'syz.1.67': attribute type 10 has an invalid length. [ 107.095273][ T6089] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.448513][ T6090] wg2: entered promiscuous mode [ 107.454564][ T6090] wg2: entered allmulticast mode [ 107.648285][ T6096] netlink: 'syz.1.70': attribute type 9 has an invalid length. [ 107.685803][ T6096] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.70'. [ 107.934732][ T6096] netlink: 'syz.1.70': attribute type 9 has an invalid length. [ 107.979936][ T6096] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.70'. [ 108.128203][ T6116] netlink: 'syz.0.74': attribute type 2 has an invalid length. [ 108.160796][ T6116] netlink: 132 bytes leftover after parsing attributes in process `syz.0.74'. [ 108.266186][ T6095] delete_channel: no stack [ 108.678023][ T6134] netlink: 'syz.0.80': attribute type 9 has an invalid length. [ 108.693490][ T6134] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.80'. [ 108.778626][ T6137] netlink: 'syz.2.81': attribute type 2 has an invalid length. [ 108.840885][ T6137] netlink: 'syz.2.81': attribute type 3 has an invalid length. [ 108.872262][ T6137] netlink: 132 bytes leftover after parsing attributes in process `syz.2.81'. [ 108.982388][ T6138] netlink: 'syz.0.80': attribute type 9 has an invalid length. [ 109.008449][ T6138] netlink: 154584 bytes leftover after parsing attributes in process `syz.0.80'. [ 109.290480][ T6142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.82'. [ 109.711126][ T6132] delete_channel: no stack [ 109.766764][ T6141] warning: `syz.1.82' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 110.074001][ T6147] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.83'. [ 110.110950][ T6151] netlink: 'syz.2.85': attribute type 11 has an invalid length. [ 110.134178][ T6151] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.85'. [ 110.141049][ T6149] netlink: 'syz.1.84': attribute type 21 has an invalid length. [ 110.172132][ T6147] netlink: 'syz.0.83': attribute type 13 has an invalid length. [ 110.184015][ T6151] netlink: 196 bytes leftover after parsing attributes in process `syz.2.85'. [ 110.193751][ T6147] netlink: 152 bytes leftover after parsing attributes in process `syz.0.83'. [ 110.219587][ T6147] : renamed from syz_tun (while UP) [ 110.232452][ T6151] netlink: 'syz.2.85': attribute type 29 has an invalid length. [ 110.267962][ T6147] : refused to change device tx_queue_len [ 110.286640][ T6147] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 110.419606][ T6151] netlink: 'syz.2.85': attribute type 29 has an invalid length. [ 110.509245][ T6155] netlink: 'syz.2.85': attribute type 29 has an invalid length. [ 110.688247][ T6156] netlink: 'syz.2.85': attribute type 29 has an invalid length. [ 111.236681][ T6174] netlink: 830 bytes leftover after parsing attributes in process `syz.0.91'. [ 112.522990][ T6197] batman_adv: batadv0: Adding interface: wlan0 [ 112.549950][ T6197] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.592930][ T6197] batman_adv: batadv0: Interface activated: wlan0 [ 112.626836][ T6203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.644694][ T6203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.704126][ T6203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.755157][ T6203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.369766][ T6221] __nla_validate_parse: 1 callbacks suppressed [ 113.369790][ T6221] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.105'. [ 113.412798][ T6224] netlink: 132 bytes leftover after parsing attributes in process `syz.0.106'. [ 113.436029][ T6227] sit0: entered allmulticast mode [ 113.838686][ T6232] validate_nla: 8 callbacks suppressed [ 113.838708][ T6232] netlink: 'syz.2.108': attribute type 21 has an invalid length. [ 115.105135][ T6250] syzkaller0: entered promiscuous mode [ 115.115463][ T6262] TCP: TCP_TX_DELAY enabled [ 115.188689][ T6250] syzkaller0: entered allmulticast mode [ 115.380424][ T6255] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 115.411782][ T2990] syzkaller0: tun_net_xmit 48 [ 115.448224][ T6268] netlink: 'syz.2.118': attribute type 17 has an invalid length. [ 115.496720][ T6268] netlink: 152 bytes leftover after parsing attributes in process `syz.2.118'. [ 115.566453][ T6268] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 115.837676][ T6271] netlink: 'syz.3.119': attribute type 21 has an invalid length. [ 116.408626][ T6276] Zero length message leads to an empty skb [ 120.091308][ T6302] netlink: 'syz.0.127': attribute type 10 has an invalid length. [ 120.108257][ T6302] netlink: 2 bytes leftover after parsing attributes in process `syz.0.127'. [ 120.159928][ T6302] bond0: entered promiscuous mode [ 120.165036][ T6302] bond_slave_0: entered promiscuous mode [ 120.172905][ T6302] bond_slave_1: entered promiscuous mode [ 120.186034][ T6302] bridge0: port 3(bond0) entered blocking state [ 120.192729][ T6302] bridge0: port 3(bond0) entered disabled state [ 120.203012][ T6302] bond0: entered allmulticast mode [ 120.217952][ T6302] bond_slave_0: entered allmulticast mode [ 120.239133][ T6302] bond_slave_1: entered allmulticast mode [ 120.259167][ T6302] bridge0: port 3(bond0) entered blocking state [ 120.265756][ T6302] bridge0: port 3(bond0) entered forwarding state [ 120.312462][ T6310] netlink: 'syz.1.129': attribute type 21 has an invalid length. [ 120.559908][ T6314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.589129][ T6314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.628428][ T6314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.643915][ T6314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.685476][ T6314] batman_adv: batadv0: Interface deactivated: wlan0 [ 120.712682][ T6314] batman_adv: batadv0: Removing interface: wlan0 [ 120.804789][ T6320] netlink: 'syz.1.133': attribute type 2 has an invalid length. [ 120.815785][ T6320] netlink: 116 bytes leftover after parsing attributes in process `syz.1.133'. [ 120.835842][ T6322] netlink: 'syz.1.133': attribute type 2 has an invalid length. [ 120.844768][ T6322] netlink: 116 bytes leftover after parsing attributes in process `syz.1.133'. [ 121.676089][ T6344] netlink: 'syz.0.140': attribute type 21 has an invalid length. [ 121.819527][ T6349] netlink: 'syz.2.141': attribute type 21 has an invalid length. [ 122.871013][ T6353] bridge0: port 3(bond0) entered disabled state [ 122.877660][ T6353] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.885523][ T6353] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.929199][ T6353] bridge0: entered allmulticast mode [ 122.966157][ T6359] bond0: left allmulticast mode [ 122.971188][ T6359] bond_slave_0: left allmulticast mode [ 122.990518][ T6359] bond_slave_1: left allmulticast mode [ 123.021109][ T6359] bridge0: port 3(bond0) entered disabled state [ 123.040618][ T6359] bridge_slave_1: left allmulticast mode [ 123.047220][ T6368] netlink: 60 bytes leftover after parsing attributes in process `syz.2.146'. [ 123.058166][ T6359] bridge_slave_1: left promiscuous mode [ 123.065139][ T6359] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.079709][ T6359] bridge_slave_0: left allmulticast mode [ 123.085801][ T6359] bridge_slave_0: left promiscuous mode [ 123.092743][ T6359] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.172137][ T6366] netlink: 15119 bytes leftover after parsing attributes in process `syz.3.145'. [ 123.185998][ T6368] netlink: 60 bytes leftover after parsing attributes in process `syz.2.146'. [ 123.206324][ T6371] netlink: 60 bytes leftover after parsing attributes in process `syz.2.146'. [ 123.232640][ T6373] netlink: 60 bytes leftover after parsing attributes in process `syz.2.146'. [ 123.380419][ T6377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.395835][ T6377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.416355][ T6377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.423856][ T6377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.438793][ T6377] batman_adv: batadv0: Interface deactivated: wlan0 [ 123.446085][ T6377] batman_adv: batadv0: Removing interface: wlan0 [ 123.803939][ T6381] macvtap0: refused to change device tx_queue_len [ 123.823607][ T6384] netlink: 'syz.0.152': attribute type 21 has an invalid length. [ 124.168970][ T6388] IPv6: pim6reg1: Disabled Multicast RS [ 125.324189][ T6405] À: port 1(vlan0) entered blocking state [ 125.339314][ T6405] À: port 1(vlan0) entered disabled state [ 125.358111][ T6405] vlan0: entered allmulticast mode [ 125.364878][ T6405] veth0_vlan: entered allmulticast mode [ 125.373585][ T6405] vlan0: entered promiscuous mode [ 125.382670][ T6405] À: port 1(vlan0) entered blocking state [ 125.388619][ T6405] À: port 1(vlan0) entered forwarding state [ 125.694497][ T6434] netlink: 'syz.3.166': attribute type 11 has an invalid length. [ 125.717308][ T6434] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.166'. [ 125.905140][ T6442] netlink: 'syz.1.168': attribute type 29 has an invalid length. [ 126.524470][ T6452] netlink: 'syz.3.173': attribute type 29 has an invalid length. [ 126.718427][ T6442] netlink: 'syz.1.168': attribute type 29 has an invalid length. [ 126.740024][ T6452] netlink: 'syz.3.173': attribute type 29 has an invalid length. [ 128.811358][ T6466] netlink: 'syz.0.183': attribute type 29 has an invalid length. [ 128.941080][ T6466] netlink: 'syz.0.183': attribute type 29 has an invalid length. [ 129.724752][ T6473] delete_channel: no stack [ 130.006682][ T6486] wg2: left promiscuous mode [ 130.011422][ T6486] wg2: left allmulticast mode [ 130.214011][ T6488] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.182'. [ 130.453212][ T6491] wg2: entered promiscuous mode [ 130.505738][ T6491] wg2: entered allmulticast mode [ 130.645665][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 131.290665][ T6496] netlink: 60 bytes leftover after parsing attributes in process `syz.3.186'. [ 131.730963][ T6496] netlink: 60 bytes leftover after parsing attributes in process `syz.3.186'. [ 131.744868][ T6503] netlink: 60 bytes leftover after parsing attributes in process `syz.3.186'. [ 131.769136][ T6504] netlink: 60 bytes leftover after parsing attributes in process `syz.3.186'. [ 131.807521][ T6508] netlink: 'syz.1.189': attribute type 33 has an invalid length. [ 132.017658][ T6515] netlink: 'syz.3.191': attribute type 21 has an invalid length. [ 132.164672][ T6517] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.190'. [ 132.237659][ T6517] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 132.540697][ T6520] can: request_module (can-proto-4) failed. [ 132.764467][ T6533] syz.3.196[6533] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.764737][ T6533] syz.3.196[6533] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.220106][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.242188][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.325897][ T6550] netlink: 'syz.1.201': attribute type 21 has an invalid length. [ 133.836378][ T6563] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.205'. [ 134.607589][ T6577] netlink: 'syz.1.209': attribute type 19 has an invalid length. [ 134.624252][ T6577] netlink: 40 bytes leftover after parsing attributes in process `syz.1.209'. [ 135.013298][ T6589] netlink: 'syz.1.213': attribute type 21 has an invalid length. [ 136.313660][ T6615] netlink: 'syz.0.220': attribute type 4 has an invalid length. [ 136.325948][ T6615] netlink: 'syz.0.220': attribute type 3 has an invalid length. [ 136.354038][ T6615] netlink: 152988 bytes leftover after parsing attributes in process `syz.0.220'. [ 136.494295][ T6626] netlink: 'syz.3.223': attribute type 21 has an invalid length. [ 136.515234][ T6628] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.224'. [ 136.576812][ T6628] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.224'. [ 136.647461][ T6628] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.224'. [ 136.680175][ T6630] netlink: 176 bytes leftover after parsing attributes in process `syz.2.225'. [ 136.916948][ T6637] netlink: 60 bytes leftover after parsing attributes in process `syz.3.227'. [ 137.117233][ T6637] netlink: 'syz.3.227': attribute type 29 has an invalid length. [ 137.557945][ T6637] netlink: 'syz.3.227': attribute type 29 has an invalid length. [ 137.620008][ T6642] netlink: 'syz.3.227': attribute type 29 has an invalid length. [ 137.954146][ T6658] netlink: 'syz.3.233': attribute type 21 has an invalid length. [ 137.971510][ T6658] netlink: 'syz.3.233': attribute type 1 has an invalid length. [ 137.981964][ T6658] netlink: 132 bytes leftover after parsing attributes in process `syz.3.233'. [ 