last executing test programs: 4.161193122s ago: executing program 4 (id=2011): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0xf3, 0xa, 0x0, 0x0, 0xd006e1258c4875cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x48b0, 0xc8, 0xbcd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x2) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000000000000f37538e486dd630080fc5c082c00db5bffffffffff000000060300000023000000000000000000000000ac1414aa33"], 0xfdef) (fail_nth: 4) 3.589641918s ago: executing program 4 (id=2014): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffd, 0x1, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xfffffffffffffff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x5, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="b700000012000020bfa30000000000007603000028feffff7a0af0fff8ffffff61a4f0ff000000005d040000000000007f000000000000002704000001ed0a002500000041806aa13e040000000000007b0300fe000000002d03000000000000c600f9ffffff00009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef7054803d0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d85827513acd02b5a655a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f08050e46850600000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf8707f0d5217e9bb5a05d9e22ce67f1231bd236ed200073826593c4e1a0f50a74bb482e486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e9978931485747292c6fe6e188750cf4f87cce2aa7d67c6133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc1caa80e64461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5fea5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87dd4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f6260a483632a2ab447f88dd6efec73a0271a19ca3aa860aa4dcaeebe3d53040b853a7c02a5fcc08b3a572969bbe91c921ac1476027772c87d172ab29967e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f522df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bdaa075fdd88d22230592a790000000000000000000000003527dfd01b47000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7c54d5cb9076b81b7741ec03877afb520400000000000000c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399fa5ee0b41e14a6fe6894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014fa841061e63d40f4e536314beda5738fee012365f963b2a85e7d8075c333475b9f0284405e30700000041285fbe0bdd37220e31d4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe8c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df96d49f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21da4fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696ebc2ab3f4b642f36c9006c0067e24a64aa8c53df824a4ee271e35ed90000800847683c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68ad9fa2b2528798df1c36fc438d9c98f168490b41e158bb2e2d8ed19d44b9cce67c9c522b5136be09ed1b97ea3d5b317508df23e92c56fc2eb74d27d3861d91745b8fb9f6cc20e9f8b174000c62c4a2b212332a073fc5d0be7347e41454cb27e081c43e92ae7f9f046600db85d945a4666b588629ce0809d5c8506308688db21ec04d365497bf900600"/2767], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x17}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00'}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x6, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000010000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x81, &(0x7f00000002c0)=""/123, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x90, 0x0, 0x100000}, 0x80) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 3.204440126s ago: executing program 2 (id=2022): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xffffffff, 0xfffffffd, 0xe}, {0x10000002, 0x0, 0x4, 0x2}]}, 0x94) close(0x3) r2 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) recvmsg$kcm(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000600)=""/3, 0x3}, {&(0x7f00000004c0)=""/148, 0x94}], 0x2}, 0x10141) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYRESOCT=r2, @ANYRESOCT=r4, @ANYBLOB="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", @ANYRESHEX=r4], 0x48) r7 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000001b00)=@nfc_llcp={0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, "18ea938b1092fe34ca1eeda8daa60a9abde305cbe1656b4d7ab1424dc694f28875f0cede8569287d775dfa00dcddf939cb9b95773506d96096728b8d71cb32"}, 0x80, 0x0}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00'}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000a80)=ANY=[@ANYRES8=0x0], &(0x7f0000000740)=""/234, 0x3e, 0xea, 0x1, 0x5, 0x10000}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00'}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000005000000000000000180000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095000000000000001800000038000000000000000200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf95000000000000b7020000010800008500000085000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x6d, &(0x7f0000000140)=""/109, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x4, 0xf, 0x0, 0x1}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x5, 0x5, 0xa, 0x7}, {0x1, 0x5, 0xd, 0x7}], 0x10, 0x80000000}, 0x94) socket$kcm(0x10, 0x2, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x9}, 0x0, 0x4, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.111527975s ago: executing program 3 (id=2024): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x4}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @restrict={0x0, 0x0, 0x0, 0xb, 0x3}]}}, 0x0, 0x5a}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d00)={&(0x7f0000001380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@enum={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x2e, 0x1]}}, 0x0, 0x2c}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a001540080014", 0x23}], 0x1, 0x0, 0x0, 0x6000}, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100146, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x480, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1}, 0x40c6) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b9040200", 0x12}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x33fe0) 2.828082483s ago: executing program 3 (id=2026): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@typedef={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f, 0x2e, 0x61, 0x2e]}}, 0x0, 0x2e}, 0x20) (fail_nth: 11) 2.827148503s ago: executing program 0 (id=2027): r0 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0xde, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x3ff) r3 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00\x00\x00\x00\x00'], 0x20}, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x18) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x82}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100), 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x12cd) setsockopt$sock_attach_bpf(r4, 0x1, 0x7, &(0x7f0000000140), 0x4) close(0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1d, 0x2b, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ldst={0x0, 0x1, 0x0, 0xb, 0xad44bcb4608de42, 0xffffffffffffffff, 0xfffffffffffffffc}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}]}, &(0x7f0000000280)='syzkaller\x00', 0x8, 0xec, &(0x7f00000002c0)=""/236, 0x41000, 0x36, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x5, 0x101, 0x3}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)=[0x1, 0x1, 0x1], 0x0, 0x10, 0x4}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000005c0)={r7, r8}) 2.5563674s ago: executing program 2 (id=2029): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.542782491s ago: executing program 1 (id=2030): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x80, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x18}, 0xfc00) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) mkdir(0x0, 0x0) r3 = socket$kcm(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8931, 0x0) recvmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x1) 2.361025169s ago: executing program 1 (id=2031): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x31}, 0x80, &(0x7f0000001000)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66ca3a66", 0xe}], 0x1}, 0x0) (fail_nth: 4) 2.360298299s ago: executing program 2 (id=2032): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11300}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000000000), 0xff7b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e22, @rand_addr=0x20}, 0x10, 0x0}, 0x814) 1.780704156s ago: executing program 1 (id=2033): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="160000000000000008000000ff"], 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x2a, &(0x7f0000000100)=r4, 0x4) sendmsg$unix(r3, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x48000}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'wlan1\x00', @local}) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="c20000001e007f109e", 0x2a}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798093c5102a1bca0b6050000004f6e6b788b3219c233e60ddc36024a99a63e7238fe9f9b06f96137c8af12b6", 0x98}], 0x2}, 0x4000000) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="5c00000010006bcc9e3be35c6e1700800000876c1d0000007ea60864160af36514001ac00400020207000200020001000200000000938037a786a6d0001000000e4509c5f05c2f070000000000000088bbcb", 0x52}, {&(0x7f0000000100)="9b25af20af07241a63c3", 0xa}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x13, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r7 = socket$kcm(0x1e, 0x5, 0x0) recvmsg$kcm(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000580)=""/72, 0x48}], 0x1}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r8}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x59, &(0x7f00000001c0)}, 0x10) 1.757983558s ago: executing program 3 (id=2034): perf_event_open(&(0x7f0000001480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x90}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 1.73615413s ago: executing program 2 (id=2035): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x8901, &(0x7f0000000040)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000080)="90", 0x1}], 0x1}, 0x24004011) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x20, 0x31}, 0x80, &(0x7f0000001000)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66ca3a66", 0xe}], 0x1}, 0x0) 1.721985502s ago: executing program 0 (id=2036): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2004, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x1000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x40047438, 0x20000014) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x8, 0x0, 0x0) mkdir(0x0, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000980)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b000040017ea60860160af3650440010008000000000002009ee517c356a7b0251e616859ad3a78a76e807c857e21bea297bff435cf01c937e786a6d0bdc7fcf50e4509c5cc68b7ed9c232d786c3500000000000074", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8930, &(0x7f0000000040)={'wg2\x00', @multicast}) setsockopt$sock_attach_bpf(r2, 0x84, 0xb, &(0x7f0000000000), 0xe) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00'}, 0x18) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x4, 0x9}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r11}, 0xc) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@ifindex, 0xa, 0x0, 0xa, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r13 = openat$cgroup_freezer_state(r4, &(0x7f0000000440), 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@fallback=r13, r9, 0x2b, 0x16, r11, @void, @value, @void, @void, r12}, 0x20) 1.563909117s ago: executing program 3 (id=2037): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100, 0x0, 0x0, 0x0, 0xab93}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0x5}, @typedef={0x2, 0x0, 0x0, 0x8, 0x2}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x5f, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001d40)={r1, 0x0, &(0x7f0000001c40)=""/245}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0xda, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000280), 0x8, 0x24, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0xfffffff7, '\x00', r2, r0, 0x3, 0x5}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x9, 0xfff, 0x3ff, 0x23200, r3, 0xe505, '\x00', r2, r0, 0x200001, 0x5, 0x1}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@base={0x11, 0x4, 0x4, 0x7, 0x500, 0xffffffffffffffff, 0x7, '\x00', r2, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r4, &(0x7f0000000440), &(0x7f0000000000)=""/80}, 0x20) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xfb, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x50) 1.461322627s ago: executing program 2 (id=2038): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703340000001f03000000000000040014000d000a000d0000009ee517d3334abc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004002) r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='memory.pressure\x00', 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@ifindex, 0x12, 0x0, 0x400, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0]}, 0x40) write$cgroup_pressure(r1, &(0x7f0000000040)={'full', 0x20, 0x200, 0x20, 0x6ecb}, 0x2f) 1.443741099s ago: executing program 0 (id=2039): socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000001ac0)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x400, 0x0, 0x510a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.362780747s ago: executing program 4 (id=2040): perf_event_open(&(0x7f0000001480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x4, 0x4, &(0x7f00000002c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x40}]}, &(0x7f0000000100)='GPL\x00'}, 0x2a) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x90}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 1.289293344s ago: executing program 3 (id=2041): r0 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x3ff) r4 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00\x00\x00\x00\x00'], 0x20}, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x18) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x82}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000100), 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x12cd) setsockopt$sock_attach_bpf(r5, 0x1, 0x7, &(0x7f0000000140), 0x4) close(0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1d, 0x2b, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ldst={0x0, 0x1, 0x0, 0xb, 0xad44bcb4608de42, 0xffffffffffffffff, 0xfffffffffffffffc}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}]}, &(0x7f0000000280)='syzkaller\x00', 0x8, 0xec, &(0x7f00000002c0)=""/236, 0x41000, 0x36, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x5, 0x101, 0x3}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)=[0x1, 0x1, 0x1], 0x0, 0x10, 0x4}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000005c0)={r8, r9}) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000035000b63717a3c4a01d8985b0808aa78", 0x14}], 0x1}, 0x0) 1.288802874s ago: executing program 4 (id=2042): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x80, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x18}, 0xfc00) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) mkdir(0x0, 0x0) r3 = socket$kcm(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8931, 0x0) recvmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x1) 1.288276084s ago: executing program 1 (id=2043): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={0xffffffffffffffff, 0x0, 0xe, 0xfffffffffffffead, &(0x7f0000000080)="3a173357f297c605804ab3828443", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r0, 0xc0189436, &(0x7f0000000000)={'bridge_slave_1\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)) 1.22809764s ago: executing program 0 (id=2044): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x300, 0x47}, 