last executing test programs: 1m57.035303268s ago: executing program 1 (id=265): socketpair(0x22, 0x0, 0x23, &(0x7f0000000b40)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) close(0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000017c0)={0xffffffffffffffff, 0x0, 0x0, 0xda, 0x0, &(0x7f00000006c0)=""/218, 0x2, 0x0, 0x8, 0x7c0, &(0x7f00000005c0)="26c05254adb732b2", &(0x7f00000007c0)="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", 0x3, 0x0, 0x80000000}, 0x50) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r2) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r2, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000001240), 0x0, 0x56, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m45.69954309s ago: executing program 1 (id=265): socketpair(0x22, 0x0, 0x23, &(0x7f0000000b40)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) close(0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000017c0)={0xffffffffffffffff, 0x0, 0x0, 0xda, 0x0, &(0x7f00000006c0)=""/218, 0x2, 0x0, 0x8, 0x7c0, &(0x7f00000005c0)="26c05254adb732b2", &(0x7f00000007c0)="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", 0x3, 0x0, 0x80000000}, 0x50) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r2) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r2, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000001240), 0x0, 0x56, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m24.247080105s ago: executing program 1 (id=265): socketpair(0x22, 0x0, 0x23, &(0x7f0000000b40)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) close(0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000017c0)={0xffffffffffffffff, 0x0, 0x0, 0xda, 0x0, &(0x7f00000006c0)=""/218, 0x2, 0x0, 0x8, 0x7c0, &(0x7f00000005c0)="26c05254adb732b2", &(0x7f00000007c0)="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", 0x3, 0x0, 0x80000000}, 0x50) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r2) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r2, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000001240), 0x0, 0x56, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m5.653355138s ago: executing program 1 (id=265): socketpair(0x22, 0x0, 0x23, &(0x7f0000000b40)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) close(0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000017c0)={0xffffffffffffffff, 0x0, 0x0, 0xda, 0x0, &(0x7f00000006c0)=""/218, 0x2, 0x0, 0x8, 0x7c0, &(0x7f00000005c0)="26c05254adb732b2", &(0x7f00000007c0)="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", 0x3, 0x0, 0x80000000}, 0x50) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r2) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r2, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000001240), 0x0, 0x56, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 43.471241195s ago: executing program 1 (id=265): socketpair(0x22, 0x0, 0x23, &(0x7f0000000b40)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) close(0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000017c0)={0xffffffffffffffff, 0x0, 0x0, 0xda, 0x0, &(0x7f00000006c0)=""/218, 0x2, 0x0, 0x8, 0x7c0, &(0x7f00000005c0)="26c05254adb732b2", &(0x7f00000007c0)="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", 0x3, 0x0, 0x80000000}, 0x50) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r2) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r2, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000001240), 0x0, 0x56, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 18.592163501s ago: executing program 0 (id=917): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b4801a0240100000000001f02000000000000bc26100000000000bf67000000000000160200000fff0700670200000a000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500190300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r0}) sendmsg$kcm(r1, &(0x7f0000000400)={&(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2, 0x2, {0xa, 0x4e22, 0x7, @local, 0xf801}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000740)="efb6ec31230d4fbfcb5e40a531d77846dafecbfdf451bdb48d1fcd956ac5b4782aa4fd335c660c499496c4e635877b0dcebdd1c308934826aedb54c8f7188d558496b4f0011533a0b04a8abc46d1fb1ff383420f7045ce5db94d324b44b3129b3fc9c503c27ebd7eb6ff5d4a2b579b0592f523c1eb851f3f57f63ec1978a1ad095aab2", 0x83}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='cpu.stat\x00', 0x26e1, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x3, &(0x7f0000001200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc0, &(0x7f000000cf3d)=""/192, 0x0, 0x0, '\x00', 0x0, 0x2b}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018152a9f", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000070000009500000000000000"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8034000, 0x0, 0x6a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e4"}, 0x50) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x3}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6b1, 0x0, 0x0, 0x0, 0x0, 0x760a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="00f1ff00009b22fd000000b7080000000000007b8af8ff00000000bfa20000006c527096b08811ce0000000702000000000000000000000000000000001af00a5c08f47ccae7739671d0632414da04e015381b31f7be5ff95ea12222ca605265367fa24ab4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xfffffffd, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r7, 0x40047451, 0x2000000a) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$TUNSETOFFLOAD(r7, 0x40047451, 0x20000015) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000ffff0f000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x20) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x9, 0x80000000, 0x800, 0x1004, 0x4, r9, 0xffffffff, '\x00', r10, r8, 0x0, 0x1, 0x4}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x1, 0x9, 0xeba, 0x2010, 0xffffffffffffffff, 0x5, '\x00', r10, 0xffffffffffffffff, 0x1, 0x2, 0x1, 0x20000000005}, 0x48) 18.449040924s ago: executing program 1 (id=265): socketpair(0x22, 0x0, 0x23, &(0x7f0000000b40)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) close(0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000017c0)={0xffffffffffffffff, 0x0, 0x0, 0xda, 0x0, &(0x7f00000006c0)=""/218, 0x2, 0x0, 0x8, 0x7c0, &(0x7f00000005c0)="26c05254adb732b2", &(0x7f00000007c0)="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", 0x3, 0x0, 0x80000000}, 0x50) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r2) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r2, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000001240), 0x0, 0x56, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 17.368880353s ago: executing program 0 (id=920): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x0, 0x0, 0x0, @link_id}, 0x20) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="d5", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f000000c180)={0x0, 0x0, 0x0}, 0x44845) sendmsg$kcm(r0, &(0x7f0000011e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000}, 0x0) 16.593821423s ago: executing program 0 (id=926): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4043, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x6, 0x1000}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r3, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000040)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xe9, '\x00', r4, r5, 0x5, 0x0, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r3, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x800, 0x0, 0x5a2b, 0xa3, r5, 0x9, '\x00', r6, r5, 0x3, 0x1, 0x1, 0xe}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x8, 0x6, 0x5, 0xfff, 0x900, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xf, &(0x7f0000000180)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x19}, @call={0x85, 0x0, 0x0, 0xd3}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x90, &(0x7f0000000280)=""/144, 0x41100, 0x24, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x9, 0x2}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000500)=[r7], &(0x7f0000000540)=[{0x2, 0x5, 0x10}, {0x4, 0x2, 0x4, 0xc}, {0x0, 0x1, 0x6, 0xd}, {0x5, 0x4, 0x4, 0x8}, {0x2, 0x1, 0x4, 0x2}, {0x4, 0x3, 0xe, 0x4}, {0x2, 0x3, 0x5, 0x2}, {0x5, 0x4, 0x5, 0x1}], 0x10, 0x69}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000), 0xfdef) 16.519900554s ago: executing program 3 (id=927): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x1200, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 16.317753136s ago: executing program 0 (id=929): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$kcm(0xa, 0x2, 0x73) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r4, r3, 0x2, 0x0, 0x4000}, 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r4, r3, 0x2, 0x0, 0x4000}, 0x10) socket$kcm(0xa, 0x2, 0x73) (async) socket$kcm(0xa, 0x2, 0x73) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x0, 0x10) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800786a00"/28, @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc60100c034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc60100c034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x8, 0x1}, 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000000)=0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x30020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16.277209244s ago: executing program 3 (id=930): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000008c0)='contention_end\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_es_find_extent_range_exit\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[], 0x5) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10004, 0x9a8885e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40305829, &(0x7f0000000040)) write$cgroup_type(r3, &(0x7f00000003c0), 0x9) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40305839, &(0x7f0000000040)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x57a6f874}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000000), 0xffe000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000040)) write$cgroup_freezer_state(r6, 0x0, 0x0) 15.792215418s ago: executing program 0 (id=931): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b4801a0240100000000001f02000000000000bc26100000000000bf67000000000000160200000fff0700670200000a000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500190300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r0}) sendmsg$kcm(r1, &(0x7f0000000400)={&(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2, 0x2, {0xa, 0x4e22, 0x7, @local, 0xf801}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000740)="efb6ec31230d4fbfcb5e40a531d77846dafecbfdf451bdb48d1fcd956ac5b4782aa4fd335c660c499496c4e635877b0dcebdd1c308934826aedb54c8f7188d558496b4f0011533a0b04a8abc46d1fb1ff383420f7045ce5db94d324b44b3129b3fc9c503c27ebd7eb6ff5d4a2b579b0592f523c1eb851f3f57f63ec1978a1ad095aab2", 0x83}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='cpu.stat\x00', 0x26e1, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x3, &(0x7f0000001200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc0, &(0x7f000000cf3d)=""/192, 0x0, 0x0, '\x00', 0x0, 0x2b}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018152a9f", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000070000009500000000000000"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8034000, 0x0, 0x6a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e4"}, 0x50) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x3}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6b1, 0x0, 0x0, 0x0, 0x0, 0x760a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="00f1ff00009b22fd000000b7080000000000007b8af8ff00000000bfa20000006c527096b08811ce0000000702000000000000000000000000000000001af00a5c08f47ccae7739671d0632414da04e015381b31f7be5ff95ea12222ca605265367fa24ab4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xfffffffd, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r7, 0x40047451, 0x2000000a) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$TUNSETOFFLOAD(r7, 0x40047451, 0x20000015) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000ffff0f000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x20) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x9, 0x80000000, 0x800, 0x1004, 0x4, r9, 0xffffffff, '\x00', r10, r8, 0x0, 0x1, 0x4}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x1, 0x9, 0xeba, 0x2010, 0xffffffffffffffff, 0x5, '\x00', r10, 0xffffffffffffffff, 0x1, 0x2, 0x1, 0x20000000005}, 0x48) 15.649461268s ago: executing program 3 (id=932): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071105c000000000006000080000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x5, 0x10, &(0x7f0000000000), 0x10}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x2, 0x4}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r3}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@const={0x0, 0x0, 0x0, 0xa, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}]}}, 0x0, 0x3e}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8924, &(0x7f0000000080)) 14.963960878s ago: executing program 3 (id=939): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) (async) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x4f}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x4f}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000540), 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000080)={@cgroup=r2, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0x15, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000001}, {}, {}, [@call={0x85, 0x0, 0x0, 0x5f}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x100, 0xe9, &(0x7f0000000400)=""/233, 0x40f00, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x9, 0x4, 0xb3}, 0x10, 0x2625e, r0, 0x1, &(0x7f0000000300)=[0x1, 0x1, 0x1], &(0x7f0000000580)=[{0x4, 0x2, 0xf, 0x1}], 0x10, 0x5}, 0x90) r4 = getpid() perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) r5 = getpid() perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r5, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x0, 0xb, 0xf3, &(0x7f0000000680)="97efb2fd43328c0d88c8ad", &(0x7f00000006c0)=""/243, 0x6, 0x0, 0x22, 0xeb, &(0x7f00000007c0)="bd83ba23d86bb3bb599cec25f358b71091a1c08f6d6a032ac3c506e0bd416fa3b8fd", &(0x7f0000000800)="88e2a7985fe8b7741c42e4ccd02d48082d453fce4f0ae904324504abf320c34949f3dd0f2e539a757cdc050585304243b3e50f5074b3f6e4191ea60bf09a3dcb4a6cc7f92c2b2c99c235cba390eaca5a2abc9dc4c01e0b0e82a2a0dad773a8af250cc5f14125401540df7c8132112bb668a29809a20170321ef950d0e1c3806ad09312650849ef4783593068833c58350602ee2146c6724c48f3ef1505f213375a6321e84a97f4f6161872e885d812a3f3773d3069b74abd14234bdc9f19a2b46e920207a1723babe553410c6b4568cacf424706972ac45e3c68309556dcf810744c1bfb41348beebb4139", 0x3, 0x0, 0x4}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x0, 0xb, 0xf3, &(0x7f0000000680)="97efb2fd43328c0d88c8ad", &(0x7f00000006c0)=""/243, 0x6, 0x0, 0x22, 0xeb, &(0x7f00000007c0)="bd83ba23d86bb3bb599cec25f358b71091a1c08f6d6a032ac3c506e0bd416fa3b8fd", &(0x7f0000000800)="88e2a7985fe8b7741c42e4ccd02d48082d453fce4f0ae904324504abf320c34949f3dd0f2e539a757cdc050585304243b3e50f5074b3f6e4191ea60bf09a3dcb4a6cc7f92c2b2c99c235cba390eaca5a2abc9dc4c01e0b0e82a2a0dad773a8af250cc5f14125401540df7c8132112bb668a29809a20170321ef950d0e1c3806ad09312650849ef4783593068833c58350602ee2146c6724c48f3ef1505f213375a6321e84a97f4f6161872e885d812a3f3773d3069b74abd14234bdc9f19a2b46e920207a1723babe553410c6b4568cacf424706972ac45e3c68309556dcf810744c1bfb41348beebb4139", 0x3, 0x0, 0x4}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='br_fdb_update\x00'}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r7, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r8, &(0x7f0000000180)={0x0, 0xfffffffffffffdf5, &(0x7f0000000380)=[{&(0x7f0000000240)='\f', 0x1}], 0x1}, 0x840) (async) sendmsg$inet(r8, &(0x7f0000000180)={0x0, 0xfffffffffffffdf5, &(0x7f0000000380)=[{&(0x7f0000000240)='\f', 0x1}], 0x1}, 0x840) 14.780420238s ago: executing program 0 (id=942): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1b00, &(0x7f0000000200)=[{&(0x7f0000000300)="d80000001a0081024e81f782db4cb904021d0800fe0655a1150015000200142603600e12080005007a010401a8001600200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457fffffffffffff0001bace8017cbec4c2ee5a7cef4090000001fb79164d322fe7c9f8775d3f2d5d0683f5aeb4edbb57a5025ccca9e00360db785262f3d40fad95667e006dcdf61951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94100"/216, 0xd8}], 0x1}, 0x0) 14.265170037s ago: executing program 3 (id=944): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f00000003c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x50140480, 0x0, 0x400000000000000, 0x0, 0x0, 0x0) 14.134843467s ago: executing program 3 (id=947): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$kcm(0x11, 0x200000000000002, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) 2.914345277s ago: executing program 4 (id=999): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unlink(&(0x7f0000000880)='./file0\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000001740)="ffe400"/14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b40000100000010061147c040000000004000660d981000095fff300000800219601f0ec333405c7e21788342c0489e502519ef74c1f592849907f275575f32f000000f70ea7a91f440e9d1ce7ac2c479b00cb79137e408b46699fd57c60a090ef4bc2ef9fcd868335c07fe28678ec1ae4219d646e0d674a109608652c9aa3a2cd4e74f894588bd9d297fef28acfeb8ce14c2a1e7b9a808871225fdf47b53de7055e94629964c2619dd0bac3bb781ce3bb24e8015b427228e58be038b0e123ce42"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x1f, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4004662b, &(0x7f0000000000)=0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0xfa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100ff010000000000000040000000000000000001a23250456bf963efe8020000004a69ba7c2f"], 0x0, 0x49}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc0506617, &(0x7f0000000040)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00"], 0xfe33) perf_event_open$cgroup(0x0, r4, 0x2, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc0406619, &(0x7f0000000040)=0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001080000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_devices(r2, &(0x7f0000000a80)={'c', ' *:* ', 'r\x00'}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c80)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0x48) close(r7) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={0xffffffffffffffff, 0xe0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, &(0x7f0000000a00)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000b00)=[0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xed, &(0x7f0000000b80), 0x0, 0x10, &(0x7f0000000bc0), &(0x7f0000000a40), 0x8, 0x8b, 0x8, 0x2d, &(0x7f0000000c40)}}, 0x10) 2.727823719s ago: executing program 4 (id=1000): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xb4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) socket$kcm(0x2, 0x3, 0x2) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000010c0)={0xffffffffffffffff}, 