138.475573][ T6668] netlink: 'syz.3.236': attribute type 21 has an invalid length. [ 140.208896][ T6689] netlink: 176 bytes leftover after parsing attributes in process `syz.3.242'. [ 140.227048][ T6691] netlink: 60 bytes leftover after parsing attributes in process `syz.2.250'. [ 140.259597][ T6691] netlink: 60 bytes leftover after parsing attributes in process `syz.2.250'. [ 140.460041][ T6692] netlink: 'syz.1.243': attribute type 4 has an invalid length. [ 140.508251][ T6692] netlink: 'syz.1.243': attribute type 3 has an invalid length. [ 140.784883][ T6708] netlink: 'syz.0.247': attribute type 21 has an invalid length. [ 142.468041][ T6738] __nla_validate_parse: 2 callbacks suppressed [ 142.468059][ T6738] netlink: 176 bytes leftover after parsing attributes in process `syz.0.255'. [ 142.896748][ T6754] netlink: 'syz.0.260': attribute type 21 has an invalid length. [ 143.700230][ T6758] netlink: 'syz.2.262': attribute type 4 has an invalid length. [ 143.727143][ T6758] netlink: 'syz.2.262': attribute type 3 has an invalid length. [ 143.737566][ T6758] netlink: 152988 bytes leftover after parsing attributes in process `syz.2.262'. [ 144.582653][ T6781] netlink: 'syz.3.268': attribute type 21 has an invalid length. [ 144.619179][ T6781] netlink: 128 bytes leftover after parsing attributes in process `syz.3.268'. [ 144.677418][ T6781] netlink: 'syz.3.268': attribute type 4 has an invalid length. [ 144.984632][ T6788] netlink: 'syz.2.271': attribute type 2 has an invalid length. [ 145.027432][ T6788] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.271'. [ 145.466778][ T6800] netlink: 'syz.2.273': attribute type 21 has an invalid length. [ 146.479464][ T6811] netlink: 'syz.0.277': attribute type 1 has an invalid length. [ 146.521359][ T6811] netlink: 184 bytes leftover after parsing attributes in process `syz.0.277'. [ 147.248186][ T6845] netlink: 'syz.0.286': attribute type 21 has an invalid length. [ 147.250709][ T6838] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.284'. [ 147.281630][ T6839] netlink: 'syz.1.284': attribute type 10 has an invalid length. [ 147.517433][ T6851] netlink: 14 bytes leftover after parsing attributes in process `syz.2.288'. [ 148.232752][ T6839] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 148.243666][ T6838] netlink: 'syz.1.284': attribute type 10 has an invalid length. [ 148.253765][ T6839] syz.1.284 (6839) used greatest stack depth: 19368 bytes left [ 148.402105][ T6865] netlink: 'syz.2.293': attribute type 5 has an invalid length. [ 148.732073][ T6876] netlink: 'syz.1.297': attribute type 21 has an invalid length. [ 149.023874][ T6885] netlink: 'syz.3.301': attribute type 21 has an invalid length. [ 149.786533][ T6904] netlink: 'syz.1.309': attribute type 21 has an invalid length. [ 150.127483][ T6923] netlink: 'syz.0.314': attribute type 10 has an invalid length. [ 150.171565][ T6923] bridge_slave_1: entered promiscuous mode [ 150.214992][ T6923] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 150.403363][ T6931] netlink: 'syz.1.317': attribute type 39 has an invalid length. [ 150.615273][ T6934] syz.3.318: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 150.732776][ T6934] CPU: 1 PID: 6934 Comm: syz.3.318 Not tainted syzkaller #0 [ 150.740182][ T6934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 150.750551][ T6934] Call Trace: [ 150.753865][ T6934] [ 150.756830][ T6934] dump_stack_lvl+0x16c/0x230 [ 150.761559][ T6934] ? show_regs_print_info+0x20/0x20 [ 150.766801][ T6934] ? load_image+0x3b0/0x3b0 [ 150.771353][ T6934] ? __rcu_read_unlock+0x7c/0xd0 [ 150.776426][ T6934] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 150.782967][ T6934] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 150.789512][ T6934] warn_alloc+0x210/0x300 [ 150.793893][ T6934] ? stack_trace_save+0x9c/0xe0 [ 150.798915][ T6934] ? zone_watermark_ok_safe+0x230/0x230 [ 150.804521][ T6934] ? kasan_set_track+0x5f/0x70 [ 150.809325][ T6934] ? kasan_set_track+0x4e/0x70 [ 150.814149][ T6934] ? __kasan_kmalloc+0x8f/0xa0 [ 150.819048][ T6934] ? xsk_init_queue+0xb0/0x110 [ 150.823948][ T6934] ? xsk_setsockopt+0x4db/0x6f0 [ 150.828831][ T6934] ? do_sock_setsockopt+0x175/0x1a0 [ 150.834070][ T6934] ? __x64_sys_setsockopt+0x184/0x200 [ 150.839523][ T6934] __vmalloc_node_range+0x126/0x1320 [ 150.844907][ T6934] ? free_vm_area+0x50/0x50 [ 150.849499][ T6934] vmalloc_user+0x74/0x80 [ 150.853965][ T6934] ? xskq_create+0xbf/0x170 [ 150.858506][ T6934] xskq_create+0xbf/0x170 [ 150.862970][ T6934] xsk_init_queue+0xb0/0x110 [ 150.867599][ T6934] xsk_setsockopt+0x4db/0x6f0 [ 150.872321][ T6934] ? xsk_poll+0x670/0x670 [ 150.876698][ T6934] ? __fget_files+0x28/0x4d0 [ 150.881672][ T6934] ? aa_sock_opt_perm+0x74/0x100 [ 150.886650][ T6934] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 150.892323][ T6934] ? security_socket_setsockopt+0x7e/0xa0 [ 150.898183][ T6934] ? xsk_poll+0x670/0x670 [ 150.902584][ T6934] do_sock_setsockopt+0x175/0x1a0 [ 150.907673][ T6934] ? __fdget+0x180/0x210 [ 150.911960][ T6934] __x64_sys_setsockopt+0x184/0x200 [ 150.917213][ T6934] do_syscall_64+0x55/0xb0 [ 150.921669][ T6934] ? clear_bhb_loop+0x40/0x90 [ 150.926827][ T6934] ? clear_bhb_loop+0x40/0x90 [ 150.931544][ T6934] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 150.937496][ T6934] RIP: 0033:0x7f47b418f749 [ 150.941966][ T6934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.961961][ T6934] RSP: 002b:00007f47b5097038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 150.970398][ T6934] RAX: ffffffffffffffda RBX: 00007f47b43e5fa0 RCX: 00007f47b418f749 [ 150.978386][ T6934] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000c [ 150.986478][ T6934] RBP: 00007f47b4213f91 R08: 0000000000000004 R09: 0000000000000000 [ 150.994471][ T6934] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 151.002539][ T6934] R13: 00007f47b43e6038 R14: 00007f47b43e5fa0 R15: 00007ffe7f3b41f8 [ 151.010546][ T6934] [ 151.017576][ T6934] Mem-Info: [ 151.025732][ T6934] active_anon:4602 inactive_anon:0 isolated_anon:0 [ 151.025732][ T6934] active_file:10992 inactive_file:39906 isolated_file:0 [ 151.025732][ T6934] unevictable:768 dirty:37 writeback:0 [ 151.025732][ T6934] slab_reclaimable:9938 slab_unreclaimable:90576 [ 151.025732][ T6934] mapped:24027 shmem:1361 pagetables:437 [ 151.025732][ T6934] sec_pagetables:0 bounce:0 [ 151.025732][ T6934] kernel_misc_reclaimable:0 [ 151.025732][ T6934] free:1355830 free_pcp:11296 free_cma:0 [ 151.073027][ T6934] Node 0 active_anon:18408kB inactive_anon:0kB active_file:43968kB inactive_file:159420kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96108kB dirty:148kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10912kB pagetables:1748kB sec_pagetables:0kB all_unreclaimable? no [ 151.125800][ T6934] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 151.161159][ T6934] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 151.227681][ T6934] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 151.233844][ T6934] Node 0 DMA32 free:1514948kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:18292kB inactive_anon:0kB active_file:43968kB inactive_file:158104kB unevictable:1536kB writepending:152kB present:3129332kB managed:2589596kB mlocked:0kB bounce:0kB free_pcp:23928kB local_pcp:11144kB free_cma:0kB [ 151.269600][ T6934] lowmem_reserve[]: 0 0 1 1 1 [ 151.274712][ T6934] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 151.315301][ T6934] lowmem_reserve[]: 0 0 0 0 0 [ 151.320931][ T6934] Node 1 Normal free:3893324kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21984kB local_pcp:13312kB free_cma:0kB [ 151.356840][ T6945] netlink: 'syz.0.322': attribute type 21 has an invalid length. [ 151.370140][ T6947] netlink: 'syz.2.323': attribute type 10 has an invalid length. [ 151.378324][ T6934] lowmem_reserve[]: 0 0 0 0 0 [ 151.378429][ T6934] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 151.402229][ T6947] netlink: 40 bytes leftover after parsing attributes in process `syz.2.323'. [ 151.402313][ T6934] Node 0 DMA32: 1*4kB (E) 492*8kB (U) 836*16kB (UM) 615*32kB (UM) 399*64kB (UM) 128*128kB (UM) 54*256kB (UM) 16*512kB (UME) 7*1024kB (UM) 3*2048kB (ME) 342*4096kB (M) = 1515076kB [ 151.464612][ T6934] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 151.515940][ T6934] Node 1 Normal: 249*4kB (UME) 55*8kB (UME) 51*16kB (UME) 78*32kB (UME) 23*64kB (UME) 4*128kB (UE) 2*256kB (UE) 2*512kB (UM) 0*1024kB 1*2048kB (U) 948*4096kB (M) = 3893324kB [ 151.517589][ T6947] team0: Port device geneve0 added [ 151.538212][ T6934] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 151.549007][ T6934] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 151.565389][ T6951] delete_channel: no stack [ 151.572432][ T6951] delete_channel: no stack [ 151.577711][ T6934] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 151.588924][ T6934] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 151.600380][ T6934] 52259 total pagecache pages [ 151.605293][ T6934] 0 pages in swap cache [ 151.610523][ T6934] Free swap = 124996kB [ 151.614884][ T6934] Total swap = 124996kB [ 151.620492][ T6934] 2097051 pages RAM [ 151.624582][ T6934] 0 pages HighMem/MovableOnly [ 151.629672][ T6934] 416138 pages reserved [ 151.633862][ T6934] 0 pages cma reserved [ 151.979025][ T6957] netlink: 'syz.3.326': attribute type 7 has an invalid length. [ 153.768646][ T6987] netlink: 'syz.2.334': attribute type 21 has an invalid length. [ 154.160038][ T7003] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.338'. [ 154.185821][ T7003] netlink: 6320 bytes leftover after parsing attributes in process `syz.0.338'. [ 154.205920][ T7003] netlink: 6 bytes leftover after parsing attributes in process `syz.0.338'. [ 154.225797][ T7003] tc_dump_action: action bad kind [ 154.903000][ T7022] syzkaller0: entered promiscuous mode [ 154.920071][ T7022] syzkaller0: entered allmulticast mode [ 154.946501][ T7025] netlink: 'syz.3.345': attribute type 2 has an invalid length. [ 154.954334][ T7025] netlink: 132 bytes leftover after parsing attributes in process `syz.3.345'. [ 155.624416][ T7035] netlink: 'syz.3.348': attribute type 1 has an invalid length. [ 155.648387][ T7035] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.348'. [ 158.493439][ T7030] netlink: 'syz.2.346': attribute type 21 has an invalid length. [ 159.315392][ T7065] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.357'. [ 159.472839][ T7070] netlink: 'syz.2.360': attribute type 21 has an invalid length. [ 161.939161][ T7089] lo: entered allmulticast mode [ 162.412483][ T7102] netlink: 'syz.0.369': attribute type 21 has an invalid length. [ 163.262759][ T7129] netlink: 'syz.1.375': attribute type 5 has an invalid length. [ 163.272544][ T7129] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.375'. [ 163.338908][ T7132] netlink: 'syz.2.378': attribute type 21 has an invalid length. [ 164.800901][ T7152] mac80211_hwsim hwsim6 .3ãc¤±: renamed from wlan1 [ 165.158312][ T7168] netlink: 'syz.1.388': attribute type 21 has an invalid length. [ 166.226413][ T7201] netlink: 'syz.0.398': attribute type 21 has an invalid length. [ 168.024065][ T7224] syzkaller0: entered promiscuous mode [ 168.047175][ T7224] syzkaller0: entered allmulticast mode [ 168.054664][ T7227] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 168.063236][ T1142] syzkaller0: tun_net_xmit 48 [ 170.016923][ T7237] netlink: 'syz.2.409': attribute type 21 has an invalid length. [ 170.184935][ T7247] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.411'. [ 170.200731][ T7247] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 170.643429][ T7258] netlink: 'syz.2.416': attribute type 4 has an invalid length. [ 170.770575][ T7260] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.417'. [ 171.097105][ T7263] netlink: 60 bytes leftover after parsing attributes in process `syz.2.417'. [ 171.429148][ T7260] netlink: 'syz.2.417': attribute type 10 has an invalid length. [ 171.501412][ T7260] team0: Port device dummy0 added [ 171.512006][ T7261] netlink: 'syz.2.417': attribute type 10 has an invalid length. [ 171.683235][ T7261] team0: Port device dummy0 removed [ 171.700417][ T7261] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 171.711658][ T7263] netlink: 60 bytes leftover after parsing attributes in process `syz.2.417'. [ 173.096448][ T5799] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 173.115931][ T5799] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 173.134963][ T5799] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 173.145156][ T5799] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 173.154671][ T5799] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 