0x80, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="360bd1239fdf65fa56ca1bcb42422423b157596eb4829906e5ff58f935fb27e07b8e8454533a4d27334164ecc08969dc9eb8d543cc4f54ea7218d8d3801f1a9cddae4d0d7f4051316fc0b1614758471efc423fe27ec75e908c9bba682473150000000000", @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x867}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0xff, 0x7, 0x0, 0x7fffffff, 0xd3751, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x1, 0x8}, 0x2019, 0x0, 0x3, 0x1, 0x200000000081, 0x8005, 0x3, 0x0, 0x2cb, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="0219000902ffe800e4a17c45c856", 0xe}, {&(0x7f00000001c0)="e491", 0x2}], 0x2}, 0x0) 1.218821471s ago: executing program 4 (id=2045): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3, 0x80000000}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033200fe08000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 1.195361773s ago: executing program 1 (id=2046): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11300}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000000000), 0xff7b) 1.037373518s ago: executing program 0 (id=2047): r0 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0xde, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x3ff) r3 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00\x00\x00\x00\x00'], 0x20}, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x82}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100), 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x12cd) setsockopt$sock_attach_bpf(r4, 0x1, 0x7, &(0x7f0000000140), 0x4) close(0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1d, 0x2b, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ldst={0x0, 0x1, 0x0, 0xb, 0xad44bcb4608de42, 0xffffffffffffffff, 0xfffffffffffffffc}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}]}, &(0x7f0000000280)='syzkaller\x00', 0x8, 0xec, &(0x7f00000002c0)=""/236, 0x41000, 0x36, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x5, 0x101, 0x3}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)=[0x1, 0x1, 0x1], 0x0, 0x10, 0x4}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000005c0)={r6, r7}) 1.036782159s ago: executing program 2 (id=2048): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_config_ext={0x8000000000000001, 0x8001}, 0x111026, 0xb, 0x8, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000080)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="c00e0a00000000000000806f8c6394f91d24fc60040f03", 0x17}], 0x1}, 0x40040c0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e032c003c5c980128876360864668f82ffdeefa000000000000ffd2acb165fe580cd568cd1f31b87b548cb74136f366da0abe01"], 0xfdef) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) setsockopt$sock_attach_bpf(r0, 0x110, 0x3, 0x0, 0x0) 1.005993471s ago: executing program 4 (id=2049): r0 = socket$kcm(0x2, 0x5, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x4010744d, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8982, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000500)=""/255, 0xff}, {&(0x7f0000000300)=""/38, 0x26}, {&(0x7f0000000740)=""/42, 0x2a}, {&(0x7f0000000200)=""/14, 0xe}, {&(0x7f0000000a00)=""/166, 0xa6}, {0x0}, {&(0x7f0000000840)=""/236, 0xec}, {&(0x7f0000000b40)=""/260, 0x104}], 0x8}, 0x120) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) perf_event_open(&(0x7f0000000600)={0x2, 0xffffffffffffff77, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x5d31, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x200000007fff}, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfc64, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2d}, 0x0) r6 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40002121) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES16=r5, @ANYRESHEX=r4, @ANYRESOCT=0x0, @ANYRES32], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r7, &(0x7f00000005c0), 0x0}, 0x20) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f2384", 0x16}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x27) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002a000b11d25a806c8c6f94f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x35}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10, 0x0}, 0x3000c085) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r8, 0x4008240b, &(0x7f0000001840)={0x0, 0x80, 0x80, 0xc, 0x5, 0x2, 0x0, 0x3ff, 0x80200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x100, 0x2, @perf_config_ext={0xfffffffffffffff2, 0xd}, 0x40, 0x4, 0x1, 0x8, 0x4, 0x5, 0x6000, 0x0, 0x0, 0x0, 0x81}) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000140)=r8, 0x4) 749.525197ms ago: executing program 1 (id=2050): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffd, 0x1, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xfffffffffffffff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x5, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="b700000012000020bfa30000000000007603000028feffff7a0af0fff8ffffff61a4f0ff000000005d040000000000007f000000000000002704000001ed0a002500000041806aa13e040000000000007b0300fe000000002d03000000000000c600f9ffffff00009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef7054803d0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d85827513acd02b5a655a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f08050e46850600000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf8707f0d5217e9bb5a05d9e22ce67f1231bd236ed200073826593c4e1a0f50a74bb482e486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e9978931485747292c6fe6e188750cf4f87cce2aa7d67c6133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc1caa80e64461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5fea5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87dd4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f6260a483632a2ab447f88dd6efec73a0271a19ca3aa860aa4dcaeebe3d53040b853a7c02a5fcc08b3a572969bbe91c921ac1476027772c87d172ab29967e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f522df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bdaa075fdd88d22230592a790000000000000000000000003527dfd01b47000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7c54d5cb9076b81b7741ec03877afb520400000000000000c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399fa5ee0b41e14a6fe6894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014fa841061e63d40f4e536314beda5738fee012365f963b2a85e7d8075c333475b9f0284405e30700000041285fbe0bdd37220e31d4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe8c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df96d49f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21da4fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696ebc2ab3f4b642f36c9006c0067e24a64aa8c53df824a4ee271e35ed90000800847683c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68ad9fa2b2528798df1c36fc438d9c98f168490b41e158bb2e2d8ed19d44b9cce67c9c522b5136be09ed1b97ea3d5b317508df23e92c56fc2eb74d27d3861d91745b8fb9f6cc20e9f8b174000c62c4a2b212332a073fc5d0be7347e41454cb27e081c43e92ae7f9f046600db85d945a4666b588629ce0809d5c8506308688db21ec04d365497bf900600"/2767], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x17}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00'}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x6, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000010000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x81, &(0x7f00000002c0)=""/123, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x90, 0x0, 0x100000}, 0x80) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 701.048152ms ago: executing program 3 (id=2051): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2004, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x1000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x40047438, 0x20000014) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x8, 0x0, 0x0) mkdir(0x0, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000980)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b000040017ea60860160af3650440010008000000000002009ee517c356a7b0251e616859ad3a78a76e807c857e21bea297bff435cf01c937e786a6d0bdc7fcf50e4509c5cc68b7ed9c232d786c3500000000000074", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8930, &(0x7f0000000040)={'wg2\x00', @multicast}) setsockopt$sock_attach_bpf(r2, 0x84, 0xb, &(0x7f0000000000), 0xe) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00'}, 0x18) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x4, 0x9}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r11}, 0xc) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@ifindex, 0xa, 0x0, 0xa, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r13 = openat$cgroup_freezer_state(r4, &(0x7f0000000440), 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@fallback=r13, r9, 0x2b, 0x16, r11, @void, @value, @void, @void, r12}, 0x20) 0s ago: executing program 0 (id=2052): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r0, 0x110, 0x3, 0x0, 0x0) kernel console output (not intermixed with test programs): ribute type 2 has an invalid length. [ 107.876258][ T4932] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.212'. [ 107.907251][ T4930] netlink: 'syz.2.211': attribute type 8 has an invalid length. [ 107.965127][ T4930] netlink: 132 bytes leftover after parsing attributes in process `syz.2.211'. [ 108.203832][ T4935] netlink: 'syz.0.213': attribute type 2 has an invalid length. [ 108.221491][ T4935] netlink: 'syz.0.213': attribute type 8 has an invalid length. [ 108.256427][ T4935] netlink: 132 bytes leftover after parsing attributes in process `syz.0.213'. [ 108.720956][ T4941] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.216'. [ 109.297849][ T4958] netlink: 'syz.1.221': attribute type 19 has an invalid length. [ 109.319175][ T4958] netlink: 40 bytes leftover after parsing attributes in process `syz.1.221'. [ 109.372511][ T4962] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.222'. [ 110.214189][ T4974] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.226'. [ 110.658443][ T4984] netlink: 'syz.1.230': attribute type 2 has an invalid length. [ 110.769417][ T4984] netlink: 'syz.1.230': attribute type 8 has an invalid length. [ 110.811812][ T4984] netlink: 132 bytes leftover after parsing attributes in process `syz.1.230'. [ 111.585023][ T4992] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.232'. [ 112.260675][ T4998] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.234'. [ 113.326562][ T5004] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.236'. [ 113.857748][ T5007] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.237'. [ 114.753194][ T5017] netlink: 'syz.0.240': attribute type 2 has an invalid length. [ 114.775929][ T5017] netlink: 'syz.0.240': attribute type 8 has an invalid length. [ 114.792857][ T5017] netlink: 132 bytes leftover after parsing attributes in process `syz.0.240'. [ 115.644339][ T5024] netlink: 'syz.2.244': attribute type 2 has an invalid length. [ 115.657447][ T5024] netlink: 'syz.2.244': attribute type 8 has an invalid length. [ 115.668545][ T5024] netlink: 132 bytes leftover after parsing attributes in process `syz.2.244'. [ 117.622474][ T5039] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.248'. [ 117.701287][ T5041] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.249'. [ 117.959174][ T5050] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.251'. [ 118.696761][ T5064] netlink: 'syz.2.255': attribute type 2 has an invalid length. [ 118.748440][ T5064] netlink: 'syz.2.255': attribute type 8 has an invalid length. [ 118.785240][ T5064] netlink: 132 bytes leftover after parsing attributes in process `syz.2.255'. [ 118.827061][ T5068] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.257'. [ 122.066812][ T5087] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.274'. [ 122.187056][ T5090] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.264'. [ 122.308269][ T5095] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.266'. [ 122.474045][ T5096] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.267'. [ 122.588762][ T5101] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.280'. [ 122.898444][ T5115] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.284'. [ 124.343133][ T5134] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.290'. [ 126.723339][ T5149] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.281'. [ 126.877979][ T5156] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.283'. [ 127.054167][ T5158] netlink: 'syz.0.286': attribute type 2 has an invalid length. [ 127.097645][ T5158] netlink: 'syz.0.286': attribute type 8 has an invalid length. [ 127.132184][ T5158] netlink: 132 bytes leftover after parsing attributes in process `syz.0.286'. [ 127.498906][ T5164] netlink: 'syz.2.291': attribute type 19 has an invalid length. [ 127.621753][ T5164] netlink: 40 bytes leftover after parsing attributes in process `syz.2.291'. [ 131.510978][ T5208] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.303'. [ 131.552842][ T5211] netlink: 'syz.4.305': attribute type 19 has an invalid length. [ 131.593622][ T5211] netlink: 40 bytes leftover after parsing attributes in process `syz.4.305'. [ 131.923392][ T5214] netlink: 'syz.1.309': attribute type 2 has an invalid length. [ 131.932414][ T5214] netlink: 'syz.1.309': attribute type 8 has an invalid length. [ 131.940886][ T5214] netlink: 132 bytes leftover after parsing attributes in process `syz.1.309'. [ 132.396256][ T5224] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.310'. [ 132.585191][ T5229] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.322'. [ 132.971111][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.977537][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.351295][ T5240] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.314'. [ 133.577962][ T5247] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.315'. [ 134.532353][ T5269] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.320'. [ 134.581460][ T5268] netlink: 'syz.3.321': attribute type 2 has an invalid length. [ 134.611123][ T5268] netlink: 'syz.3.321': attribute type 8 has an invalid length. [ 134.618987][ T5268] netlink: 132 bytes leftover after parsing attributes in process `syz.3.321'. [ 134.694514][ T5273] netlink: 'syz.0.323': attribute type 19 has an invalid length. [ 134.705197][ T5273] netlink: 40 bytes leftover after parsing attributes in process `syz.0.323'. [ 138.423051][ T5306] __nla_validate_parse: 2 callbacks suppressed [ 138.423069][ T5306] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.335'. [ 138.779926][ T5309] netlink: 'syz.2.336': attribute type 2 has an invalid length. [ 138.793865][ T5309] netlink: 'syz.2.336': attribute type 8 has an invalid length. [ 138.804010][ T5309] netlink: 132 bytes leftover after parsing attributes in process `syz.2.336'. [ 138.993031][ T5311] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.338'. [ 139.163092][ T5319] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.340'. [ 139.408812][ T5330] netlink: 'syz.0.343': attribute type 2 has an invalid length. [ 139.420633][ T5330] netlink: 'syz.0.343': attribute type 8 has an invalid length. [ 139.428479][ T5330] netlink: 132 bytes leftover after parsing attributes in process `syz.0.343'. [ 139.710887][ T5341] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.346'. [ 140.506431][ T5351] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.351'. [ 141.654673][ T5367] netlink: 'syz.1.357': attribute type 2 has an invalid length. [ 141.665477][ T5366] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.356'. [ 141.704997][ T5367] netlink: 'syz.1.357': attribute type 8 has an invalid length. [ 141.725976][ T5367] netlink: 132 bytes leftover after parsing attributes in process `syz.1.357'. [ 142.453228][ T5372] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.359'. [ 143.943738][ T5395] __nla_validate_parse: 