0xc) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000006c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x73) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) sendmsg$kcm(r3, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x1a002}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[], 0x4) 2.700053025s ago: executing program 2 (id=1001): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@generic={0x1, "ba795bf7542c899a8cdb2f86a496676ece46dc88bb9315e9f6f726154b0c4378bcd6e07d3e64d41e2f918cc7eedc7e13605c5caad83fc97de7ae5c7ee46bfaf58f94a380eb2ca56ffb02dfc46b1fed9795d1d8d91c16b6e5f5c31745444757df1c5684aa58075ab6fc6b34d345b63359c923893115eb4e5f3d12019f4fb7"}, 0x80, 0x0, 0x11}, 0x0) 2.535062689s ago: executing program 2 (id=1002): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60100007000c000300053582c137153e37000c0980fc0b100703f0", 0x33fe0}], 0x1}, 0x0) 2.376983613s ago: executing program 4 (id=1003): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000001500)=ANY=[@ANYBLOB="18000000008000000000000000000000b7080000000000007b8af8ff0000ff7f00000000000000007b8af0ff00000000bf8100000000000007bf29b6fcffffffbfa400000000000007040000f0ffffffb702000088000000182100003e3a5945b075b5b498232aab6822778e", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0x1002, &(0x7f00000004c0)=""/4098, 0x0, 0x48, '\x00', 0x0, 0x0, r0}, 0x90) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000005000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f2, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{0x0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000015c0)=r1, 0x4) 1.242971813s ago: executing program 4 (id=1004): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x4, 0x0, 0x0, 0x2}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb1}}]}, &(0x7f00000005c0)='GPL\x00', 0x7}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="bb44e3d9d2f97ca570e905501cb259cb012b0c0a1b550761574187e93f98d2bf9e300e8d03"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r3, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x80, '\x00', r4, r2, 0x0, 0x5, 0x4}, 0x48) r5 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x6e, &(0x7f0000000000)=r7, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x2, &(0x7f00000000c0)=@raw=[@cb_func={0x18, 0xa, 0x4, 0x0, 0x1}], &(0x7f0000000100)='syzkaller\x00', 0x9, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x70, '\x00', r4, 0x17, r1, 0x8, &(0x7f0000000280)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x1, 0xfff, 0x6}, 0x10, 0x26a6c, 0xffffffffffffffff, 0x7, &(0x7f0000000300)=[r0, r0, r0, r7], &(0x7f0000000340)=[{0x3, 0x1, 0x2, 0xb}, {0x3, 0x4, 0xb, 0xb}, {0x0, 0x5, 0xe, 0x9}, {0x2, 0x3, 0xc, 0xc}, {0x0, 0x1, 0x10, 0x2}, {0x5, 0x3, 0x8}, {0x1, 0x2, 0x3, 0x5}], 0x10, 0x7}, 0x90) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r8}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x6, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00'}) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 1.228321995s ago: executing program 2 (id=1005): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb1}}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x83f00}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_MAP_GET_FD_BY_ID(0x23, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x13, &(0x7f0000000340)=ANY=[], &(0x7f0000000040)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r3) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xe, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x90) write$cgroup_int(r2, &(0x7f0000000000), 0x12) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000500)={'dvmrp0', 0x32, 0x38}, 0x9) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair(0x9, 0x0, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0xc00, 0x30, 0x30, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x0, 0x2}, {0x0, 0x2}, {}]}, @union]}}, 0x0, 0x4a}, 0x20) 1.096996671s ago: executing program 2 (id=1006): socket$kcm(0x2, 0x0, 0x2) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000010c0)={0xffffffffffffffff}, 0xc) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000006c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec472db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc626b424da1e8c825357861aa50054686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf4d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b0100000000000000b0255f347160ac83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff7020000eea2ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072913152c845cf572cf39310d522a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8abafe4f0f6ea508000000a0c548552b571bed5647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e5251aae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b6588f6008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda34536020000fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bf8d9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420b75b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177c16810fae053349609000000000000009a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f8100257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33384253af570f4ef9c0254afdd89c73943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b70304669c447c71ca4d54c82395a3958d576c42c08a4d5adfb58306164cc7d870b881f8084a3d185a63c6b05292186095c1f407ce74297d16470988f1647f7b6f6cdc6ab8be3cacc325df963c2cb80cfe07ded6d55f556be0a3dfa85f0a0ace879b0a0a95cd07b66fbbc73d0945beebe87a21dd46fd5804cd63c01199c78b1d774b17686fe3aeadebc4f3d2e6af1110466fecf41384f1b5c96531700db5aefa1a5c17a9ebcaf334110ed582999208cc7ef977ceb2f8a5aa7d00000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x73) socket$kcm(0x29, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, &(0x7f0000000900)={'wg2\x00', @random='\x00\x00\x00 \x00'}) r2 = socket$kcm(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r3, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000b80)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001300)={{r4, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f00000012c0)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r5}, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) 236.728284ms ago: executing program 4 (id=1007): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x1000000, &(0x7f0000000000)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) 138.444932ms ago: executing program 2 (id=1008): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085001d7f042dcac0e2f6000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000640)={0x0, 0x0}, 0x8) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080005300000000faff00009400000021ad413e550000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xf, 0x0, 0x0, 0xfcc1, 0x10, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r5}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001300)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffe56, 0x2d, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000f99400000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r8}, 0x90) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000dc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r8}, 0x48) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000780)=""/160, 0x16f, 0xa0, 0x0, 0x482d}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, 0xe, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x3, 0x8, 0x7fffffff, 0x8}, 0x10, r2, r3, 0x6, 0x0, &(0x7f0000000b80)=[{0x2, 0x1, 0xc}, {0x0, 0x1, 0x9, 0x4}, {0x3, 0x2, 0x1, 0xa}, {0x5, 0x1, 0xe, 0x4}, {0x1, 0x1, 0xc, 0xc}, {0x2, 0x3, 0x8, 0x1}]}, 0x90) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x0, 0x0, r9, 0x9, '\x00', r8, r1, 0x3, 0x5}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x5, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r13, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r12}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r14, &(0x7f0000000240), &(0x7f0000000340)=""/210}, 0x20) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001000)={0x3, 0x4, 0x4, 0xa, 0x0, r9, 0x4, '\x00', r6, 0xffffffffffffffff, 0x0, 0x7, 0x2}, 0x48) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0xa, 0x16, &(0x7f0000000cc0)=ANY=[@ANYBLOB="180800e5b466893f42736313041ada692aa0d3c2ba543993", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000950000000000000018270000", @ANYRES32, @ANYBLOB="0000000001fcffff183a000002000000000000000000000043630100080000008520000004000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000a80)='syzkaller\x00', 0x8, 0x4a, &(0x7f0000000ac0)=""/74, 0x40f00, 0x61, '\x00', r8, 0x37, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x0, 0x4, 0x2, 0x401}, 0x10, r2, 0xffffffffffffffff, 0x6, &(0x7f0000000d80)=[0xffffffffffffffff, r9, r9, r14, r1, r9, r9, r15, r9, r1], &(0x7f0000001080)=[{0x3, 0x5, 0x5, 0x6}, {0x2, 0x2, 0xd, 0x3}, {0x4, 0x4, 0x7, 0xb}, {}, {0x2, 0x0, 0x0, 0x5}, {0x2, 0x1, 0x4, 0x8}], 0x10, 0x9}, 0x90) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r1, 0x20, &(0x7f0000000800)={&(0x7f0000000700)=""/68, 0x44, 0x0, &(0x7f0000000780)=""/80, 0x50}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0x8, &(0x7f00000009c0)=ANY=[@ANYRES16=r16], 0x0, 0x8009, 0x0, 0x0, 0x40f00, 0x8, '\x00', r8, 0x18, r1, 0x8, &(0x7f0000000680)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x400005, 0x2c, 0x8, 0x10}, 0x10, r17, r0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x20, 0x1b, &(0x7f00000011c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r13}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4b6}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x70000adcbbe2e90d}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000012c0)='syzkaller\x00', 0x2, 0xe0, &(0x7f00000013c0)=""/224, 0x40f00, 0x1, '\x00', r8, 0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000001540)=[{0x3, 0x3, 0x4, 0x4}], 0x10, 0xffffffff}, 0x90) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000000)) r18 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1}, &(0x7f0000000300), 0x0}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000009c0c000000000000070000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x1c, &(0x7f0000000240)=""/28, 0x41000, 0x1, '\x00', 0x0, 0x4, r18, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x2, 0x0, 0xffff, 0x5}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 7.020888ms ago: executing program 4 (id=1009): bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=0x1, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@cgroup, 0xffffffffffffffff, 0x31, 0x0, 0x0, @link_id, r0}, 0x20) 0s ago: executing program 2 (id=1010): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) write$cgroup_int(r3, &(0x7f00000001c0), 0xfffffdef) (fail_nth: 35) kernel console output (not intermixed with test programs): T6039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.619748][ T6115] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.303'. [ 117.635684][ T6039] Cannot create hsr debugfs directory [ 117.798333][ T6128] syz.3.306 uses obsolete (PF_INET,SOCK_PACKET) [ 118.249845][ T5099] Bluetooth: hci3: command tx timeout [ 118.382003][ T6039] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.552705][ T6039] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.707443][ T6039] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.767078][ T6157] netlink: 'syz.4.316': attribute type 3 has an invalid length. [ 118.779836][ T6157] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.316'. [ 118.891607][ T6039] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.285051][ T6039] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 119.343100][ T6039] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 119.397979][ T6039] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 119.448371][ T6039] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 119.599738][ T6039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.625998][ T6039] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.641929][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.649314][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.677738][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.684957][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.729433][ T6039] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 120.176566][ T6039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.330415][ T5099] Bluetooth: hci3: command tx timeout [ 120.367107][ T6039] veth0_vlan: entered promiscuous mode [ 120.453571][ T6039] veth1_vlan: entered promiscuous mode [ 120.596831][ T6039] veth0_macvtap: entered promiscuous mode [ 120.645279][ T6039] veth1_macvtap: entered promiscuous mode [ 120.763306][ T6039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.844306][ T6039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.919555][ T6039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.963238][ T6039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.999425][ T6039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.029566][ T6039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.087309][ T6039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.129573][ T6039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.139469][ T6039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.189565][ T6039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.213730][ T6039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.262882][ T6039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.294957][ T6039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.307658][ T6039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.320944][ T6039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.331213][ T6039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.343369][ T6039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.353531][ T6039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.364299][ T6039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.374708][ T6039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.393683][ T6039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.422511][ T6039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.446698][ T6253] netlink: 'syz.0.339': attribute type 10 has an invalid length. [ 121.495276][ T6039] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.549748][ T6039] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.558633][ T6039] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.589651][ T6039] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.083690][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.119906][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.178089][ T6262] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.343'. [ 122.245695][ T6166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.265897][ T6166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.105417][ T6293] netlink: 'syz.3.354': attribute type 2 has an invalid length. [ 123.161600][ T6293] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.354'. [ 123.351032][ T6299] netlink: 'syz.2.357': attribute type 1 has an invalid length. [ 123.413965][ T6299] netlink: 191384 bytes leftover after parsing attributes in process `syz.2.357'. [ 123.901630][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 123.911989][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 123.922122][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 123.960406][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 123.973521][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 123.984372][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 124.218261][ T6322] netlink: 'syz.0.365': attribute type 10 has an invalid length. [ 124.248325][ T6322] 8021q: adding VLAN 0 to HW filter on device  [ 124.262364][ T6322] team0: Port device  added [ 124.379285][ T6178] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.605626][ T6178] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.793470][ T6178] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.972307][ T6178] team0: Port device netdevsim0 removed [ 125.012274][ T6178] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.366687][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 125.376886][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 125.387577][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 125.452396][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 125.465317][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 125.480196][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 125.697214][ T6178] bridge_slave_1: left allmulticast mode [ 125.726608][ T6178] bridge_slave_1: left promiscuous mode [ 125.738654][ T6178] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.772459][ T6178] bridge_slave_0: left allmulticast mode [ 125.778509][ T6178] bridge_slave_0: left promiscuous mode [ 125.788990][ T6178] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.090621][ T5099] Bluetooth: hci3: command tx timeout [ 126.391122][ T6178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.407131][ T6178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.424748][ T6178] bond0 (unregistering): Released all slaves [ 126.550885][ T6379] wg2: entered allmulticast mode [ 126.663867][ T6310] chnl_net:caif_netlink_parms(): no params data found [ 126.701314][ T6380] wg2: entered promiscuous mode [ 127.137007][ T6399] netlink: 830 bytes leftover after parsing attributes in process `syz.0.387'. [ 127.166226][ T6399] team0: default FDB implementation only supports local addresses [ 127.530861][ T5099] Bluetooth: hci4: command tx timeout [ 128.170691][ T5099] Bluetooth: hci3: command tx timeout [ 128.280017][ T6178] hsr_slave_0: left promiscuous mode [ 128.296730][ T6178] hsr_slave_1: left promiscuous mode [ 128.433692][ T6178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.457352][ T6178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.485348][ T6178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.511236][ T6178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.577019][ T6178] veth1_macvtap: left promiscuous mode [ 128.593100][ T6178] veth0_macvtap: left promiscuous mode [ 128.624393][ T6178] veth1_vlan: left promiscuous mode [ 128.631703][ T6178] veth0_vlan: left promiscuous mode [ 129.353849][ T6178] team0 (unregistering): Port device team_slave_1 removed [ 129.397388][ T6178] team0 (unregistering): Port device team_slave_0 removed [ 129.609774][ T5099] Bluetooth: hci4: command tx timeout [ 129.881900][ T6456] netlink: 830 bytes leftover after parsing attributes in process `syz.3.398'. [ 129.894972][ T6456] team0: default FDB implementation only supports local addresses [ 129.919602][ T6310] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.926816][ T6310] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.961172][ T6310] bridge_slave_0: entered allmulticast mode [ 129.968825][ T6310] bridge_slave_0: entered promiscuous mode [ 130.051492][ T6310] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.069955][ T6310] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.077353][ T6310] bridge_slave_1: entered allmulticast mode [ 130.085615][ T6310] bridge_slave_1: entered promiscuous mode [ 130.250377][ T5099] Bluetooth: hci3: command tx timeout [ 130.346076][ T6310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.386023][ T6310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.573340][ T6351] chnl_net:caif_netlink_parms(): no params data found [ 130.608002][ T6310] team0: Port device team_slave_0 added [ 130.684005][ T6486] netlink: 'syz.3.407': attribute type 1 has an invalid length. [ 130.706601][ T6310] team0: Port device team_slave_1 added [ 130.727049][ T6486] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.407'. [ 130.787345][ T6486] netlink: 'syz.3.407': attribute type 1 has an invalid length. [ 130.903279][ T6310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.930432][ T6310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.049931][ T6310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.148925][ T6505] netlink: 'syz.3.411': attribute type 22 has an invalid length. [ 131.158750][ T6505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.411'. [ 131.172816][ T6507] netlink: 830 bytes leftover after parsing attributes in process `syz.2.410'. [ 131.199662][ T6507] team0: default FDB implementation only supports local addresses [ 131.213366][ T6310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.228338][ T6310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.258193][ T6310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.455825][ T6351] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.474380][ T6351] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.496485][ T6351] bridge_slave_0: entered allmulticast mode [ 131.515514][ T6351] bridge_slave_0: entered promiscuous mode [ 131.551732][ T6351] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.581794][ T6351] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.599960][ T6351] bridge_slave_1: entered allmulticast mode [ 131.628045][ T6351] bridge_slave_1: entered promiscuous mode [ 131.689917][ T5099] Bluetooth: hci4: command tx timeout [ 131.847393][ T6535] netlink: 168 bytes leftover after parsing attributes in process `syz.3.417'. [ 131.912525][ T6178] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.962416][ T6537] netlink: 'syz.0.418': attribute type 6 has an invalid length. [ 131.979628][ T6537] netlink: 197060 bytes leftover after parsing attributes in process `syz.0.418'. [ 132.126996][ T6178] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.227702][ T6351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.273724][ T6351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.321502][ T6310] hsr_slave_0: entered promiscuous mode [ 132.329787][ T5099] Bluetooth: hci3: command tx timeout [ 132.336984][ T6310] hsr_slave_1: entered promiscuous mode [ 132.344248][ T6310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.353261][ T6310] Cannot create hsr debugfs directory [ 132.443841][ T6178] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.466822][ T6551] netlink: 830 bytes leftover after parsing attributes in process `syz.3.421'. [ 132.483839][ T6551] team0: default FDB implementation only supports local addresses [ 132.491255][ T6552] netlink: 'syz.2.422': attribute type 3 has an invalid length. [ 132.510826][ T6552] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.422'. [ 132.627673][ T6178] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.685015][ T6351] team0: Port device team_slave_0 added [ 132.734245][ T6351] team0: Port device team_slave_1 added [ 132.930412][ T6351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.950969][ T6351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.069696][ T6351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.143755][ T6351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.172324][ T6351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.225979][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.232500][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.293570][ T6351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.355875][ T6578] netlink: 60 bytes leftover after parsing attributes in process `syz.0.429'. [ 133.420249][ T6574] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 133.769816][ T5099] Bluetooth: hci4: command tx timeout [ 133.873219][ T6592] netlink: 177956 bytes leftover after parsing attributes in process `syz.0.433'. [ 133.888016][ T6351] hsr_slave_0: entered promiscuous mode [ 133.910378][ T6351] hsr_slave_1: entered promiscuous mode [ 133.925005][ T6351] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.942106][ T6351] Cannot create hsr debugfs directory [ 133.971205][ T6600] team0: default FDB implementation only supports local addresses [ 134.017764][ T6178] bridge_slave_1: left allmulticast mode [ 134.024159][ T6178] bridge_slave_1: left promiscuous mode [ 134.034582][ T6178] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.074144][ T6178] bridge_slave_0: left allmulticast mode [ 134.098475][ T6178] bridge_slave_0: left promiscuous mode [ 134.116913][ T6178] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.739155][ T6178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.753953][ T6178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.767245][ T6178] bond0 (unregistering): Released all slaves [ 134.974626][ T6618] __nla_validate_parse: 1 callbacks suppressed [ 134.974650][ T6618] netlink: 60 bytes leftover after parsing attributes in process `syz.3.439'. [ 135.563013][ T6634] netlink: 830 bytes leftover after parsing attributes in process `syz.3.444'. [ 135.591850][ T6634] team0: default FDB implementation only supports local addresses [ 135.827077][ T6640] netlink: 'syz.2.447': attribute type 2 has an invalid length. [ 135.865322][ T6640] netlink: 'syz.2.447': attribute type 1 has an invalid length. [ 135.877972][ T6640] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.447'. [ 135.919710][ T6178] hsr_slave_0: left promiscuous mode [ 135.926269][ T6178] hsr_slave_1: left promiscuous mode [ 135.933873][ T6178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.946552][ T6178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.974734][ T6178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.009764][ T6178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.067630][ T6178] veth1_macvtap: left promiscuous mode [ 136.076214][ T6178] veth0_macvtap: left promiscuous mode [ 136.083490][ T6178] veth1_vlan: left promiscuous mode [ 136.089364][ T6178] veth0_vlan: left promiscuous mode [ 136.819074][ T6178] team0 (unregistering): Port device team_slave_1 removed [ 136.866748][ T6178] team0 (unregistering): Port device team_slave_0 removed [ 137.737188][ T6662] netlink: 199844 bytes leftover after parsing attributes in process `syz.2.454'. [ 137.864084][ T6310] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 137.958644][ T6310] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 138.065154][ T6664] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 138.107517][ T6310] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 138.153661][ T6310] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 138.446275][ T6678] netlink: 830 bytes leftover after parsing attributes in process `syz.0.458'. [ 138.460122][ T6678] team0: default FDB implementation only supports local addresses [ 138.816042][ T6351] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 138.835262][ T6685] netlink: 'syz.0.460': attribute type 2 has an invalid length. [ 138.849818][ T6685] netlink: 'syz.0.460': attribute type 1 has an invalid length. [ 138.869800][ T6685] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.460'. [ 138.889278][ T6310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.973925][ T6351] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 139.004550][ T6351] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 139.096231][ T6351] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 139.145084][ T6310] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.197832][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.205118][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.223202][ T6701] netlink: 60 bytes leftover after parsing attributes in process `syz.3.463'. [ 139.257540][ T5143] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.264799][ T5143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.674689][ T6714] netlink: 212832 bytes leftover after parsing attributes in process `syz.3.466'. [ 139.765938][ T6351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.836787][ T6351] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.922885][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.930167][ T5143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.008558][ T5143] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.015895][ T5143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.112703][ T6731] netlink: 830 bytes leftover after parsing attributes in process `syz.0.469'. [ 140.132785][ T6731] team0: default FDB implementation only supports local addresses [ 140.246233][ T6310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.779393][ T6759] FAULT_INJECTION: forcing a failure. [ 140.779393][ T6759] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 140.824818][ T6759] CPU: 1 PID: 6759 Comm: syz.2.477 Not tainted 6.10.0-rc2-syzkaller-00797-ga12978712d90 #0 [ 140.834978][ T6759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 140.845100][ T6759] Call Trace: [ 140.848427][ T6759] [ 140.851397][ T6759] dump_stack_lvl+0x241/0x360 [ 140.856159][ T6759] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.861505][ T6759] ? __pfx__printk+0x10/0x10 [ 140.866157][ T6759] ? snprintf+0xda/0x120 [ 140.870455][ T6759] should_fail_ex+0x3b0/0x4e0 [ 140.875201][ T6759] _copy_to_user+0x2f/0xb0 [ 140.879666][ T6759] simple_read_from_buffer+0xca/0x150 [ 140.885098][ T6759] proc_fail_nth_read+0x1e9/0x250 [ 140.890211][ T6759] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 140.895896][ T6759] ? rw_verify_area+0x514/0x6b0 [ 140.900886][ T6759] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 140.906485][ T6759] vfs_read+0x204/0xbd0 [ 140.910691][ T6759] ? __pfx_lock_release+0x10/0x10 [ 140.915769][ T6759] ? __pfx_vfs_read+0x10/0x10 [ 140.920498][ T6759] ? __fget_files+0x29/0x470 [ 140.925149][ T6759] ? __fget_files+0x3f6/0x470 [ 140.929898][ T6759] ksys_read+0x1a0/0x2c0 [ 140.934201][ T6759] ? __pfx_ksys_read+0x10/0x10 [ 140.939023][ T6759] ? do_syscall_64+0x100/0x230 [ 140.943836][ T6759] ? do_syscall_64+0xb6/0x230 [ 140.948566][ T6759] do_syscall_64+0xf3/0x230 [ 140.953122][ T6759] ? clear_bhb_loop+0x35/0x90 [ 140.957862][ T6759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.963817][ T6759] RIP: 0033:0x7fb797d7463c [ 140.968289][ T6759] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8c 02 00 48 [ 140.987981][ T6759] RSP: 002b:00007fb798bba040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 140.996633][ T6759] RAX: ffffffffffffffda RBX: 00007fb797f03fa0 RCX: 00007fb797d7463c [ 141.004673][ T6759] RDX: 000000000000000f RSI: 00007fb798bba0b0 RDI: 0000000000000004 [ 141.013034][ T6759] RBP: 00007fb798bba0a0 R08: 0000000000000000 R09: 0000000000000000 [ 141.021139][ T6759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.029159][ T6759] R13: 000000000000000b R14: 00007fb797f03fa0 R15: 00007ffd8135b0f8 [ 141.037202][ T6759] [ 141.330685][ T6775] netlink: 'syz.3.479': attribute type 3 has an invalid length. [ 141.350485][ T6774] netlink: 'syz.3.479': attribute type 3 has an invalid length. [ 141.358283][ T6774] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.479'. [ 141.365770][ T6351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.392390][ T6775] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.479'. [ 141.459312][ T6310] veth0_vlan: entered promiscuous mode [ 141.554850][ T6310] veth1_vlan: entered promiscuous mode [ 141.716861][ T6310] veth0_macvtap: entered promiscuous mode [ 141.782299][ T6310] veth1_macvtap: entered promiscuous mode [ 141.863766][ T6795] netlink: 830 bytes leftover after parsing attributes in process `syz.3.483'. [ 141.881461][ T6795] team0: default FDB implementation only supports local addresses [ 141.943119][ T6351] veth0_vlan: entered promiscuous mode [ 141.992482][ T6310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.038866][ T6310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.072526][ T6803] netlink: 'syz.2.487': attribute type 3 has an invalid length. [ 142.092307][ T6310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.107357][ T6803] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.487'. [ 142.117262][ T6310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.128065][ T6310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.140189][ T6310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.154083][ T6310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.168715][ T6310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.203161][ T6310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.252091][ T6310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.293850][ T6310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.317366][ T6310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.366057][ T6310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.410599][ T6310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.465891][ T6310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.496296][ T6310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.550370][ T6310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.587967][ T6310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.613641][ T6351] veth1_vlan: entered promiscuous mode [ 142.646374][ T6310] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.656968][ T6310] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.669456][ T6310] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.686488][ T6310] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.960574][ T6832] FAULT_INJECTION: forcing a failure. [ 142.960574][ T6832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.992555][ T6832] CPU: 1 PID: 6832 Comm: syz.2.495 Not tainted 6.10.0-rc2-syzkaller-00797-ga12978712d90 #0 [ 143.002609][ T6832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 143.012714][ T6832] Call Trace: [ 143.016038][ T6832] [ 143.019006][ T6832] dump_stack_lvl+0x241/0x360 [ 143.023752][ T6832] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.028997][ T6832] ? __pfx__printk+0x10/0x10 [ 143.033645][ T6832] ? __pfx_lock_release+0x10/0x10 [ 143.038764][ T6832] should_fail_ex+0x3b0/0x4e0 [ 143.042389][ T6166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.043479][ T6832] _copy_from_user+0x2f/0xe0 [ 143.054060][ T6351] veth0_macvtap: entered promiscuous mode [ 143.055877][ T6832] copy_msghdr_from_user+0xae/0x680 [ 143.067046][ T6832] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 143.068892][ T6351] veth1_macvtap: entered promiscuous mode [ 143.072891][ T6832] __sys_sendmsg+0x23d/0x3a0 [ 143.072930][ T6832] ? __pfx___sys_sendmsg+0x10/0x10 [ 143.072959][ T6832] ? vfs_write+0x7c4/0xc90 [ 143.092928][ T6832] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 143.099322][ T6832] ? do_syscall_64+0x100/0x230 [ 143.104135][ T6832] ? do_syscall_64+0xb6/0x230 [ 143.108834][ T6832] do_syscall_64+0xf3/0x230 [ 143.113359][ T6832] ? clear_bhb_loop+0x35/0x90 [ 143.118049][ T6832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.123976][ T6832] RIP: 0033:0x7fb797d75b29 [ 143.128405][ T6832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.148108][ T6832] RSP: 002b:00007fb798bba048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.156537][ T6832] RAX: ffffffffffffffda RBX: 00007fb797f03fa0 RCX: 00007fb797d75b29 [ 143.164519][ T6832] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 143.172511][ T6832] RBP: 00007fb798bba0a0 R08: 0000000000000000 R09: 0000000000000000 [ 143.180583][ T6832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.188586][ T6832] R13: 000000000000000b R14: 00007fb797f03fa0 R15: 00007ffd8135b0f8 [ 143.196607][ T6832] [ 143.215253][ T6166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.218748][ T6351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.234010][ T6351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.264416][ T6351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.286100][ T6351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.319879][ T6351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.346389][ T6351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.369935][ T6351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.398586][ T6351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.417852][ T6351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.432182][ T6351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.453649][ T6351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.502510][ T6351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.550974][ T6351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.585305][ T6351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.606429][ T6351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.633560][ T6351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.644560][ T6351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.658071][ T6351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.670189][ T6351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.696343][ T6351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.713463][ T6351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.752758][ T6351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.804927][ T6845] netlink: 830 bytes leftover after parsing attributes in process `syz.3.497'. [ 143.830555][ T6845] team0: default FDB implementation only supports local addresses [ 143.955200][ T6351] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.000817][ T6351] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.039967][ T6351] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.062635][ T6351] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.118571][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.144841][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.179962][ T6864] netlink: 'syz.3.502': attribute type 12 has an invalid length. [ 144.187827][ T6864] netlink: 132 bytes leftover after parsing attributes in process `syz.3.502'. [ 144.280929][ T6868] netlink: 'syz.2.504': attribute type 3 has an invalid length. [ 144.294443][ T6868] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.504'. [ 144.572762][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.611838][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.796717][ T5862] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.832045][ T5862] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.973760][ T6888] FAULT_INJECTION: forcing a failure. [ 144.973760][ T6888] name