173.165078][ T5799] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 173.304489][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.463818][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.646756][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.662549][ T7311] netlink: 132 bytes leftover after parsing attributes in process `syz.2.431'. [ 173.740599][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.762612][ T7311] netlink: 'syz.2.431': attribute type 4 has an invalid length. [ 173.771928][ T7311] netlink: 152 bytes leftover after parsing attributes in process `syz.2.431'. [ 174.473447][ T7320] netlink: 180 bytes leftover after parsing attributes in process `syz.0.434'. [ 174.563636][ T7298] chnl_net:caif_netlink_parms(): no params data found [ 175.050661][ T7298] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.066225][ T7298] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.080485][ T7298] bridge_slave_0: entered allmulticast mode [ 175.103672][ T7298] bridge_slave_0: entered promiscuous mode [ 175.129351][ T7298] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.138044][ T7298] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.145329][ T7298] bridge_slave_1: entered allmulticast mode [ 175.153390][ T7298] bridge_slave_1: entered promiscuous mode [ 175.204797][ T7339] netlink: 'syz.2.436': attribute type 10 has an invalid length. [ 175.216725][ T5799] Bluetooth: hci4: command tx timeout [ 175.332136][ T7346] netlink: 'syz.1.438': attribute type 10 has an invalid length. [ 175.460358][ T7298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.524923][ T7298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.773437][ T7354] sit0: entered allmulticast mode [ 175.815347][ T7298] team0: Port device team_slave_0 added [ 175.837324][ T7355] sit0: entered promiscuous mode [ 176.394657][ T7357] netlink: 'syz.0.441': attribute type 39 has an invalid length. [ 176.480173][ T7298] team0: Port device team_slave_1 added [ 176.486554][ T7359] netlink: 'syz.0.441': attribute type 39 has an invalid length. [ 176.800597][ T7298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.809532][ T7298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.852216][ T7298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.907040][ T7298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.914196][ T7298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.942250][ T7298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.977015][ T7366] sctp: [Deprecated]: syz.0.443 (pid 7366) Use of int in max_burst socket option deprecated. [ 176.977015][ T7366] Use struct sctp_assoc_value instead [ 177.129302][ T7366] netlink: 'syz.0.443': attribute type 10 has an invalid length. [ 177.148213][ T7366] veth1_vlan: entered allmulticast mode [ 177.294931][ T7366] team0: Device veth1_vlan failed to register rx_handler [ 177.304134][ T5799] Bluetooth: hci4: command tx timeout [ 177.384313][ T7298] hsr_slave_0: entered promiscuous mode [ 177.394679][ T7298] hsr_slave_1: entered promiscuous mode [ 177.403695][ T7366] syz.0.443 (7366) used greatest stack depth: 17608 bytes left [ 177.417271][ T7298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.425003][ T7298] Cannot create hsr debugfs directory [ 177.688508][ T11] hsr_slave_0: left promiscuous mode [ 177.703863][ T11] hsr_slave_1: left promiscuous mode [ 177.711153][ T11] bridge_slave_1: left allmulticast mode [ 177.717404][ T11] bridge_slave_1: left promiscuous mode [ 177.724329][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.739208][ T11] bridge_slave_0: left allmulticast mode [ 177.744911][ T11] bridge_slave_0: left promiscuous mode [ 177.751715][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.793585][ T11] veth1_macvtap: left promiscuous mode [ 177.800049][ T11] veth0_macvtap: left promiscuous mode [ 177.806285][ T11] veth1_vlan: left promiscuous mode [ 177.812010][ T11] veth0_vlan: left promiscuous mode [ 178.496860][ T11] team0 (unregistering): Port device team_slave_1 removed [ 178.539971][ T11] team0 (unregistering): Port device team_slave_0 removed [ 178.584891][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.631914][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.659816][ T11] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 179.078762][ T11] bond0 (unregistering): Released all slaves [ 179.390640][ T5799] Bluetooth: hci4: command tx timeout [ 179.652148][ T7298] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 179.680785][ T7407] netlink: 'syz.0.455': attribute type 3 has an invalid length. [ 179.694685][ T7298] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 179.703714][ T7407] netlink: 132 bytes leftover after parsing attributes in process `syz.0.455'. [ 179.749214][ T7298] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 179.811336][ T7298] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 179.819105][ T7412] netlink: 'syz.0.455': attribute type 3 has an invalid length. [ 179.854988][ T7412] netlink: 132 bytes leftover after parsing attributes in process `syz.0.455'. [ 180.202046][ T7298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.224912][ T7298] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.241293][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.248772][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.309558][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.316938][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.144121][ T7441] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.460'. [ 181.186296][ T7441] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 181.348991][ T7298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.428473][ T7441] netlink: 'syz.1.460': attribute type 10 has an invalid length. [ 181.455909][ T5799] Bluetooth: hci4: command tx timeout [ 181.572657][ T7441] team0: Port device dummy0 added [ 181.686319][ T7451] netlink: 60 bytes leftover after parsing attributes in process `syz.1.460'. [ 181.760480][ T7442] netlink: 'syz.1.460': attribute type 10 has an invalid length. [ 182.589395][ T7442] team0: Port device dummy0 removed [ 182.690672][ T7442] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 182.755778][ T7451] netlink: 60 bytes leftover after parsing attributes in process `syz.1.460'. [ 183.911472][ T7471] netlink: 'syz.1.467': attribute type 7 has an invalid length. [ 184.090944][ T7298] veth0_vlan: entered promiscuous mode [ 184.166532][ T7298] veth1_vlan: entered promiscuous mode [ 184.261928][ T7298] veth0_macvtap: entered promiscuous mode [ 184.297233][ T7298] veth1_macvtap: entered promiscuous mode [ 184.343825][ T7298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.365094][ T7298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.390961][ T7298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.410780][ T7298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.426537][ T7298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.440881][ T7298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.486404][ T7298] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.495377][ T7298] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.526448][ T7298] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.535240][ T7298] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.665137][ T7298] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 184.687227][ T7298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.725154][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.734416][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.796421][ T7480] netlink: 'syz.0.477': attribute type 7 has an invalid length. [ 184.884533][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.894543][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.180180][ T7487] netlink: 'syz.4.421': attribute type 21 has an invalid length. [ 185.426204][ T7491] netlink: 'syz.0.482': attribute type 21 has an invalid length. [ 185.956330][ T7502] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.473'. [ 186.059629][ T7502] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 186.658900][ T7502] netlink: 'syz.0.473': attribute type 10 has an invalid length. [ 187.717462][ T7511] netlink: 60 bytes leftover after parsing attributes in process `syz.0.473'. [ 188.382772][ T7502] team0: Port device dummy0 added [ 188.404027][ T7504] netlink: 'syz.0.473': attribute type 10 has an invalid length. [ 188.531165][ T7504] team0: Port device dummy0 removed [ 188.541190][ T7504] dummy0: entered promiscuous mode [ 188.547406][ T7504] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 188.557066][ T7511] netlink: 60 bytes leftover after parsing attributes in process `syz.0.473'. [ 188.599266][ T7516] netlink: 60 bytes leftover after parsing attributes in process `syz.0.473'. [ 188.663007][ T7520] netlink: 3752 bytes leftover after parsing attributes in process `syz.1.481'. [ 188.960196][ T7523] netlink: 'syz.4.483': attribute type 12 has an invalid length. [ 190.167126][ T7523] netlink: 132 bytes leftover after parsing attributes in process `syz.4.483'. [ 190.413836][ T7528] netlink: 'syz.0.485': attribute type 21 has an invalid length. [ 190.431368][ T7529] netlink: 'syz.2.484': attribute type 2 has an invalid length. [ 190.472382][ T7529] netlink: 119 bytes leftover after parsing attributes in process `syz.2.484'. [ 191.296455][ T5799] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 193.334812][ T7616] netlink: 'syz.2.491': attribute type 1 has an invalid length. [ 193.476928][ T7616] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.491'. [ 193.726322][ T7614] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.491'. [ 193.764577][ T7614] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.491'. [ 194.195843][ T7634] netlink: 'syz.1.497': attribute type 21 has an invalid length. [ 194.311245][ T7640] netlink: 'syz.0.496': attribute type 1 has an invalid length. [ 194.523576][ T7643] netlink: 'syz.2.501': attribute type 10 has an invalid length. [ 194.566401][ T7643] netlink: 'syz.2.501': attribute type 19 has an invalid length. [ 194.593668][ T7643] netlink: 156 bytes leftover after parsing attributes in process `syz.2.501'. [ 194.663919][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.672055][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.895324][ T7651] syzkaller0: entered promiscuous mode [ 194.937599][ T7651] syzkaller0: entered allmulticast mode [ 197.864231][ T7673] netlink: 'syz.1.509': attribute type 21 has an invalid length. [ 197.890353][ T7684] netlink: 'syz.2.512': attribute type 2 has an invalid length. [ 197.905691][ T7684] netlink: 'syz.2.512': attribute type 8 has an invalid length. [ 197.913788][ T7684] netlink: 132 bytes leftover after parsing attributes in process `syz.2.512'. [ 198.111101][ T7693] netlink: 703 bytes leftover after parsing attributes in process `syz.0.514'. [ 199.538840][ T7716] netlink: 'syz.4.521': attribute type 21 has an invalid length. [ 199.922644][ T7726] netlink: 'syz.2.528': attribute type 10 has an invalid length. [ 200.404633][ T7740] netlink: 'syz.4.530': attribute type 10 has an invalid length. [ 200.439049][ T7740] netlink: 'syz.4.530': attribute type 10 has an invalid length. [ 200.447747][ T7740] netlink: 209216 bytes leftover after parsing attributes in process `syz.4.530'. [ 200.457722][ T7740] openvswitch: netlink: Message has 4 unknown bytes. [ 201.509413][ T7750] netlink: 'syz.0.534': attribute type 21 has an invalid length. [ 201.857510][ T5103] Bluetooth: hci2: command 0x0406 tx timeout [ 201.864555][ T5793] Bluetooth: hci1: command 0x0406 tx timeout [ 201.864580][ T5795] Bluetooth: hci0: command 0x0406 tx timeout [ 203.058242][ T7794] can: request_module (can-proto-0) failed. [ 203.137340][ T7797] netlink: 'syz.4.547': attribute type 21 has an invalid length. [ 203.638337][ T7815] netlink: 'syz.4.553': attribute type 10 has an invalid length. [ 203.664197][ T7815] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.553'. [ 203.694304][ T7815] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 204.133625][ T7825] netlink: 'syz.2.555': attribute type 41 has an invalid length. [ 204.443069][ T7829] netlink: 'syz.4.558': attribute type 3 has an invalid length. [ 204.457816][ T7829] netlink: 'syz.4.558': attribute type 238 has an invalid length. [ 204.799136][ T7835] netlink: 'syz.4.560': attribute type 21 has an invalid length. [ 205.835173][ T7857] mac80211_hwsim hwsim17 O3ãc¤±: renamed from wlan1 (while UP) [ 206.497006][ T7868] netlink: 'syz.2.572': attribute type 3 has an invalid length. [ 206.519184][ T7868] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.572'. [ 207.424528][ T7876] netlink: 'syz.2.574': attribute type 21 has an invalid length. [ 207.686382][ T7889] netlink: 'syz.0.580': attribute type 30 has an invalid length. [ 208.625075][ T7914] netlink: 'syz.2.587': attribute type 21 has an invalid length. [ 209.471484][ T7935] netlink: 196 bytes leftover after parsing attributes in process `syz.0.594'. [ 214.613133][ T7954] netlink: 'syz.4.600': attribute type 21 has an invalid length. [ 214.665173][ T7950] netlink: 'syz.0.599': attribute type 3 has an invalid length. [ 214.720168][ T7950] netlink: 'syz.0.599': attribute type 1 has an invalid length. [ 214.816791][ T7950] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.599'. [ 216.013538][ T7979] netlink: 128 bytes leftover after parsing attributes in process `syz.2.608'. [ 216.286834][ T7985] netlink: 'syz.2.611': attribute type 21 has an invalid length. [ 216.697312][ T7994] netlink: 'syz.1.612': attribute type 39 has an invalid length. [ 216.884354][ T8000] netlink: 'syz.4.615': attribute type 12 has an invalid length. [ 216.896004][ T8000] netlink: 132 bytes leftover after parsing attributes in process `syz.4.615'. [ 217.510205][ T8019] netlink: 'syz.1.621': attribute type 19 has an invalid length. [ 217.525786][ T8019] netlink: 172 bytes leftover after parsing attributes in process `syz.1.621'. [ 217.587398][ T8024] netlink: 'syz.2.622': attribute type 21 has an invalid length. [ 217.861350][ T8033] pim6reg1: entered promiscuous mode [ 217.869160][ T8033] pim6reg1: entered allmulticast mode [ 218.072832][ T8035] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.626'. [ 218.842267][ T8043] netlink: 'syz.1.629': attribute type 10 has an invalid length. [ 219.237615][ T8043] team0: Port device netdevsim0 added [ 219.289509][ T8057] netlink: 'syz.4.633': attribute type 21 has an invalid length. [ 220.355792][ T8075] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.470394][ T8076] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.477809][ T8076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.899618][ T8089] netlink: 'syz.0.644': attribute type 21 has an invalid length. [ 221.272430][ T8102] FAULT_INJECTION: forcing a failure. [ 221.272430][ T8102] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 221.295658][ T8102] CPU: 1 PID: 8102 Comm: syz.2.647 Not tainted syzkaller #0 [ 221.303007][ T8102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 221.313160][ T8102] Call Trace: [ 221.316481][ T8102] [ 221.319439][ T8102] dump_stack_lvl+0x16c/0x230 [ 221.324158][ T8102] ? show_regs_print_info+0x20/0x20 [ 221.329378][ T8102] ? load_image+0x3b0/0x3b0 [ 221.333893][ T8102] ? __might_fault+0xaa/0x120 [ 221.338757][ T8102] ? __lock_acquire+0x7c80/0x7c80 [ 221.343882][ T8102] should_fail_ex+0x39d/0x4d0 [ 221.348842][ T8102] _copy_from_user+0x2f/0xe0 [ 221.353534][ T8102] ___sys_sendmsg+0x159/0x290 [ 221.358230][ T8102] ? __sys_sendmsg+0x270/0x270 [ 221.363041][ T8102] ? __lock_acquire+0x7c80/0x7c80 [ 221.368622][ T8102] __se_sys_sendmsg+0x1a5/0x270 [ 221.373489][ T8102] ? __x64_sys_sendmsg+0x80/0x80 [ 221.378460][ T8102] ? lockdep_hardirqs_on+0x98/0x150 [ 221.383846][ T8102] do_syscall_64+0x55/0xb0 [ 221.388462][ T8102] ? clear_bhb_loop+0x40/0x90 [ 221.393153][ T8102] ? clear_bhb_loop+0x40/0x90 [ 221.397849][ T8102] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 221.403958][ T8102] RIP: 0033:0x7f1ae4f8f749 [ 221.408484][ T8102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.428196][ T8102] RSP: 002b:00007f1ae5e62038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.436643][ T8102] RAX: ffffffffffffffda RBX: 00007f1ae51e5fa0 RCX: 00007f1ae4f8f749 [ 221.444627][ T8102] RDX: 0000000024000004 RSI: 0000200000002c80 RDI: 0000000000000003 [ 221.452613][ T8102] RBP: 00007f1ae5e62090 R08: 0000000000000000 R09: 0000000000000000 [ 221.460603][ T8102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.468586][ T8102] R13: 00007f1ae51e6038 R14: 00007f1ae51e5fa0 R15: 00007fff5ffeaa48 [ 221.476585][ T8102] [ 222.289564][ T8127] netlink: 'syz.4.654': attribute type 21 has an invalid length. [ 222.432136][ T8131] FAULT_INJECTION: forcing a failure. [ 222.432136][ T8131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.492686][ T8131] CPU: 1 PID: 8131 Comm: syz.0.657 Not tainted syzkaller #0 [ 222.501120][ T8131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 222.511395][ T8131] Call Trace: [ 222.514715][ T8131] [ 222.517679][ T8131] dump_stack_lvl+0x16c/0x230 [ 222.522486][ T8131] ? show_regs_print_info+0x20/0x20 [ 222.527804][ T8131] ? load_image+0x3b0/0x3b0 [ 222.532340][ T8131] ? __lock_acquire+0x7c80/0x7c80 [ 222.537397][ T8131] should_fail_ex+0x39d/0x4d0 [ 222.542107][ T8131] _copy_from_user+0x2f/0xe0 [ 222.546730][ T8131] __copy_msghdr+0x3bb/0x580 [ 222.551445][ T8131] ___sys_sendmsg+0x1a6/0x290 [ 222.556161][ T8131] ? __sys_sendmsg+0x270/0x270 [ 222.560981][ T8131] ? __lock_acquire+0x7c80/0x7c80 [ 222.566120][ T8131] __se_sys_sendmsg+0x1a5/0x270 [ 222.571015][ T8131] ? __x64_sys_sendmsg+0x80/0x80 [ 222.576008][ T8131] ? lockdep_hardirqs_on+0x98/0x150 [ 222.581235][ T8131] do_syscall_64+0x55/0xb0 [ 222.585712][ T8131] ? clear_bhb_loop+0x40/0x90 [ 222.590437][ T8131] ? clear_bhb_loop+0x40/0x90 [ 222.595173][ T8131] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 222.601289][ T8131] RIP: 0033:0x7fba7cd8f749 [ 222.605835][ T8131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.625834][ T8131] RSP: 002b:00007fba7db71038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.634508][ T8131] RAX: ffffffffffffffda RBX: 00007fba7cfe5fa0 RCX: 00007fba7cd8f749 [ 222.642519][ T8131] RDX: 0000000024000004 RSI: 0000200000002c80 RDI: 0000000000000003 [ 222.650718][ T8131] RBP: 00007fba7db71090 R08: 0000000000000000 R09: 0000000000000000 [ 222.659260][ T8131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.667264][ T8131] R13: 00007fba7cfe6038 R14: 00007fba7cfe5fa0 R15: 00007fffa5ad8528 [ 222.675378][ T8131] [ 223.127789][ T8143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.569422][ T2990] tipc: Subscription rejected, illegal request [ 223.643918][ T8163] FAULT_INJECTION: forcing a failure. [ 223.643918][ T8163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.660232][ T8164] C: renamed from team_slave_0 (while UP) [ 223.661485][ T8163] CPU: 0 PID: 8163 Comm: syz.0.669 Not tainted syzkaller #0 [ 223.673361][ T8163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 223.683557][ T8163] Call Trace: [ 223.686887][ T8163] [ 223.689852][ T8163] dump_stack_lvl+0x16c/0x230 [ 223.694591][ T8163] ? show_regs_print_info+0x20/0x20 [ 223.699850][ T8163] ? load_image+0x3b0/0x3b0 [ 223.704438][ T8163] ? __might_fault+0xaa/0x120 [ 223.709250][ T8163] ? __lock_acquire+0x7c80/0x7c80 [ 223.714331][ T8163] should_fail_ex+0x39d/0x4d0 [ 223.719153][ T8163] _copy_from_user+0x2f/0xe0 [ 223.723796][ T8163] ____sys_sendmsg+0x30d/0x950 [ 223.728632][ T8163] ? __sys_sendmsg_sock+0x30/0x30 [ 223.733926][ T8163] ? __import_iovec+0x3fa/0x860 [ 223.738834][ T8163] ? import_iovec+0x73/0xa0 [ 223.743441][ T8163] ___sys_sendmsg+0x220/0x290 [ 223.748190][ T8163] ? __sys_sendmsg+0x270/0x270 [ 223.753066][ T8163] ? __lock_acquire+0x7c80/0x7c80 [ 223.758113][ T8163] __se_sys_sendmsg+0x1a5/0x270 [ 223.762973][ T8163] ? perf_trace_preemptirq_template+0x281/0x340 [ 223.769249][ T8163] ? __x64_sys_sendmsg+0x80/0x80 [ 223.774259][ T8163] ? lockdep_hardirqs_on+0x98/0x150 [ 223.779611][ T8163] do_syscall_64+0x55/0xb0 [ 223.784068][ T8163] ? clear_bhb_loop+0x40/0x90 [ 223.788764][ T8163] ? clear_bhb_loop+0x40/0x90 [ 223.793446][ T8163] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 223.799435][ T8163] RIP: 0033:0x7fba7cd8f749 [ 223.803956][ T8163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.823670][ T8163] RSP: 002b:00007fba7db71038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.832117][ T8163] RAX: ffffffffffffffda RBX: 00007fba7cfe5fa0 RCX: 00007fba7cd8f749 [ 223.840099][ T8163] RDX: 0000000024000004 RSI: 0000200000002c80 RDI: 0000000000000003 [ 223.848076][ T8163] RBP: 00007fba7db71090 R08: 0000000000000000 R09: 0000000000000000 [ 223.856083][ T8163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.864320][ T8163] R13: 00007fba7cfe6038 R14: 00007fba7cfe5fa0 R15: 00007fffa5ad8528 [ 223.872437][ T8163] [ 223.898115][ T8164] netlink: 'syz.4.666': attribute type 3 has an invalid length. [ 223.929675][ T8164] netlink: 152 bytes leftover after parsing attributes in process `syz.4.666'. [ 223.939353][ T8164] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 224.715997][ T8191] netlink: 'syz.2.675': attribute type 16 has an invalid length. [ 224.749466][ T8191] netlink: 'syz.2.675': attribute type 3 has an invalid length. [ 224.768109][ T8191] netlink: 132 bytes leftover after parsing attributes in process `syz.2.675'. [ 225.050438][ T8199] FAULT_INJECTION: forcing a failure. [ 225.050438][ T8199] name failslab, interval 1, probability 0, space 0, times 1 [ 225.101327][ T8199] CPU: 1 PID: 8199 Comm: syz.4.682 Not tainted syzkaller #0 [ 225.108703][ T8199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 225.118811][ T8199] Call Trace: [ 225.122133][ T8199] [ 225.125288][ T8199] dump_stack_lvl+0x16c/0x230 [ 225.130102][ T8199] ? show_regs_print_info+0x20/0x20 [ 225.135420][ T8199] ? load_image+0x3b0/0x3b0 [ 225.139959][ T8199] ? __lock_acquire+0x1260/0x7c80 [ 225.145148][ T8199] should_fail_ex+0x39d/0x4d0 [ 225.149864][ T8199] should_failslab+0x9/0x20 [ 225.154483][ T8199] slab_pre_alloc_hook+0x59/0x310 [ 225.159631][ T8199] kmem_cache_alloc+0x5a/0x2e0 [ 225.164427][ T8199] ? dst_alloc+0x105/0x170 [ 225.168890][ T8199] dst_alloc+0x105/0x170 [ 225.173167][ T8199] ip_route_output_key_hash_rcu+0x14f0/0x2360 [ 225.179367][ T8199] ? ip_route_output_key_hash+0x12f/0x340 [ 225.185123][ T8199] ip_route_output_key_hash+0x20b/0x340 [ 225.190701][ T8199] ? ip_route_input_rcu+0x3010/0x3010 [ 225.196111][ T8199] ? __lock_acquire+0x7c80/0x7c80 [ 225.201183][ T8199] ip_route_output_flow+0x2a/0x150 [ 225.206413][ T8199] ? security_sk_classify_flow+0x7b/0x90 [ 225.212077][ T8199] udp_sendmsg+0x15cf/0x2380 [ 225.216802][ T8199] ? release_sock+0x2f/0x1c0 [ 225.221518][ T8199] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 225.226413][ T8199] ? udp_cmsg_send+0x350/0x350 [ 225.231385][ T8199] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 225.237406][ T8199] ? lock_chain_count+0x20/0x20 [ 225.242292][ T8199] ? inet_sendmsg+0x14b/0x2f0 [ 225.247012][ T8199] ? __local_bh_enable_ip+0x12e/0x1c0 [ 225.252497][ T8199] ? _local_bh_enable+0xa0/0xa0 [ 225.257380][ T8199] ? do_raw_spin_unlock+0x121/0x230 [ 225.262709][ T8199] ? inet_sendmsg+0x14b/0x2f0 [ 225.267413][ T8199] ? inet_sendmsg+0x14b/0x2f0 [ 225.272217][ T8199] ? inet_send_prepare+0x260/0x260 [ 225.277369][ T8199] ____sys_sendmsg+0x5bf/0x950 [ 225.282187][ T8199] ? __sys_sendmsg_sock+0x30/0x30 [ 225.287242][ T8199] ? __import_iovec+0x3fa/0x860 [ 225.292234][ T8199] ? import_iovec+0x73/0xa0 [ 225.296778][ T8199] ___sys_sendmsg+0x220/0x290 [ 225.301555][ T8199] ? __sys_sendmsg+0x270/0x270 [ 225.306385][ T8199] ? __lock_acquire+0x7c80/0x7c80 [ 225.311462][ T8199] __se_sys_sendmsg+0x1a5/0x270 [ 225.316349][ T8199] ? __x64_sys_sendmsg+0x80/0x80 [ 225.321343][ T8199] ? lockdep_hardirqs_on+0x98/0x150 [ 225.326572][ T8199] do_syscall_64+0x55/0xb0 [ 225.331016][ T8199] ? clear_bhb_loop+0x40/0x90 [ 225.335759][ T8199] ? clear_bhb_loop+0x40/0x90 [ 225.340555][ T8199] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 225.346476][ T8199] RIP: 0033:0x7f011fb8f749 [ 225.350917][ T8199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.370552][ T8199] RSP: 002b:00007f0120a0d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.379001][ T8199] RAX: ffffffffffffffda RBX: 00007f011fde5fa0 RCX: 00007f011fb8f749 [ 225.387093][ T8199] RDX: 0000000024000004 RSI: 0000200000002c80 RDI: 0000000000000003 [ 225.395115][ T8199] RBP: 00007f0120a0d090 R08: 0000000000000000 R09: 0000000000000000 [ 225.403233][ T8199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.411263][ T8199] R13: 00007f011fde6038 R14: 00007f011fde5fa0 R15: 00007ffda7761478 [ 225.419379][ T8199] [ 228.829624][ T8223] netlink: 'syz.4.692': attribute type 4 has an invalid length. [ 228.840708][ T8223] netlink: 14345 bytes leftover after parsing attributes in process `syz.4.692'. [ 229.471340][ T8236] netlink: 'syz.2.694': attribute type 9 has an invalid length. [ 229.527861][ T8236] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.694'. [ 229.748390][ T8241] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 230.802773][ T8266] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.706'. [ 