1 callbacks suppressed [ 143.943754][ T5395] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.365'. [ 144.355409][ T5406] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.369'. [ 145.832892][ T5431] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.380'. [ 148.298681][ T5472] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.393'. [ 149.434375][ T5493] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.400'. [ 150.571739][ T5505] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.404'. [ 151.813321][ T5531] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.413'. [ 151.816609][ T5529] netlink: 'syz.4.412': attribute type 2 has an invalid length. [ 151.920862][ T5529] netlink: 'syz.4.412': attribute type 8 has an invalid length. [ 152.017795][ T5529] netlink: 132 bytes leftover after parsing attributes in process `syz.4.412'. [ 154.918883][ T5556] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.418'. [ 155.373688][ T5559] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.419'. [ 156.071311][ T5574] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.423'. [ 156.601231][ T5594] netlink: 'syz.3.430': attribute type 2 has an invalid length. [ 156.649261][ T5594] netlink: 'syz.3.430': attribute type 8 has an invalid length. [ 156.672055][ T5594] netlink: 132 bytes leftover after parsing attributes in process `syz.3.430'. [ 157.307237][ T5606] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.435'. [ 157.646686][ T5613] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.437'. [ 158.009976][ T5619] netlink: 'syz.4.449': attribute type 10 has an invalid length. [ 158.144105][ T5627] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.441'. [ 158.260239][ T5629] netlink: 'syz.4.442': attribute type 2 has an invalid length. [ 158.268103][ T5629] netlink: 'syz.4.442': attribute type 8 has an invalid length. [ 158.344178][ T5629] netlink: 132 bytes leftover after parsing attributes in process `syz.4.442'. [ 158.575065][ T5640] netlink: 'syz.2.456': attribute type 2 has an invalid length. [ 158.586527][ T5640] netlink: 'syz.2.456': attribute type 8 has an invalid length. [ 158.598207][ T5640] netlink: 132 bytes leftover after parsing attributes in process `syz.2.456'. [ 159.974144][ T5649] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.450'. [ 160.800296][ T5661] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.453'. [ 161.678811][ T5673] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.457'. [ 161.847979][ T5675] netlink: 'syz.2.455': attribute type 10 has an invalid length. [ 163.894505][ T5690] netlink: 'syz.2.461': attribute type 10 has an invalid length. [ 164.124777][ T5699] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.467'. [ 164.228750][ T5702] netlink: 'syz.1.462': attribute type 2 has an invalid length. [ 164.330859][ T5702] netlink: 'syz.1.462': attribute type 8 has an invalid length. [ 164.392378][ T5702] netlink: 132 bytes leftover after parsing attributes in process `syz.1.462'. [ 164.729854][ T5705] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.468'. [ 165.050048][ T5709] netlink: 'syz.3.470': attribute type 2 has an invalid length. [ 165.076109][ T5709] netlink: 'syz.3.470': attribute type 8 has an invalid length. [ 165.091284][ T5709] netlink: 132 bytes leftover after parsing attributes in process `syz.3.470'. [ 165.312418][ T5720] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.474'. [ 166.343597][ T5739] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.479'. [ 167.225401][ T5745] netlink: 'syz.4.481': attribute type 2 has an invalid length. [ 167.274099][ T5745] netlink: 'syz.4.481': attribute type 8 has an invalid length. [ 167.289385][ T5745] netlink: 132 bytes leftover after parsing attributes in process `syz.4.481'. [ 167.306986][ T5747] netlink: 'syz.3.480': attribute type 10 has an invalid length. [ 167.638312][ T5754] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.484'. [ 167.848828][ T5768] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.489'. [ 168.064504][ T5771] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.490'. [ 168.847432][ T5782] netlink: 'syz.1.493': attribute type 2 has an invalid length. [ 168.951926][ T5782] netlink: 'syz.1.493': attribute type 8 has an invalid length. [ 169.049183][ T5782] netlink: 132 bytes leftover after parsing attributes in process `syz.1.493'. [ 169.597593][ T5796] netlink: 'syz.1.495': attribute type 10 has an invalid length. [ 172.240121][ T5811] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.500'. [ 172.453721][ T5816] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.503'. [ 172.889538][ T5826] netlink: 'syz.2.507': attribute type 2 has an invalid length. [ 172.915341][ T5826] netlink: 'syz.2.507': attribute type 8 has an invalid length. [ 172.953538][ T5826] netlink: 132 bytes leftover after parsing attributes in process `syz.2.507'. [ 173.407756][ T5829] netlink: 'syz.2.509': attribute type 2 has an invalid length. [ 173.455555][ T5829] netlink: 'syz.2.509': attribute type 8 has an invalid length. [ 173.458252][ T5834] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.510'. [ 173.475475][ T5829] netlink: 132 bytes leftover after parsing attributes in process `syz.2.509'. [ 175.038476][ T5863] netlink: 'syz.4.521': attribute type 10 has an invalid length. [ 175.659268][ T26] Bluetooth: hci1: command 0x0406 tx timeout [ 175.666573][ T26] Bluetooth: hci0: command 0x0406 tx timeout [ 175.719291][ T26] Bluetooth: hci2: command 0x0406 tx timeout [ 175.740926][ T26] Bluetooth: hci3: command 0x0406 tx timeout [ 175.794563][ T26] Bluetooth: hci4: command 0x0406 tx timeout [ 176.606391][ T5881] netlink: 'syz.4.528': attribute type 2 has an invalid length. [ 176.656953][ T5881] netlink: 'syz.4.528': attribute type 8 has an invalid length. [ 176.701207][ T5881] netlink: 132 bytes leftover after parsing attributes in process `syz.4.528'. [ 176.890318][ T5884] netlink: 'syz.4.529': attribute type 10 has an invalid length. [ 177.036998][ T5891] netlink: 'syz.1.532': attribute type 2 has an invalid length. [ 177.071492][ T5891] netlink: 'syz.1.532': attribute type 8 has an invalid length. [ 177.075468][ T5895] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.534'. [ 177.092902][ T5891] netlink: 132 bytes leftover after parsing attributes in process `syz.1.532'. [ 180.456325][ T5910] netlink: 'syz.4.540': attribute type 2 has an invalid length. [ 180.506988][ T5910] netlink: 'syz.4.540': attribute type 8 has an invalid length. [ 180.545110][ T5910] netlink: 132 bytes leftover after parsing attributes in process `syz.4.540'. [ 180.702943][ T5920] netlink: 'syz.0.543': attribute type 10 has an invalid length. [ 180.916258][ T5927] netlink: 'syz.1.546': attribute type 10 has an invalid length. [ 184.434031][ T5947] netlink: 'syz.2.556': attribute type 2 has an invalid length. [ 184.471035][ T5947] netlink: 'syz.2.556': attribute type 8 has an invalid length. [ 184.491283][ T5947] netlink: 132 bytes leftover after parsing attributes in process `syz.2.556'. [ 184.615435][ T5951] netlink: 'syz.0.555': attribute type 2 has an invalid length. [ 184.639338][ T5951] netlink: 'syz.0.555': attribute type 8 has an invalid length. [ 184.667989][ T5951] netlink: 132 bytes leftover after parsing attributes in process `syz.0.555'. [ 184.736506][ T5953] netlink: 'syz.1.557': attribute type 10 has an invalid length. [ 186.793199][ T5969] netlink: 'syz.1.562': attribute type 10 has an invalid length. [ 187.966782][ T5990] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.572'. [ 188.223943][ T5998] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.575'. [ 188.254131][ T5994] netlink: 'syz.4.571': attribute type 2 has an invalid length. [ 188.289753][ T5994] netlink: 'syz.4.571': attribute type 8 has an invalid length. [ 188.343671][ T5994] netlink: 132 bytes leftover after parsing attributes in process `syz.4.571'. [ 188.959251][ T6008] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.578'. [ 189.273003][ T6016] netlink: 'syz.4.581': attribute type 10 has an invalid length. [ 190.683996][ T6035] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.587'. [ 191.461414][ T6039] netlink: 'syz.1.588': attribute type 2 has an invalid length. [ 191.520480][ T6039] netlink: 'syz.1.588': attribute type 8 has an invalid length. [ 191.553285][ T6039] netlink: 132 bytes leftover after parsing attributes in process `syz.1.588'. [ 192.038119][ T6042] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.590'. [ 192.166002][ T6049] netlink: 'syz.3.593': attribute type 10 has an invalid length. [ 192.685048][ T6062] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.597'. [ 192.987419][ T6067] netlink: 'syz.1.599': attribute type 2 has an invalid length. [ 193.028694][ T6067] netlink: 'syz.1.599': attribute type 8 has an invalid length. [ 193.064190][ T6067] netlink: 132 bytes leftover after parsing attributes in process `syz.1.599'. [ 193.113479][ T6069] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.600'. [ 194.077030][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.083382][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.841910][ T6092] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.607'. [ 196.815140][ T6110] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.613'. [ 196.828055][ T6109] netlink: 'syz.0.615': attribute type 2 has an invalid length. [ 196.845028][ T6109] netlink: 'syz.0.615': attribute type 8 has an invalid length. [ 196.874414][ T6109] netlink: 132 bytes leftover after parsing attributes in process `syz.0.615'. [ 200.036400][ T6130] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.622'. [ 200.294247][ T6136] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.625'. [ 200.356625][ T6141] netlink: 'syz.2.627': attribute type 10 has an invalid length. [ 202.294770][ T6174] netlink: 'syz.3.640': attribute type 10 has an invalid length. [ 202.507207][ T6180] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.642'. [ 202.832238][ T6194] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.646'. [ 204.364633][ T6209] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.653'. [ 204.722601][ T6224] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.659'. [ 205.346100][ T6234] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.662'. [ 205.975600][ T6253] netlink: 'syz.0.669': attribute type 10 has an invalid length. [ 206.418791][ T6265] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.673'. [ 206.958340][ T6276] netlink: 'syz.4.677': attribute type 2 has an invalid length. [ 206.974965][ T6278] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.678'. [ 206.998029][ T6276] netlink: 'syz.4.677': attribute type 8 has an invalid length. [ 207.028215][ T6276] netlink: 132 bytes leftover after parsing attributes in process `syz.4.677'. [ 207.183343][ T6285] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.681'. [ 208.294150][ T6303] netlink: 'syz.0.687': attribute type 2 has an invalid length. [ 208.315732][ T6303] netlink: 'syz.0.687': attribute type 8 has an invalid length. [ 208.337507][ T6303] netlink: 132 bytes leftover after parsing attributes in process `syz.0.687'. [ 208.503202][ T6305] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.688'. [ 209.228124][ T6319] netlink: 'syz.1.693': attribute type 10 has an invalid length. [ 209.449457][ T6324] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.695'. [ 209.512314][ T6322] netlink: 'syz.1.694': attribute type 2 has an invalid length. [ 209.546690][ T6322] netlink: 'syz.1.694': attribute type 8 has an invalid length. [ 209.568487][ T6322] netlink: 132 bytes leftover after parsing attributes in process `syz.1.694'. [ 210.291067][ T6335] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.699'. [ 211.916140][ T6361] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.707'. [ 213.439647][ T6370] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.710'. [ 213.729359][ T6377] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.713'. [ 216.350555][ T6409] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.720'. [ 216.788618][ T6421] netlink: 'syz.0.722': attribute type 10 has an invalid length. [ 216.978500][ T6426] netlink: 'syz.2.724': attribute type 2 has an invalid length. [ 216.992764][ T6425] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.725'. [ 217.036826][ T6426] netlink: 'syz.2.724': attribute type 8 has an invalid length. [ 217.106904][ T6426] netlink: 132 bytes leftover after parsing attributes in process `syz.2.724'. [ 219.468235][ T6459] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.739'. [ 219.711973][ T6471] netlink: 'syz.2.743': attribute type 2 has an invalid length. [ 219.749896][ T6471] netlink: 'syz.2.743': attribute type 8 has an invalid length. [ 219.789127][ T6471] netlink: 132 bytes leftover after parsing attributes in process `syz.2.743'. [ 219.942576][ T6478] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.745'. [ 220.253458][ T6481] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.747'. [ 223.247287][ T6512] netlink: 'syz.2.757': attribute type 2 has an invalid length. [ 223.298305][ T6512] netlink: 'syz.2.757': attribute type 8 has an invalid length. [ 223.318488][ T6512] netlink: 132 bytes leftover after parsing attributes in process `syz.2.757'. [ 223.428547][ T6518] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.760'. [ 223.876318][ T6525] netlink: 'syz.2.762': attribute type 2 has an invalid length. [ 223.918053][ T6525] netlink: 'syz.2.762': attribute type 8 has an invalid length. [ 223.966868][ T6525] netlink: 132 bytes leftover after parsing attributes in process `syz.2.762'. [ 224.593761][ T6534] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.767'. [ 224.895458][ T6542] netlink: 'syz.3.770': attribute type 2 has an invalid length. [ 224.921110][ T6542] netlink: 'syz.3.770': attribute type 8 has an invalid length. [ 224.947211][ T6542] netlink: 132 bytes leftover after parsing attributes in process `syz.3.770'. [ 225.021216][ T6549] netlink: 'syz.0.773': attribute type 2 has an invalid length. [ 225.039357][ T6549] netlink: 'syz.0.773': attribute type 8 has an invalid length. [ 225.049666][ T6549] netlink: 132 bytes leftover after parsing attributes in process `syz.0.773'. [ 225.148873][ T6551] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.774'. [ 225.412942][ T6554] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.775'. [ 225.725504][ T6557] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.776'. [ 227.543048][ T6584] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.785'. [ 229.721062][ T6634] netlink: 'syz.0.804': attribute type 2 has an invalid length. [ 229.751341][ T6634] netlink: 'syz.0.804': attribute type 8 has an invalid length. [ 229.802629][ T6634] __nla_validate_parse: 1 callbacks suppressed [ 229.802663][ T6634] netlink: 132 bytes leftover after parsing attributes in process `syz.0.804'. [ 229.868380][ T6638] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.806'. [ 232.791704][ T6671] netlink: 'syz.1.817': attribute type 2 has an invalid length. [ 232.851628][ T6671] netlink: 'syz.1.817': attribute type 8 has an invalid length. [ 232.899310][ T6671] netlink: 132 bytes leftover after parsing attributes in process `syz.1.817'. [ 233.119350][ T6682] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.821'. [ 233.284088][ T6689] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.825'. [ 234.738697][ T6713] netlink: 'syz.0.845': attribute type 2 has an invalid length. [ 234.853258][ T6713] netlink: 'syz.0.845': attribute type 8 has an invalid length. [ 234.885364][ T6713] netlink: 132 bytes leftover after parsing attributes in process `syz.0.845'. [ 234.933955][ T6717] netlink: 'syz.3.834': attribute type 2 has