failslab, interval 1, probability 0, space 0, times 1 [ 145.005585][ T6888] CPU: 0 PID: 6888 Comm: syz.4.510 Not tainted 6.10.0-rc2-syzkaller-00797-ga12978712d90 #0 [ 145.015729][ T6888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 145.025829][ T6888] Call Trace: [ 145.029136][ T6888] [ 145.032107][ T6888] dump_stack_lvl+0x241/0x360 [ 145.036843][ T6888] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.042093][ T6888] ? __pfx__printk+0x10/0x10 [ 145.046761][ T6888] should_fail_ex+0x3b0/0x4e0 [ 145.051503][ T6888] ? __alloc_skb+0x1c3/0x440 [ 145.056149][ T6888] should_failslab+0x9/0x20 [ 145.060701][ T6888] kmem_cache_alloc_node_noprof+0x71/0x320 [ 145.066569][ T6888] ? genl_rcv_msg+0x88c/0xec0 [ 145.071301][ T6888] __alloc_skb+0x1c3/0x440 [ 145.075772][ T6888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.081912][ T6888] ? __pfx___alloc_skb+0x10/0x10 [ 145.086918][ T6888] netlink_dump+0x2cb/0xd80 [ 145.091498][ T6888] ? __pfx_netlink_dump+0x10/0x10 [ 145.096613][ T6888] ? __asan_memset+0x23/0x50 [ 145.101260][ T6888] ? genl_start+0x4a8/0x6d0 [ 145.105837][ T6888] __netlink_dump_start+0x59d/0x780 [ 145.111106][ T6888] genl_rcv_msg+0x88c/0xec0 [ 145.115662][ T6888] ? mark_lock+0x9a/0x350 [ 145.120144][ T6888] ? __pfx_genl_rcv_msg+0x10/0x10 [ 145.125231][ T6888] ? __pfx_genl_start+0x10/0x10 [ 145.130161][ T6888] ? __pfx_genl_dumpit+0x10/0x10 [ 145.135319][ T6888] ? __pfx_genl_done+0x10/0x10 [ 145.140154][ T6888] ? __pfx_lock_acquire+0x10/0x10 [ 145.145230][ T6888] ? __pfx_tipc_nl_net_dump+0x10/0x10 [ 145.150654][ T6888] ? __pfx___might_resched+0x10/0x10 [ 145.156007][ T6888] netlink_rcv_skb+0x1e3/0x430 [ 145.161099][ T6888] ? __pfx_genl_rcv_msg+0x10/0x10 [ 145.166183][ T6888] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 145.171550][ T6888] ? __netlink_deliver_tap+0x77e/0x7c0 [ 145.177113][ T6888] genl_rcv+0x28/0x40 [ 145.181143][ T6888] netlink_unicast+0x7ea/0x980 [ 145.186145][ T6888] ? __pfx_netlink_unicast+0x10/0x10 [ 145.191487][ T6888] ? __virt_addr_valid+0x183/0x520 [ 145.196675][ T6888] ? __check_object_size+0x49c/0x900 [ 145.202012][ T6888] ? bpf_lsm_netlink_send+0x9/0x10 [ 145.207204][ T6888] netlink_sendmsg+0x8db/0xcb0 [ 145.212048][ T6888] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.217400][ T6888] ? __import_iovec+0x536/0x820 [ 145.222306][ T6888] ? aa_sock_msg_perm+0x91/0x160 [ 145.227319][ T6888] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 145.232654][ T6888] ? security_socket_sendmsg+0x87/0xb0 [ 145.238168][ T6888] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.243518][ T6888] __sock_sendmsg+0x221/0x270 [ 145.248251][ T6888] ____sys_sendmsg+0x525/0x7d0 [ 145.253088][ T6888] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.258450][ T6888] __sys_sendmsg+0x2b0/0x3a0 [ 145.263108][ T6888] ? __pfx___sys_sendmsg+0x10/0x10 [ 145.268277][ T6888] ? vfs_write+0x7c4/0xc90 [ 145.272787][ T6888] ? perf_trace_preemptirq_template+0xf8/0x3f0 [ 145.279002][ T6888] ? do_syscall_64+0xb6/0x230 [ 145.283784][ T6888] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 145.284897][ T6898] netlink: 830 bytes leftover after parsing attributes in process `syz.2.511'. [ 145.290142][ T6888] ? do_syscall_64+0x100/0x230 [ 145.290209][ T6888] ? do_syscall_64+0xb6/0x230 [ 145.290237][ T6888] do_syscall_64+0xf3/0x230 [ 145.290262][ T6888] ? clear_bhb_loop+0x35/0x90 [ 145.290292][ T6888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.290317][ T6888] RIP: 0033:0x7f48e9575b29 [ 145.290340][ T6888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.290359][ T6888] RSP: 002b:00007f48ea3e1048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.290385][ T6888] RAX: ffffffffffffffda RBX: 00007f48e9703fa0 RCX: 00007f48e9575b29 [ 145.290403][ T6888] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 145.324279][ T6898] team0: default FDB implementation only supports local addresses [ 145.328289][ T6888] RBP: 00007f48ea3e10a0 R08: 0000000000000000 R09: 0000000000000000 [ 145.328312][ T6888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.328326][ T6888] R13: 000000000000000b R14: 00007f48e9703fa0 R15: 00007fff06535878 [ 145.404612][ T6888] [ 146.057447][ T1152] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.188592][ T6921] netlink: 'syz.0.517': attribute type 63 has an invalid length. [ 146.215455][ T6921] netlink: 40 bytes leftover after parsing attributes in process `syz.0.517'. [ 146.297777][ T1152] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.515403][ T1152] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.848110][ T1152] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.915044][ T6951] netlink: 830 bytes leftover after parsing attributes in process `syz.0.524'. [ 146.947714][ T6951] team0: default FDB implementation only supports local addresses [ 147.271289][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 147.309918][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 147.321728][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 147.339797][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 147.360271][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 147.367847][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 147.444513][ T1152] bridge_slave_1: left allmulticast mode [ 147.544867][ T1152] bridge_slave_1: left promiscuous mode [ 147.587560][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.655534][ T1152] bridge_slave_0: left allmulticast mode [ 147.714582][ T1152] bridge_slave_0: left promiscuous mode [ 147.756102][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.305289][ T53] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 149.132363][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.145375][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.157043][ T1152] bond0 (unregistering): Released all slaves [ 149.250590][ T6997] netlink: 'syz.0.532': attribute type 39 has an invalid length. [ 149.450093][ T53] Bluetooth: hci4: command tx timeout [ 150.019407][ T7028] netlink: 830 bytes leftover after parsing attributes in process `syz.3.537'. [ 150.044312][ T7028] team0: default FDB implementation only supports local addresses [ 150.100801][ T1152] hsr_slave_0: left promiscuous mode [ 150.134368][ T1152] hsr_slave_1: left promiscuous mode [ 150.157628][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.165585][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.203673][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.216885][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.285729][ T1152] veth1_macvtap: left promiscuous mode [ 150.301272][ T1152] veth0_macvtap: left promiscuous mode [ 150.326314][ T1152] veth1_vlan: left promiscuous mode [ 150.352300][ T1152] veth0_vlan: left promiscuous mode [ 151.537157][ T53] Bluetooth: hci4: command tx timeout [ 152.054408][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 152.094950][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 152.581175][ T7054] netlink: 3748 bytes leftover after parsing attributes in process `syz.4.543'. [ 152.667424][ T7073] netlink: 830 bytes leftover after parsing attributes in process `syz.2.550'. [ 152.705782][ T7073] team0: default FDB implementation only supports local addresses [ 153.181343][ T6960] chnl_net:caif_netlink_parms(): no params data found [ 153.598032][ T6960] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.609682][ T53] Bluetooth: hci4: command tx timeout [ 153.621833][ T6960] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.629292][ T6960] bridge_slave_0: entered allmulticast mode [ 153.640944][ T6960] bridge_slave_0: entered promiscuous mode [ 153.665452][ T6960] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.694146][ T6960] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.713257][ T6960] bridge_slave_1: entered allmulticast mode [ 153.741449][ T6960] bridge_slave_1: entered promiscuous mode [ 153.841093][ T7139] netlink: 830 bytes leftover after parsing attributes in process `syz.2.563'. [ 153.890919][ T7139] team0: default FDB implementation only supports local addresses [ 154.035300][ T6960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.085436][ T6960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.224219][ T7151] netlink: 'syz.2.568': attribute type 3 has an invalid length. [ 154.376157][ T7151] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.568'. [ 154.630759][ T6960] team0: Port device team_slave_0 added [ 154.671916][ T6960] team0: Port device team_slave_1 added [ 154.983163][ T6960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.001016][ T6960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.070623][ T6960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.170518][ T6960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.198022][ T6960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.258776][ T6960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.334782][ T7174] FAULT_INJECTION: forcing a failure. [ 155.334782][ T7174] name failslab, interval 1, probability 0, space 0, times 0 [ 155.351178][ T7174] CPU: 1 PID: 7174 Comm: syz.3.574 Not tainted 6.10.0-rc2-syzkaller-00797-ga12978712d90 #0 [ 155.361228][ T7174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 155.371300][ T7174] Call Trace: [ 155.374590][ T7174] [ 155.377529][ T7174] dump_stack_lvl+0x241/0x360 [ 155.382238][ T7174] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.387448][ T7174] ? __pfx__printk+0x10/0x10 [ 155.392050][ T7174] ? __pfx___might_resched+0x10/0x10 [ 155.397363][ T7174] should_fail_ex+0x3b0/0x4e0 [ 155.402063][ T7174] ? cfg80211_sinfo_alloc_tid_stats+0x77/0x100 [ 155.408239][ T7174] should_failslab+0x9/0x20 [ 155.412760][ T7174] kmalloc_trace_noprof+0x6c/0x2c0 [ 155.417893][ T7174] cfg80211_sinfo_alloc_tid_stats+0x77/0x100 [ 155.423894][ T7174] sta_set_sinfo+0x1d84/0x4820 [ 155.428693][ T7174] __sta_info_destroy_part2+0x314/0x450 [ 155.434260][ T7174] __sta_info_flush+0x5d0/0x700 [ 155.439126][ T7174] ? __local_bh_enable_ip+0x168/0x200 [ 155.444516][ T7174] ? __pfx___sta_info_flush+0x10/0x10 [ 155.449919][ T7174] ieee80211_ibss_disconnect+0x2c5/0x7c0 [ 155.455583][ T7174] ieee80211_ibss_leave+0x25/0x140 [ 155.460725][ T7174] cfg80211_leave_ibss+0x1ef/0x430 [ 155.465887][ T7174] ? rcu_is_watching+0x15/0xb0 [ 155.470668][ T7174] cfg80211_change_iface+0x4e5/0xf30 [ 155.475976][ T7174] cfg80211_wext_siwmode+0x1bb/0x290 [ 155.481279][ T7174] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 155.487104][ T7174] ? __pfx___mutex_lock+0x10/0x10 [ 155.492150][ T7174] ? full_name_hash+0x93/0xe0 [ 155.496839][ T7174] ioctl_standard_call+0xe3/0x290 [ 155.501884][ T7174] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 155.507794][ T7174] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 155.513621][ T7174] wext_ioctl_dispatch+0x58e/0x640 [ 155.518754][ T7174] ? __pfx_ioctl_standard_call+0x10/0x10 [ 155.524405][ T7174] ? __pfx_ioctl_private_call+0x10/0x10 [ 155.529973][ T7174] ? __pfx_wext_ioctl_dispatch+0x10/0x10 [ 155.535621][ T7174] ? __might_fault+0xc6/0x120 [ 155.540580][ T7174] wext_handle_ioctl+0x15f/0x270 [ 155.545544][ T7174] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 155.551133][ T7174] sock_ioctl+0x17f/0x8e0 [ 155.555494][ T7174] ? __pfx_sock_ioctl+0x10/0x10 [ 155.560372][ T7174] ? __fget_files+0x29/0x470 [ 155.564983][ T7174] ? __fget_files+0x3f6/0x470 [ 155.569678][ T7174] ? __fget_files+0x29/0x470 [ 155.574309][ T7174] ? bpf_lsm_file_ioctl+0x9/0x10 [ 155.579347][ T7174] ? security_file_ioctl+0x87/0xb0 [ 155.584486][ T7174] ? __pfx_sock_ioctl+0x10/0x10 [ 155.589372][ T7174] __se_sys_ioctl+0xfc/0x170 [ 155.593989][ T7174] do_syscall_64+0xf3/0x230 [ 155.598599][ T7174] ? clear_bhb_loop+0x35/0x90 [ 155.603294][ T7174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.609208][ T7174] RIP: 0033:0x7f3704f75b29 [ 155.613650][ T7174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.633278][ T7174] RSP: 002b:00007f3705d3a048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 155.641816][ T7174] RAX: ffffffffffffffda RBX: 00007f3705103fa0 RCX: 00007f3704f75b29 [ 155.649821][ T7174] RDX: 0000000020000080 RSI: 0000000000008b06 RDI: 0000000000000007 [ 155.657800][ T7174] RBP: 00007f3705d3a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 155.665782][ T7174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.673764][ T7174] R13: 000000000000000b R14: 00007f3705103fa0 R15: 00007ffc23e97178 [ 155.681786][ T7174] [ 155.711165][ T53] Bluetooth: hci4: command tx timeout [ 155.766982][ T7187] netlink: 830 bytes leftover after parsing attributes in process `syz.2.578'. [ 155.779954][ T7187] team0: default FDB implementation only supports local addresses [ 156.022902][ T6960] hsr_slave_0: entered promiscuous mode [ 156.053607][ T6960] hsr_slave_1: entered promiscuous mode [ 156.065914][ T6960] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.084615][ T6960] Cannot create hsr debugfs directory [ 156.625781][ T7215] netlink: 'syz.0.586': attribute type 12 has an invalid length. [ 156.639693][ T7215] netlink: 132 bytes leftover after parsing attributes in process `syz.0.586'. [ 157.184851][ T7233] syz.3.592[7233] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.185017][ T7233] syz.3.592[7233] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.778833][ T9] page_pool_release_retry() stalled pool shutdown: id 33, 1 inflight 60 sec [ 158.318348][ T7279] netlink: 'syz.4.606': attribute type 29 has an invalid length. [ 158.357005][ T7279] netlink: 'syz.4.606': attribute type 29 has an invalid length. [ 158.406647][ T7282] netlink: 'syz.4.606': attribute type 29 has an invalid length. [ 158.456570][ T6960] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 158.487986][ T6960] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 158.517388][ T7279] netlink: 'syz.4.606': attribute type 29 has an invalid length. [ 158.541656][ T7282] netlink: 'syz.4.606': attribute type 29 has an invalid length. [ 158.581453][ T6960] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 158.608107][ T6960] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 158.630191][ T7279] netlink: 'syz.4.606': attribute type 29 has an invalid length. [ 158.866308][ T7292] netlink: 16122 bytes leftover after parsing attributes in process `syz.0.609'. [ 158.915418][ T7292] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.609'. [ 159.090188][ T7301] tap0: tun_chr_ioctl cmd 1074025692 [ 159.296110][ T6960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.337638][ T7311] netlink: 'syz.4.616': attribute type 10 has an invalid length. [ 159.360482][ T7311] bridge_slave_1: left allmulticast mode [ 159.366872][ T7311] bridge_slave_1: left promiscuous mode [ 159.419131][ T7311] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.551603][ T7311] bridge_slave_0: left allmulticast mode [ 159.559259][ T7311] bridge_slave_0: left promiscuous mode [ 159.578463][ T7311] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.131048][ T6960] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.192988][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.200239][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.298774][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.306081][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.497606][ T6960] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 160.590856][ T7347] netlink: 10 bytes leftover after parsing attributes in process `syz.0.622'. [ 160.818395][ T7350] netlink: 16122 bytes leftover after parsing attributes in process `syz.4.625'. [ 160.859931][ T7350] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.625'. [ 161.290859][ T6960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.316172][ T7375] netlink: 830 bytes leftover after parsing attributes in process `syz.4.631'. [ 161.348701][ T7375] team0: default FDB implementation only supports local addresses [ 161.573893][ T6960] veth0_vlan: entered promiscuous mode [ 161.598918][ T6960] veth1_vlan: entered promiscuous mode [ 161.736652][ T6960] veth0_macvtap: entered promiscuous mode [ 161.786165][ T6960] veth1_macvtap: entered promiscuous mode [ 161.872441][ T6960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.916408][ T6960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.961882][ T6960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.007395][ T6960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.054062][ T6960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.068224][ T6960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.081949][ T6960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.094260][ T6960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.123812][ T6960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.152934][ T6960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.188953][ T6960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.278677][ T7411] netlink: 'syz.3.641': attribute type 1 has an invalid length. [ 162.299271][ T6960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.327847][ T7411] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.641'. [ 162.334997][ T6960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.360016][ T7412] netlink: 201400 bytes leftover after parsing attributes in process `syz.3.641'. [ 162.389703][ T6960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.419874][ T6960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.440159][ T6960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.453445][ T6960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.465092][ T6960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.477487][ T6960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.488102][ T6960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.499395][ T6960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.522789][ T6960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.584630][ T6960] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.620062][ T6960] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.622609][ T7414] netlink: 16122 bytes leftover after parsing attributes in process `syz.2.642'. [ 162.636816][ T6960] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.656254][ T6960] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.665211][ T7414] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.642'. [ 162.909127][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.932821][ T7427] FAULT_INJECTION: forcing a failure. [ 162.932821][ T7427] name failslab, interval 1, probability 0, space 0, times 0 [ 162.941356][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.009421][ T7427] CPU: 0 PID: 7427 Comm: syz.2.647 Not tainted 6.10.0-rc2-syzkaller-00797-ga12978712d90 #0 [ 163.019654][ T7427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 163.029754][ T7427] Call Trace: [ 163.033113][ T7427] [ 163.036092][ T7427] dump_stack_lvl+0x241/0x360 [ 163.040828][ T7427] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.046063][ T7427] ? __pfx__printk+0x10/0x10 [ 163.050689][ T7427] ? __pfx___might_resched+0x10/0x10 [ 163.056031][ T7427] ? prepend_path+0x2f/0xbe0 [ 163.060680][ T7427] should_fail_ex+0x3b0/0x4e0 [ 163.065673][ T7427] ? tomoyo_encode+0x26f/0x540 [ 163.070561][ T7427] should_failslab+0x9/0x20 [ 163.075115][ T7427] __kmalloc_noprof+0xd8/0x400 [ 163.079934][ T7427] tomoyo_encode+0x26f/0x540 [ 163.084572][ T7427] tomoyo_realpath_from_path+0x59e/0x5e0 [ 163.090259][ T7427] tomoyo_path_number_perm+0x23a/0x880 [ 163.095867][ T7427] ? tomoyo_path_number_perm+0x208/0x880 [ 163.101701][ T7427] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 163.107738][ T7427] ? __fget_files+0x29/0x470 [ 163.112351][ T7427] ? __fget_files+0x3f6/0x470 [ 163.117130][ T7427] ? __fget_files+0x29/0x470 [ 163.121775][ T7427] security_file_ioctl+0x75/0xb0 [ 163.126735][ T7427] __se_sys_ioctl+0x47/0x170 [ 163.131346][ T7427] do_syscall_64+0xf3/0x230 [ 163.135873][ T7427] ? clear_bhb_loop+0x35/0x90 [ 163.140567][ T7427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.146473][ T7427] RIP: 0033:0x7fb797d75b29 [ 163.150900][ T7427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.170517][ T7427] RSP: 002b:00007fb798bba048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.178943][ T7427] RAX: ffffffffffffffda RBX: 00007fb797f03fa0 RCX: 00007fb797d75b29 [ 163.186923][ T7427] RDX: 0000000020000040 RSI: 0000000040305839 RDI: 0000000000000003 [ 163.194940][ T7427] RBP: 00007fb798bba0a0 R08: 0000000000000000 R09: 0000000000000000 [ 163.202921][ T7427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.210903][ T7427] R13: 000000000000000b R14: 00007fb797f03fa0 R15: 00007ffd8135b0f8 [ 163.218902][ T7427] [ 163.279908][ T7427] ERROR: Out of memory at tomoyo_realpath_from_path. [ 163.378992][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.449649][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.566327][ T7442] netlink: 'syz.2.651': attribute type 29 has an invalid length. [ 163.590904][ T7442] netlink: 'syz.2.651': attribute type 29 has an invalid length. [ 163.624472][ T7443] netlink: 'syz.2.651': attribute type 29 has an invalid length. [ 163.645405][ T7442] netlink: 'syz.2.651': attribute type 29 has an invalid length. [ 163.663328][ T7442] netlink: 'syz.2.651': attribute type 29 has an invalid length. [ 163.975967][ T7449] netlink: 'syz.2.652': attribute type 3 has an invalid length. [ 163.998710][ T7449] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.652'. [ 164.045618][ T7450] netlink: 'syz.3.653': attribute type 10 has an invalid length. [ 164.097461][ T7453] netlink: 'syz.4.654': attribute type 10 has an invalid length. [ 164.120388][ T7453] syz_tun: entered promiscuous mode [ 164.174813][ T7453] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 164.208982][ T7457] netlink: 'syz.3.656': attribute type 3 has an invalid length. [ 164.218746][ T7457] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.656'. [ 164.652776][ T7475] netlink: 16122 bytes leftover after parsing attributes in process `syz.0.658'. [ 164.677600][ T7475] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.658'. [ 164.704481][ T1152] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.876118][ T1152] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.961126][ T1152] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.047107][ T1152] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.370212][ T1152] bridge_slave_1: left allmulticast mode [ 165.376981][ T1152] bridge_slave_1: left promiscuous mode [ 165.410295][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.432743][ T7486] netlink: 144 bytes leftover after parsing attributes in process `syz.0.662'. [ 165.476079][ T1152] bridge_slave_0: left allmulticast mode [ 165.538877][ T1152] bridge_slave_0: left promiscuous mode [ 165.568012][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.346271][ T5099] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 166.359772][ T5099] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 166.370020][ T5099] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 166.384841][ T5099] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 166.405559][ T5099] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 166.425862][ T5099] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 166.662465][ T29] audit: type=1800 audit(1719565006.324:5): pid=7523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.671" name="cgroup.controllers" dev="sda1" ino=1972 res=0 errno=0 [ 166.790676][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.818625][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.840601][ T1152] bond0 (unregistering): Released all slaves [ 167.284966][ T7540] validate_nla: 2 callbacks suppressed [ 167.285008][ T7540] netlink: 'syz.3.677': attribute type 29 has an invalid length. [ 167.440828][ T7543] netlink: 'syz.3.677': attribute type 29 has an invalid length. [ 168.246463][ T1152] hsr_slave_0: left promiscuous mode [ 168.267403][ T1152] hsr_slave_1: left promiscuous mode [ 168.303784][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.318851][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.331358][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.338848][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.398124][ T1152] veth1_macvtap: left promiscuous mode [ 168.411749][ T1152] veth0_macvtap: left promiscuous mode [ 168.449451][ T1152] veth1_vlan: left promiscuous mode [ 168.471254][ T1152] veth0_vlan: left promiscuous mode [ 168.490741][ T5099] Bluetooth: hci4: command tx timeout [ 169.171279][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 169.184239][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 169.195022][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 169.206809][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 169.224736][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 169.234895][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 169.404904][ T7587] FAULT_INJECTION: forcing a failure. [ 169.404904][ T7587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.432467][ T7587] CPU: 1 PID: 7587 Comm: syz.3.685 Not tainted 6.10.0-rc2-syzkaller-00797-ga12978712d90 #0 [ 169.442515][ T7587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 169.452598][ T7587] Call Trace: [ 169.455882][ T7587] [ 169.458817][ T7587] dump_stack_lvl+0x241/0x360 [ 169.463505][ T7587] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.468729][ T7587] ? __pfx__printk+0x10/0x10 [ 169.473327][ T7587] ? snprintf+0xda/0x120 [ 169.477583][ T7587] should_fail_ex+0x3b0/0x4e0 [ 169.482303][ T7587] _copy_to_user+0x2f/0xb0 [ 169.486758][ T7587] simple_read_from_buffer+0xca/0x150 [ 169.492160][ T7587] proc_fail_nth_read+0x1e9/0x250 [ 169.497192][ T7587] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 169.502743][ T7587] ? rw_verify_area+0x514/0x6b0 [ 169.507600][ T7587] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 169.513162][ T7587] vfs_read+0x204/0xbd0 [ 169.517325][ T7587] ? __pfx_lock_release+0x10/0x10 [ 169.522358][ T7587] ? __pfx_vfs_read+0x10/0x10 [ 169.527050][ T7587] ? __fget_files+0x29/0x470 [ 169.531685][ T7587] ? __fget_files+0x3f6/0x470 [ 169.536411][ T7587] ksys_read+0x1a0/0x2c0 [ 169.540684][ T7587] ? __pfx_ksys_read+0x10/0x10 [ 169.545463][ T7587] ? do_syscall_64+0x100/0x230 [ 169.550240][ T7587] ? do_syscall_64+0xb6/0x230 [ 169.554933][ T7587] do_syscall_64+0xf3/0x230 [ 169.559447][ T7587] ? clear_bhb_loop+0x35/0x90 [ 169.564166][ T7587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.570065][ T7587] RIP: 0033:0x7f3704f7463c [ 169.574487][ T7587] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8c 02 00 48 [ 169.594112][ T7587] RSP: 002b:00007f3705d3a040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 169.602538][ T7587] RAX: ffffffffffffffda RBX: 00007f3705103fa0 RCX: 00007f3704f7463c [ 169.610515][ T7587] RDX: 000000000000000f RSI: 00007f3705d3a0b0 RDI: 000000000000000b [ 169.618497][ T7587] RBP: 00007f3705d3a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 169.626476][ T7587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 169.634555][ T7587] R13: 000000000000000b R14: 00007f3705103fa0 R15: 00007ffc23e97178 [ 169.642573][ T7587] [ 169.764932][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 169.813286][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 170.303982][ T6310] bond0: (slave syz_tun): Releasing backup interface [ 170.521266][ T7598] netlink: 'syz.0.689': attribute type 39 has an invalid length. [ 170.568033][ T7598] veth0_macvtap: left allmulticast mode [ 170.583291][ T5099] Bluetooth: hci4: command tx timeout [ 170.619094][ T7598] veth0_macvtap: left promiscuous mode [ 171.111568][ T7512] chnl_net:caif_netlink_parms(): no params data found [ 171.369852][ T5099] Bluetooth: hci3: command tx timeout [ 171.611995][ T7512] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.627592][ T7512] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.635858][ T7512] bridge_slave_0: entered allmulticast mode [ 171.651412][ T7512] bridge_slave_0: entered promiscuous mode [ 171.721613][ T7621] syz.0.694 (7621) used greatest stack depth: 18168 bytes left [ 171.729203][ T7512] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.729331][ T7512] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.759806][ T7512] bridge_slave_1: entered allmulticast mode [ 171.781745][ T7512] bridge_slave_1: entered promiscuous mode [ 171.891321][ T7512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.949603][ T7635] netlink: 'syz.2.696': attribute type 17 has an invalid length. [ 171.957387][ T7635] netlink: 'syz.2.696': attribute type 41 has an invalid length. [ 172.029638][ T7635] netlink: 116 bytes leftover after parsing attributes in process `syz.2.696'. [ 172.095680][ T7512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.479951][ T7512] team0: Port device team_slave_0 added [ 172.557799][ T7512] team0: Port device team_slave_1 added [ 172.650575][ T5099] Bluetooth: hci4: command tx timeout [ 172.714087][ T7512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.730904][ T7512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.772796][ T7512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.796696][ T7512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.804175][ T7512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.832557][ T7512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.901703][ T6170] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.932415][ T7584] chnl_net:caif_netlink_parms(): no params data found [ 173.031823][ T7674] netlink: 180 bytes leftover after parsing attributes in process `syz.0.706'. [ 173.166918][ T6170] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.179169][ T7681] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 3 (only 8 groups) [ 173.212549][ T7680] EXT4-fs (sda1): Can't modify superblock whileperforming online resize [ 173.321134][ T7512] hsr_slave_0: entered promiscuous mode [ 173.338511][ T7512] hsr_slave_1: entered promiscuous mode [ 173.347446][ T7512] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.362199][ T7512] Cannot create hsr debugfs directory [ 173.386732][ T6170] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.422045][ T29] audit: type=1800 audit(1719565013.074:6): pid=7688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.707" name="cgroup.controllers" dev="sda1" ino=1961 res=0 errno=0 [ 173.449845][ T5099] Bluetooth: hci3: command tx timeout [ 173.747901][ T6170] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.968193][ T7584] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.987379][ T7584] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.007812][ T7584] bridge_slave_0: entered allmulticast mode [ 174.022180][ T7584] bridge_slave_0: entered promiscuous mode [ 174.063258][ T7584] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.087842][ T7584] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.099903][ T7584] bridge_slave_1: entered allmulticast mode [ 174.107712][ T7584] bridge_slave_1: entered promiscuous mode [ 174.354758][ T7584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.384041][ T7584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.730622][ T5099] Bluetooth: hci4: command tx timeout [ 175.010131][ T6170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.066725][ T6170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.082965][ T6170] bond0 (unregistering): Released all slaves [ 175.125672][ T7584] team0: Port device team_slave_0 added [ 175.130826][ T7750] netlink: 168 bytes leftover after parsing attributes in process `syz.3.723'. [ 175.155296][ T7584] team0: Port device team_slave_1 added [ 175.258272][ T7747] netlink: 15162 bytes leftover after parsing attributes in process `syz.2.722'. [ 175.342994][ T7584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.351037][ T7584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.379284][ T7584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.476518][ T7584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.505420][ T7584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.540809][ T5099] Bluetooth: hci3: command tx timeout [ 175.642159][ T7584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.659294][ T7765] netlink: 'syz.2.728': attribute type 9 has an invalid length. [ 175.681572][ T7765] netlink: 399 bytes leftover after parsing attributes in process `syz.2.728'. [ 176.208338][ T7584] hsr_slave_0: entered promiscuous mode [ 176.222250][ T7584] hsr_slave_1: entered promiscuous mode [ 176.247856][ T7584] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.269939][ T7584] Cannot create hsr debugfs directory [ 177.263630][ T7794] netlink: 180 bytes leftover after parsing attributes in process `syz.0.732'. [ 177.395883][ T6170] hsr_slave_0: left promiscuous mode [ 177.419707][ T6170] hsr_slave_1: left promiscuous mode [ 177.470907][ T6170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.478410][ T6170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.519322][ T6170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.539640][ T6170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.621615][ T5099] Bluetooth: hci3: command tx timeout [ 177.728990][ T6170] veth1_macvtap: left promiscuous mode [ 177.749800][ T6170] veth0_macvtap: left promiscuous mode [ 177.755881][ T6170] veth1_vlan: left promiscuous mode [ 177.769822][ T6170] veth0_vlan: left promiscuous mode [ 179.118080][ T6170] team0 (unregistering): Port device team_slave_1 removed [ 179.178752][ T6170] team0 (unregistering): Port device team_slave_0 removed [ 180.493836][ T7867] netlink: 132 bytes leftover after parsing attributes in process `syz.0.743'. [ 180.520650][ T7869] netlink: 132 bytes leftover after parsing attributes in process `syz.2.744'. [ 180.758774][ T7873] netlink: 'syz.2.747': attribute type 10 has an invalid length. [ 181.063780][ T7877] netlink: 'syz.3.746': attribute type 2 has an invalid length. [ 181.099132][ T7877] netlink: 'syz.3.746': attribute type 1 has an invalid length. [ 181.125007][ T7512] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 181.168502][ T7877] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.746'. [ 181.176625][ T7512] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 181.226393][ T7512] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 181.277739][ T7512] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 181.785479][ T7512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.977208][ T7584] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 182.034963][ T7584] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 182.132701][ T7512] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.179562][ T7584] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 182.250906][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.258109][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.301366][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.308563][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.355150][ T7584] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 182.822391][ T7584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.902707][ T7584] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.945164][ T934] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.952427][ T934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.985083][ T934] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.992331][ T934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.277697][ T7512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.461076][ T7946] netlink: 830 bytes leftover after parsing attributes in process `syz.2.759'. [ 183.498307][ T7946] team0: default FDB implementation only supports local addresses [ 183.572286][ T7512] veth0_vlan: entered promiscuous mode [ 183.647677][ T7512] veth1_vlan: entered promiscuous mode [ 183.814978][ T7512] veth0_macvtap: entered promiscuous mode [ 183.854448][ T7584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.892229][ T7512] veth1_macvtap: entered promiscuous mode [ 184.023170][ T7512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.039272][ T7512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.069522][ T7512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.090363][ T7512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.117046][ T7512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.134325][ T7512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.157475][ T7512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.192644][ T7512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.221683][ T7512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.270687][ T7512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.311504][ T7512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.379722][ T7512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.419628][ T7512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.452704][ T7512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.491613][ T7512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.517934][ T7512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.532382][ T7512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.577708][ T7512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.617656][ T7512] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.657872][ T7512] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.688512][ T7512] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.718838][ T7512] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.854450][ T7991] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.766'. [ 185.128759][ T6170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.165428][ T6170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.263927][ T6182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.273975][ T7584] veth0_vlan: entered promiscuous mode [ 185.286317][ T6182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.420238][ T7996] netlink: 180 bytes leftover after parsing attributes in process `syz.0.767'. [ 