231.172799][ T8275] FAULT_INJECTION: forcing a failure. [ 231.172799][ T8275] name failslab, interval 1, probability 0, space 0, times 0 [ 231.216814][ T8275] CPU: 0 PID: 8275 Comm: syz.1.710 Not tainted syzkaller #0 [ 231.224195][ T8275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 231.234306][ T8275] Call Trace: [ 231.237629][ T8275] [ 231.240605][ T8275] dump_stack_lvl+0x16c/0x230 [ 231.245337][ T8275] ? show_regs_print_info+0x20/0x20 [ 231.250566][ T8275] ? load_image+0x3b0/0x3b0 [ 231.255091][ T8275] ? __might_sleep+0xe0/0xe0 [ 231.259703][ T8275] ? __lock_acquire+0x7c80/0x7c80 [ 231.264753][ T8275] should_fail_ex+0x39d/0x4d0 [ 231.269567][ T8275] should_failslab+0x9/0x20 [ 231.274088][ T8275] slab_pre_alloc_hook+0x59/0x310 [ 231.279151][ T8275] kmem_cache_alloc_node+0x60/0x330 [ 231.284456][ T8275] ? __alloc_skb+0x108/0x2c0 [ 231.289077][ T8275] __alloc_skb+0x108/0x2c0 [ 231.293570][ T8275] alloc_skb_with_frags+0xca/0x7c0 [ 231.298724][ T8275] ? __lock_acquire+0x1334/0x7c80 [ 231.303806][ T8275] sock_alloc_send_pskb+0x857/0x990 [ 231.309060][ T8275] ? sock_kzfree_s+0x50/0x50 [ 231.313670][ T8275] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 231.319753][ T8275] ? lockdep_hardirqs_on+0x98/0x150 [ 231.324972][ T8275] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 231.330889][ T8275] ? perf_trace_preemptirq_template+0xa4/0x340 [ 231.337077][ T8275] __ip_append_data+0x2971/0x3bd0 [ 231.342147][ T8275] ? lockdep_hardirqs_on+0x98/0x150 [ 231.347388][ T8275] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 231.352372][ T8275] ? ip_setup_cork+0x860/0x860 [ 231.357171][ T8275] ? ip_setup_cork+0x530/0x860 [ 231.361973][ T8275] ip_make_skb+0x1da/0x3f0 [ 231.366443][ T8275] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 231.371353][ T8275] ? ip_flush_pending_frames+0x250/0x250 [ 231.377461][ T8275] udp_sendmsg+0x1a90/0x2380 [ 231.382199][ T8275] ? release_sock+0x2f/0x1c0 [ 231.386919][ T8275] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 231.391801][ T8275] ? udp_cmsg_send+0x350/0x350 [ 231.396700][ T8275] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 231.402826][ T8275] ? lock_chain_count+0x20/0x20 [ 231.407698][ T8275] ? inet_sendmsg+0x14b/0x2f0 [ 231.412407][ T8275] ? __local_bh_enable_ip+0x12e/0x1c0 [ 231.417821][ T8275] ? _local_bh_enable+0xa0/0xa0 [ 231.422906][ T8275] ? inet_sendmsg+0x14b/0x2f0 [ 231.427623][ T8275] ? inet_sendmsg+0x14b/0x2f0 [ 231.432472][ T8275] ? inet_send_prepare+0x260/0x260 [ 231.437956][ T8275] ____sys_sendmsg+0x5bf/0x950 [ 231.442762][ T8275] ? __sys_sendmsg_sock+0x30/0x30 [ 231.447809][ T8275] ? __import_iovec+0x3fa/0x860 [ 231.452744][ T8275] ? import_iovec+0x73/0xa0 [ 231.457290][ T8275] ___sys_sendmsg+0x220/0x290 [ 231.462020][ T8275] ? __sys_sendmsg+0x270/0x270 [ 231.467020][ T8275] ? __lock_acquire+0x7c80/0x7c80 [ 231.472097][ T8275] __se_sys_sendmsg+0x1a5/0x270 [ 231.476978][ T8275] ? __x64_sys_sendmsg+0x80/0x80 [ 231.482239][ T8275] ? lockdep_hardirqs_on+0x98/0x150 [ 231.487486][ T8275] do_syscall_64+0x55/0xb0 [ 231.492121][ T8275] ? clear_bhb_loop+0x40/0x90 [ 231.497044][ T8275] ? clear_bhb_loop+0x40/0x90 [ 231.501863][ T8275] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 231.508020][ T8275] RIP: 0033:0x7f9443f8f749 [ 231.512634][ T8275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.532730][ T8275] RSP: 002b:00007f9444dad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.541801][ T8275] RAX: ffffffffffffffda RBX: 00007f94441e5fa0 RCX: 00007f9443f8f749 [ 231.549899][ T8275] RDX: 0000000024000004 RSI: 0000200000002c80 RDI: 0000000000000003 [ 231.557898][ T8275] RBP: 00007f9444dad090 R08: 0000000000000000 R09: 0000000000000000 [ 231.565884][ T8275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.573957][ T8275] R13: 00007f94441e6038 R14: 00007f94441e5fa0 R15: 00007fffc8460788 [ 231.582015][ T8275] [ 232.158408][ T8296] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 232.326606][ T8300] netlink: 'syz.2.716': attribute type 4 has an invalid length. [ 232.351360][ T8300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.716'. [ 232.857145][ T8309] IPv6: Can't replace route, no match found [ 233.308758][ T8319] netlink: 'syz.2.726': attribute type 153 has an invalid length. [ 233.327859][ T8319] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.726'. [ 233.863271][ T8330] syzkaller0: entered promiscuous mode [ 233.869888][ T8330] syzkaller0: entered allmulticast mode [ 234.266216][ T7594] wlan1: Trigger new scan to find an IBSS to join [ 236.239477][ T8365] FAULT_INJECTION: forcing a failure. [ 236.239477][ T8365] name failslab, interval 1, probability 0, space 0, times 0 [ 236.293094][ T8365] CPU: 1 PID: 8365 Comm: syz.0.740 Not tainted syzkaller #0 [ 236.300729][ T8365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 236.310836][ T8365] Call Trace: [ 236.314161][ T8365] [ 236.317138][ T8365] dump_stack_lvl+0x16c/0x230 [ 236.321865][ T8365] ? show_regs_print_info+0x20/0x20 [ 236.327188][ T8365] ? load_image+0x3b0/0x3b0 [ 236.331836][ T8365] should_fail_ex+0x39d/0x4d0 [ 236.336563][ T8365] should_failslab+0x9/0x20 [ 236.341105][ T8365] slab_pre_alloc_hook+0x59/0x310 [ 236.346173][ T8365] kmem_cache_alloc+0x5a/0x2e0 [ 236.350962][ T8365] ? __nf_conntrack_alloc+0x99/0x380 [ 236.356284][ T8365] __nf_conntrack_alloc+0x99/0x380 [ 236.361444][ T8365] init_conntrack+0x156/0xee0 [ 236.366157][ T8365] ? early_drop+0x7b0/0x7b0 [ 236.370689][ T8365] ? nf_conntrack_find_get+0x600/0x600 [ 236.376179][ T8365] ? __local_bh_enable_ip+0x12e/0x1c0 [ 236.381677][ T8365] ? __siphash_unaligned+0x232/0x3b0 [ 236.387341][ T8365] nf_conntrack_in+0xbf1/0x15c0 [ 236.392249][ T8365] ? nf_ct_pernet+0x270/0x270 [ 236.396981][ T8365] ? ipt_do_table+0x2b2/0x15f0 [ 236.401796][ T8365] ? ipv4_conntrack_defrag+0x29d/0x5a0 [ 236.407278][ T8365] ? ipv4_conntrack_local+0x123/0x200 [ 236.412678][ T8365] ? ipv4_conntrack_in+0x20/0x20 [ 236.417653][ T8365] nf_hook_slow+0xbd/0x200 [ 236.422105][ T8365] nf_hook+0x215/0x370 [ 236.426225][ T8365] ? nf_hook+0x9e/0x370 [ 236.430506][ T8365] ? __ip_local_out+0x5f0/0x5f0 [ 236.435571][ T8365] ? nf_hook+0x370/0x370 [ 236.439947][ T8365] ? ip_fast_csum+0x1ee/0x2b0 [ 236.444665][ T8365] __ip_local_out+0x4db/0x5f0 [ 236.449373][ T8365] ? nf_hook+0x370/0x370 [ 236.453647][ T8365] ip_send_skb+0x4c/0x1d0 [ 236.458028][ T8365] udp_send_skb+0xa37/0x13a0 [ 236.462667][ T8365] udp_sendmsg+0x1ae0/0x2380 [ 236.467296][ T8365] ? release_sock+0x2f/0x1c0 [ 236.471927][ T8365] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 236.476865][ T8365] ? udp_cmsg_send+0x350/0x350 [ 236.481776][ T8365] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 236.487814][ T8365] ? lock_chain_count+0x20/0x20 [ 236.492929][ T8365] ? inet_sendmsg+0x14b/0x2f0 [ 236.497662][ T8365] ? __local_bh_enable_ip+0x12e/0x1c0 [ 236.503062][ T8365] ? _local_bh_enable+0xa0/0xa0 [ 236.507948][ T8365] ? inet_sendmsg+0x14b/0x2f0 [ 236.512653][ T8365] ? inet_sendmsg+0x14b/0x2f0 [ 236.517357][ T8365] ? inet_send_prepare+0x260/0x260 [ 236.522496][ T8365] ____sys_sendmsg+0x5bf/0x950 [ 236.527317][ T8365] ? __sys_sendmsg_sock+0x30/0x30 [ 236.532383][ T8365] ? __import_iovec+0x3fa/0x860 [ 236.537274][ T8365] ? import_iovec+0x73/0xa0 [ 236.541861][ T8365] ___sys_sendmsg+0x220/0x290 [ 236.546580][ T8365] ? __sys_sendmsg+0x270/0x270 [ 236.551488][ T8365] ? __lock_acquire+0x7c80/0x7c80 [ 236.556570][ T8365] __se_sys_sendmsg+0x1a5/0x270 [ 236.562007][ T8365] ? __x64_sys_sendmsg+0x80/0x80 [ 236.567003][ T8365] ? lockdep_hardirqs_on+0x98/0x150 [ 236.572243][ T8365] do_syscall_64+0x55/0xb0 [ 236.576691][ T8365] ? clear_bhb_loop+0x40/0x90 [ 236.581486][ T8365] ? clear_bhb_loop+0x40/0x90 [ 236.586197][ T8365] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 236.592289][ T8365] RIP: 0033:0x7fba7cd8f749 [ 236.596730][ T8365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.616554][ T8365] RSP: 002b:00007fba7db71038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.625027][ T8365] RAX: ffffffffffffffda RBX: 00007fba7cfe5fa0 RCX: 00007fba7cd8f749 [ 236.633026][ T8365] RDX: 0000000024000004 RSI: 0000200000002c80 RDI: 0000000000000003 [ 236.641028][ T8365] RBP: 00007fba7db71090 R08: 0000000000000000 R09: 0000000000000000 [ 236.649111][ T8365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.657106][ T8365] R13: 00007fba7cfe6038 R14: 00007fba7cfe5fa0 R15: 00007fffa5ad8528 [ 236.665141][ T8365] [ 237.180278][ T8379] netlink: 'syz.0.745': attribute type 41 has an invalid length. [ 237.188321][ T8379] netlink: 'syz.0.745': attribute type 41 has an invalid length. [ 237.433503][ T8382] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.467140][ T8382] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.545157][ T8382] bridge0: entered allmulticast mode [ 237.843040][ T8390] bridge_slave_1: left allmulticast mode [ 237.850568][ T8390] bridge_slave_1: left promiscuous mode [ 237.857344][ T8390] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.868034][ T8390] bridge_slave_0: left allmulticast mode [ 237.874001][ T8390] bridge_slave_0: left promiscuous mode [ 237.880199][ T8390] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.111199][ T8400] FAULT_INJECTION: forcing a failure. [ 238.111199][ T8400] name failslab, interval 1, probability 0, space 0, times 0 [ 238.137696][ T8400] CPU: 0 PID: 8400 Comm: syz.4.752 Not tainted syzkaller #0 [ 238.145248][ T8400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 238.155436][ T8400] Call Trace: [ 238.158751][ T8400] [ 238.161903][ T8400] dump_stack_lvl+0x16c/0x230 [ 238.166632][ T8400] ? show_regs_print_info+0x20/0x20 [ 238.171886][ T8400] ? load_image+0x3b0/0x3b0 [ 238.176459][ T8400] should_fail_ex+0x39d/0x4d0 [ 238.181285][ T8400] should_failslab+0x9/0x20 [ 238.185841][ T8400] slab_pre_alloc_hook+0x59/0x310 [ 238.191089][ T8400] ? nf_ct_ext_add+0x1ab/0x440 [ 238.195982][ T8400] ? nf_ct_ext_add+0x1ab/0x440 [ 238.200797][ T8400] __kmem_cache_alloc_node+0x53/0x260 [ 238.206229][ T8400] ? nf_ct_ext_add+0x1ab/0x440 [ 238.211134][ T8400] __kmalloc_node_track_caller+0xa2/0x230 [ 238.216914][ T8400] krealloc+0x86/0x120 [ 238.221031][ T8400] nf_ct_ext_add+0x1ab/0x440 [ 238.225658][ T8400] init_conntrack+0x674/0xee0 [ 238.230356][ T8400] ? early_drop+0x7b0/0x7b0 [ 238.234874][ T8400] ? nf_conntrack_find_get+0x600/0x600 [ 238.240354][ T8400] ? __local_bh_enable_ip+0x12e/0x1c0 [ 238.245783][ T8400] ? __siphash_unaligned+0x232/0x3b0 [ 238.251261][ T8400] nf_conntrack_in+0xbf1/0x15c0 [ 238.256149][ T8400] ? nf_ct_pernet+0x270/0x270 [ 238.261024][ T8400] ? ipt_do_table+0x2b2/0x15f0 [ 238.265813][ T8400] ? ipv4_conntrack_defrag+0x29d/0x5a0 [ 238.271301][ T8400] ? ipv4_conntrack_local+0x123/0x200 [ 238.276684][ T8400] ? ipv4_conntrack_in+0x20/0x20 [ 238.281634][ T8400] nf_hook_slow+0xbd/0x200 [ 238.286067][ T8400] nf_hook+0x215/0x370 [ 238.290162][ T8400] ? nf_hook+0x9e/0x370 [ 238.294329][ T8400] ? __ip_local_out+0x5f0/0x5f0 [ 238.299223][ T8400] ? nf_hook+0x370/0x370 [ 238.303484][ T8400] ? ip_fast_csum+0x1ee/0x2b0 [ 238.308178][ T8400] __ip_local_out+0x4db/0x5f0 [ 238.312868][ T8400] ? nf_hook+0x370/0x370 [ 238.317154][ T8400] ip_send_skb+0x4c/0x1d0 [ 238.321501][ T8400] udp_send_skb+0xa37/0x13a0 [ 238.326121][ T8400] udp_sendmsg+0x1ae0/0x2380 [ 238.330721][ T8400] ? release_sock+0x2f/0x1c0 [ 238.335336][ T8400] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 238.340382][ T8400] ? udp_cmsg_send+0x350/0x350 [ 238.345164][ T8400] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 238.351161][ T8400] ? lock_chain_count+0x20/0x20 [ 238.356027][ T8400] ? inet_sendmsg+0x14b/0x2f0 [ 238.360722][ T8400] ? __local_bh_enable_ip+0x12e/0x1c0 [ 238.366310][ T8400] ? _local_bh_enable+0xa0/0xa0 [ 238.371259][ T8400] ? inet_sendmsg+0x14b/0x2f0 [ 238.375949][ T8400] ? inet_sendmsg+0x14b/0x2f0 [ 238.380648][ T8400] ? inet_send_prepare+0x260/0x260 [ 238.385867][ T8400] ____sys_sendmsg+0x5bf/0x950 [ 238.390850][ T8400] ? __sys_sendmsg_sock+0x30/0x30 [ 238.396077][ T8400] ? __import_iovec+0x3fa/0x860 [ 238.401124][ T8400] ? import_iovec+0x73/0xa0 [ 238.405733][ T8400] ___sys_sendmsg+0x220/0x290 [ 238.410431][ T8400] ? __sys_sendmsg+0x270/0x270 [ 238.415254][ T8400] ? __lock_acquire+0x7c80/0x7c80 [ 238.420428][ T8400] __se_sys_sendmsg+0x1a5/0x270 [ 238.425432][ T8400] ? __x64_sys_sendmsg+0x80/0x80 [ 238.430456][ T8400] ? lockdep_hardirqs_on+0x98/0x150 [ 238.435688][ T8400] do_syscall_64+0x55/0xb0 [ 238.440158][ T8400] ? clear_bhb_loop+0x40/0x90 [ 238.444854][ T8400] ? clear_bhb_loop+0x40/0x90 [ 238.449544][ T8400] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 238.455538][ T8400] RIP: 