an invalid length. [ 234.968355][ T6717] netlink: 'syz.3.834': attribute type 8 has an invalid length. [ 234.976837][ T6717] netlink: 132 bytes leftover after parsing attributes in process `syz.3.834'. [ 236.286382][ T6751] netlink: 'syz.4.852': attribute type 2 has an invalid length. [ 236.322313][ T6751] netlink: 'syz.4.852': attribute type 8 has an invalid length. [ 236.336153][ T6751] netlink: 132 bytes leftover after parsing attributes in process `syz.4.852'. [ 236.391668][ T6753] netlink: 'syz.1.854': attribute type 2 has an invalid length. [ 236.409129][ T6753] netlink: 'syz.1.854': attribute type 8 has an invalid length. [ 236.421484][ T6753] netlink: 132 bytes leftover after parsing attributes in process `syz.1.854'. [ 237.931459][ T6788] netlink: 'syz.2.869': attribute type 2 has an invalid length. [ 237.940034][ T6788] netlink: 'syz.2.869': attribute type 8 has an invalid length. [ 237.948035][ T6788] netlink: 132 bytes leftover after parsing attributes in process `syz.2.869'. [ 239.924368][ T6826] netlink: 'syz.0.883': attribute type 2 has an invalid length. [ 239.932565][ T6826] netlink: 'syz.0.883': attribute type 8 has an invalid length. [ 239.941552][ T6826] netlink: 132 bytes leftover after parsing attributes in process `syz.0.883'. [ 240.253783][ T6830] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.895'. [ 241.022590][ T6850] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.893'. [ 243.282087][ T6870] netlink: 'syz.0.901': attribute type 2 has an invalid length. [ 243.306536][ T6870] netlink: 'syz.0.901': attribute type 8 has an invalid length. [ 243.314945][ T6870] netlink: 132 bytes leftover after parsing attributes in process `syz.0.901'. [ 243.384158][ T6874] netlink: 'syz.4.902': attribute type 2 has an invalid length. [ 243.406373][ T6874] netlink: 'syz.4.902': attribute type 8 has an invalid length. [ 243.474103][ T6874] netlink: 132 bytes leftover after parsing attributes in process `syz.4.902'. [ 243.520451][ T6883] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.906'. [ 243.805437][ T6895] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.911'. [ 244.661789][ T6914] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.918'. [ 244.991633][ T6922] netlink: 'syz.3.920': attribute type 2 has an invalid length. [ 245.044776][ T6922] netlink: 'syz.3.920': attribute type 8 has an invalid length. [ 245.077009][ T6922] netlink: 132 bytes leftover after parsing attributes in process `syz.3.920'. [ 245.421005][ T6935] netlink: 'syz.0.927': attribute type 2 has an invalid length. [ 245.463504][ T6935] netlink: 'syz.0.927': attribute type 8 has an invalid length. [ 245.514362][ T6935] netlink: 132 bytes leftover after parsing attributes in process `syz.0.927'. [ 245.830512][ T6950] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.934'. [ 246.008732][ T6961] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.938'. [ 246.611640][ T6979] netlink: 'syz.1.946': attribute type 2 has an invalid length. [ 246.668767][ T6979] netlink: 'syz.1.946': attribute type 8 has an invalid length. [ 246.705254][ T6979] netlink: 132 bytes leftover after parsing attributes in process `syz.1.946'. [ 246.854263][ T6987] netlink: 'syz.1.950': attribute type 2 has an invalid length. [ 246.876697][ T6987] netlink: 'syz.1.950': attribute type 8 has an invalid length. [ 246.949249][ T6987] netlink: 132 bytes leftover after parsing attributes in process `syz.1.950'. [ 247.161660][ T6994] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.953'. [ 247.681124][ T7011] netlink: 'syz.4.958': attribute type 2 has an invalid length. [ 247.711665][ T7011] netlink: 'syz.4.958': attribute type 8 has an invalid length. [ 247.741751][ T7011] netlink: 132 bytes leftover after parsing attributes in process `syz.4.958'. [ 248.211585][ T7023] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.963'. [ 248.805656][ T7036] netlink: 132 bytes leftover after parsing attributes in process `syz.3.968'. [ 251.022903][ T7078] validate_nla: 6 callbacks suppressed [ 251.022938][ T7078] netlink: 'syz.4.985': attribute type 2 has an invalid length. [ 251.127955][ T7078] netlink: 'syz.4.985': attribute type 8 has an invalid length. [ 251.136766][ T7078] __nla_validate_parse: 3 callbacks suppressed [ 251.136797][ T7078] netlink: 132 bytes leftover after parsing attributes in process `syz.4.985'. [ 251.226727][ T7080] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.987'. [ 252.748615][ T7115] netlink: 'syz.3.997': attribute type 2 has an invalid length. [ 252.781820][ T7115] netlink: 'syz.3.997': attribute type 8 has an invalid length. [ 252.813880][ T7115] netlink: 132 bytes leftover after parsing attributes in process `syz.3.997'. [ 254.721763][ T7126] netlink: 'syz.0.1002': attribute type 2 has an invalid length. [ 254.733004][ T7126] netlink: 'syz.0.1002': attribute type 8 has an invalid length. [ 254.762442][ T7126] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1002'. [ 255.026449][ T7139] netlink: 'syz.4.1008': attribute type 2 has an invalid length. [ 255.037985][ T7139] netlink: 'syz.4.1008': attribute type 8 has an invalid length. [ 255.047340][ T7139] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1008'. [ 255.510743][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.517104][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.644097][ T7155] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1013'. [ 258.982650][ T7190] netlink: 'syz.2.1023': attribute type 2 has an invalid length. [ 259.028724][ T7190] netlink: 'syz.2.1023': attribute type 8 has an invalid length. [ 259.055708][ T7190] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1023'. [ 259.130712][ T7193] netlink: 'syz.4.1027': attribute type 2 has an invalid length. [ 259.141347][ T7193] netlink: 'syz.4.1027': attribute type 8 has an invalid length. [ 259.150288][ T7193] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1027'. [ 261.436219][ T7206] netlink: 'syz.3.1044': attribute type 2 has an invalid length. [ 261.450665][ T7206] netlink: 'syz.3.1044': attribute type 8 has an invalid length. [ 261.459862][ T7206] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1044'. [ 263.294186][ T7240] netlink: 'syz.3.1045': attribute type 2 has an invalid length. [ 263.333587][ T7240] netlink: 'syz.3.1045': attribute type 8 has an invalid length. [ 263.379390][ T7240] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1045'. [ 263.428667][ T7239] netlink: 'syz.4.1055': attribute type 2 has an invalid length. [ 263.451264][ T7239] netlink: 'syz.4.1055': attribute type 8 has an invalid length. [ 263.489361][ T7239] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1055'. [ 263.588051][ T7252] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1050'. [ 265.626431][ T7307] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1072'. [ 265.944097][ T7310] netlink: 'syz.4.1073': attribute type 2 has an invalid length. [ 265.965467][ T7310] netlink: 'syz.4.1073': attribute type 8 has an invalid length. [ 266.014269][ T7310] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1073'. [ 266.424296][ T7318] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1076'. [ 266.877998][ T7336] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1094'. [ 267.157226][ T7347] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1088'. [ 268.055564][ T7363] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1095'. [ 268.867300][ T7378] netlink: 'syz.0.1100': attribute type 2 has an invalid length. [ 268.899400][ T7378] netlink: 'syz.0.1100': attribute type 8 has an invalid length. [ 268.959371][ T7378] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1100'. [ 269.389833][ T7397] netlink: 'syz.0.1109': attribute type 2 has an invalid length. [ 269.428834][ T7397] netlink: 'syz.0.1109': attribute type 8 has an invalid length. [ 269.457404][ T7397] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1109'. [ 271.200880][ T7409] netlink: 'syz.1.1112': attribute type 2 has an invalid length. [ 271.248315][ T7409] netlink: 'syz.1.1112': attribute type 8 has an invalid length. [ 271.266981][ T7409] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1112'. [ 271.712438][ T7419] netlink: 'syz.3.1117': attribute type 2 has an invalid length. [ 271.746998][ T7419] netlink: 'syz.3.1117': attribute type 8 has an invalid length. [ 271.787388][ T7419] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1117'. [ 273.129967][ T7455] netlink: 'syz.3.1130': attribute type 2 has an invalid length. [ 273.137992][ T7455] netlink: 'syz.3.1130': attribute type 8 has an invalid length. [ 273.152960][ T7455] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1130'. [ 273.201320][ T7458] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1131'. [ 283.165201][ T7582] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1176'. [ 283.506120][ T7584] netlink: 'syz.2.1188': attribute type 2 has an invalid length. [ 283.572914][ T7584] netlink: 'syz.2.1188': attribute type 8 has an invalid length. [ 283.630981][ T7584] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1188'. [ 285.020596][ T7621] netlink: 'syz.3.1192': attribute type 2 has an invalid length. [ 285.035029][ T7621] netlink: 'syz.3.1192': attribute type 8 has an invalid length. [ 285.048265][ T7621] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1192'. [ 285.230853][ T7626] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1193'. [ 285.303874][ T7631] FAULT_INJECTION: forcing a failure. [ 285.303874][ T7631] name failslab, interval 1, probability 0, space 0, times 1 [ 285.387571][ T7631] CPU: 1 PID: 7631 Comm: syz.1.1195 Not tainted syzkaller #0 [ 285.394985][ T7631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 285.405072][ T7631] Call Trace: [ 285.408356][ T7631] [ 285.411289][ T7631] dump_stack_lvl+0x168/0x230 [ 285.416008][ T7631] ? show_regs_print_info+0x20/0x20 [ 285.421221][ T7631] ? load_image+0x3b0/0x3b0 [ 285.425740][ T7631] ? __might_sleep+0xf0/0xf0 [ 285.430346][ T7631] ? __lock_acquire+0x7c60/0x7c60 [ 285.435385][ T7631] ? mark_lock+0x94/0x320 [ 285.439735][ T7631] should_fail+0x38c/0x4c0 [ 285.444172][ T7631] should_failslab+0x5/0x20 [ 285.448689][ T7631] slab_pre_alloc_hook+0x51/0xc0 [ 285.453642][ T7631] __kmalloc+0x6b/0x330 [ 285.457802][ T7631] ? tomoyo_realpath_from_path+0x118/0x610 [ 285.463626][ T7631] tomoyo_realpath_from_path+0x118/0x610 [ 285.469279][ T7631] tomoyo_path_number_perm+0x1d5/0x5d0 [ 285.474754][ T7631] ? verify_lock_unused+0x140/0x140 [ 285.479963][ T7631] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 285.485429][ T7631] ? ksys_write+0x1c7/0x250 [ 285.489996][ T7631] security_file_ioctl+0x6c/0xa0 [ 285.495035][ T7631] __se_sys_ioctl+0x48/0x170 [ 285.499635][ T7631] do_syscall_64+0x4c/0xa0 [ 285.504057][ T7631] ? clear_bhb_loop+0x30/0x80 [ 285.508735][ T7631] ? clear_bhb_loop+0x30/0x80 [ 285.513416][ T7631] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 285.519327][ T7631] RIP: 0033:0x7fa20d90efc9 [ 285.523748][ T7631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.543375][ T7631] RSP: 002b:00007fa20bb76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 285.551975][ T7631] RAX: ffffffffffffffda RBX: 00007fa20db65fa0 RCX: 00007fa20d90efc9 [ 285.559947][ T7631] RDX: 0000200000000080 RSI: 0000000000008922 RDI: 0000000000000004 [ 285.568008][ T7631] RBP: 00007fa20bb76090 R08: 0000000000000000 R09: 0000000000000000 [ 285.575978][ T7631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.583954][ T7631] R13: 00007fa20db66038 R14: 00007fa20db65fa0 R15: 00007ffd465450b8 [ 285.591950][ T7631] [ 285.643960][ T7631] ERROR: Out of memory at tomoyo_realpath_from_path. [ 286.078856][ T7653] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1215'. [ 286.420548][ T7662] netlink: 'syz.1.1208': attribute type 2 has an invalid length. [ 286.453000][ T7662] netlink: 'syz.1.1208': attribute type 8 has an invalid length. [ 286.482743][ T7662] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1208'. [ 288.943459][ T7714] netlink: 'syz.0.1223': attribute type 2 has an invalid length. [ 288.969558][ T7714] netlink: 'syz.0.1223': attribute type 8 has an invalid length. [ 288.986462][ T7718] FAULT_INJECTION: forcing a failure. [ 288.986462][ T7718] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 289.039362][ T7714] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1223'. [ 289.068937][ T7718] CPU: 1 PID: 7718 Comm: syz.1.1225 Not tainted syzkaller #0 [ 289.076365][ T7718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 289.086480][ T7718] Call Trace: [ 289.089762][ T7718] [ 289.092698][ T7718] dump_stack_lvl+0x168/0x230 [ 289.097387][ T7718] ? show_regs_print_info+0x20/0x20 [ 289.102849][ T7718] ? load_image+0x3b0/0x3b0 [ 289.107357][ T7718] ? __lock_acquire+0x7c60/0x7c60 [ 289.112426][ T7718] should_fail+0x38c/0x4c0 [ 289.116939][ T7718] _copy_from_user+0x2e/0x170 [ 289.121621][ T7718] __copy_msghdr_from_user+0xaf/0x5e0 [ 289.126998][ T7718] ? verify_lock_unused+0x140/0x140 [ 289.132203][ T7718] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 289.137503][ T7718] ? trace_event_raw_event_lock+0x250/0x250 [ 289.143413][ T7718] ___sys_sendmsg+0x156/0x260 [ 289.148102][ T7718] ? __sys_sendmsg+0x250/0x250 [ 289.152878][ T7718] ? trace_event_raw_event_lock+0x250/0x250 [ 289.158772][ T7718] ? vfs_write+0x84d/0xd00 [ 289.163206][ T7718] ? __fdget+0x18b/0x210 [ 289.167450][ T7718] __se_sys_sendmsg+0x190/0x250 [ 289.172304][ T7718] ? __x64_sys_sendmsg+0x80/0x80 [ 289.177228][ T7718] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 289.183205][ T7718] ? lockdep_hardirqs_on+0x94/0x140 [ 289.188390][ T7718] do_syscall_64+0x4c/0xa0 [ 289.192787][ T7718] ? clear_bhb_loop+0x30/0x80 [ 289.197447][ T7718] ? clear_bhb_loop+0x30/0x80 [ 289.202105][ T7718] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 289.207978][ T7718] RIP: 0033:0x7fa20d90efc9 [ 289.212377][ T7718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.232313][ T7718] RSP: 002b:00007fa20bb76038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.240709][ T7718] RAX: ffffffffffffffda RBX: 00007fa20db65fa0 RCX: 00007fa20d90efc9 [ 289.248664][ T7718] RDX: 0000000000000000 RSI: 0000200000001640 RDI: 0000000000000003 [ 289.256615][ T7718] RBP: 00007fa20bb76090 R08: 0000000000000000 R09: 0000000000000000 [ 289.264570][ T7718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.272526][ T7718] R13: 00007fa20db66038 R14: 00007fa20db65fa0 R15: 00007ffd465450b8 [ 289.280500][ T7718] [ 289.371684][ T7724] netlink: 'syz.4.1228': attribute type 21 has an invalid length. [ 289.530372][ T7730] netlink: 'syz.0.1230': attribute type 3 has an invalid length. [ 289.823385][ T7739] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1233'. [ 290.576486][ T7751] netlink: 'syz.2.1238': attribute type 2 has an invalid length. [ 290.589172][ T7751] netlink: 'syz.2.1238': attribute type 8 has an invalid length. [ 290.618219][ T7751] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1238'. [ 290.823412][ T7757] netlink: 'syz.2.1240': attribute type 2 has an invalid length. [ 290.859169][ T7757] netlink: 'syz.2.1240': attribute type 8 has an invalid length. [ 290.884123][ T7757] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1240'. [ 291.658821][ T7785] netlink: 'syz.3.1249': attribute type 29 has an invalid length. [ 291.705456][ T7785] netlink: 'syz.3.1249': attribute type 29 has an invalid length. [ 291.946157][ T7795] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1251'. [ 292.707730][ T7804] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1256'. [ 293.033742][ T7810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.601457][ T7844] validate_nla: 10 callbacks suppressed [ 294.601490][ T7844] netlink: 'syz.3.1270': attribute type 2 has an