185.471031][ T7584] veth1_vlan: entered promiscuous mode [ 185.642891][ T7584] veth0_macvtap: entered promiscuous mode [ 185.685194][ T7584] veth1_macvtap: entered promiscuous mode [ 185.944983][ T8011] netlink: 830 bytes leftover after parsing attributes in process `syz.2.769'. [ 185.974948][ T8011] team0: default FDB implementation only supports local addresses [ 186.036802][ T7584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.090759][ T7584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.129559][ T7584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.159527][ T7584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.197148][ T7584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.215600][ T7584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.248287][ T7584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.274241][ T7584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.304547][ T7584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.333371][ T7584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.376343][ T7584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.493520][ T8020] netlink: 10 bytes leftover after parsing attributes in process `syz.0.773'. [ 186.720514][ T7584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.759545][ T7584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.782992][ T7584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.828274][ T7584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.859009][ T7584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.889509][ T7584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.909549][ T7584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.939562][ T7584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.969818][ T7584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.999594][ T7584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.022209][ T7584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.051806][ T8032] netlink: 830 bytes leftover after parsing attributes in process `syz.2.774'. [ 187.203402][ T2475] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.334435][ T2475] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.369219][ T7584] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.392159][ T7584] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.402938][ T7584] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.412390][ T7584] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.552970][ T2475] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.765119][ T2475] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.926815][ T5862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.969380][ T5862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.071222][ T6182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.110974][ T6182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.219398][ T2475] bridge_slave_1: left allmulticast mode [ 188.250162][ T2475] bridge_slave_1: left promiscuous mode [ 188.255999][ T2475] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.314742][ T2475] bridge_slave_0: left allmulticast mode [ 188.340246][ T2475] bridge_slave_0: left promiscuous mode [ 188.346931][ T2475] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.512839][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 188.535759][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 188.544824][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 188.566792][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 188.577218][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 188.586733][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 189.849142][ T4490] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 189.871793][ T4490] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 189.882328][ T4490] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 189.902341][ T4490] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 189.912505][ T4490] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 189.935734][ T4490] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 190.045193][ T2475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.066014][ T2475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.082961][ T2475] bond0 (unregistering): Released all slaves [ 190.131623][ T8065] : renamed from ipvlan1 [ 190.163060][ T8078] netlink: 830 bytes leftover after parsing attributes in process `syz.0.783'. [ 190.194709][ T8078] team0: default FDB implementation only supports local addresses [ 190.650242][ T4490] Bluetooth: hci2: command tx timeout [ 190.884119][ T8106] FAULT_INJECTION: forcing a failure. [ 190.884119][ T8106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.912614][ T8106] CPU: 0 PID: 8106 Comm: syz.2.789 Not tainted 6.10.0-rc2-syzkaller-00797-ga12978712d90 #0 [ 190.922762][ T8106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 190.932950][ T8106] Call Trace: [ 190.936363][ T8106] [ 190.939334][ T8106] dump_stack_lvl+0x241/0x360 [ 190.944071][ T8106] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.949410][ T8106] ? __pfx__printk+0x10/0x10 [ 190.954069][ T8106] should_fail_ex+0x3b0/0x4e0 [ 190.958819][ T8106] _copy_from_user+0x2f/0xe0 [ 190.963470][ T8106] bpf_test_init+0x11f/0x180 [ 190.968133][ T8106] bpf_prog_test_run_skb+0x2bb/0x1820 [ 190.973707][ T8106] ? __pfx_lock_release+0x10/0x10 [ 190.978806][ T8106] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 190.984676][ T8106] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 190.990541][ T8106] bpf_prog_test_run+0x33a/0x3b0 [ 190.995541][ T8106] __sys_bpf+0x48d/0x810 [ 190.999847][ T8106] ? __pfx___sys_bpf+0x10/0x10 [ 191.004687][ T8106] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 191.010812][ T8106] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 191.017274][ T8106] ? do_syscall_64+0x100/0x230 [ 191.022139][ T8106] __x64_sys_bpf+0x7c/0x90 [ 191.026617][ T8106] do_syscall_64+0xf3/0x230 [ 191.031177][ T8106] ? clear_bhb_loop+0x35/0x90 [ 191.035910][ T8106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.041848][ T8106] RIP: 0033:0x7fb797d75b29 [ 191.046312][ T8106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.065986][ T8106] RSP: 002b:00007fb798bba048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 191.074458][ T8106] RAX: ffffffffffffffda RBX: 00007fb797f03fa0 RCX: 00007fb797d75b29 [ 191.082488][ T8106] RDX: 0000000000000048 RSI: 00000000200002c0 RDI: 000000000000000a [ 191.090508][ T8106] RBP: 00007fb798bba0a0 R08: 0000000000000000 R09: 0000000000000000 [ 191.098618][ T8106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.106680][ T8106] R13: 000000000000000b R14: 00007fb797f03fa0 R15: 00007ffd8135b0f8 [ 191.114728][ T8106] [ 191.266154][ T2475] hsr_slave_0: left promiscuous mode [ 191.284270][ T2475] hsr_slave_1: left promiscuous mode [ 191.310822][ T2475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.318317][ T2475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.332040][ T2475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.343519][ T2475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.391966][ T2475] veth1_macvtap: left promiscuous mode [ 191.397608][ T2475] veth0_macvtap: left promiscuous mode [ 191.403421][ T2475] veth1_vlan: left promiscuous mode [ 191.408923][ T2475] veth0_vlan: left promiscuous mode [ 191.613100][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 191.619313][ T4490] Bluetooth: hci1: command 0x0406 tx timeout [ 192.009735][ T5096] Bluetooth: hci4: command tx timeout [ 192.350568][ T2475] team0 (unregistering): Port device team_slave_1 removed [ 192.447864][ T2475] team0 (unregistering): Port device team_slave_0 removed [ 192.739979][ T5096] Bluetooth: hci2: command tx timeout [ 193.220013][ T8139] netlink: 830 bytes leftover after parsing attributes in process `syz.4.796'. [ 193.236349][ T8139] team0: default FDB implementation only supports local addresses [ 193.510542][ T8079] chnl_net:caif_netlink_parms(): no params data found [ 193.695581][ T8184] netlink: 'syz.2.801': attribute type 11 has an invalid length. [ 193.703998][ T8184] netlink: 208572 bytes leftover after parsing attributes in process `syz.2.801'. [ 193.941654][ T8188] delete_channel: no stack [ 194.089664][ T5096] Bluetooth: hci4: command tx timeout [ 194.681629][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.688275][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.753337][ T8079] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.806646][ T8079] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.815512][ T5096] Bluetooth: hci2: command tx timeout [ 194.845944][ T8079] bridge_slave_0: entered allmulticast mode [ 194.880901][ T8079] bridge_slave_0: entered promiscuous mode [ 194.922847][ T8067] chnl_net:caif_netlink_parms(): no params data found [ 194.985253][ T8079] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.017065][ T8079] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.038243][ T8079] bridge_slave_1: entered allmulticast mode [ 195.068591][ T8079] bridge_slave_1: entered promiscuous mode [ 195.230756][ T8229] netlink: 830 bytes leftover after parsing attributes in process `syz.2.809'. [ 195.240167][ T8229] team0: default FDB implementation only supports local addresses [ 195.432766][ T8079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.521917][ T8079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.887494][ T8079] team0: Port device team_slave_0 added [ 195.953481][ T8079] team0: Port device team_slave_1 added [ 196.145429][ T8250] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.817'. [ 196.169927][ T5096] Bluetooth: hci4: command tx timeout [ 196.531281][ T8079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.550266][ T8079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.588555][ T8079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.612238][ T8257] netlink: 'syz.2.818': attribute type 10 has an invalid length. [ 196.658017][ T8257] team0: Port device netdevsim0 added [ 196.691701][ T8067] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.699019][ T8067] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.818512][ T8067] bridge_slave_0: entered allmulticast mode [ 196.849792][ T8067] bridge_slave_0: entered promiscuous mode [ 196.859238][ T1152] hsr0: left allmulticast mode [ 196.864329][ T1152] hsr_slave_0: left allmulticast mode [ 196.878059][ T1152] hsr_slave_1: left allmulticast mode [ 196.884828][ T1152] hsr0: left promiscuous mode [ 196.889895][ T5096] Bluetooth: hci2: command tx timeout [ 196.907271][ T1152] bridge0: port 3(hsr0) entered disabled state [ 196.934938][ T1152] bridge_slave_1: left allmulticast mode [ 196.971099][ T1152] bridge_slave_1: left promiscuous mode [ 196.977011][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.002545][ T1152] bridge_slave_0: left allmulticast mode [ 197.009569][ T1152] bridge_slave_0: left promiscuous mode [ 197.015424][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.636982][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.648858][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.661213][ T1152] bond0 (unregistering): Released all slaves [ 197.675184][ T8079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.687818][ T8079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.726409][ T8079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.784150][ T8067] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.797715][ T8067] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.805655][ T8067] bridge_slave_1: entered allmulticast mode [ 197.815679][ T8067] bridge_slave_1: entered promiscuous mode [ 198.021660][ T8289] netlink: 830 bytes leftover after parsing attributes in process `syz.4.824'. [ 198.049863][ T8289] team0: default FDB implementation only supports local addresses [ 198.072240][ T8067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.096749][ T8067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.248035][ T8079] hsr_slave_0: entered promiscuous mode [ 198.254201][ T5096] Bluetooth: hci4: command tx timeout [ 198.280164][ T8079] hsr_slave_1: entered promiscuous mode [ 198.290998][ T8079] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.307804][ T8079] Cannot create hsr debugfs directory [ 198.310433][ T8299] netlink: 'syz.4.827': attribute type 23 has an invalid length. [ 198.330207][ T8299] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.827'. [ 198.728594][ T8067] team0: Port device team_slave_0 added [ 198.739330][ T8306] netlink: 'syz.2.828': attribute type 21 has an invalid length. [ 198.761305][ T8306] netlink: 100 bytes leftover after parsing attributes in process `syz.2.828'. [ 198.897176][ T8067] team0: Port device team_slave_1 added [ 199.048465][ T1152] hsr_slave_0: left promiscuous mode [ 199.056053][ T1152] hsr_slave_1: left promiscuous mode [ 199.089862][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.099941][ T8316] netlink: 'syz.2.832': attribute type 3 has an invalid length. [ 199.107656][ T8316] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.832'. [ 199.116955][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.140427][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.148001][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.258944][ T1152] veth1_macvtap: left promiscuous mode [ 199.282777][ T1152] veth0_macvtap: left promiscuous mode [ 199.302293][ T1152] veth1_vlan: left promiscuous mode [ 199.318998][ T1152] veth0_vlan: left promiscuous mode [ 199.347859][ T8325] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.835'. [ 200.623468][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 200.667305][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 201.082512][ T8067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.093654][ T8067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.121935][ T8067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.138815][ T8328] netlink: 830 bytes leftover after parsing attributes in process `syz.4.837'. [ 201.157018][ T8328] team0: default FDB implementation only supports local addresses [ 201.181978][ T8332] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.207429][ T8333] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.214845][ T8333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.235699][ T8067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.254483][ T8067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.290512][ T8067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.609808][ T8067] hsr_slave_0: entered promiscuous mode [ 201.640897][ T8067] hsr_slave_1: entered promiscuous mode [ 201.673433][ T8067] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.689806][ T8067] Cannot create hsr debugfs directory [ 201.955333][ T8350] netlink: 48 bytes leftover after parsing attributes in process `syz.2.846'. [ 202.191020][ T8079] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.596796][ T8079] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.797204][ T8079] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.886745][ T8382] netlink: 'syz.4.853': attribute type 10 has an invalid length. [ 202.932003][ T8382] veth1_macvtap: left promiscuous mode [ 203.180205][ T8079] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.204469][ T8393] FAULT_INJECTION: forcing a failure. [ 203.204469][ T8393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.248066][ T8393] CPU: 0 PID: 8393 Comm: syz.2.856 Not tainted 6.10.0-rc2-syzkaller-00797-ga12978712d90 #0 [ 203.258133][ T8393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 203.268236][ T8393] Call Trace: [ 203.271562][ T8393] [ 203.274539][ T8393] dump_stack_lvl+0x241/0x360 [ 203.279397][ T8393] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.284650][ T8393] ? __pfx__printk+0x10/0x10 [ 203.289303][ T8393] ? __pfx_lock_release+0x10/0x10 [ 203.294398][ T8393] should_fail_ex+0x3b0/0x4e0 [ 203.299157][ T8393] _copy_to_user+0x2f/0xb0 [ 203.303635][ T8393] ext4_getfsmap_format+0x21b/0x450 [ 203.308892][ T8393] ? __pfx_ext4_getfsmap_format+0x10/0x10 [ 203.314684][ T8393] ? rcu_is_watching+0x15/0xb0 [ 203.319500][ T8393] ? trace_ext4_fsmap_mapping+0xa3/0x270 [ 203.325204][ T8393] ? ext4_get_group_no_and_offset+0x181/0x1d0 [ 203.331321][ T8393] ? __pfx_ext4_getfsmap_format+0x10/0x10 [ 203.337098][ T8393] ext4_getfsmap_helper+0xa25/0xff0 [ 203.342371][ T8393] ? __pfx_ext4_getfsmap_helper+0x10/0x10 [ 203.348144][ T8393] ? __pfx_perf_trace_lock+0x10/0x10 [ 203.353521][ T8393] ext4_getfsmap_datadev_helper+0x486/0x930 [ 203.359494][ T8393] ? __pfx_ext4_getfsmap_datadev_helper+0x10/0x10 [ 203.365954][ T8393] ? do_raw_spin_trylock+0xc8/0x1f0 [ 203.371219][ T8393] ? do_raw_spin_unlock+0x13c/0x8b0 [ 203.376491][ T8393] ext4_mballoc_query_range+0x48f/0x7a0 [ 203.382106][ T8393] ? __pfx_ext4_getfsmap_datadev_helper+0x10/0x10 [ 203.388570][ T8393] ? __pfx_ext4_mballoc_query_range+0x10/0x10 [ 203.394707][ T8393] ? rcu_is_watching+0x15/0xb0 [ 203.399514][ T8393] ? trace_ext4_fsmap_high_key+0xa3/0x270 [ 203.405299][ T8393] ext4_getfsmap_datadev+0x1c17/0x2650 [ 203.410883][ T8393] ? __pfx_ext4_getfsmap_datadev+0x10/0x10 [ 203.416771][ T8393] ? ext4_getfsmap+0x653/0x1090 [ 203.421702][ T8393] ext4_getfsmap+0xcf4/0x1090 [ 203.426441][ T8393] ? __pfx_ext4_getfsmap_datadev+0x10/0x10 [ 203.432313][ T8393] ? __pfx_ext4_getfsmap+0x10/0x10 [ 203.437589][ T8393] ? __pfx_ext4_getfsmap_datadev+0x10/0x10 [ 203.443459][ T8393] ? __pfx_ext4_getfsmap_format+0x10/0x10 [ 203.449293][ T8393] ? __might_fault+0xc6/0x120 [ 203.454031][ T8393] ext4_ioctl+0x39df/0x55a0 [ 203.458609][ T8393] ? perf_trace_lock+0x388/0x490 [ 203.463596][ T8393] ? do_vfs_ioctl+0x1e77/0x2e50 [ 203.468504][ T8393] ? __pfx_ext4_ioctl+0x10/0x10 [ 203.473411][ T8393] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 203.478526][ T8393] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 203.484896][ T8393] ? tomoyo_path_number_perm+0x208/0x880 [ 203.490576][ T8393] ? __pfx_lock_release+0x10/0x10 [ 203.495712][ T8393] ? kfree+0x149/0x360 [ 203.499855][ T8393] ? tomoyo_path_number_perm+0x208/0x880 [ 203.505645][ T8393] ? __fget_files+0x29/0x470 [ 203.510297][ T8393] ? __fget_files+0x3f6/0x470 [ 203.515031][ T8393] ? __fget_files+0x29/0x470 [ 203.519683][ T8393] ? bpf_lsm_file_ioctl+0x9/0x10 [ 203.524656][ T8393] ? security_file_ioctl+0x87/0xb0 [ 203.529807][ T8393] ? __pfx_ext4_ioctl+0x10/0x10 [ 203.534711][ T8393] __se_sys_ioctl+0xfc/0x170 [ 203.539355][ T8393] do_syscall_64+0xf3/0x230 [ 203.543904][ T8393] ? clear_bhb_loop+0x35/0x90 [ 203.548627][ T8393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.554557][ T8393] RIP: 0033:0x7fb797d75b29 [ 203.559094][ T8393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.578769][ T8393] RSP: 002b:00007fb798bba048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.587326][ T8393] RAX: ffffffffffffffda RBX: 00007fb797f03fa0 RCX: 00007fb797d75b29 [ 203.595329][ T8393] RDX: 0000000020000040 RSI: 00000000c0c0583b RDI: 0000000000000005 [ 203.603339][ T8393] RBP: 