0033:0x7f011fb8f749 [ 238.460177][ T8400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.479819][ T8400] RSP: 002b:00007f0120a0d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.488256][ T8400] RAX: ffffffffffffffda RBX: 00007f011fde5fa0 RCX: 00007f011fb8f749 [ 238.496333][ T8400] RDX: 0000000024000004 RSI: 0000200000002c80 RDI: 0000000000000003 [ 238.504404][ T8400] RBP: 00007f0120a0d090 R08: 0000000000000000 R09: 0000000000000000 [ 238.512389][ T8400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.520718][ T8400] R13: 00007f011fde6038 R14: 00007f011fde5fa0 R15: 00007ffda7761478 [ 238.528804][ T8400] [ 238.772929][ T8412] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.758'. [ 239.501538][ T2990] wlan1: Trigger new scan to find an IBSS to join [ 241.033121][ T8439] FAULT_INJECTION: forcing a failure. [ 241.033121][ T8439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.058185][ T8439] CPU: 1 PID: 8439 Comm: syz.1.765 Not tainted syzkaller #0 [ 241.065740][ T8439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 241.075924][ T8439] Call Trace: [ 241.079243][ T8439] [ 241.082279][ T8439] dump_stack_lvl+0x16c/0x230 [ 241.087244][ T8439] ? show_regs_print_info+0x20/0x20 [ 241.092491][ T8439] ? load_image+0x3b0/0x3b0 [ 241.097037][ T8439] ? __lock_acquire+0x7c80/0x7c80 [ 241.102084][ T8439] ? snprintf+0xdb/0x120 [ 241.106611][ T8439] should_fail_ex+0x39d/0x4d0 [ 241.111406][ T8439] _copy_to_user+0x2f/0xa0 [ 241.115845][ T8439] simple_read_from_buffer+0xe7/0x150 [ 241.121238][ T8439] proc_fail_nth_read+0x1e3/0x250 [ 241.126284][ T8439] ? proc_fault_inject_write+0x340/0x340 [ 241.132027][ T8439] ? fsnotify_perm+0x271/0x5e0 [ 241.136833][ T8439] ? proc_fault_inject_write+0x340/0x340 [ 241.142565][ T8439] vfs_read+0x27e/0x920 [ 241.146928][ T8439] ? kernel_read+0x1e0/0x1e0 [ 241.151533][ T8439] ? __fget_files+0x28/0x4d0 [ 241.156224][ T8439] ? __fget_files+0x44a/0x4d0 [ 241.160924][ T8439] ? __fdget_pos+0x2a3/0x330 [ 241.165535][ T8439] ? ksys_read+0x75/0x250 [ 241.169886][ T8439] ksys_read+0x147/0x250 [ 241.174149][ T8439] ? vfs_write+0x940/0x940 [ 241.178707][ T8439] ? lockdep_hardirqs_on+0x98/0x150 [ 241.184021][ T8439] do_syscall_64+0x55/0xb0 [ 241.188543][ T8439] ? clear_bhb_loop+0x40/0x90 [ 241.193234][ T8439] ? clear_bhb_loop+0x40/0x90 [ 241.197933][ T8439] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.203869][ T8439] RIP: 0033:0x7f9443f8e15c [ 241.208392][ T8439] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 241.228187][ T8439] RSP: 002b:00007f9444dad030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 241.236618][ T8439] RAX: ffffffffffffffda RBX: 00007f94441e5fa0 RCX: 00007f9443f8e15c [ 241.244872][ T8439] RDX: 000000000000000f RSI: 00007f9444dad0a0 RDI: 0000000000000004 [ 241.253039][ T8439] RBP: 00007f9444dad090 R08: 0000000000000000 R09: 0000000000000000 [ 241.261034][ T8439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 241.269039][ T8439] R13: 00007f94441e6038 R14: 00007f94441e5fa0 R15: 00007fffc8460788 [ 241.277045][ T8439] [ 241.517137][ T7575] wlan1: Creating new IBSS network, BSSID 76:df:54:36:46:dd [ 241.816859][ T8459] netlink: 'syz.4.772': attribute type 10 has an invalid length. [ 241.825528][ T8459] netlink: 55 bytes leftover after parsing attributes in process `syz.4.772'. [ 242.678584][ T8496] netlink: 3 bytes leftover after parsing attributes in process `syz.2.781'. [ 243.511335][ T8529] netlink: 'syz.4.792': attribute type 3 has an invalid length. [ 243.530545][ T8529] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.792'. [ 244.384905][ T8545] netlink: 60 bytes leftover after parsing attributes in process `syz.2.797'. [ 245.903677][ T8539] netlink: 'syz.0.795': attribute type 21 has an invalid length. [ 245.911723][ T8539] netlink: 156 bytes leftover after parsing attributes in process `syz.0.795'. [ 245.933855][ T8545] netlink: 60 bytes leftover after parsing attributes in process `syz.2.797'. [ 245.956160][ T8547] netlink: 'syz.2.797': attribute type 2 has an invalid length. [ 245.963955][ T8547] netlink: 'syz.2.797': attribute type 8 has an invalid length. [ 245.974161][ T8547] netlink: 132 bytes leftover after parsing attributes in process `syz.2.797'. [ 246.000209][ T8550] netlink: 'syz.2.797': attribute type 10 has an invalid length. [ 246.016047][ T8550] netlink: 152 bytes leftover after parsing attributes in process `syz.2.797'. [ 246.041566][ T8550] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 247.359781][ T8573] netlink: 201620 bytes leftover after parsing attributes in process `syz.1.805'. [ 247.579763][ T8584] netlink: 'syz.0.808': attribute type 10 has an invalid length. [ 249.292315][ T8632] netlink: 'syz.4.826': attribute type 2 has an invalid length. [ 249.309188][ T8632] netlink: 132 bytes leftover after parsing attributes in process `syz.4.826'. [ 249.340610][ T8632] netlink: 'syz.4.826': attribute type 2 has an invalid length. [ 249.360163][ T8632] netlink: 132 bytes leftover after parsing attributes in process `syz.4.826'. [ 249.386798][ T8638] netlink: 'syz.2.827': attribute type 19 has an invalid length. [ 253.381752][ T8735] netlink: 14 bytes leftover after parsing attributes in process `syz.1.847'. [ 253.604387][ T8743] netlink: 60 bytes leftover after parsing attributes in process `syz.4.849'. [ 253.648067][ T8743] netlink: 60 bytes leftover after parsing attributes in process `syz.4.849'. [ 253.704669][ T8742] netlink: 60 bytes leftover after parsing attributes in process `syz.4.849'. [ 253.762934][ T8749] netlink: 60 bytes leftover after parsing attributes in process `syz.4.849'. [ 253.883813][ T8755] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.853'. [ 253.909321][ T8755] openvswitch: netlink: Key type 4112 is out of range max 32 [ 254.606324][ T8773] netlink: 'syz.4.860': attribute type 9 has an invalid length. [ 254.614316][ T8773] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.860'. [ 254.786026][ T8778] netlink: 'syz.4.860': attribute type 9 has an invalid length. [ 254.796574][ T8778] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.860'. [ 255.221352][ T8798] netlink: 'syz.1.869': attribute type 2 has an invalid length. [ 255.454772][ T8803] syzkaller0: entered promiscuous mode [ 255.461485][ T8803] syzkaller0: entered allmulticast mode [ 255.468651][ T8802] syzkaller0: left promiscuous mode [ 255.474013][ T8802] syzkaller0: left allmulticast mode [ 255.510615][ T8807] delete_channel: no stack [ 256.102175][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.117962][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.635035][ T8819] netlink: 152 bytes leftover after parsing attributes in process `syz.2.876'. [ 257.963837][ T8832] netlink: 6 bytes leftover after parsing attributes in process `syz.1.881'. [ 257.970379][ T8829] netlink: 'syz.4.879': attribute type 1 has an invalid length. [ 258.113353][ T8833] netlink: 'syz.2.878': attribute type 41 has an invalid length. [ 258.258333][ T8840] delete_channel: no stack [ 258.262951][ T8840] delete_channel: no stack [ 258.286981][ T8840] delete_channel: no stack [ 258.315132][ T8840] delete_channel: no stack [ 258.607580][ T8847] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 258.959088][ T5790] Bluetooth: hci2: unexpected event 0x03 length: 15 > 11 [ 259.063224][ T8864] __nla_validate_parse: 1 callbacks suppressed [ 259.063243][ T8864] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.891'. [ 259.116026][ T8864] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.891'. [ 259.154490][ T8864] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.891'. [ 259.189286][ T8861] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.891'. [ 259.281032][ T8872] netlink: 'syz.4.895': attribute type 1 has an invalid length. [ 259.293088][ T8872] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.895'. [ 259.482366][ T8881] netlink: 'syz.2.899': attribute type 9 has an invalid length. [ 260.038822][ T8893] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.904'. [ 260.049594][ T8893] netlink: 6320 bytes leftover after parsing attributes in process `syz.2.904'. [ 260.060247][ T8893] tc_dump_action: action bad kind [ 261.196777][ T8924] netlink: 'syz.1.910': attribute type 10 has an invalid length. [ 261.253691][ T8924] macvlan0: entered promiscuous mode [ 261.259942][ T8924] macvlan0: entered allmulticast mode [ 261.281349][ T8924] veth1_vlan: entered allmulticast mode [ 261.344616][ T8924] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 261.403128][ T8917] netlink: 61959 bytes leftover after parsing attributes in process `syz.0.909'. [ 261.649791][ T8934] netlink: 'syz.1.914': attribute type 16 has an invalid length. [ 261.705636][ T8934] netlink: 168 bytes leftover after parsing attributes in process `syz.1.914'. [ 261.742536][ T8932] delete_channel: no stack [ 261.897277][ T8936] netlink: 'syz.2.916': attribute type 19 has an invalid length. [ 261.927610][ T8936] netlink: 'syz.2.916': attribute type 19 has an invalid length. [ 263.385826][ T8968] netlink: 184 bytes leftover after parsing attributes in process `syz.1.927'. [ 263.518451][ T8970] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 263.828988][ T8981] netlink: 'syz.0.932': attribute type 10 has an invalid length. [ 263.845951][ T8981] dummy0: entered allmulticast mode [ 263.863585][ T8981] bond0: (slave dummy0): Releasing backup interface [ 263.895170][ T8981] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 264.838187][ T9018] __nla_validate_parse: 2 callbacks suppressed [ 264.838208][ T9018] netlink: 60 bytes leftover after parsing attributes in process `syz.1.941'. [ 264.905815][ T9018] netlink: 60 bytes leftover after parsing attributes in process `syz.1.941'. [ 264.957036][ T9016] netlink: 60 bytes leftover after parsing attributes in process `syz.1.941'. [ 265.907005][ T9046] netlink: 'syz.2.951': attribute type 21 has an invalid length. [ 265.934609][ T9046] netlink: 164 bytes leftover after parsing attributes in process `syz.2.951'. [ 266.867325][ T9071] netlink: 'syz.4.957': attribute type 3 has an invalid length. [ 266.875444][ T9071] netlink: 98920 bytes leftover after parsing attributes in process `syz.4.957'. [ 267.243998][ T9077] netlink: 'syz.2.959': attribute type 21 has an invalid length. [ 267.280455][ T9077] netlink: 'syz.2.959': attribute type 2 has an invalid length. [ 267.327441][ T9077] netlink: 9062 bytes leftover after parsing attributes in process `syz.2.959'. [ 267.393083][ T9077] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.959'. [ 267.929151][ T9095] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.966'. [ 267.954242][ T9095] netlink: zone id is out of range [ 267.970441][ T9095] netlink: del zone limit has 8 unknown bytes [ 269.829652][ T9138] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.978'. [ 274.037144][ T9182] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.993'. [ 275.419211][ T9198] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.997'. [ 277.260912][ T9210] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1001'. [ 277.478421][ T9193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.480570][ T9234] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1010'. [ 279.079907][ T9246] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1011'. [ 279.120204][ T9246] netlink: zone id is out of range [ 279.139617][ T9246] netlink: zone id is out of range [ 279.144893][ T9246] netlink: zone id is out of range [ 279.402781][ T9252] netlink: 'syz.1.1014': attribute type 1 has an invalid length. [ 279.424706][ T9252] netlink: 146340 bytes leftover after parsing attributes in process `syz.1.1014'. [ 279.787208][ T9263] veth0_vlan: entered allmulticast mode [ 280.523112][ T9272] netlink: 'syz.2.1021': attribute type 10 has an invalid length. [ 280.870004][ T9272] bond0: (slave bond_slave_0): Releasing backup interface [ 281.214175][ T9282] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 281.240262][ T9282] netlink: 'syz.1.1024': attribute type 29 has an invalid length. [ 281.250542][ T9282] netlink: 'syz.1.1024': attribute type 29 has an invalid length. [ 281.261779][ T9282] netlink: 'syz.1.1024': attribute type 29 has an invalid length. [ 281.277177][ T9282] netlink: 'syz.1.1024': attribute type 29 has an invalid length. [ 281.318672][ T9282] netlink: 'syz.1.1024': attribute type 29 has an invalid length. [ 281.857911][ T9303] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.1031'. [ 282.518932][ T9316] netlink: 'syz.2.1035': attribute type 21 has an invalid length. [ 282.527294][ T9316] netlink: 'syz.2.1035': attribute type 6 has an invalid length. [ 282.535125][ T9316] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1035'. [ 282.602847][ T9321] netlink: 'syz.2.1035': attribute type 29 has an invalid length. [ 284.453367][ T9361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.486228][ T9361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.505438][ T9361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.538081][ T9361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.687159][ T9373] validate_nla: 3 callbacks suppressed [ 284.687180][ T9373] netlink: 'syz.1.1053': attribute type 1 has an invalid length. [ 284.729255][ T9373] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1053'. [ 284.746445][ T9374] netlink: 'syz.2.1054': attribute type 21 has an invalid length. [ 284.757304][ T9373] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1053'. [ 285.300794][ T9395] netlink: 'syz.4.1060': attribute type 21 has an invalid length. [ 285.402563][ T9400] FAULT_INJECTION: forcing a failure. [ 285.402563][ T9400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.416262][ T9400] CPU: 1 PID: 9400 Comm: syz.0.1062 Not tainted syzkaller #0 [ 285.423961][ T9400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 285.434167][ T9400] Call Trace: [ 285.438008][ T9400] [ 285.440957][ T9400] dump_stack_lvl+0x16c/0x230 [ 285.445742][ T9400] ? show_regs_print_info+0x20/0x20 [ 285.451077][ T9400] ? load_image+0x3b0/0x3b0 [ 285.455627][ T9400] ? __might_fault+0xaa/0x120 [ 285.460433][ T9400] ? __lock_acquire+0x7c80/0x7c80 [ 285.465486][ T9400] should_fail_ex+0x39d/0x4d0 [ 285.470226][ T9400] _copy_from_user+0x2f/0xe0 [ 285.474892][ T9400] ___sys_sendmsg+0x159/0x290 [ 285.479657][ T9400] ? __sys_sendmsg+0x270/0x270 [ 285.484548][ T9400] ? __lock_acquire+0x7c80/0x7c80 [ 285.490922][ T9400] __se_sys_sendmsg+0x1a5/0x270 [ 285.495858][ T9400] ? perf_trace_preemptirq_template+0x281/0x340 [ 285.502184][ T9400] ? __x64_sys_sendmsg+0x80/0x80 [ 285.507211][ T9400] ? lockdep_hardirqs_on+0x98/0x150 [ 285.512449][ T9400] do_syscall_64+0x55/0xb0 [ 285.516894][ T9400] ? clear_bhb_loop+0x40/0x90 [ 285.521596][ T9400] ? clear_bhb_loop+0x40/0x90 [ 285.526302][ T9400] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 285.532215][ T9400] RIP: 0033:0x7fba7cd8f749 [ 285.536653][ T9400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.556716][ T9400] RSP: 002b:00007fba7db71038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.565329][ T9400] RAX: ffffffffffffffda RBX: 00007fba7cfe5fa0 RCX: 00007fba7cd8f749 [ 285.573332][ T9400] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 285.581500][ T9400] RBP: 00007fba7db71090 R08: 0000000000000000 R09: 0000000000000000 [ 285.589491][ T9400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.597501][ T9400] R13: 00007fba7cfe6038 R14: 00007fba7cfe5fa0 R15: 00007fffa5ad8528 [ 285.605526][ T9400] [ 285.690508][ T9403] netdevsim netdevsim4 ªªªªªª: renamed from netdevsim0 (while UP) [ 285.769488][ T9403] netlink: 'syz.4.1063': attribute type 21 has an invalid length. [ 285.838097][ T9409] netlink: 'syz.0.1066': attribute type 1 has an invalid length. [ 285.894590][ T9409] netlink: 146340 bytes leftover after parsing attributes in process `syz.0.1066'. [ 285.916724][ T9410] netlink: 'syz.0.1066': attribute type 2 has an invalid length. [ 285.924554][ T9410] netlink: 'syz.0.1066': attribute type 9 has an invalid length. [ 285.938932][ T9410] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1066'. [ 286.078559][ T9407] netlink: 'syz.2.1065': attribute type 4 has an invalid length. [ 286.120430][ T9413] netlink: 'syz.2.1065': attribute type 10 has an invalid length. [ 286.135945][ T9407] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1065'. [ 286.141157][ T9413] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1065'. [ 286.166057][ T9413] team0: entered promiscuous mode [ 286.171294][ T9413] team_slave_0: entered promiscuous mode [ 286.203744][ T9413] team_slave_1: entered promiscuous mode [ 286.232849][ T9413] bond0: entered promiscuous mode [ 286.245733][ T9413] bond_slave_1: entered promiscuous mode [ 286.258919][ T9413] dummy0: entered promiscuous mode [ 286.276377][ T9413] geneve0: entered promiscuous mode [ 286.304356][ T9417] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1068'. [ 286.585843][ T9428] netlink: 'syz.2.1072': attribute type 21 has an invalid length. [ 286.781208][ T9434] FAULT_INJECTION: forcing a failure. [ 286.781208][ T9434] name failslab, interval 1, probability 0, space 0, times 0 [ 286.795061][ T9434] CPU: 1 PID: 9434 Comm: syz.2.1074 Not tainted syzkaller #0 [ 286.802603][ T9434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 286.812895][ T9434] Call Trace: [ 286.816239][ T9434] [ 286.819222][ T9434] dump_stack_lvl+0x16c/0x230 [ 286.823972][ T9434] ? show_regs_print_info+0x20/0x20 [ 286.829246][ T9434] ? load_image+0x3b0/0x3b0 [ 286.833989][ T9434] ? __might_sleep+0xe0/0xe0 [ 286.838745][ T9434] ? __lock_acquire+0x7c80/0x7c80 [ 286.843852][ T9434] should_fail_ex+0x39d/0x4d0 [ 286.848612][ T9434] should_failslab+0x9/0x20 [ 286.853173][ T9434] slab_pre_alloc_hook+0x59/0x310 [ 286.858385][ T9434] ? __lock_acquire+0x7c80/0x7c80 [ 286.863668][ T9434] kmem_cache_alloc_node+0x60/0x330 [ 286.868933][ T9434] ? __alloc_skb+0x108/0x2c0 [ 286.873603][ T9434] __alloc_skb+0x108/0x2c0 [ 286.878288][ T9434] netlink_sendmsg+0x65b/0xbe0 [ 286.883195][ T9434] ? netlink_getsockopt+0x580/0x580 [ 286.888467][ T9434] ? aa_sock_msg_perm+0x94/0x150 [ 286.893453][ T9434] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 286.898850][ T9434] ? security_socket_sendmsg+0x80/0xa0 [ 286.904443][ T9434] ? netlink_getsockopt+0x580/0x580 [ 286.914921][ T9434] ____sys_sendmsg+0x5bf/0x950 [ 286.919996][ T9434] ? __asan_memset+0x22/0x40 [ 286.924829][ T9434] ? __sys_sendmsg_sock+0x30/0x30 [ 286.930356][ T9434] ? __import_iovec+0x5f2/0x860 [ 286.935400][ T9434] ? import_iovec+0x73/0xa0 [ 286.939990][ T9434] ___sys_sendmsg+0x220/0x290 [ 286.944873][ T9434] ? __sys_sendmsg+0x270/0x270 [ 286.949769][ T9434] ? __lock_acquire+0x7c80/0x7c80 [ 286.954928][ T9434] __se_sys_sendmsg+0x1a5/0x270 [ 286.959858][ T9434] ? __x64_sys_sendmsg+0x80/0x80 [ 286.965002][ T9434] ? lockdep_hardirqs_on+0x98/0x150 [ 286.970296][ T9434] do_syscall_64+0x55/0xb0 [ 286.974871][ T9434] ? clear_bhb_loop+0x40/0x90 [ 286.979620][ T9434] ? clear_bhb_loop+0x40/0x90 [ 286.984371][ T9434] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.990331][ T9434] RIP: 0033:0x7f1ae4f8f749 [ 286.994811][ T9434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.014666][ T9434] RSP: 002b:00007f1ae5e62038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.023240][ T9434] RAX: ffffffffffffffda RBX: 00007f1ae51e5fa0 RCX: 00007f1ae4f8f749 [ 287.031665][ T9434] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 287.039702][ T9434] RBP: 00007f1ae5e62090 R08: 0000000000000000 R09: 0000000000000000 [ 287.047910][ T9434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.056216][ T9434] R13: 00007f1ae51e6038 R14: 00007f1ae51e5fa0 R15: 00007fff5ffeaa48 [ 287.064399][ T9434] [ 287.516142][ T9455] netlink: 35347 bytes leftover after parsing attributes in process `syz.2.1078'. [ 288.244570][ T9467] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1085'. [ 288.542056][ T9466] delete_channel: no stack [ 288.877681][ T9488] net veth1_virt_wifi €Â: renamed from virt_wifi0 [ 289.578815][ T9503] tap0: tun_chr_ioctl cmd 1074812118 [ 290.386650][ T9520] validate_nla: 5 callbacks suppressed [ 290.386672][ T9520] netlink: 'syz.2.1103': attribute type 21 has an invalid length. [ 291.526948][ T9547] netlink: 'syz.4.1112': attribute type 2 has an invalid length. [ 291.557496][ T9547] netlink: 'syz.4.1112': attribute type 8 has an invalid length. [ 291.588833][ T9547] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1112'. [ 292.117930][ T9558] netlink: 'syz.2.1116': attribute type 21 has an invalid length. [ 292.455299][ T9561] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1117'. [ 293.197989][ T9579] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.1125'. [ 293.508236][ T9593] netlink: 'syz.4.1128': attribute type 21 has an invalid length. [ 294.005146][ T9600] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1131'. [ 294.217889][ T9600] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1131'. [ 294.260876][ T9600] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1131'. [ 295.203408][ T9629] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1138'. [ 295.433956][ T9638] netlink: 'syz.4.1139': attribute type 21 has an invalid length. [ 295.447311][ T9637] netlink: 'syz.1.1141': attribute type 21 has an invalid length. [ 295.760235][ T9645] netlink: 'syz.1.1143': attribute type 6 has an invalid length. [ 295.769109][ T9645] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1143'. [ 296.270310][ T9659] netlink: 'syz.1.1149': attribute type 21 has an invalid length. [ 296.302755][ T9659] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1149'. [ 296.337210][ T9659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1149'. [ 296.391578][ T9663] netlink: 'syz.4.1151': attribute type 21 has an invalid length. [ 298.244365][ T9703] netlink: 'syz.0.1162': attribute type 21 has an invalid length. [ 298.797560][ T9718] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1168'. [ 299.135798][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 299.215256][ T9728] netlink: 'syz.1.1171': attribute type 5 has an invalid length. [ 299.350991][ T9734] syz.4.1173[9734] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 299.351197][ T9734] syz.4.1173[9734] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 299.551712][ T9739] netlink: 'syz.1.1174': attribute type 21 has an invalid length. [ 299.716391][ T9741] netlink: 'syz.2.1175': attribute type 21 has an invalid length. [ 300.054233][ T9750] netlink: 'syz.0.1177': attribute type 3 has an invalid length. [ 300.133551][ T9750] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.1177'. [ 300.896124][ T28] INFO: task syz.3.351:7043 blocked for more than 143 seconds. [ 300.904239][ T28] Not tainted syzkaller #0 [ 300.911438][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 300.920316][ T28] task:syz.3.351 state:D stack:24616 pid:7043 ppid:5786 flags:0x00004002 [ 300.954386][ T28] Call Trace: [ 300.958402][ T28] [ 300.961615][ T28] __schedule+0x14d2/0x44d0 [ 300.966705][ T28] ? rcu_is_watching+0x15/0xb0 [ 300.971797][ T28] ? asan.module_dtor+0x20/0x20 [ 300.978620][ T28] ? trace_contention_end+0x39/0xe0 [ 300.984072][ T28] ? task_work_cancel+0xa3/0x240 [ 301.006031][ T28] ? task_work_cancel_func+0x210/0x210 [ 301.011764][ T28] schedule+0xbd/0x170 [ 301.058841][ T28] ? _free_event+0xfe/0xf30 [ 301.063574][ T28] _free_event+0x174/0xf30 [ 301.077137][ T28] perf_event_release_kernel+0x836/0x8c0 [ 301.083223][ T28] ? __might_sleep+0xe0/0xe0 [ 301.105806][ T28] ? calc_timer_values+0x400/0x400 [ 301.117125][ T28] ? __fput+0x61c/0x970 [ 301.127469][ T28] ? perf_mmap+0x1630/0x1630 [ 301.145601][ T28] perf_release+0x3b/0x40 [ 301.150031][ T28] __fput+0x234/0x970 [ 301.174601][ T28] task_work_run+0x1ce/0x250 [ 301.195367][ T28] ? task_work_cancel+0x240/0x240 [ 301.215611][ T28] do_exit+0x90b/0x23c0 [ 301.229125][ T28] ? put_task_struct+0xc0/0xc0 [ 301.243700][ T28] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 301.269250][ T28] ? get_signal+0x1068/0x1400 [ 301.282260][ T28] ? lock_chain_count+0x20/0x20 [ 301.290738][ T9778] netlink: 'syz.4.1184': attribute type 10 has an invalid length. [ 301.310037][ T28] ? _raw_spin_lock_irq+0xaf/0xe0 [ 301.325315][ T28] do_group_exit+0x21b/0x2d0 [ 301.346148][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 301.358825][ T28] get_signal+0x12fc/0x1400 [ 301.374122][ T28] arch_do_signal_or_restart+0x9c/0x7b0 [ 301.615828][ T28] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 301.624327][ T28] ? get_sigframe_size+0x20/0x20 [ 301.647028][ T28] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 301.662290][ T28] ? exit_to_user_mode_loop+0x3b/0x110 [ 301.677407][ T28] exit_to_user_mode_loop+0x70/0x110 [ 301.773212][ T28] exit_to_user_mode_prepare+0xf6/0x180 [ 301.804115][ T28] syscall_exit_to_user_mode+0x1a/0x50 [ 301.839531][ T28] do_syscall_64+0x61/0xb0 [ 301.865203][ T28] ? clear_bhb_loop+0x40/0x90 [ 301.885106][ T28] ? clear_bhb_loop+0x40/0x90 [ 301.913573][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 301.949779][ T28] RIP: 0033:0x7f47b418df90 [ 301.970750][ T28] RSP: 002b:00007f47b5096f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 302.007568][ T28] RAX: fffffffffffffffe RBX: 0000000000000002 RCX: 00007f47b418df90 [ 302.037532][ T28] RDX: 0000000000000002 RSI: 