invalid length. [ 294.635330][ T7840] sctp: [Deprecated]: syz.1.1268 (pid 7840) Use of int in maxseg socket option. [ 294.635330][ T7840] Use struct sctp_assoc_value instead [ 294.674947][ T7844] netlink: 'syz.3.1270': attribute type 8 has an invalid length. [ 294.691137][ T7844] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1270'. [ 295.027686][ T7859] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1276'. [ 295.467914][ T7877] netlink: 'syz.2.1281': attribute type 21 has an invalid length. [ 297.577610][ T7919] netlink: 'syz.2.1297': attribute type 29 has an invalid length. [ 297.632435][ T7919] netlink: 'syz.2.1297': attribute type 29 has an invalid length. [ 297.664657][ T7919] netlink: 'syz.2.1297': attribute type 29 has an invalid length. [ 297.704831][ T7919] netlink: 'syz.2.1297': attribute type 29 has an invalid length. [ 298.503899][ T7939] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1305'. [ 298.901042][ T7940] netlink: 'syz.1.1304': attribute type 2 has an invalid length. [ 298.919430][ T7940] netlink: 'syz.1.1304': attribute type 8 has an invalid length. [ 298.957781][ T7940] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1304'. [ 299.253039][ T7948] netlink: 'syz.3.1306': attribute type 2 has an invalid length. [ 299.295668][ T7948] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1306'. [ 300.063256][ T7949] delete_channel: no stack [ 300.295033][ T7977] validate_nla: 1 callbacks suppressed [ 300.295065][ T7977] netlink: 'syz.0.1318': attribute type 2 has an invalid length. [ 300.430616][ T7984] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1321'. [ 300.502302][ T7977] netlink: 'syz.0.1318': attribute type 8 has an invalid length. [ 300.609138][ T7977] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1318'. [ 300.957875][ T7990] netlink: 'syz.2.1323': attribute type 2 has an invalid length. [ 300.976129][ T7990] netlink: 'syz.2.1323': attribute type 8 has an invalid length. [ 300.984902][ T7990] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1323'. [ 301.152744][ T7994] netlink: 'syz.4.1327': attribute type 27 has an invalid length. [ 301.189787][ T7994] netlink: 'syz.4.1327': attribute type 3 has an invalid length. [ 301.197651][ T7994] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1327'. [ 301.361479][ T8003] syzkaller0: create flow: hash 1336549041 index 1 [ 301.530088][ T1107] syzkaller0: tun_net_xmit 76 [ 301.535277][ T1107] syzkaller0: tun_net_xmit 48 [ 302.980030][ T4173] syzkaller0: tun_net_xmit 76 [ 302.995202][ T4296] syzkaller0: tun_net_xmit 76 [ 303.021891][ T8002] syzkaller0: delete flow: hash 1336549041 index 1 [ 303.142934][ T8016] netlink: 'syz.0.1336': attribute type 2 has an invalid length. [ 303.156103][ T8016] netlink: 'syz.0.1336': attribute type 8 has an invalid length. [ 303.167554][ T8016] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1336'. [ 304.572362][ T8031] netlink: 'syz.0.1340': attribute type 2 has an invalid length. [ 304.610796][ T8031] netlink: 'syz.0.1340': attribute type 8 has an invalid length. [ 304.643744][ T8033] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1341'. [ 304.644935][ T8031] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1340'. [ 304.762702][ T8036] FAULT_INJECTION: forcing a failure. [ 304.762702][ T8036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.799973][ T8036] CPU: 0 PID: 8036 Comm: syz.2.1342 Not tainted syzkaller #0 [ 304.807384][ T8036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 304.817451][ T8036] Call Trace: [ 304.820732][ T8036] [ 304.823660][ T8036] dump_stack_lvl+0x168/0x230 [ 304.828357][ T8036] ? show_regs_print_info+0x20/0x20 [ 304.833567][ T8036] ? load_image+0x3b0/0x3b0 [ 304.838168][ T8036] ? __lock_acquire+0x7c60/0x7c60 [ 304.843206][ T8036] should_fail+0x38c/0x4c0 [ 304.847632][ T8036] _copy_to_user+0x2e/0x130 [ 304.852143][ T8036] simple_read_from_buffer+0xe3/0x150 [ 304.857519][ T8036] proc_fail_nth_read+0x19a/0x210 [ 304.862548][ T8036] ? proc_fault_inject_write+0x2f0/0x2f0 [ 304.868198][ T8036] ? fsnotify_perm+0x254/0x560 [ 304.872968][ T8036] ? proc_fault_inject_write+0x2f0/0x2f0 [ 304.878611][ T8036] vfs_read+0x2f6/0xcf0 [ 304.882777][ T8036] ? kernel_read+0x1e0/0x1e0 [ 304.887375][ T8036] ? __fget_files+0x40f/0x480 [ 304.892151][ T8036] ? mutex_lock_nested+0x17/0x20 [ 304.897093][ T8036] ? __fdget_pos+0x2bf/0x370 [ 304.901680][ T8036] ? ksys_read+0x71/0x250 [ 304.906011][ T8036] ksys_read+0x14d/0x250 [ 304.910257][ T8036] ? vfs_write+0xd00/0xd00 [ 304.914698][ T8036] ? lockdep_hardirqs_on+0x94/0x140 [ 304.919904][ T8036] do_syscall_64+0x4c/0xa0 [ 304.924321][ T8036] ? clear_bhb_loop+0x30/0x80 [ 304.928993][ T8036] ? clear_bhb_loop+0x30/0x80 [ 304.933672][ T8036] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 304.939589][ T8036] RIP: 0033:0x7fe21d7229dc [ 304.944010][ T8036] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 304.963614][ T8036] RSP: 002b:00007fe21b98b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 304.972037][ T8036] RAX: ffffffffffffffda RBX: 00007fe21d97afa0 RCX: 00007fe21d7229dc [ 304.980011][ T8036] RDX: 000000000000000f RSI: 00007fe21b98b0a0 RDI: 0000000000000006 [ 304.987980][ T8036] RBP: 00007fe21b98b090 R08: 0000000000000000 R09: 0000000000000000 [ 304.996066][ T8036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.004035][ T8036] R13: 00007fe21d97b038 R14: 00007fe21d97afa0 R15: 00007fffd1a96f88 [ 305.012031][ T8036] [ 305.621476][ T8060] netlink: 'syz.0.1350': attribute type 2 has an invalid length. [ 305.638559][ T8060] netlink: 'syz.0.1350': attribute type 8 has an invalid length. [ 305.716998][ T8060] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1350'. [ 306.155029][ T8071] netlink: 31139 bytes leftover after parsing attributes in process `syz.3.1354'. [ 306.226445][ T8075] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1355'. [ 307.684264][ T8102] netlink: 'syz.2.1363': attribute type 2 has an invalid length. [ 307.719555][ T8102] netlink: 'syz.2.1363': attribute type 8 has an invalid length. [ 307.790468][ T8102] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1363'. [ 307.935057][ T8109] netlink: 'syz.4.1365': attribute type 21 has an invalid length. [ 308.167625][ T8089] delete_channel: no stack [ 313.214390][ T8146] netlink: 'syz.0.1378': attribute type 2 has an invalid length. [ 313.265763][ T8148] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1379'. [ 313.286076][ T8146] netlink: 'syz.0.1378': attribute type 8 has an invalid length. [ 313.319130][ T8146] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1378'. [ 313.742460][ T8159] netlink: 31139 bytes leftover after parsing attributes in process `syz.1.1383'. [ 314.947912][ T8186] netlink: 'syz.2.1392': attribute type 2 has an invalid length. [ 314.975356][ T8186] netlink: 'syz.2.1392': attribute type 8 has an invalid length. [ 314.998194][ T8186] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1392'. [ 315.412084][ T8198] netlink: 31139 bytes leftover after parsing attributes in process `syz.0.1397'. [ 316.954277][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.960792][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.138232][ T8288] netlink: 'syz.4.1431': attribute type 2 has an invalid length. [ 319.164800][ T8288] netlink: 'syz.4.1431': attribute type 8 has an invalid length. [ 319.189344][ T8288] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1431'. [ 320.458183][ T8320] netlink: 'syz.4.1446': attribute type 2 has an invalid length. [ 320.489946][ T8320] netlink: 'syz.4.1446': attribute type 8 has an invalid length. [ 320.512685][ T8320] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1446'. [ 320.918263][ T8336] FAULT_INJECTION: forcing a failure. [ 320.918263][ T8336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.009428][ T8336] CPU: 1 PID: 8336 Comm: syz.4.1452 Not tainted syzkaller #0 [ 321.016838][ T8336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 321.026898][ T8336] Call Trace: [ 321.030186][ T8336] [ 321.033119][ T8336] dump_stack_lvl+0x168/0x230 [ 321.037811][ T8336] ? show_regs_print_info+0x20/0x20 [ 321.043020][ T8336] ? load_image+0x3b0/0x3b0 [ 321.047538][ T8336] ? __lock_acquire+0x7c60/0x7c60 [ 321.052578][ T8336] should_fail+0x38c/0x4c0 [ 321.057004][ T8336] _copy_from_user+0x2e/0x170 [ 321.061686][ T8336] __copy_msghdr_from_user+0xaf/0x5e0 [ 321.067075][ T8336] ? verify_lock_unused+0x140/0x140 [ 321.072283][ T8336] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 321.077586][ T8336] ? trace_event_raw_event_lock+0x250/0x250 [ 321.083486][ T8336] ___sys_sendmsg+0x156/0x260 [ 321.088177][ T8336] ? __sys_sendmsg+0x250/0x250 [ 321.092987][ T8336] ? __fdget+0x18b/0x210 [ 321.097236][ T8336] __se_sys_sendmsg+0x190/0x250 [ 321.102094][ T8336] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 321.108250][ T8336] ? __x64_sys_sendmsg+0x80/0x80 [ 321.113203][ T8336] ? syscall_enter_from_user_mode+0x2a/0x70 [ 321.119107][ T8336] do_syscall_64+0x4c/0xa0 [ 321.123525][ T8336] ? clear_bhb_loop+0x30/0x80 [ 321.128205][ T8336] ? clear_bhb_loop+0x30/0x80 [ 321.132886][ T8336] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 321.138784][ T8336] RIP: 0033:0x7f3ba6790fc9 [ 321.143201][ T8336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.162805][ T8336] RSP: 002b:00007f3ba49f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.171223][ T8336] RAX: ffffffffffffffda RBX: 00007f3ba69e7fa0 RCX: 00007f3ba6790fc9 [ 321.179201][ T8336] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 321.187172][ T8336] RBP: 00007f3ba49f8090 R08: 0000000000000000 R09: 0000000000000000 [ 321.195148][ T8336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.203123][ T8336] R13: 00007f3ba69e8038 R14: 00007f3ba69e7fa0 R15: 00007ffdce922bd8 [ 321.211116][ T8336] [ 321.592274][ T8351] netlink: 'syz.3.1459': attribute type 2 has an invalid length. [ 321.623390][ T8351] netlink: 'syz.3.1459': attribute type 8 has an invalid length. [ 321.646664][ T8351] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1459'. [ 322.583231][ T8382] netlink: 'syz.0.1470': attribute type 2 has an invalid length. [ 322.617564][ T8385] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1471'. [ 322.636520][ T8382] netlink: 'syz.0.1470': attribute type 8 has an invalid length. [ 322.686978][ T8382] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1470'. [ 323.816020][ T8412] netlink: 'syz.1.1482': attribute type 21 has an invalid length. [ 324.131463][ T8423] netlink: 'syz.1.1485': attribute type 2 has an invalid length. [ 324.150533][ T8423] netlink: 'syz.1.1485': attribute type 8 has an invalid length. [ 324.177087][ T8423] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1485'. [ 324.377748][ T8431] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1489'. [ 324.579041][ T8429] syz.0.1487 (8429) used greatest stack depth: 16736 bytes left [ 324.924262][ T8447] netlink: 'syz.3.1495': attribute type 21 has an invalid length. [ 325.150604][ T8453] netlink: 'syz.2.1497': attribute type 2 has an invalid length. [ 325.199551][ T8453] netlink: 'syz.2.1497': attribute type 8 has an invalid length. [ 325.214779][ T8453] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1497'. [ 325.305481][ T8458] netlink: 'syz.3.1499': attribute type 2 has an invalid length. [ 325.330152][ T8458] netlink: 'syz.3.1499': attribute type 8 has an invalid length. [ 325.338077][ T8458] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1499'. [ 325.629834][ T8480] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1508'. [ 325.918641][ T8485] netlink: 'syz.0.1510': attribute type 21 has an invalid length. [ 326.059769][ T8497] syz.2.1513 uses obsolete (PF_INET,SOCK_PACKET) [ 326.116332][ T8495] netlink: 'syz.4.1512': attribute type 2 has an invalid length. [ 326.150170][ T8495] netlink: 'syz.4.1512': attribute type 8 has an invalid length. [ 326.158113][ T8495] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1512'. [ 326.217859][ T8501] netlink: 'syz.1.1515': attribute type 2 has an invalid length. [ 326.230743][ T8501] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1515'. [ 326.280565][ T8500] device syzkaller0 entered promiscuous mode [ 326.324260][ T8505] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 327.372192][ T8534] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1525'. [ 327.838750][ T8543] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1528'. [ 329.140716][ T8577] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1541'. [ 329.508102][ T8584] validate_nla: 4 callbacks suppressed [ 329.508132][ T8584] netlink: 'syz.2.1542': attribute type 2 has an invalid length. [ 329.529172][ T8584] netlink: 'syz.2.1542': attribute type 8 has an invalid length. [ 329.558134][ T8584] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1542'. [ 329.584442][ T8583] netlink: 'syz.0.1543': attribute type 2 has an invalid length. [ 329.612332][ T8583] netlink: 'syz.0.1543': attribute type 8 has an invalid length. [ 329.650990][ T8583] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1543'. [ 330.215520][ T8601] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1549'. [ 330.235200][ T8599] netlink: 'syz.2.1559': attribute type 2 has an invalid length. [ 330.295527][ T8599] netlink: 'syz.2.1559': attribute type 8 has an invalid length. [ 330.355112][ T8599] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1559'. [ 331.171030][ T8623] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1560'. [ 331.643435][ T8625] netlink: 'syz.0.1558': attribute type 2 has an invalid length. [ 331.679145][ T8625] netlink: 'syz.0.1558': attribute type 8 has an invalid length. [ 331.687740][ T8625] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1558'. [ 331.837919][ T8636] netlink: 'syz.3.1564': attribute type 2 has an invalid length. [ 331.846044][ T8636] netlink: 'syz.3.1564': attribute type 8 has an invalid length. [ 331.854570][ T8636] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1564'. [ 333.114081][ T8663] FAULT_INJECTION: forcing a failure. [ 333.114081][ T8663] name failslab, interval 1, probability 0, space 0, times 0 [ 333.224941][ T8663] CPU: 1 PID: 8663 Comm: syz.4.1573 Not tainted syzkaller #0 [ 333.232454][ T8663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 333.242520][ T8663] Call Trace: [ 333.245807][ T8663] [ 333.248745][ T8663] dump_stack_lvl+0x168/0x230 [ 333.253451][ T8663] ? show_regs_print_info+0x20/0x20 [ 333.258662][ T8663] ? load_image+0x3b0/0x3b0 [ 333.263184][ T8663] ? __might_sleep+0xf0/0xf0 [ 333.267790][ T8663] ? __lock_acquire+0x7c60/0x7c60 [ 333.272834][ T8663] should_fail+0x38c/0x4c0 [ 333.277291][ T8663] should_failslab+0x5/0x20 [ 333.281805][ T8663] slab_pre_alloc_hook+0x51/0xc0 [ 333.286758][ T8663] kmem_cache_alloc_node+0x47/0x2d0 [ 333.291962][ T8663] ? __alloc_skb+0xf4/0x750 [ 333.296474][ T8663] ? perf_tp_event+0xa3b/0xb50 [ 333.301257][ T8663] __alloc_skb+0xf4/0x750 [ 333.305607][ T8663] alloc_skb_with_frags+0xa7/0x730 [ 333.310754][ T8663] sock_alloc_send_pskb+0x853/0x980 [ 333.315998][ T8663] ? sock_kzfree_s+0x50/0x50 [ 333.320619][ T8663] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 333.326364][ T8663] tun_get_user+0x856/0x38d0 [ 333.330962][ T8663] ? perf_trace_lock+0x2ec/0x370 [ 333.335948][ T8663] ? tun_ring_recv+0xc30/0xc30 [ 333.340745][ T8663] ? rcu_lock_release+0x5/0x20 [ 333.345531][ T8663] ? __lock_acquire+0x7c60/0x7c60 [ 333.350572][ T8663] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 333.356339][ T8663] tun_chr_write_iter+0x112/0x1e0 [ 333.361383][ T8663] vfs_write+0x712/0xd00 [ 333.365648][ T8663] ? file_end_write+0x250/0x250 [ 333.370525][ T8663] ? __fget_files+0x40f/0x480 [ 333.375231][ T8663] ? __fdget_pos+0x1e2/0x370 [ 333.379832][ T8663] ? ksys_write+0x71/0x250 [ 333.384263][ T8663] ksys_write+0x14d/0x250 [ 333.388609][ T8663] ? __ia32_sys_read+0x80/0x80 [ 333.393391][ T8663] ? lockdep_hardirqs_on+0x94/0x140 [ 333.398614][ T8663] do_syscall_64+0x4c/0xa0 [ 333.403039][ T8663] ? clear_bhb_loop+0x30/0x80 [ 333.407724][ T8663] ? clear_bhb_loop+0x30/0x80 [ 333.412416][ T8663] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 333.418317][ T8663] RIP: 0033:0x7f3ba6790fc9 [ 333.422749][ T8663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.442365][ T8663] RSP: 002b:00007f3ba49f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 333.450794][ T8663] RAX: ffffffffffffffda RBX: 00007f3ba69e7fa0 RCX: 00007f3ba6790fc9 [ 333.458774][ T8663] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 00000000000000c8 [ 333.466752][ T8663] RBP: 00007f3ba49f8090 R08: 0000000000000000 R09: 0000000000000000 [ 333.474732][ T8663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.482709][ T8663] R13: 00007f3ba69e8038 R14: 00007f3ba69e7fa0 R15: 00007ffdce922bd8 [ 333.490729][ T8663] [ 333.690247][ T8672] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1576'. [ 333.956614][ T8678] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1578'. [ 334.442179][ T8696] FAULT_INJECTION: forcing a failure. [ 334.442179][ T8696] name failslab, interval 1, probability 0, space 0, times 0 [ 334.455165][ T8696] CPU: 1 PID: 8696 Comm: syz.2.1586 Not tainted syzkaller #0 [ 334.462543][ T8696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 334.472603][ T8696] Call Trace: [ 334.475887][ T8696] [ 334.478815][ T8696] dump_stack_lvl+0x168/0x230 [ 334.483504][ T8696] ? show_regs_print_info+0x20/0x20 [ 334.488707][ T8696] ? load_image+0x3b0/0x3b0 [ 334.493215][ T8696] ? perf_trace_lock+0xdf/0x370 [ 334.498074][ T8696] ? trace_event_raw_event_lock+0x250/0x250 [ 334.503968][ T8696] should_fail+0x38c/0x4c0 [ 334.508391][ T8696] should_failslab+0x5/0x20 [ 334.512895][ T8696] slab_pre_alloc_hook+0x51/0xc0 [ 334.517833][ T8696] kmem_cache_alloc_trace+0x47/0x2a0 [ 334.523115][ T8696] ? nsim_fib_event_nb+0xe6/0xf30 [ 334.528150][ T8696] nsim_fib_event_nb+0xe6/0xf30 [ 334.533008][ T8696] ? __lock_acquire+0x7c60/0x7c60 [ 334.538041][ T8696] ? fib6_add_1+0x114c/0x1430 [ 334.542735][ T8696] atomic_notifier_call_chain+0x15d/0x280 [ 334.548461][ T8696] call_fib_notifiers+0x2d/0x60 [ 334.553313][ T8696] fib6_add+0x1aa3/0x3d30 [ 334.557642][ T8696] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 334.564270][ T8696] ? fib6_update_sernum_stub+0x110/0x110 [ 334.569904][ T8696] ? do_raw_spin_lock+0x11d/0x280 [ 334.574945][ T8696] ? ip6_route_add+0x71/0x130 [ 334.579713][ T8696] ip6_route_add+0x86/0x130 [ 334.584220][ T8696] addrconf_prefix_route+0x20d/0x2b0 [ 334.589509][ T8696] ? addrconf_get_prefix_route+0x710/0x710 [ 334.595334][ T8696] ? ipv6_count_addresses+0x170/0x170 [ 334.600714][ T8696] ? mutex_lock_io_nested+0x60/0x60 [ 334.605921][ T8696] inet6_addr_add+0x4ff/0x9c0 [ 334.610610][ T8696] addrconf_add_ifaddr+0x148/0x1a0 [ 334.615730][ T8696] ? addrconf_set_dstaddr+0x2d0/0x2d0 [ 334.621102][ T8696] ? __lock_acquire+0x7c60/0x7c60 [ 334.626140][ T8696] inet6_ioctl+0x15e/0x240 [ 334.630576][ T8696] ? inet6_getname+0x640/0x640 [ 334.635349][ T8696] ? tomoyo_path_number_perm+0x4d4/0x5d0 [ 334.640994][ T8696] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 334.646540][ T8696] ? perf_trace_lock+0xdf/0x370 [ 334.651409][ T8696] sock_do_ioctl+0xd3/0x2f0 [ 334.655922][ T8696] ? sock_show_fdinfo+0xb0/0xb0 [ 334.660799][ T8696] sock_ioctl+0x4ed/0x6e0 [ 334.665135][ T8696] ? sock_poll+0x3f0/0x3f0 [ 334.669569][ T8696] ? bpf_lsm_file_ioctl+0x5/0x10 [ 334.674511][ T8696] ? security_file_ioctl+0x7c/0xa0 [ 334.679625][ T8696] ? sock_poll+0x3f0/0x3f0 [ 334.684040][ T8696] __se_sys_ioctl+0xfa/0x170 [ 334.688629][ T8696] do_syscall_64+0x4c/0xa0 [ 334.693037][ T8696] ? clear_bhb_loop+0x30/0x80 [ 334.697704][ T8696] ? clear_bhb_loop+0x30/0x80 [ 334.702369][ T8696] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 334.708260][ T8696] RIP: 0033:0x7fe21d723fc9 [ 334.712664][ T8696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.732265][ T8696] RSP: 002b:00007fe21b98b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 334.740667][ T8696] RAX: ffffffffffffffda RBX: 00007fe21d97afa0 RCX: 00007fe21d723fc9 [ 334.748623][ T8696] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000007 [ 334.756575][ T8696] RBP: 00007fe21b98b090 R08: 0000000000000000 R09: 0000000000000000 [ 334.764533][ T8696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.772573][ T8696] R13: 00007fe21d97b038 R14: 00007fe21d97afa0 R15: 00007fffd1a96f88 [ 334.780545][ T8696] [ 336.676216][ T8717] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1592'. [ 336.735409][ T8715] validate_nla: 4 callbacks suppressed [ 336.735467][ T8715] netlink: 'syz.3.1590': attribute type 2 has an invalid length. [ 336.832060][ T8715] netlink: 'syz.3.1590': attribute type 8 has an invalid length. [ 336.868177][ T8715] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1590'. [ 337.579322][ T8751] netlink: 'syz.2.1601': attribute type 21 has an invalid length. [ 337.676044][ T8753] netlink: 'syz.3.1604': attribute type 2 has an invalid length. [ 337.696582][ T8753] netlink: 'syz.3.1604': attribute type 8 has an invalid length. [ 337.735044][ T8753] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1604'. [ 338.936513][ T8784] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1614'. [ 339.293497][ T8791] netlink: 'syz.2.1616': attribute type 2 has an invalid length. [ 339.324996][ T8791] netlink: 'syz.2.1616': attribute type 8 has an invalid length. [ 339.386274][ T8791] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1616'. [ 339.445735][ T8794] netlink: 'syz.3.1619': attribute type 10 has an invalid length. [ 339.465165][ T8794] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1619'. [ 339.508439][ T8797] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1619'. [ 339.580672][ T8794] device dummy0 entered promiscuous mode [ 339.800818][ T8801] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.1620'. [ 340.551909][ T8825] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1629'. [ 340.762686][ T8829] netlink: 'syz.2.1630': attribute type 2 has an invalid length. [ 340.785433][ T8829] netlink: 'syz.2.1630': attribute type 8 has an invalid length. [ 340.819145][ T8829] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1630'. [ 341.188276][ T8843] device dummy0 entered promiscuous mode [ 342.173225][ T8868] validate_nla: 1 callbacks suppressed [ 342.173241][ T8868] netlink: 'syz.0.1643': attribute type 21 has an invalid length. [ 342.437818][ T8876] netlink: 'syz.4.1646': attribute type 2 has an invalid length. [ 342.451692][ T8876] netlink: 'syz.4.1646': attribute type 8 has an invalid length. [ 342.467823][ T8876] __nla_validate_parse: 2 callbacks suppressed [ 342.467850][ T8876] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1646'. [ 342.622247][ T8881] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1648'. [ 343.174218][ T8900] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1654'. [ 344.671519][ T8934] FAULT_INJECTION: forcing a failure. [ 344.671519][ T8934] name failslab, interval 1, probability 0, space 0, times 0 [ 344.707658][ T8936] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1668'. [ 344.743904][ T8934] CPU: 0 PID: 8934 Comm: syz.1.1667 Not tainted syzkaller #0 [ 344.751306][ T8934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 344.761360][ T8934] Call Trace: [ 344.764641][ T8934] [ 344.767578][ T8934] dump_stack_lvl+0x168/0x230 [ 344.772275][ T8934] ? show_regs_print_info+0x20/0x20 [ 344.777483][ T8934] ? load_image+0x3b0/0x3b0 [ 344.781995][ T8934] ? __might_sleep+0xf0/0xf0 [ 344.786581][ T8934] ? __lock_acquire+0x7c60/0x7c60 [ 344.791607][ T8934] should_fail+0x38c/0x4c0 [ 344.796028][ T8934] should_failslab+0x5/0x20 [ 344.800524][ T8934] slab_pre_alloc_hook+0x51/0xc0 [ 344.805457][ T8934] ? prepare_kernel_cred+0x27/0x6e0 [ 344.810739][ T8934] kmem_cache_alloc+0x3d/0x290 [ 344.815503][ T8934] prepare_kernel_cred+0x27/0x6e0 [ 344.820520][ T8934] ? do_raw_spin_unlock+0x11d/0x230 [ 344.825716][ T8934] _request_firmware+0x951/0x12b0 [ 344.830741][ T8934] request_firmware+0x32/0x50 [ 344.835413][ T8934] reg_reload_regdb+0x87/0x1d0 [ 344.840171][ T8934] ? reg_query_regdb_wmm+0x510/0x510 [ 344.845454][ T8934] ? nl80211_reload_regdb+0x5/0x10 [ 344.850993][ T8934] ? reg_query_regdb_wmm+0x510/0x510 [ 344.856276][ T8934] genl_rcv_msg+0xbc6/0xf40 [ 344.860782][ T8934] ? genl_bind+0x370/0x370 [ 344.865205][ T8934] ? verify_lock_unused+0x140/0x140 [ 344.870405][ T8934] ? __dev_queue_xmit+0x1bc5/0x2ed0 [ 344.875609][ T8934] ? dev_queue_xmit+0x20/0x20 [ 344.880277][ T8934] ? nl80211_req_set_reg+0x210/0x210 [ 344.885565][ T8934] netlink_rcv_skb+0x1e0/0x430 [ 344.890322][ T8934] ? genl_bind+0x370/0x370 [ 344.894733][ T8934] ? netlink_ack+0xb60/0xb60 [ 344.899318][ T8934] ? __lock_acquire+0x7c60/0x7c60 [ 344.904598][ T8934] ? preempt_count_add+0x8d/0x190 [ 344.909614][ T8934] ? down_read+0x1aa/0x2e0 [ 344.914023][ T8934] genl_rcv+0x24/0x40 [ 344.917994][ T8934] netlink_unicast+0x774/0x920 [ 344.922756][ T8934] netlink_sendmsg+0x8ab/0xbc0 [ 344.927516][ T8934] ? netlink_getsockopt+0x560/0x560 [ 344.932703][ T8934] ? aa_sock_msg_perm+0x94/0x150 [ 344.937632][ T8934] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 344.942919][ T8934] ? security_socket_sendmsg+0x7c/0xa0 [ 344.948365][ T8934] ? netlink_getsockopt+0x560/0x560 [ 344.953554][ T8934] ____sys_sendmsg+0x5a2/0x8c0 [ 344.958318][ T8934] ? memset+0x1e/0x40 [ 344.962295][ T8934] ? __sys_sendmsg_sock+0x30/0x30 [ 344.967318][ T8934] ? import_iovec+0x6f/0xa0 [ 344.971817][ T8934] ___sys_sendmsg+0x1f0/0x260 [ 344.976505][ T8934] ? __sys_sendmsg+0x250/0x250 [ 344.981288][ T8934] ? __fdget+0x18b/0x210 [ 344.985522][ T8934] __se_sys_sendmsg+0x190/0x250 [ 344.990367][ T8934] ? __x64_sys_sendmsg+0x80/0x80 [ 344.995293][ T8934] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 345.001277][ T8934] ? lockdep_hardirqs_on+0x94/0x140 [ 345.006469][ T8934] do_syscall_64+0x4c/0xa0 [ 345.010873][ T8934] ? clear_bhb_loop+0x30/0x80 [ 345.015539][ T8934] ? clear_bhb_loop+0x30/0x80 [ 345.020203][ T8934] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 345.026089][ T8934] RIP: 0033:0x7fa20d90efc9 [ 345.030499][ T8934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.050095][ T8934] RSP: 002b:00007fa20bb76038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.058496][ T8934] RAX: ffffffffffffffda RBX: 00007fa20db65fa0 RCX: 00007fa20d90efc9 [ 345.066459][ T8934] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000007 [ 345.074419][ T8934] RBP: 00007fa20bb76090 R08: 0000000000000000 R09: 0000000000000000 [ 345.082377][ T8934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 345.090339][ T8934] R13: 00007fa20db66038 R14: 00007fa20db65fa0 R15: 00007ffd465450b8 [ 345.098311][ T8934] [ 345.270177][ T8942] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1669'. [ 345.322175][ T8947] delete_channel: no stack [ 345.363126][ T8953] netlink: 'syz.4.1674': attribute type 2 has an invalid length. [ 345.399306][ T8953] netlink: 'syz.4.1674': attribute type 8 has an invalid length. [ 345.407367][ T8953] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1674'. [ 345.545031][ T8956] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1675'. [ 345.672234][ T8962] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.1677'. [ 345.757521][ T8959] netlink: 'syz.4.1677': attribute type 10 has an invalid length. [ 345.775532][ T8959] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1677'. [ 345.798577][ T8959] device dummy0 entered promiscuous mode [ 346.777442][ T8986] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1687'. [ 347.486822][ T9002] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1693'. [ 348.215978][ T9017] netlink: 'syz.2.1698': attribute type 2 has an invalid length. [ 348.254407][ T9017] netlink: 'syz.2.1698': attribute type 8 has an invalid length. [ 348.273533][ T9017] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1698'. [ 348.406707][ T9031] netlink: 'syz.0.1704': attribute type 10 has an invalid length. [ 348.422538][ T9031] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1704'. [ 348.434998][ T9031] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 348.577868][ T9031] netlink: 'syz.0.1704': attribute type 39 has an invalid length. [ 348.580174][ T9033] FAULT_INJECTION: forcing a failure. [ 348.580174][ T9033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.638481][ T9033] CPU: 0 PID: 9033 Comm: syz.1.1706 Not tainted syzkaller #0 [ 348.645880][ T9033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 348.655941][ T9033] Call Trace: [ 348.659229][ T9033] [ 348.662161][ T9033] dump_stack_lvl+0x168/0x230 [ 348.666842][ T9033] ? show_regs_print_info+0x20/0x20 [ 348.672042][ T9033] ? load_image+0x3b0/0x3b0 [ 348.676553][ T9033] ? __lock_acquire+0x7c60/0x7c60 [ 348.680472][ T9039] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1707'. [ 348.681844][ T9033] should_fail+0x38c/0x4c0 [ 348.695502][ T9033] _copy_from_user+0x2e/0x170 [ 348.700196][ T9033] __copy_msghdr_from_user+0xaf/0x5e0 [ 348.705577][ T9033] ? verify_lock_unused+0x140/0x140 [ 348.710783][ T9033] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 348.716084][ T9033] ? trace_event_raw_event_lock+0x250/0x250 [ 348.721986][ T9033] ___sys_sendmsg+0x156/0x260 [ 348.726675][ T9033] ? __sys_sendmsg+0x250/0x250 [ 348.731456][ T9033] ? trace_event_raw_event_lock+0x250/0x250 [ 348.737442][ T9033] ? vfs_write+0x84d/0xd00 [ 348.741879][ T9033] ? __fdget+0x18b/0x210 [ 348.746122][ T9033] __se_sys_sendmsg+0x190/0x250 [ 348.750973][ T9033] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 348.757128][ T9033] ? __x64_sys_sendmsg+0x80/0x80 [ 348.762077][ T9033] ? syscall_enter_from_user_mode+0x2a/0x70 [ 348.767973][ T9033] do_syscall_64+0x4c/0xa0 [ 348.772382][ T9033] ? clear_bhb_loop+0x30/0x80 [ 348.777052][ T9033] ? clear_bhb_loop+0x30/0x80 [ 348.781721][ T9033] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 348.787610][ T9033] RIP: 0033:0x7fa20d90efc9 [ 348.792016][ T9033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.811610][ T9033] RSP: 002b:00007fa20bb76038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.820014][ T9033] RAX: ffffffffffffffda RBX: 00007fa20db65fa0 RCX: 00007fa20d90efc9 [ 348.827978][ T9033] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 0000000000000004 [ 348.835943][ T9033] RBP: 00007fa20bb76090 R08: 0000000000000000 R09: 0000000000000000 [ 348.843917][ T9033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.851886][ T9033] R13: 00007fa20db66038 R14: 00007fa20db65fa0 R15: 00007ffd465450b8 [ 348.859974][ T9033] [ 349.645524][ T9062] netlink: 'syz.3.1715': attribute type 2 has an invalid length. [ 349.672523][ T9062] netlink: 'syz.3.1715': attribute type 8 has an invalid length. [ 349.698808][ T9062] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1715'. [ 349.767315][ T9066] netlink: 'syz.4.1716': attribute type 21 has an invalid length. [ 352.918553][ T9085] FAULT_INJECTION: forcing a failure. [ 352.918553][ T9085] name failslab, interval 1, probability 0, space 0, times 0 [ 352.997587][ T9085] CPU: 0 PID: 9085 Comm: syz.4.1723 Not tainted syzkaller #0 [ 353.004991][ T9085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 353.015051][ T9085] Call Trace: [ 353.018335][ T9085] [ 353.021280][ T9085] dump_stack_lvl+0x168/0x230 [ 353.024313][ T9088] delete_channel: no stack [ 353.025966][ T9085] ? show_regs_print_info+0x20/0x20 [ 353.035545][ T9085] ? load_image+0x3b0/0x3b0 [ 353.040492][ T9085] ? __might_sleep+0xf0/0xf0 [ 353.045085][ T9085] ? __lock_acquire+0x7c60/0x7c60 [ 