00007fb798bba0a0 R08: 0000000000000000 R09: 0000000000000000 [ 203.611368][ T8393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 203.619371][ T8393] R13: 000000000000000b R14: 00007fb797f03fa0 R15: 00007ffd8135b0f8 [ 203.627421][ T8393] [ 204.103570][ T8404] syz.2.859[8404] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.103731][ T8404] syz.2.859[8404] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.509256][ T8419] syz.2.862[8419] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.522015][ T8419] syz.2.862[8419] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.564589][ T8423] netlink: 'syz.0.863': attribute type 1 has an invalid length. [ 204.615319][ T8423] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.863'. [ 204.649961][ T8415] tap0: tun_chr_ioctl cmd 1074025673 [ 205.107124][ T8436] netlink: 'syz.2.867': attribute type 12 has an invalid length. [ 205.115678][ T8436] netlink: 132 bytes leftover after parsing attributes in process `syz.2.867'. [ 205.194522][ T8079] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 205.222282][ T8079] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 205.297272][ T8438] netlink: 'syz.4.868': attribute type 1 has an invalid length. [ 205.326396][ T8438] netlink: 157116 bytes leftover after parsing attributes in process `syz.4.868'. [ 205.349404][ T8079] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 205.404596][ T8079] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 205.472534][ T8067] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 205.526163][ T8067] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 205.580624][ T8067] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 205.621236][ T8067] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 206.075820][ T8079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.292574][ T8079] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.313087][ T8067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.373094][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.380331][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.413960][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.421321][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.485868][ T8067] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.578994][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.586234][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.775830][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.783095][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.026721][ T8067] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 207.081034][ T8067] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 207.506023][ T8079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.716471][ T8079] veth0_vlan: entered promiscuous mode [ 207.805624][ T8079] veth1_vlan: entered promiscuous mode [ 207.918139][ T8067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.008903][ T5096] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 208.072849][ T8079] veth0_macvtap: entered promiscuous mode [ 208.124285][ T8079] veth1_macvtap: entered promiscuous mode [ 208.202774][ T8079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.235980][ T8079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.247708][ T8079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.259850][ T8079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.284022][ T8079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.302385][ T8079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.317891][ T8079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.340895][ T8079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.356577][ T8079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.385738][ T8079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.430057][ T8079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.444969][ T8079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.457027][ T8079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.482778][ T8079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.509248][ T8079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.551186][ T8079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.606335][ T8079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.663085][ T8079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.955555][ T8079] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.978059][ T8079] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.994712][ T8079] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.017100][ T8079] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.183631][ T8067] veth0_vlan: entered promiscuous mode [ 209.339189][ T8067] veth1_vlan: entered promiscuous mode [ 209.569052][ T6170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.605258][ T6170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.708552][ T6170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.734635][ T8586] netlink: 'syz.4.901': attribute type 1 has an invalid length. [ 209.747739][ T8067] veth0_macvtap: entered promiscuous mode [ 209.754473][ T6170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.764282][ T8586] netlink: 191384 bytes leftover after parsing attributes in process `syz.4.901'. [ 209.811232][ T8067] veth1_macvtap: entered promiscuous mode [ 209.886765][ T8067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.914667][ T8067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.929930][ T8067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.951958][ T8067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.976970][ T8067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.999778][ T8067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.024481][ T8067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.035491][ T8067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.055799][ T8067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.069499][ T8067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.107593][ T8067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.268849][ T8067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.299573][ T8067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.341335][ T8067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.370548][ T8067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.387314][ T8067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.409232][ T8067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.436985][ T8067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.447870][ T8067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.462073][ T8067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.473618][ T8067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.496956][ T8067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.593876][ T8067] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.633823][ T8067] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.665951][ T8067] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.702178][ T8067] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.034554][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.062588][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.175648][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.190181][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.261673][ T8634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.893583][ T1152] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.162775][ T1152] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.555695][ T1152] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.695573][ T1152] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.887470][ T8660] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 9 (only 8 groups) [ 213.508767][ T1152] bridge_slave_1: left allmulticast mode [ 213.557873][ T1152] bridge_slave_1: left promiscuous mode [ 213.575117][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.645472][ T1152] bridge_slave_0: left allmulticast mode [ 213.688409][ T1152] bridge_slave_0: left promiscuous mode [ 213.702851][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.802608][ T5099] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 213.816472][ T5099] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 213.834818][ T5099] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 213.844286][ T5099] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 213.860741][ T5099] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 213.872268][ T5099] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.972977][ T8692] netlink: 'syz.0.929': attribute type 3 has an invalid length. [ 214.008012][ T8691] netlink: 'syz.0.929': attribute type 3 has an invalid length. [ 214.033502][ T8691] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.929'. [ 214.059941][ T8692] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.929'. [ 214.905715][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.923805][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.938132][ T1152] bond0 (unregistering): Released all slaves [ 215.930210][ T5096] Bluetooth: hci2: command tx timeout [ 215.939822][ T1152] hsr_slave_0: left promiscuous mode [ 215.950344][ T1152] hsr_slave_1: left promiscuous mode [ 215.956637][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.966414][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.990312][ T8754] netlink: 'syz.4.945': attribute type 8 has an invalid length. [ 215.998236][ T8754] netlink: 156 bytes leftover after parsing attributes in process `syz.4.945'. [ 216.020719][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.028441][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.166155][ T1152] veth1_macvtap: left promiscuous mode [ 216.226291][ T1152] veth0_macvtap: left promiscuous mode [ 216.259769][ T1152] veth1_vlan: left promiscuous mode [ 216.265184][ T1152] veth0_vlan: left promiscuous mode [ 216.739071][ T5099] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 216.760872][ T5099] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 216.779768][ T5099] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 216.796342][ T5099] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 216.810222][ T5099] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 216.817932][ T5099] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 217.055744][ T5099] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 217.071112][ T5099] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 217.080504][ T5099] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 217.098346][ T5099] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 217.110989][ T5099] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 217.119378][ T5099] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 217.299123][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 217.338334][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 217.742545][ T8763] netlink: 'syz.4.949': attribute type 2 has an invalid length. [ 217.753139][ T8763] netlink: 132 bytes leftover after parsing attributes in process `syz.4.949'. [ 218.017673][ T8783] netlink: 211912 bytes leftover after parsing attributes in process `syz.2.953'. [ 218.018658][ T5096] Bluetooth: hci2: command tx timeout [ 218.223373][ T8686] chnl_net:caif_netlink_parms(): no params data found [ 218.915370][ T5096] Bluetooth: hci1: command tx timeout [ 219.219835][ T5096] Bluetooth: hci4: command tx timeout [ 220.099939][ T5096] Bluetooth: hci2: command tx timeout [ 220.980215][ T5096] Bluetooth: hci1: command tx timeout [ 221.301076][ T5096] Bluetooth: hci4: command tx timeout [ 221.797085][ T8824] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.961'. [ 221.823104][ T8686] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.844140][ T8686] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.856211][ T8686] bridge_slave_0: entered allmulticast mode [ 221.871327][ T8686] bridge_slave_0: entered promiscuous mode [ 222.175865][ T5096] Bluetooth: hci2: command tx timeout [ 222.650170][ T8686] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.659138][ T8686] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.667445][ T8686] bridge_slave_1: entered allmulticast mode [ 222.676048][ T8686] bridge_slave_1: entered promiscuous mode [ 222.846037][ T1152] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.997962][ T1152] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.025465][ T8686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.056334][ T5096] Bluetooth: hci1: command tx timeout [ 223.077759][ T8686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.106969][ T8773] chnl_net:caif_netlink_parms(): no params data found [ 223.205807][ T1152] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.286993][ T8769] chnl_net:caif_netlink_parms(): no params data found [ 223.326261][ T8686] team0: Port device team_slave_0 added [ 223.372807][ T8686] team0: Port device team_slave_1 added [ 223.377999][ T5096] Bluetooth: hci4: command tx timeout [ 223.454105][ T1152] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.586407][ T8869] netlink: 132 bytes leftover after parsing attributes in process `syz.2.972'. [ 223.749789][ T8686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.766806][ T8686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.806488][ T8686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.965947][ T8883] netlink: 'syz.4.975': attribute type 10 has an invalid length. [ 223.974968][ T8883] geneve0: entered promiscuous mode [ 224.011918][ T8883] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 224.036740][ T8686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.044231][ T8686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.099391][ T8686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.150864][ T8773] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.158160][ T8773] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.175967][ T8773] bridge_slave_0: entered allmulticast mode [ 224.191484][ T8773] bridge_slave_0: entered promiscuous mode [ 224.202644][ T8773] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.211642][ T8773] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.223948][ T8773] bridge_slave_1: entered allmulticast mode [ 224.234805][ T8773] bridge_slave_1: entered promiscuous mode [ 224.351991][ T8899] netlink: 'syz.4.979': attribute type 2 has an invalid length. [ 224.359805][ T8899] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.979'. [ 224.493497][ T8903] raw_sendmsg: syz.2.981 forgot to set AF_INET. Fix it! [ 224.605004][ T8686] hsr_slave_0: entered promiscuous mode [ 224.638924][ T8686] hsr_slave_1: entered promiscuous mode [ 224.657229][ T8686] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.689887][ T8686] Cannot create hsr debugfs directory [ 224.762492][ T8769] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.779017][ T8769] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.787098][ T8769] bridge_slave_0: entered allmulticast mode [ 224.803172][ T8769] bridge_slave_0: entered promiscuous mode [ 224.851600][ T8773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.912058][ T8773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.097567][ T8769] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.110125][ T8769] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.117478][ T8769] bridge_slave_1: entered allmulticast mode [ 225.145710][ T5096] Bluetooth: hci1: command tx timeout [ 225.161429][ T8769] bridge_slave_1: entered promiscuous mode [ 225.457086][ T5096] Bluetooth: hci4: command tx timeout [ 225.474234][ T1152] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.511012][ T8773] team0: Port device team_slave_0 added [ 225.524105][ T8773] team0: Port device team_slave_1 added [ 225.574112][ T8769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.586805][ T8769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.688314][ T1152] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.832576][ T8769] team0: Port device team_slave_0 added [ 225.883713][ T8944] netlink: 'syz.4.990': attribute type 2 has an invalid length. [ 225.892066][ T8944] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.990'. [ 225.915714][ T1152] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.948324][ T8769] team0: Port device team_slave_1 added [ 225.956770][ T8773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.965961][ T8773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.001664][ T8773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.092048][ T1152] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.112733][ T8773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.120146][ T8773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.147202][ T8773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.329107][ T8769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.336465][ T8769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.363684][ T8769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.394003][ T8773] hsr_slave_0: entered promiscuous mode [ 226.403523][ T8773] hsr_slave_1: entered promiscuous mode [ 226.418985][ T8773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.440581][ T8773] Cannot create hsr debugfs directory [ 226.446550][ T8954] netlink: 35347 bytes leftover after parsing attributes in process `syz.4.992'. [ 226.487513][ T8769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.501471][ T8769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.559916][ T8769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.317818][ T8769] hsr_slave_0: entered promiscuous mode [ 227.330149][ T8769] hsr_slave_1: entered promiscuous mode [ 227.336857][ T8769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.347404][ T8769] Cannot create hsr debugfs directory [ 227.535230][ T1152] bridge_slave_1: left allmulticast mode [ 227.548956][ T1152] bridge_slave_1: left promiscuous mode [ 227.578694][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.641912][ T1152] bridge_slave_0: left allmulticast mode [ 227.647702][ T1152] bridge_slave_0: left promiscuous mode [ 227.691232][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.717136][ T1152] bridge_slave_1: left allmulticast mode [ 227.721214][ T9000] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1002'. [ 227.738645][ T1152] bridge_slave_1: left promiscuous mode [ 227.744844][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.756997][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.485111][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.504957][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.517444][ T1152] bond0 (unregistering): Released all slaves [ 228.645272][ T1152] team0: Port device  removed [ 228.654443][ T1152]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.667157][ T1152]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.678783][ T1152]  (unregistering): Released all slaves [ 229.728078][ T8686] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 229.847830][ T8686] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 229.877711][ T8686] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 229.966903][ T8686] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 230.064296][ T9020] IPv6: Can't replace route, no match found [ 230.152243][ T1152] hsr_slave_0: left promiscuous mode [ 230.186483][ T1152] hsr_slave_1: left promiscuous mode [ 230.202021][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.213945][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.223297][ T9026] FAULT_INJECTION: forcing a failure. [ 230.223297][ T9026] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 230.223421][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.244827][ T9026] CPU: 1 PID: 9026 Comm: syz.2.1010 Not tainted 6.10.0-rc2-syzkaller-00797-ga12978712d90 #0 [ 230.248458][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.254909][ T9026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 230.254960][ T9026] Call Trace: [ 230.254971][ T9026] [ 230.254982][ T9026] dump_stack_lvl+0x241/0x360 [ 230.255017][ T9026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.255043][ T9026] ? __pfx__printk+0x10/0x10 [ 230.255082][ T9026] should_fail_ex+0x3b0/0x4e0 [ 230.255123][ T9026] prepare_alloc_pages+0x1da/0x5d0 [ 230.255158][ T9026] __alloc_pages_noprof+0x166/0x6c0 [ 230.255188][ T9026] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 230.255211][ T9026] ? _copy_from_iter+0x26b/0x1960 [ 230.318989][ T9026] ? __mutex_lock+0x2ef/0xd70 [ 230.323702][ T9026] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 230.330070][ T9026] alloc_pages_mpol_noprof+0x3e8/0x680 [ 230.335557][ T9026] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 230.341555][ T9026] ? page_copy_sane+0x46/0x260 [ 230.346340][ T9026] ? alloc_pages_noprof+0xef/0x170 [ 230.351508][ T9026] pipe_write+0x657/0x1a40 [ 230.356008][ T9026] ? __pfx_pipe_write+0x10/0x10 [ 230.360900][ T9026] ? __pfx_autoremove_wake_function+0x10/0x10 [ 230.367005][ T9026] ? bpf_lsm_file_permission+0x9/0x10 [ 230.372398][ T9026] ? security_file_permission+0x7f/0xa0 [ 230.378009][ T9026] vfs_write+0xa72/0xc90 [ 230.382277][ T9026] ? __pfx_pipe_write+0x10/0x10 [ 230.387156][ T9026] ? __pfx_vfs_write+0x10/0x10 [ 230.391962][ T9026] ksys_write+0x1a0/0x2c0 [ 230.396314][ T9026] ? __pfx_ksys_write+0x10/0x10 [ 230.401185][ T9026] ? do_syscall_64+0x100/0x230 [ 230.405964][ T9026] ? do_syscall_64+0xb6/0x230 [ 230.410675][ T9026] do_syscall_64+0xf3/0x230 [ 230.415222][ T9026] ? clear_bhb_loop+0x35/0x90 [ 230.419936][ T9026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.425841][ T9026] RIP: 0033:0x7fb797d75b29 [ 230.430285][ T9026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.449903][ T9026] RSP: 002b:00007fb798bba048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 230.458327][ T9026] RAX: ffffffffffffffda RBX: 00007fb797f03fa0 RCX: 00007fb797d75b29 [ 230.466306][ T9026] RDX: 00000000fffffdef RSI: 00000000200001c0 RDI: 0000000000000000 [ 230.474301][ T9026] RBP: 00007fb798bba0a0 R08: 0000000000000000 R09: 0000000000000000 [ 230.482284][ T9026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 230.490269][ T9026] R13: 000000000000000b R14: 00007fb797f03fa0 R15: 00007ffd8135b0f8 [ 230.498283][ T9026] [ 230.504184][ C1] ================================================================== [ 230.512291][ C1] BUG: KASAN: slab-use-after-free in rhashtable_lookup_fast+0x77a/0x9b0 [ 230.520669][ C1] Read of size 4 at addr ffff888065ab8008 by task kworker/1:4/5145 [ 230.528604][ C1] [ 230.531033][ C1] CPU: 1 PID: 5145 Comm: kworker/1:4 Not tainted 6.10.0-rc2-syzkaller-00797-ga12978712d90 #0 [ 230.541222][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 230.551289][ C1] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 230.557813][ C1] Call Trace: [ 230.561109][ C1] [ 230.563962][ C1] dump_stack_lvl+0x241/0x360 [ 230.568681][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.573898][ C1] ? __pfx__printk+0x10/0x10 [ 230.578499][ C1] ? _printk+0xd5/0x120 [ 230.582768][ C1] ? __virt_addr_valid+0x183/0x520 [ 230.587897][ C1] ? __virt_addr_valid+0x183/0x520 [ 230.593018][ C1] print_report+0x169/0x550 [ 230.597533][ C1] ? __virt_addr_valid+0x183/0x520 [ 230.602661][ C1] ? __virt_addr_valid+0x183/0x520 [ 230.607787][ C1] ? __virt_addr_valid+0x44e/0x520 [ 230.612993][ C1] ? __phys_addr+0xba/0x170 [ 230.617508][ C1] ? rhashtable_lookup_fast+0x77a/0x9b0 [ 230.623086][ C1] kasan_report+0x143/0x180 [ 230.627653][ C1] ? rhashtable_lookup_fast+0x77a/0x9b0 [ 230.633227][ C1] rhashtable_lookup_fast+0x77a/0x9b0 [ 230.638792][ C1] ? rhashtable_lookup_fast+0xe9/0x9b0 [ 230.644263][ C1] ? __pfx_ila_cmpfn+0x10/0x10 [ 230.649036][ C1] ? __pfx_rhashtable_lookup_fast+0x10/0x10 [ 230.654963][ C1] ? __pfx_ila_cmpfn+0x10/0x10 [ 230.659746][ C1] ila_nf_input+0x1fe/0x3c0 [ 230.664279][ C1] ? __pfx_ila_cmpfn+0x10/0x10 [ 230.669050][ C1] ? ila_nf_input+0xe4/0x3c0 [ 230.673673][ C1] ? __pfx_ila_nf_input+0x10/0x10 [ 230.678709][ C1] nf_hook_slow+0xc3/0x220 [ 230.683146][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 230.688366][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 230.693569][ C1] NF_HOOK+0x29e/0x450 [ 230.697651][ C1] ? skb_orphan+0x4b/0xd0 [ 230.701995][ C1] ? NF_HOOK+0x9a/0x450 [ 230.706167][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 230.710768][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 230.715978][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 230.720664][ C1] __netif_receive_skb+0x1ea/0x650 [ 230.725810][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 230.730851][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 230.736496][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 230.742483][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 230.748904][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 230.754029][ C1] ? process_backlog+0x2d9/0x7d0 [ 230.758968][ C1] process_backlog+0x391/0x7d0 [ 230.763748][ C1] ? __pfx_process_backlog+0x10/0x10 [ 230.769035][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 230.775020][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 230.781358][ C1] __napi_poll+0xcb/0x490 [ 230.785708][ C1] net_rx_action+0x7bb/0x10a0 [ 230.790415][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 230.795542][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 230.801536][ C1] handle_softirqs+0x2c4/0x970 [ 230.806304][ C1] ? do_softirq+0x11b/0x1e0 [ 230.810829][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 230.816144][ C1] do_softirq+0x11b/0x1e0 [ 230.820494][ C1] [ 230.823450][ C1] [ 230.826382][ C1] ? __pfx_do_softirq+0x10/0x10 [ 230.831239][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 230.836872][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 230.841900][ C1] ? rcu_is_watching+0x15/0xb0 [ 230.846717][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 230.851925][ C1] ? wg_packet_encrypt_worker+0x2e8/0x1610 [ 230.857737][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 230.863462][ C1] ? wg_packet_encrypt_worker+0xd5/0x1610 [ 230.869187][ C1] wg_packet_encrypt_worker+0x2e8/0x1610 [ 230.874836][ C1] ? rcu_is_watching+0x15/0xb0 [ 230.879611][ C1] ? __pfx_wg_packet_encrypt_worker+0x10/0x10 [ 230.885728][ C1] ? trace_pelt_se_tp+0x3d/0x140 [ 230.890681][ C1] ? __update_load_avg_se+0x6a0/0xaf0 [ 230.896068][ C1] ? look_up_lock_class+0x77/0x160 [ 230.901184][ C1] ? register_lock_class+0x102/0x980 [ 230.906558][ C1] ? try_to_wake_up+0x8fb/0x1470 [ 230.911504][ C1] ? __pfx_lock_release+0x10/0x10 [ 230.916533][ C1] ? __pfx_register_lock_class+0x10/0x10 [ 230.922172][ C1] ? mark_lock+0x9a/0x350 [ 230.926507][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 230.931551][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 230.936756][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 230.942741][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 230.949076][ C1] ? process_scheduled_works+0x945/0x1830 [ 230.954798][ C1] process_scheduled_works+0xa2c/0x1830 [ 230.960365][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 230.966352][ C1] ? assign_work+0x364/0x3d0 [ 230.970953][ C1] worker_thread+0x86d/0xd70 [ 230.975551][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 230.981459][ C1] ? __kthread_parkme+0x169/0x1d0 [ 230.986490][ C1] ? __pfx_worker_thread+0x10/0x10 [ 230.991608][ C1] kthread+0x2f0/0x390 [ 230.995704][ C1] ? __pfx_worker_thread+0x10/0x10 [ 231.000822][ C1] ? __pfx_kthread+0x10/0x10 [ 231.005419][ C1] ret_from_fork+0x4b/0x80 [ 231.009842][ C1] ? __pfx_kthread+0x10/0x10 [ 231.014441][ C1] ret_from_fork_asm+0x1a/0x30 [ 231.019224][ C1] [ 231.022241][ C1] [ 231.024561][ C1] Allocated by task 8806: [ 231.028883][ C1] kasan_save_track+0x3f/0x80 [ 231.033567][ C1] __kasan_kmalloc+0x98/0xb0 [ 231.038166][ C1] __kmalloc_noprof+0x1f9/0x400 [ 231.043014][ C1] tomoyo_realpath_from_path+0xcf/0x5e0 [ 231.048562][ C1] tomoyo_check_open_permission+0x255/0x500 [ 231.054462][ C1] security_file_open+0x6a/0x730 [ 231.059417][ C1] do_dentry_open+0x36c/0x1720 [ 231.064189][ C1] path_openat+0x289f/0x3280 [ 231.068781][ C1] do_filp_open+0x235/0x490 [ 231.073287][ C1] do_sys_openat2+0x13e/0x1d0 [ 231.077964][ C1] __x64_sys_openat+0x247/0x2a0 [ 231.082815][ C1] do_syscall_64+0xf3/0x230 [ 231.087319][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.093221][ C1] [ 231.095543][ C1] Freed by task 8806: [ 231.099517][ C1] kasan_save_track+0x3f/0x80 [ 231.104202][ C1] kasan_save_free_info+0x40/0x50 [ 231.109226][ C1] poison_slab_object+0xe0/0x150 [ 231.114166][ C1] __kasan_slab_free+0x37/0x60 [ 231.118936][ C1] kfree+0x149/0x360 [ 231.122829][ C1] tomoyo_realpath_from_path+0x5a9/0x5e0 [ 231.128463][ C1] tomoyo_check_open_permission+0x255/0x500 [ 231.134360][ C1] security_file_open+0x6a/0x730 [ 231.139307][ C1] do_dentry_open+0x36c/0x1720 [ 231.144069][ C1] path_openat+0x289f/0x3280 [ 231.148677][ C1] do_filp_open+0x235/0x490 [ 231.153186][ C1] do_sys_openat2+0x13e/0x1d0 [ 231.157863][ C1] __x64_sys_openat+0x247/0x2a0 [ 231.162716][ C1] do_syscall_64+0xf3/0x230 [ 231.167224][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.173124][ C1] [ 231.175532][ C1] The buggy address belongs to the object at ffff888065ab8000 [ 231.175532][ C1] which belongs to the cache kmalloc-4k of size 4096 [ 231.189685][ C1] The buggy address is located 8 bytes inside of [ 231.189685][ C1] freed 4096-byte region [ffff888065ab8000, ffff888065ab9000) [ 231.203410][ C1] [ 231.205732][ C1] The buggy address belongs to the physical page: [ 231.212149][ C1] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x65ab8 [ 231.220913][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 231.229411][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 231.236976][ C1] page_type: 0xffffefff(slab) [ 231.241658][ C1] raw: 00fff00000000040 ffff888015042140 dead000000000122 0000000000000000 [ 231.250243][ C1] raw: 0000000000000000 0000000000040004 00000001ffffefff 0000000000000000 [ 231.258914][ C1] head: 00fff00000000040 ffff888015042140 dead000000000122 0000000000000000 [ 231.267582][ C1] head: 0000000000000000 0000000000040004 00000001ffffefff 0000000000000000 [ 231.276254][ C1] head: 00fff00000000003 ffffea000196ae01 ffffffffffffffff 0000000000000000 [ 231.284966][ C1] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 231.293664][ C1] page dumped because: kasan: bad access detected [ 231.300097][ C1] page_owner tracks the page as allocated [ 231.305811][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 8806, tgid 8806 (udevd), ts 228955192067, free_ts 228914929412 [ 231.327352][ C1] post_alloc_hook+0x1f3/0x230 [ 231.332134][ C1] get_page_from_freelist+0x2e2d/0x2ee0 [ 231.337693][ C1] __alloc_pages_noprof+0x256/0x6c0 [ 231.342907][ C1] alloc_slab_page+0x5f/0x120 [ 231.347599][ C1] allocate_slab+0x5a/0x2e0 [ 231.352284][ C1] ___slab_alloc+0xcd1/0x14b0 [ 231.356965][ C1] __slab_alloc+0x58/0xa0 [ 231.361300][ C1] __kmalloc_noprof+0x257/0x400 [ 231.366151][ C1] tomoyo_realpath_from_path+0xcf/0x5e0 [ 231.371699][ C1] tomoyo_check_open_permission+0x255/0x500 [ 231.377597][ C1] security_file_open+0x6a/0x730 [ 231.382544][ C1] do_dentry_open+0x36c/0x1720 [ 231.387338][ C1] path_openat+0x289f/0x3280 [ 231.391941][ C1] do_filp_open+0x235/0x490 [ 231.396453][ C1] do_sys_openat2+0x13e/0x1d0 [ 231.401135][ C1] __x64_sys_openat+0x247/0x2a0 [ 231.405988][ C1] page last free pid 1152 tgid 1152 stack trace: [ 231.412313][ C1] free_unref_page+0xd22/0xea0 [ 231.417085][ C1] __folio_put+0x3b9/0x620 [ 231.421504][ C1] free_large_kmalloc+0x105/0x1c0 [ 231.426536][ C1] kfree+0x1c4/0x360 [ 231.430428][ C1] rhashtable_free_and_destroy+0x7c6/0x920 [ 231.436235][ C1] ila_xlat_exit_net+0x55/0x110 [ 231.441096][ C1] cleanup_net+0x802/0xcc0 [ 231.445515][ C1] process_scheduled_works+0xa2c/0x1830 [ 231.451062][ C1] worker_thread+0x86d/0xd70 [ 231.455665][ C1] kthread+0x2f0/0x390 [ 231.459744][ C1] ret_from_fork+0x4b/0x80 [ 231.464168][ C1] ret_from_fork_asm+0x1a/0x30 [ 231.468939][ C1] [ 231.471264][ C1] Memory state around the buggy address: [ 231.476901][ C1] ffff888065ab7f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 231.484970][ C1] ffff888065ab7f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 231.493029][ C1] >ffff888065ab8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 231.501088][ C1] ^ [ 231.505414][ C1] ffff888065ab8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 231.513476][ C1] ffff888065ab8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 231.521533][ C1] ================================================================== [ 231.529721][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 231.536945][ C1] CPU: 1 PID: 5145 Comm: kworker/1:4 Not tainted 6.10.0-rc2-syzkaller-00797-ga12978712d90 #0 [ 231.547129][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 231.557219][ C1] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 231.563777][ C1] Call Trace: [ 231.567098][ C1] [ 231.569975][ C1] dump_stack_lvl+0x241/0x360 [ 231.574728][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.579971][ C1] ? __pfx__printk+0x10/0x10 [ 231.584613][ C1] ? vscnprintf+0x5d/0x90 [ 231.589007][ C1] panic+0x349/0x860 [ 231.592937][ C1] ? check_panic_on_warn+0x21/0xb0 [ 231.598087][ C1] ? __pfx_panic+0x10/0x10 [ 231.602557][ C1] ? mark_lock+0x9a/0x350 [ 231.606928][ C1] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 231.612835][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 231.618819][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 231.625154][ C1] ? print_report+0x502/0x550 [ 231.629845][ C1] check_panic_on_warn+0x86/0xb0 [ 231.634790][ C1] ? rhashtable_lookup_fast+0x77a/0x9b0 [ 231.640348][ C1] end_report+0x77/0x160 [ 231.644624][ C1] kasan_report+0x154/0x180 [ 231.649171][ C1] ? rhashtable_lookup_fast+0x77a/0x9b0 [ 231.654747][ C1] rhashtable_lookup_fast+0x77a/0x9b0 [ 231.660139][ C1] ? rhashtable_lookup_fast+0xe9/0x9b0 [ 231.665613][ C1] ? __pfx_ila_cmpfn+0x10/0x10 [ 231.670391][ C1] ? __pfx_rhashtable_lookup_fast+0x10/0x10 [ 231.676306][ C1] ? __pfx_ila_cmpfn+0x10/0x10 [ 231.681091][ C1] ila_nf_input+0x1fe/0x3c0 [ 231.685608][ C1] ? __pfx_ila_cmpfn+0x10/0x10 [ 231.690384][ C1] ? ila_nf_input+0xe4/0x3c0 [ 231.694986][ C1] ? __pfx_ila_nf_input+0x10/0x10 [ 231.700030][ C1] nf_hook_slow+0xc3/0x220 [ 231.704461][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 231.709666][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 231.714874][ C1] NF_HOOK+0x29e/0x450 [ 231.718977][ C1] ? skb_orphan+0x4b/0xd0 [ 231.723348][ C1] ? NF_HOOK+0x9a/0x450 [ 231.727520][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 231.732123][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 231.737335][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 231.742017][ C1] __netif_receive_skb+0x1ea/0x650 [ 231.747149][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 231.752182][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 231.757828][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 231.763826][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 231.770265][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 231.775418][ C1] ? process_backlog+0x2d9/0x7d0 [ 231.780370][ C1] process_backlog+0x391/0x7d0 [ 231.785151][ C1] ? __pfx_process_backlog+0x10/0x10 [ 231.790439][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 231.796431][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 231.802773][ C1] __napi_poll+0xcb/0x490 [ 231.807143][ C1] net_rx_action+0x7bb/0x10a0 [ 231.811837][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 231.816959][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 231.822950][ C1] handle_softirqs+0x2c4/0x970 [ 231.827717][ C1] ? do_softirq+0x11b/0x1e0 [ 231.832225][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 231.837540][ C1] do_softirq+0x11b/0x1e0 [ 231.841902][ C1] [ 231.844859][ C1] [ 231.847794][ C1] ? __pfx_do_softirq+0x10/0x10 [ 231.852664][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 231.858299][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 231.863524][ C1] ? rcu_is_watching+0x15/0xb0 [ 231.868439][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 231.873655][ C1] ? wg_packet_encrypt_worker+0x2e8/0x1610 [ 231.879469][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 231.885285][ C1] ? wg_packet_encrypt_worker+0xd5/0x1610 [ 231.891010][ C1] wg_packet_encrypt_worker+0x2e8/0x1610 [ 231.896688][ C1] ? rcu_is_watching+0x15/0xb0 [ 231.901491][ C1] ? __pfx_wg_packet_encrypt_worker+0x10/0x10 [ 231.907661][ C1] ? trace_pelt_se_tp+0x3d/0x140 [ 231.912619][ C1] ? __update_load_avg_se+0x6a0/0xaf0 [ 231.918025][ C1] ? look_up_lock_class+0x77/0x160 [ 231.923178][ C1] ? register_lock_class+0x102/0x980 [ 231.928478][ C1] ? try_to_wake_up+0x8fb/0x1470 [ 231.933425][ C1] ? __pfx_lock_release+0x10/0x10 [ 231.938450][ C1] ? __pfx_register_lock_class+0x10/0x10 [ 231.944084][ C1] ? mark_lock+0x9a/0x350 [ 231.948435][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 231.953479][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 231.958506][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 231.964491][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 231.970830][ C1] ? process_scheduled_works+0x945/0x1830 [ 231.976550][ C1] process_scheduled_works+0xa2c/0x1830 [ 231.982120][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 231.988107][ C1] ? assign_work+0x364/0x3d0 [ 231.992704][ C1] worker_thread+0x86d/0xd70 [ 231.997304][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 232.003205][ C1] ? __kthread_parkme+0x169/0x1d0 [ 232.008245][ C1] ? __pfx_worker_thread+0x10/0x10 [ 232.013358][ C1] kthread+0x2f0/0x390 [ 232.017437][ C1] ? __pfx_worker_thread+0x10/0x10 [ 232.022555][ C1] ? __pfx_kthread+0x10/0x10 [ 232.027152][ C1] ret_from_fork+0x4b/0x80 [ 232.031579][ C1] ? __pfx_kthread+0x10/0x10 [ 232.036175][ C1] ret_from_fork_asm+0x1a/0x30 [ 232.040957][ C1] [ 232.044280][ C1] Kernel Offset: disabled [ 232.048612][ C1] Rebooting in 86400 seconds..