00007f47b5096fa0 RDI: 00000000ffffff9c [ 302.065749][ T28] RBP: 00007f47b5096fa0 R08: 0000000000000000 R09: 00007f47b5096cd5 [ 302.114964][ T28] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 302.134091][ T28] R13: 00007f47b43e6038 R14: 00007f47b43e5fa0 R15: 00007ffe7f3b41f8 [ 302.164486][ T28] [ 302.182820][ T28] [ 302.182820][ T28] Showing all locks held in the system: [ 302.216640][ T28] 1 lock held by khungtaskd/28: [ 302.232428][ T9778] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.240308][ T9778] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.255839][ T28] #0: ffffffff8cd2fee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 302.278087][ T28] 2 locks held by kworker/0:2/967: [ 302.290677][ T28] #0: ffff888017872538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 302.333654][ T28] #1: ffffc9000445fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 302.371071][ T28] 2 locks held by getty/5552: [ 302.395806][ T28] #0: ffff88814c6de0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 302.435510][ T28] #1: ffffc9000328b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 302.466385][ T28] 3 locks held by kworker/0:3/5777: [ 302.487733][ T28] #0: ffff888017870938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 302.517345][ T28] #1: ffffc900043f7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 302.529831][ T9778] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.537138][ T9778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.544833][ T9778] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.552296][ T9778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.588544][ T28] #2: ffffffff8dfbc5c8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 302.646318][ T28] 4 locks held by kworker/u4:11/7571: [ 302.660831][ T28] #0: ffff888017873938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 302.682315][ T28] #1: ffffc9000376fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 302.702065][ T9778] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 302.717262][ T28] #2: ffffffff8dfaf790 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x136/0xb90 [ 302.737102][ T28] #3: ffffffff8dfbc5c8 (rtnl_mutex){+.+.}-{3:3}, at: cleanup_net+0x5fc/0xb90 [ 302.757307][ T28] 3 locks held by kworker/u4:20/7600: [ 302.763180][ T28] #0: ffff88802c402d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 302.807947][ T28] #1: ffffc9000499fd00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 302.965193][ T28] #2: ffff888050a66418 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0x60/0x1140 [ 303.016512][ T28] 3 locks held by kworker/u4:21/7603: [ 303.028933][ T28] #0: ffff888017871538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 303.058449][ T28] #1: ffffc90004c1fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 303.087106][ T28] #2: ffffffff8dfbc5c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 303.117635][ T28] 2 locks held by syz.0.1150/9668: [ 303.125691][ T28] 2 locks held by syz.2.1160/9699: [ 303.142893][ T28] 2 locks held by syz.2.1160/9702: [ 303.153641][ T28] 3 locks held by syz.2.1183/9763: [ 303.168017][ T28] #0: ffff8880762f8820 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x9b/0x230 [ 303.191975][ T28] #1: ffff888017ee5d30 (sk_lock-AF_QIPCRTR){+.+.}-{0:0}, at: qrtr_release+0x52/0x2a0 [ 303.220857][ T28] #2: ffffffff8cd358b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x830 [ 303.250787][ T28] 1 lock held by syz.4.1184/9780: [ 303.275911][ T28] #0: ffffffff8dfbc5c8 (rtnl_mutex){+.+.}-{3:3}, at: ppp_release+0x8a/0x1f0 [ 303.291035][ T28] 2 locks held by syz.4.1184/9781: [ 303.302448][ T28] #0: ffffffff8dfaf790 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x351/0x5e0 [ 303.316987][ T28] #1: ffffffff8dfbc5c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x81/0x210 [ 303.335784][ T28] 2 locks held by syz.1.1185/9773: [ 303.342803][ T28] #0: ffffffff8cd85e68 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2e/0x140 [ 303.367252][ T28] #1: ffffffff8cd358b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x830 [ 303.394744][ T28] 3 locks held by syz.4.1184/9777: [ 303.407541][ T28] 1 lock held by syz.0.1182/9783: [ 303.419922][ T28] #0: ffffffff8dfbc5c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 303.447266][ T28] [ 303.455392][ T28] ============================================= [ 303.455392][ T28] [ 303.492097][ T28] NMI backtrace for cpu 0 [ 303.496520][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 303.503871][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 303.514063][ T28] Call Trace: [ 303.518062][ T28] [ 303.521128][ T28] dump_stack_lvl+0x16c/0x230 [ 303.525868][ T28] ? show_regs_print_info+0x20/0x20 [ 303.531141][ T28] ? load_image+0x3b0/0x3b0 [ 303.535719][ T28] nmi_cpu_backtrace+0x39b/0x3d0 [ 303.540841][ T28] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 303.547318][ T28] ? _printk+0xd0/0x110 [ 303.551874][ T28] ? load_image+0x3b0/0x3b0 [ 303.556527][ T28] ? load_image+0x3b0/0x3b0 [ 303.561097][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 303.567309][ T28] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 303.573466][ T28] watchdog+0xf41/0xf80 [ 303.578643][ T28] ? watchdog+0x1e1/0xf80 [ 303.583042][ T28] kthread+0x2fa/0x390 [ 303.587250][ T28] ? hungtask_pm_notify+0x90/0x90 [ 303.592499][ T28] ? kthread_blkcg+0xd0/0xd0 [ 303.597132][ T28] ret_from_fork+0x48/0x80 [ 303.601683][ T28] ? kthread_blkcg+0xd0/0xd0 [ 303.606689][ T28] ret_from_fork_asm+0x11/0x20 [ 303.611740][ T28] [ 303.615900][ T28] Sending NMI from CPU 0 to CPUs 1: [ 303.621236][ C1] NMI backtrace for cpu 1 [ 303.621246][ C1] CPU: 1 PID: 9668 Comm: syz.0.1150 Not tainted syzkaller #0 [ 303.621262][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 303.621270][ C1] RIP: 0010:__sanitizer_cov_trace_switch+0x7c/0x120 [ 303.621296][ C1] Code: c0 75 13 e9 bc 00 00 00 b9 01 00 00 00 48 85 c0 0f 84 ae 00 00 00 41 57 41 56 41 54 53 48 8b 54 24 20 65 4c 8b 05 04 10 7e 7e <45> 31 c9 eb 08 49 ff c1 4c 39 c8 74 77 4e 8b 54 ce 10 65 44 8b 1d [ 303.621308][ C1] RSP: 0018:ffffc900033565d0 EFLAGS: 00000206 [ 303.621322][ C1] RAX: 0000000000000003 RBX: ffffffff8ed85aac RCX: 0000000000000003 [ 303.621332][ C1] RDX: ffffffff813aca19 RSI: ffffffff8cb9e7a0 RDI: 0000000000000001 [ 303.621342][ C1] RBP: ffffc90003356718 R08: ffff88802f68bc00 R09: 0000000000000000 [ 303.621352][ C1] R10: ffffc90003356718 R11: fffff5200066ace5 R12: ffffc900033566c8 [ 303.621362][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: ffffffff8ed85ab0 [ 303.621372][ C1] FS: 00007fba7db716c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 303.621384][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 303.621394][ C1] CR2: 00007f1ae51b6ad8 CR3: 0000000020e04000 CR4: 00000000003506e0 [ 303.621409][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 303.621418][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 303.621427][ C1] Call Trace: [ 303.621432][ C1] [ 303.621439][ C1] unwind_next_frame+0x16d9/0x2970 [ 303.621468][ C1] ? post_alloc_hook+0x1cd/0x210 [ 303.621488][ C1] ? post_alloc_hook+0x1cd/0x210 [ 303.621505][ C1] ? stack_trace_save+0xe0/0xe0 [ 303.621521][ C1] arch_stack_walk+0x144/0x190 [ 303.621539][ C1] ? get_page_from_freelist+0x195c/0x19f0 [ 303.621562][ C1] stack_trace_save+0x9c/0xe0 [ 303.621578][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 303.621593][ C1] ? mark_lock+0x94/0x320 [ 303.621615][ C1] save_stack+0xf7/0x1f0 [ 303.621636][ C1] ? __reset_page_owner+0x190/0x190 [ 303.621654][ C1] ? seqcount_lockdep_reader_access+0x103/0x180 [ 303.621667][ C1] ? post_alloc_hook+0x1cd/0x210 [ 303.621700][ C1] ? get_page_from_freelist+0x6a8/0x19f0 [ 303.621721][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 303.621740][ C1] __set_page_owner+0x1d/0x60 [ 303.621760][ C1] post_alloc_hook+0x1cd/0x210 [ 303.621780][ C1] get_page_from_freelist+0x195c/0x19f0 [ 303.621809][ C1] ? mark_lock+0x94/0x320 [ 303.621825][ C1] ? __next_zones_zonelist+0x9d/0x130 [ 303.621846][ C1] ? prepare_alloc_pages+0x366/0x5f0 [ 303.621870][ C1] __alloc_pages+0x1e3/0x460 [ 303.621891][ C1] ? zone_statistics+0x170/0x170 [ 303.621913][ C1] ? __dquot_alloc_space+0x27d/0xe80 [ 303.621938][ C1] __folio_alloc+0x10/0x20 [ 303.621957][ C1] vma_alloc_folio+0x47a/0x8f0 [ 303.621978][ C1] ? mpol_shared_policy_lookup+0x14b/0x1e0 [ 303.622001][ C1] shmem_alloc_folio+0x179/0x230 [ 303.622018][ C1] ? folio_put+0xd0/0xd0 [ 303.622044][ C1] ? __vm_enough_memory+0x11b/0x370 [ 303.622064][ C1] ? shmem_inode_acct_block+0x35e/0x460 [ 303.622080][ C1] shmem_alloc_and_acct_folio+0x189/0x630 [ 303.622097][ C1] ? put_swap_device+0x230/0x230 [ 303.622114][ C1] ? xas_load+0x12b/0x140 [ 303.622130][ C1] ? filemap_get_entry+0xb1/0x3c0 [ 303.622142][ C1] ? filemap_get_entry+0xb1/0x3c0 [ 303.622157][ C1] ? filemap_get_entry+0x35c/0x3c0 [ 303.622170][ C1] ? trace_event_raw_event_lock+0x230/0x230 [ 303.622191][ C1] ? page_cache_prev_miss+0x360/0x360 [ 303.622216][ C1] shmem_get_folio_gfp+0xcde/0x2ac0 [ 303.622253][ C1] shmem_write_begin+0xf2/0x420 [ 303.622272][ C1] generic_perform_write+0x2fb/0x5b0 [ 303.622297][ C1] ? generic_file_direct_write+0x3e0/0x3e0 [ 303.622310][ C1] ? down_write+0x162/0x1f0 [ 303.622329][ C1] ? file_update_time+0x98/0x1b0 [ 303.622347][ C1] shmem_file_write_iter+0xfb/0x120 [ 303.622365][ C1] __kernel_write_iter+0x274/0x670 [ 303.622387][ C1] ? vfs_read+0x920/0x920 [ 303.622407][ C1] ? __asan_memset+0x22/0x40 [ 303.622425][ C1] ? iov_iter_bvec+0xd4/0x1b0 [ 303.622446][ C1] dump_user_range+0x3f6/0x800 [ 303.622467][ C1] ? dump_skip+0x40/0x40 [ 303.622478][ C1] ? dump_emit+0x78/0xe0 [ 303.622507][ C1] ? dump_emit+0xa6/0xe0 [ 303.622524][ C1] ? elf_core_dump+0x2b23/0x36e0 [ 303.622544][ C1] elf_core_dump+0x3114/0x36e0 [ 303.622572][ C1] ? load_elf_binary+0x2700/0x2700 [ 303.622592][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 303.622607][ C1] ? verify_lock_unused+0x140/0x140 [ 303.622623][ C1] ? mas_next_slot+0x94f/0x980 [ 303.622645][ C1] ? up_write+0x1c3/0x410 [ 303.622683][ C1] ? rcu_read_lock_any_held+0xb4/0x120 [ 303.622698][ C1] ? 0xffffffffff600000 [ 303.622718][ C1] do_coredump+0x1755/0x2480 [ 303.622751][ C1] ? nfs_ssc_unregister+0x30/0x30 [ 303.622784][ C1] ? lock_chain_count+0x20/0x20 [ 303.622803][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 303.622819][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 303.622835][ C1] get_signal+0x1133/0x1400 [ 303.622868][ C1] arch_do_signal_or_restart+0x9c/0x7b0 [ 303.622890][ C1] ? get_sigframe_size+0x20/0x20 [ 303.622909][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 303.622933][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 303.622953][ C1] exit_to_user_mode_loop+0x70/0x110 [ 303.622972][ C1] exit_to_user_mode_prepare+0xf6/0x180 [ 303.622990][ C1] irqentry_exit_to_user_mode+0x9/0x40 [ 303.623004][ C1] exc_page_fault+0x8f/0x110 [ 303.623020][ C1] asm_exc_page_fault+0x26/0x30 [ 303.623034][ C1] RIP: 0033:0x7d15347382 [ 303.623050][ C1] Code: Unable to access opcode bytes at 0x7d15347358. [ 303.623057][ C1] RSP: 002b:0000200000000248 EFLAGS: 00010217 [ 303.623068][ C1] RAX: 0000000000000000 RBX: 00007fba7cfe5fa0 RCX: 00007fba7cd8f749 [ 303.623077][ C1] RDX: 0000200000000080 RSI: 0000200000000240 RDI: 0000000000000000 [ 303.623086][ C1] RBP: 00007fba7ce13f91 R08: 00002000000002c0 R09: 00002000000002c0 [ 303.623096][ C1] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 303.623105][ C1] R13: 00007fba7cfe6038 R14: 00007fba7cfe5fa0 R15: 00007fffa5ad8528 [ 303.623125][ C1] [ 304.241793][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 304.248828][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 304.256413][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 304.266671][ T28] Call Trace: [ 304.269965][ T28] [ 304.273018][ T28] dump_stack_lvl+0x16c/0x230 [ 304.277843][ T28] ? show_regs_print_info+0x20/0x20 [ 304.283056][ T28] ? load_image+0x3b0/0x3b0 [ 304.287615][ T28] panic+0x2c0/0x710 [ 304.291527][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 304.297184][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 304.301699][ T28] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 304.308048][ T28] watchdog+0xf80/0xf80 [ 304.312224][ T28] ? watchdog+0x1e1/0xf80 [ 304.316586][ T28] kthread+0x2fa/0x390 [ 304.320667][ T28] ? hungtask_pm_notify+0x90/0x90 [ 304.325705][ T28] ? kthread_blkcg+0xd0/0xd0 [ 304.330303][ T28] ret_from_fork+0x48/0x80 [ 304.334730][ T28] ? kthread_blkcg+0xd0/0xd0 [ 304.339385][ T28] ret_from_fork_asm+0x11/0x20 [ 304.344266][ T28] [ 304.347724][ T28] Kernel Offset: disabled [ 304.352171][ T28] Rebooting in 86400 seconds..