353.050113][ T9085] ? memset+0x1e/0x40 [ 353.054104][ T9085] should_fail+0x38c/0x4c0 [ 353.058533][ T9085] should_failslab+0x5/0x20 [ 353.063038][ T9085] slab_pre_alloc_hook+0x51/0xc0 [ 353.067978][ T9085] ? security_inode_alloc+0x30/0x110 [ 353.073269][ T9085] kmem_cache_alloc+0x3d/0x290 [ 353.078041][ T9085] security_inode_alloc+0x30/0x110 [ 353.083161][ T9085] inode_init_always+0x8f4/0xcb0 [ 353.088108][ T9085] new_inode_pseudo+0x8e/0x210 [ 353.092887][ T9085] __sock_create+0x129/0x900 [ 353.097479][ T9085] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 353.103474][ T9085] __sys_socket+0xe2/0x170 [ 353.107900][ T9085] __x64_sys_socket+0x76/0x80 [ 353.112579][ T9085] do_syscall_64+0x4c/0xa0 [ 353.116997][ T9085] ? clear_bhb_loop+0x30/0x80 [ 353.121673][ T9085] ? clear_bhb_loop+0x30/0x80 [ 353.126356][ T9085] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 353.132254][ T9085] RIP: 0033:0x7f3ba6790fc9 [ 353.136664][ T9085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.156264][ T9085] RSP: 002b:00007f3ba49f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 353.164672][ T9085] RAX: ffffffffffffffda RBX: 00007f3ba69e7fa0 RCX: 00007f3ba6790fc9 [ 353.172634][ T9085] RDX: 0000000000000024 RSI: 0000000000000002 RDI: 0000000000000022 [ 353.180592][ T9085] RBP: 00007f3ba49f8090 R08: 0000000000000000 R09: 0000000000000000 [ 353.188552][ T9085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.196509][ T9085] R13: 00007f3ba69e8038 R14: 00007f3ba69e7fa0 R15: 00007ffdce922bd8 [ 353.204480][ T9085] [ 353.289181][ T9085] socket: no more sockets [ 353.701688][ T9100] netlink: 'syz.4.1729': attribute type 2 has an invalid length. [ 353.763754][ T9100] netlink: 'syz.4.1729': attribute type 8 has an invalid length. [ 353.786283][ T9100] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1729'. [ 354.066837][ T9110] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1733'. [ 354.111046][ T9113] netlink: 'syz.3.1734': attribute type 21 has an invalid length. [ 354.954237][ T9132] FAULT_INJECTION: forcing a failure. [ 354.954237][ T9132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.017596][ T9132] CPU: 1 PID: 9132 Comm: syz.3.1740 Not tainted syzkaller #0 [ 355.025005][ T9132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 355.035059][ T9132] Call Trace: [ 355.038336][ T9132] [ 355.041277][ T9132] dump_stack_lvl+0x168/0x230 [ 355.045972][ T9132] ? show_regs_print_info+0x20/0x20 [ 355.051176][ T9132] ? load_image+0x3b0/0x3b0 [ 355.055687][ T9132] ? __lock_acquire+0x7c60/0x7c60 [ 355.060706][ T9132] ? __lock_acquire+0x7c60/0x7c60 [ 355.065723][ T9132] should_fail+0x38c/0x4c0 [ 355.070131][ T9132] _copy_from_user+0x2e/0x170 [ 355.074795][ T9132] ____sys_sendmsg+0x305/0x8c0 [ 355.079556][ T9132] ? __sys_sendmsg_sock+0x30/0x30 [ 355.084572][ T9132] ? import_iovec+0x6f/0xa0 [ 355.089062][ T9132] ___sys_sendmsg+0x1f0/0x260 [ 355.093731][ T9132] ? __sys_sendmsg+0x250/0x250 [ 355.098488][ T9132] ? trace_event_raw_event_lock+0x250/0x250 [ 355.104368][ T9132] ? vfs_write+0x84d/0xd00 [ 355.108788][ T9132] ? __fdget+0x18b/0x210 [ 355.113022][ T9132] __se_sys_sendmsg+0x190/0x250 [ 355.117861][ T9132] ? __x64_sys_sendmsg+0x80/0x80 [ 355.122782][ T9132] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 355.128758][ T9132] ? lockdep_hardirqs_on+0x94/0x140 [ 355.133942][ T9132] do_syscall_64+0x4c/0xa0 [ 355.138341][ T9132] ? clear_bhb_loop+0x30/0x80 [ 355.143007][ T9132] ? clear_bhb_loop+0x30/0x80 [ 355.147673][ T9132] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 355.153549][ T9132] RIP: 0033:0x7fd338425fc9 [ 355.157950][ T9132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.177539][ T9132] RSP: 002b:00007fd33668d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.185935][ T9132] RAX: ffffffffffffffda RBX: 00007fd33867cfa0 RCX: 00007fd338425fc9 [ 355.193890][ T9132] RDX: 0000000000040004 RSI: 0000200000000100 RDI: 0000000000000003 [ 355.201842][ T9132] RBP: 00007fd33668d090 R08: 0000000000000000 R09: 0000000000000000 [ 355.209797][ T9132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.217750][ T9132] R13: 00007fd33867d038 R14: 00007fd33867cfa0 R15: 00007ffe1417e9d8 [ 355.225716][ T9132] [ 355.347766][ T9138] netlink: 'syz.4.1743': attribute type 2 has an invalid length. [ 355.425336][ T9138] netlink: 'syz.4.1743': attribute type 8 has an invalid length. [ 355.531033][ T9138] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1743'. [ 356.085326][ T9163] netlink: 'syz.0.1751': attribute type 21 has an invalid length. [ 356.741719][ T9176] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1755'. [ 357.253826][ T9188] netlink: 'syz.4.1759': attribute type 2 has an invalid length. [ 357.321808][ T9188] netlink: 'syz.4.1759': attribute type 8 has an invalid length. [ 357.385578][ T9188] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1759'. [ 357.506465][ T9190] netlink: 'syz.1.1760': attribute type 21 has an invalid length. [ 357.595923][ T9190] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1760'. [ 357.605596][ T9190] netlink: 'syz.1.1760': attribute type 4 has an invalid length. [ 357.614377][ T9190] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1760'. [ 357.745371][ T9195] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1761'. [ 357.759578][ T9196] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1762'. [ 357.799462][ T9196] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 357.818342][ T9195] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1761'. [ 359.114540][ T9233] __nla_validate_parse: 1 callbacks suppressed [ 359.114557][ T9233] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1773'. [ 359.285930][ T9238] FAULT_INJECTION: forcing a failure. [ 359.285930][ T9238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.491403][ T9238] CPU: 1 PID: 9238 Comm: syz.0.1776 Not tainted syzkaller #0 [ 359.498817][ T9238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 359.508875][ T9238] Call Trace: [ 359.512154][ T9238] [ 359.515080][ T9238] dump_stack_lvl+0x168/0x230 [ 359.519769][ T9238] ? show_regs_print_info+0x20/0x20 [ 359.524957][ T9238] ? load_image+0x3b0/0x3b0 [ 359.529450][ T9238] ? __lock_acquire+0x7c60/0x7c60 [ 359.534467][ T9238] should_fail+0x38c/0x4c0 [ 359.538872][ T9238] _copy_to_user+0x2e/0x130 [ 359.543368][ T9238] simple_read_from_buffer+0xe3/0x150 [ 359.548731][ T9238] proc_fail_nth_read+0x19a/0x210 [ 359.553744][ T9238] ? proc_fault_inject_write+0x2f0/0x2f0 [ 359.559377][ T9238] ? fsnotify_perm+0x254/0x560 [ 359.564128][ T9238] ? proc_fault_inject_write+0x2f0/0x2f0 [ 359.569745][ T9238] vfs_read+0x2f6/0xcf0 [ 359.573889][ T9238] ? kernel_read+0x1e0/0x1e0 [ 359.578481][ T9238] ? __fget_files+0x40f/0x480 [ 359.583760][ T9238] ? mutex_lock_nested+0x17/0x20 [ 359.588682][ T9238] ? __fdget_pos+0x2bf/0x370 [ 359.593259][ T9238] ? ksys_read+0x71/0x250 [ 359.597573][ T9238] ksys_read+0x14d/0x250 [ 359.601799][ T9238] ? vfs_write+0xd00/0xd00 [ 359.606202][ T9238] ? lockdep_hardirqs_on+0x94/0x140 [ 359.611390][ T9238] do_syscall_64+0x4c/0xa0 [ 359.615790][ T9238] ? clear_bhb_loop+0x30/0x80 [ 359.620452][ T9238] ? clear_bhb_loop+0x30/0x80 [ 359.625115][ T9238] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 359.630989][ T9238] RIP: 0033:0x7f923a8ba9dc [ 359.635392][ T9238] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 359.654982][ T9238] RSP: 002b:00007f9238b23030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 359.663380][ T9238] RAX: ffffffffffffffda RBX: 00007f923ab12fa0 RCX: 00007f923a8ba9dc [ 359.671374][ T9238] RDX: 000000000000000f RSI: 00007f9238b230a0 RDI: 0000000000000009 [ 359.679330][ T9238] RBP: 00007f9238b23090 R08: 0000000000000000 R09: 0000000000000000 [ 359.687285][ T9238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.695238][ T9238] R13: 00007f923ab13038 R14: 00007f923ab12fa0 R15: 00007ffe8b4c57a8 [ 359.703206][ T9238] [ 360.276346][ T9252] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1781'. [ 361.350850][ T9283] validate_nla: 7 callbacks suppressed [ 361.350866][ T9283] netlink: 'syz.4.1795': attribute type 10 has an invalid length. [ 361.474528][ T9283] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1795'. [ 361.550192][ T9283] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 361.796518][ T9295] netlink: 'syz.1.1799': attribute type 21 has an invalid length. [ 361.828499][ T9293] FAULT_INJECTION: forcing a failure. [ 361.828499][ T9293] name failslab, interval 1, probability 0, space 0, times 0 [ 361.909626][ T9293] CPU: 0 PID: 9293 Comm: syz.4.1798 Not tainted syzkaller #0 [ 361.917038][ T9293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 361.927104][ T9293] Call Trace: [ 361.930386][ T9293] [ 361.933319][ T9293] dump_stack_lvl+0x168/0x230 [ 361.938011][ T9293] ? show_regs_print_info+0x20/0x20 [ 361.943216][ T9293] ? load_image+0x3b0/0x3b0 [ 361.947725][ T9293] ? __might_sleep+0xf0/0xf0 [ 361.952316][ T9293] ? __lock_acquire+0x7c60/0x7c60 [ 361.957340][ T9293] should_fail+0x38c/0x4c0 [ 361.961754][ T9293] should_failslab+0x5/0x20 [ 361.966247][ T9293] slab_pre_alloc_hook+0x51/0xc0 [ 361.971177][ T9293] kmem_cache_alloc_node+0x47/0x2d0 [ 361.976367][ T9293] ? __alloc_skb+0xf4/0x750 [ 361.980858][ T9293] __alloc_skb+0xf4/0x750 [ 361.985174][ T9293] alloc_skb_with_frags+0xa7/0x730 [ 361.990273][ T9293] ? mark_lock+0x94/0x320 [ 361.994591][ T9293] ? __lock_acquire+0x12d9/0x7c60 [ 361.999601][ T9293] sock_alloc_send_pskb+0x853/0x980 [ 362.004793][ T9293] ? sock_kzfree_s+0x50/0x50 [ 362.009372][ T9293] ? verify_lock_unused+0x140/0x140 [ 362.014584][ T9293] tun_get_user+0x856/0x38d0 [ 362.019189][ T9293] ? tun_ring_recv+0xc30/0xc30 [ 362.023963][ T9293] ? rcu_lock_release+0x5/0x20 [ 362.028729][ T9293] ? __lock_acquire+0x7c60/0x7c60 [ 362.033752][ T9293] tun_chr_write_iter+0x112/0x1e0 [ 362.038771][ T9293] vfs_write+0x712/0xd00 [ 362.043006][ T9293] ? file_end_write+0x250/0x250 [ 362.047848][ T9293] ? __fget_files+0x40f/0x480 [ 362.052518][ T9293] ? __fdget_pos+0x1e2/0x370 [ 362.057090][ T9293] ? ksys_write+0x71/0x250 [ 362.061491][ T9293] ksys_write+0x14d/0x250 [ 362.065809][ T9293] ? __ia32_sys_read+0x80/0x80 [ 362.070559][ T9293] ? lockdep_hardirqs_on+0x94/0x140 [ 362.075745][ T9293] do_syscall_64+0x4c/0xa0 [ 362.080142][ T9293] ? clear_bhb_loop+0x30/0x80 [ 362.084807][ T9293] ? clear_bhb_loop+0x30/0x80 [ 362.089468][ T9293] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 362.095604][ T9293] RIP: 0033:0x7f3ba6790fc9 [ 362.100004][ T9293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.119591][ T9293] RSP: 002b:00007f3ba49f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 362.128169][ T9293] RAX: ffffffffffffffda RBX: 00007f3ba69e7fa0 RCX: 00007f3ba6790fc9 [ 362.136122][ T9293] RDX: 000000000000fdef RSI: 0000200000000640 RDI: 00000000000000c8 [ 362.144076][ T9293] RBP: 00007f3ba49f8090 R08: 0000000000000000 R09: 0000000000000000 [ 362.152029][ T9293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.160247][ T9293] R13: 00007f3ba69e8038 R14: 00007f3ba69e7fa0 R15: 00007ffdce922bd8 [ 362.168219][ T9293] [ 362.610913][ T9311] netlink: 'syz.3.1807': attribute type 29 has an invalid length. [ 362.638322][ T9311] netlink: 'syz.3.1807': attribute type 29 has an invalid length. [ 362.710200][ T9316] FAULT_INJECTION: forcing a failure. [ 362.710200][ T9316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 362.734194][ T9318] netlink: 'syz.1.1809': attribute type 10 has an invalid length. [ 362.770792][ T9316] CPU: 0 PID: 9316 Comm: syz.3.1807 Not tainted syzkaller #0 [ 362.778199][ T9316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 362.788256][ T9316] Call Trace: [ 362.791535][ T9316] [ 362.794468][ T9316] dump_stack_lvl+0x168/0x230 [ 362.799156][ T9316] ? show_regs_print_info+0x20/0x20 [ 362.804358][ T9316] ? load_image+0x3b0/0x3b0 [ 362.808869][ T9316] ? __lock_acquire+0x7c60/0x7c60 [ 362.813905][ T9316] should_fail+0x38c/0x4c0 [ 362.818324][ T9316] _copy_from_user+0x2e/0x170 [ 362.823004][ T9316] ___sys_recvmsg+0x129/0x4f0 [ 362.827684][ T9316] ? __sys_recvmsg+0x250/0x250 [ 362.832449][ T9316] ? __lock_acquire+0x7c60/0x7c60 [ 362.837491][ T9316] ? __fdget+0x18b/0x210 [ 362.841741][ T9316] __x64_sys_recvmsg+0x1dd/0x2a0 [ 362.846698][ T9316] ? ___sys_recvmsg+0x4f0/0x4f0 [ 362.851544][ T9316] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 362.857530][ T9316] ? lockdep_hardirqs_on+0x94/0x140 [ 362.862729][ T9316] do_syscall_64+0x4c/0xa0 [ 362.867141][ T9316] ? clear_bhb_loop+0x30/0x80 [ 362.871812][ T9316] ? clear_bhb_loop+0x30/0x80 [ 362.876485][ T9316] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 362.882371][ T9316] RIP: 0033:0x7fd338425fc9 [ 362.886784][ T9316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.906388][ T9316] RSP: 002b:00007fd33666c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 362.914802][ T9316] RAX: ffffffffffffffda RBX: 00007fd33867d090 RCX: 00007fd338425fc9 [ 362.922769][ T9316] RDX: 0000000040012100 RSI: 0000200000000640 RDI: 0000000000000003 [ 362.930736][ T9316] RBP: 00007fd33666c090 R08: 0000000000000000 R09: 0000000000000000 [ 362.938700][ T9316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.946664][ T9316] R13: 00007fd33867d128 R14: 00007fd33867d090 R15: 00007ffe1417e9d8 [ 362.954909][ T9316] [ 362.979025][ T9318] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1809'. [ 362.988328][ T9318] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 363.571468][ T9335] netlink: 'syz.3.1815': attribute type 21 has an invalid length. [ 364.206886][ T9351] FAULT_INJECTION: forcing a failure. [ 364.206886][ T9351] name failslab, interval 1, probability 0, space 0, times 0 [ 364.349354][ T9351] CPU: 0 PID: 9351 Comm: syz.0.1820 Not tainted syzkaller #0 [ 364.356786][ T9351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 364.366858][ T9351] Call Trace: [ 364.370152][ T9351] [ 364.373102][ T9351] dump_stack_lvl+0x168/0x230 [ 364.377810][ T9351] ? show_regs_print_info+0x20/0x20 [ 364.383035][ T9351] ? load_image+0x3b0/0x3b0 [ 364.387562][ T9351] ? __might_sleep+0xf0/0xf0 [ 364.392168][ T9351] ? __lock_acquire+0x7c60/0x7c60 [ 364.397216][ T9351] should_fail+0x38c/0x4c0 [ 364.401659][ T9351] should_failslab+0x5/0x20 [ 364.406168][ T9351] slab_pre_alloc_hook+0x51/0xc0 [ 364.411121][ T9351] kmem_cache_alloc_node+0x47/0x2d0 [ 364.416325][ T9351] ? __alloc_skb+0xf4/0x750 [ 364.420836][ T9351] ? perf_tp_event+0xa3b/0xb50 [ 364.425625][ T9351] __alloc_skb+0xf4/0x750 [ 364.429982][ T9351] alloc_skb_with_frags+0xa7/0x730 [ 364.435138][ T9351] sock_alloc_send_pskb+0x853/0x980 [ 364.440392][ T9351] ? sock_kzfree_s+0x50/0x50 [ 364.445017][ T9351] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 364.450767][ T9351] tun_get_user+0x856/0x38d0 [ 364.455367][ T9351] ? perf_trace_lock+0x2ec/0x370 [ 364.460365][ T9351] ? tun_ring_recv+0xc30/0xc30 [ 364.465170][ T9351] ? rcu_lock_release+0x5/0x20 [ 364.469954][ T9351] ? __lock_acquire+0x7c60/0x7c60 [ 364.474991][ T9351] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 364.480762][ T9351] tun_chr_write_iter+0x112/0x1e0 [ 364.485807][ T9351] vfs_write+0x712/0xd00 [ 364.490072][ T9351] ? file_end_write+0x250/0x250 [ 364.494953][ T9351] ? __fget_files+0x40f/0x480 [ 364.499664][ T9351] ? __fdget_pos+0x1e2/0x370 [ 364.504260][ T9351] ? ksys_write+0x71/0x250 [ 364.508692][ T9351] ksys_write+0x14d/0x250 [ 364.513038][ T9351] ? __ia32_sys_read+0x80/0x80 [ 364.517827][ T9351] ? lockdep_hardirqs_on+0x94/0x140 [ 364.523065][ T9351] do_syscall_64+0x4c/0xa0 [ 364.527491][ T9351] ? clear_bhb_loop+0x30/0x80 [ 364.532180][ T9351] ? clear_bhb_loop+0x30/0x80 [ 364.536877][ T9351] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 364.542779][ T9351] RIP: 0033:0x7f923a8bbfc9 [ 364.547210][ T9351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.566829][ T9351] RSP: 002b:00007f9238b23038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 364.575263][ T9351] RAX: ffffffffffffffda RBX: 00007f923ab12fa0 RCX: 00007f923a8bbfc9 [ 364.583246][ T9351] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 364.591224][ T9351] RBP: 00007f9238b23090 R08: 0000000000000000 R09: 0000000000000000 [ 364.599203][ T9351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.607184][ T9351] R13: 00007f923ab13038 R14: 00007f923ab12fa0 R15: 00007ffe8b4c57a8 [ 364.615191][ T9351] [ 364.633892][ T9360] netlink: 'syz.1.1823': attribute type 10 has an invalid length. [ 364.650327][ T9360] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1823'. [ 364.669697][ T9360] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 364.708656][ T9360] netlink: 'syz.1.1823': attribute type 39 has an invalid length. [ 365.489442][ T9358] netlink: 'syz.4.1824': attribute type 21 has an invalid length. [ 365.504382][ T9358] netlink: 'syz.4.1824': attribute type 15 has an invalid length. [ 365.528213][ T9358] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1824'. [ 365.547971][ T9358] IPv6: NLM_F_CREATE should be specified when creating new route [ 365.570130][ T9358] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 365.577659][ T9358] IPv6: NLM_F_CREATE should be set when creating new route [ 365.584955][ T9358] IPv6: NLM_F_CREATE should be set when creating new route [ 365.592192][ T9358] IPv6: NLM_F_CREATE should be set when creating new route [ 366.176446][ T9400] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1838'. [ 366.276353][ T9408] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1840'. [ 366.343762][ T9408] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 367.026668][ T9436] validate_nla: 4 callbacks suppressed [ 367.026705][ T9436] netlink: 'syz.4.1852': attribute type 2 has an invalid length. [ 367.070975][ T9436] netlink: 'syz.4.1852': attribute type 8 has an invalid length. [ 367.096407][ T9436] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1852'. [ 367.310911][ T9447] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1854'. [ 367.606045][ T9451] netlink: 'syz.1.1856': attribute type 10 has an invalid length. [ 367.723155][ T9451] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1856'. [ 367.769138][ T9451] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 368.124833][ T9471] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1864'. [ 368.128954][ T9472] FAULT_INJECTION: forcing a failure. [ 368.128954][ T9472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.210626][ T9472] CPU: 0 PID: 9472 Comm: syz.0.1863 Not tainted syzkaller #0 [ 368.218031][ T9472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 368.218044][ T9472] Call Trace: [ 368.218051][ T9472] [ 368.218059][ T9472] dump_stack_lvl+0x168/0x230 [ 368.218085][ T9472] ? show_regs_print_info+0x20/0x20 [ 368.218104][ T9472] ? load_image+0x3b0/0x3b0 [ 368.218124][ T9472] ? __lock_acquire+0x7c60/0x7c60 [ 368.218149][ T9472] should_fail+0x38c/0x4c0 [ 368.218169][ T9472] _copy_from_user+0x2e/0x170 [ 368.218183][ T9472] __copy_msghdr_from_user+0x448/0x5e0 [ 368.218199][ T9472] ? verify_lock_unused+0x140/0x140 [ 368.218218][ T9472] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 368.218250][ T9472] ___sys_sendmsg+0x156/0x260 [ 368.218276][ T9472] ? __sys_sendmsg+0x250/0x250 [ 368.218304][ T9472] ? vfs_write+0x84d/0xd00 [ 368.218332][ T9472] ? __fdget+0x18b/0x210 [ 368.218351][ T9472] __se_sys_sendmsg+0x190/0x250 [ 368.218372][ T9472] ? __x64_sys_sendmsg+0x80/0x80 [ 368.218387][ T9472] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 368.218414][ T9472] ? lockdep_hardirqs_on+0x94/0x140 [ 368.218435][ T9472] do_syscall_64+0x4c/0xa0 [ 368.218450][ T9472] ? clear_bhb_loop+0x30/0x80 [ 368.218467][ T9472] ? clear_bhb_loop+0x30/0x80 [ 368.218485][ T9472] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 368.218499][ T9472] RIP: 0033:0x7f923a8bbfc9 [ 368.218516][ T9472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.218531][ T9472] RSP: 002b:00007f9238b23038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 368.218551][ T9472] RAX: ffffffffffffffda RBX: 00007f923ab12fa0 RCX: 00007f923a8bbfc9 [ 368.218564][ T9472] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 368.218576][ T9472] RBP: 00007f9238b23090 R08: 0000000000000000 R09: 0000000000000000 [ 368.218587][ T9472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.218597][ T9472] R13: 00007f923ab13038 R14: 00007f923ab12fa0 R15: 00007ffe8b4c57a8 [ 368.218618][ T9472] [ 368.477191][ T9480] netlink: 'syz.0.1867': attribute type 10 has an invalid length. [ 368.487098][ T9480] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1867'. [ 368.502433][ T9480] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 368.606365][ T9476] netlink: 'syz.3.1865': attribute type 2 has an invalid length. [ 368.618266][ T9476] netlink: 'syz.3.1865': attribute type 8 has an invalid length. [ 368.646802][ T9476] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1865'. [ 368.678643][ T9480] netlink: 'syz.0.1867': attribute type 39 has an invalid length. [ 368.921708][ T9491] netlink: 'syz.3.1872': attribute type 10 has an invalid length. [ 368.956518][ T9491] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 369.206119][ T9505] netlink: 'syz.0.1877': attribute type 29 has an invalid length. [ 369.273773][ T9506] netlink: 'syz.2.1879': attribute type 2 has an invalid length. [ 369.314227][ T9509] FAULT_INJECTION: forcing a failure. [ 369.314227][ T9509] name failslab, interval 1, probability 0, space 0, times 0 [ 369.377816][ T9509] CPU: 0 PID: 9509 Comm: syz.3.1880 Not tainted syzkaller #0 [ 369.385221][ T9509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 369.395276][ T9509] Call Trace: [ 369.398559][ T9509] [ 369.401494][ T9509] dump_stack_lvl+0x168/0x230 [ 369.406188][ T9509] ? show_regs_print_info+0x20/0x20 [ 369.411395][ T9509] ? load_image+0x3b0/0x3b0 [ 369.415907][ T9509] ? __might_sleep+0xf0/0xf0 [ 369.420498][ T9509] ? __lock_acquire+0x7c60/0x7c60 [ 369.425530][ T9509] should_fail+0x38c/0x4c0 [ 369.429961][ T9509] should_failslab+0x5/0x20 [ 369.434466][ T9509] slab_pre_alloc_hook+0x51/0xc0 [ 369.439405][ T9509] __kmalloc+0x6b/0x330 [ 369.443561][ T9509] ? iovec_from_user+0x83/0x370 [ 369.448429][ T9509] iovec_from_user+0x83/0x370 [ 369.453116][ T9509] __import_iovec+0x70/0x490 [ 369.457715][ T9509] import_iovec+0x6f/0xa0 [ 369.462055][ T9509] ___sys_recvmsg+0x420/0x4f0 [ 369.466750][ T9509] ? __sys_recvmsg+0x250/0x250 [ 369.471522][ T9509] ? trace_event_raw_event_lock+0x250/0x250 [ 369.477440][ T9509] ? __fdget+0x18b/0x210 [ 369.481689][ T9509] __x64_sys_recvmsg+0x1dd/0x2a0 [ 369.486635][ T9509] ? ___sys_recvmsg+0x4f0/0x4f0 [ 369.491489][ T9509] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 369.497486][ T9509] ? lockdep_hardirqs_on+0x94/0x140 [ 369.502689][ T9509] do_syscall_64+0x4c/0xa0 [ 369.507103][ T9509] ? clear_bhb_loop+0x30/0x80 [ 369.511784][ T9509] ? clear_bhb_loop+0x30/0x80 [ 369.516470][ T9509] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 369.522363][ T9509] RIP: 0033:0x7fd338425fc9 [ 369.526781][ T9509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.546384][ T9509] RSP: 002b:00007fd33668d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 369.554805][ T9509] RAX: ffffffffffffffda RBX: 00007fd33867cfa0 RCX: 00007fd338425fc9 [ 369.563039][ T9509] RDX: 0000000040012100 RSI: 0000200000000640 RDI: 0000000000000003 [ 369.571011][ T9509] RBP: 00007fd33668d090 R08: 0000000000000000 R09: 0000000000000000 [ 369.578982][ T9509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.586952][ T9509] R13: 00007fd33867d038 R14: 00007fd33867cfa0 R15: 00007ffe1417e9d8 [ 369.594945][ T9509] [ 369.756672][ T9516] __nla_validate_parse: 3 callbacks suppressed [ 369.756691][ T9516] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1882'. [ 369.790635][ T9511] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1881'. [ 370.017359][ T9511] erspan0: refused to change device tx_queue_len [ 370.054340][ T9511] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 370.985812][ T9549] FAULT_INJECTION: forcing a failure. [ 370.985812][ T9549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.088442][ T9549] CPU: 1 PID: 9549 Comm: syz.3.1896 Not tainted syzkaller #0 [ 371.095859][ T9549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 371.105911][ T9549] Call Trace: [ 371.109185][ T9549] [ 371.112113][ T9549] dump_stack_lvl+0x168/0x230 [ 371.116806][ T9549] ? show_regs_print_info+0x20/0x20 [ 371.122019][ T9549] ? load_image+0x3b0/0x3b0 [ 371.126532][ T9549] ? __lock_acquire+0x7c60/0x7c60 [ 371.131566][ T9549] should_fail+0x38c/0x4c0 [ 371.135995][ T9549] _copy_from_user+0x2e/0x170 [ 371.140673][ T9549] iovec_from_user+0x142/0x370 [ 371.145448][ T9549] __import_iovec+0x70/0x490 [ 371.150051][ T9549] import_iovec+0x6f/0xa0 [ 371.154388][ T9549] ___sys_recvmsg+0x420/0x4f0 [ 371.159076][ T9549] ? __sys_recvmsg+0x250/0x250 [ 371.163843][ T9549] ? __lock_acquire+0x7c60/0x7c60 [ 371.168888][ T9549] ? __fdget+0x18b/0x210 [ 371.173138][ T9549] __x64_sys_recvmsg+0x1dd/0x2a0 [ 371.178081][ T9549] ? ___sys_recvmsg+0x4f0/0x4f0 [ 371.182932][ T9549] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 371.188931][ T9549] ? lockdep_hardirqs_on+0x94/0x140 [ 371.194139][ T9549] do_syscall_64+0x4c/0xa0 [ 371.198547][ T9549] ? clear_bhb_loop+0x30/0x80 [ 371.203221][ T9549] ? clear_bhb_loop+0x30/0x80 [ 371.207906][ T9549] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 371.213797][ T9549] RIP: 0033:0x7fd338425fc9 [ 371.218212][ T9549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.237819][ T9549] RSP: 002b:00007fd33668d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 371.246244][ T9549] RAX: ffffffffffffffda RBX: 00007fd33867cfa0 RCX: 00007fd338425fc9 [ 371.254217][ T9549] RDX: 0000000000000000 RSI: 0000200000002700 RDI: 0000000000000003 [ 371.262193][ T9549] RBP: 00007fd33668d090 R08: 0000000000000000 R09: 0000000000000000 [ 371.270168][ T9549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.278137][ T9549] R13: 00007fd33867d038 R14: 00007fd33867cfa0 R15: 00007ffe1417e9d8 [ 371.286122][ T9549] [ 371.305095][ T9554] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1894'. [ 371.619843][ T9570] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1900'. [ 371.775128][ T9583] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1908'. [ 371.859393][ T9583] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 372.613636][ T9608] validate_nla: 10 callbacks suppressed [ 372.613667][ T9608] netlink: 'syz.1.1916': attribute type 2 has an invalid length. [ 372.694198][ T9608] netlink: 'syz.1.1916': attribute type 8 has an invalid length. [ 372.795071][ T9608] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1916'. [ 372.916214][ T9625] netlink: 'syz.0.1924': attribute type 10 has an invalid length. [ 372.978337][ T9625] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1924'. [ 373.050980][ T9625] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 373.205250][ T9635] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1926'. [ 374.097512][ T9665] netlink: 'syz.4.1936': attribute type 2 has an invalid length. [ 374.132941][ T9665] netlink: 'syz.4.1936': attribute type 8 has an invalid length. [ 374.188432][ T9665] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1936'. [ 374.391903][ T9670] FAULT_INJECTION: forcing a failure. [ 374.391903][ T9670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.494031][ T9670] CPU: 1 PID: 9670 Comm: syz.3.1938 Not tainted syzkaller #0 [ 374.501446][ T9670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 374.511506][ T9670] Call Trace: [ 374.514788][ T9670] [ 374.517717][ T9670] dump_stack_lvl+0x168/0x230 [ 374.522403][ T9670] ? show_regs_print_info+0x20/0x20 [ 374.527609][ T9670] ? load_image+0x3b0/0x3b0 [ 374.532119][ T9670] ? __lock_acquire+0x7c60/0x7c60 [ 374.537147][ T9670] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 374.543307][ T9670] should_fail+0x38c/0x4c0 [ 374.547736][ T9670] _copy_from_user+0x2e/0x170 [ 374.552420][ T9670] ___sys_recvmsg+0x129/0x4f0 [ 374.557110][ T9670] ? __sys_recvmsg+0x250/0x250 [ 374.561885][ T9670] ? trace_event_raw_event_lock+0x250/0x250 [ 374.567780][ T9670] ? perf_trace_lock+0xdf/0x370 [ 374.572655][ T9670] ? __fdget+0x18b/0x210 [ 374.576900][ T9670] __x64_sys_recvmsg+0x1dd/0x2a0 [ 374.581843][ T9670] ? ___sys_recvmsg+0x4f0/0x4f0 [ 374.586696][ T9670] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 374.592697][ T9670] ? lockdep_hardirqs_on+0x94/0x140 [ 374.597901][ T9670] do_syscall_64+0x4c/0xa0 [ 374.602316][ T9670] ? clear_bhb_loop+0x30/0x80 [ 374.606994][ T9670] ? clear_bhb_loop+0x30/0x80 [ 374.611674][ T9670] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 374.617568][ T9670] RIP: 0033:0x7fd338425fc9 [ 374.621986][ T9670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.641595][ T9670] RSP: 002b:00007fd33668d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 374.650017][ T9670] RAX: ffffffffffffffda RBX: 00007fd33867cfa0 RCX: 00007fd338425fc9 [ 374.657998][ T9670] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 374.665976][ T9670] RBP: 00007fd33668d090 R08: 0000000000000000 R09: 0000000000000000 [ 374.673953][ T9670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.681926][ T9670] R13: 00007fd33867d038 R14: 00007fd33867cfa0 R15: 00007ffe1417e9d8 [ 374.689914][ T9670] [ 375.362167][ T9682] netlink: 'syz.4.1943': attribute type 13 has an invalid length. [ 375.392172][ T9682] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1943'. [ 375.453037][ T9694] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1947'. [ 375.620563][ T9682] erspan0: refused to change device tx_queue_len [ 375.646818][ T9682] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 375.944255][ T9704] netlink: 'syz.4.1950': attribute type 10 has an invalid length. [ 375.963978][ T9704] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1950'. [ 375.985989][ T9704] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 376.006631][ T9711] netlink: 'syz.3.1951': attribute type 29 has an invalid length. [ 376.017681][ T9711] netlink: 'syz.3.1951': attribute type 29 has an invalid length. [ 377.006569][ T9746] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1962'. [ 377.295018][ T9742] netlink: 'syz.3.1961': attribute type 13 has an invalid length. [ 377.324018][ T9742] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1961'. [ 377.543289][ T9742] erspan0: refused to change device tx_queue_len [ 377.555076][ T9742] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 377.597174][ T9772] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1968'. [ 377.633883][ T9772] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 377.806108][ T9781] FAULT_INJECTION: forcing a failure. [ 377.806108][ T9781] name failslab, interval 1, probability 0, space 0, times 0 [ 377.869217][ T9781] CPU: 0 PID: 9781 Comm: syz.4.1971 Not tainted syzkaller #0 [ 377.876666][ T9781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 377.886751][ T9781] Call Trace: [ 377.890065][ T9781] [ 377.893025][ T9781] dump_stack_lvl+0x168/0x230 [ 377.897754][ T9781] ? show_regs_print_info+0x20/0x20 [ 377.903001][ T9781] ? load_image+0x3b0/0x3b0 [ 377.907561][ T9781] ? __might_sleep+0xf0/0xf0 [ 377.912191][ T9781] ? __lock_acquire+0x7c60/0x7c60 [ 377.917276][ T9781] should_fail+0x38c/0x4c0 [ 377.921755][ T9781] should_failslab+0x5/0x20 [ 377.926285][ T9781] slab_pre_alloc_hook+0x51/0xc0 [ 377.931271][ T9781] __kmalloc_node_track_caller+0x68/0x3a0 [ 377.937018][ T9781] ? netlink_sendmsg+0x645/0xbc0 [ 377.941988][ T9781] ? kmem_cache_alloc_node+0x162/0x2d0 [ 377.947473][ T9781] ? __alloc_skb+0xf4/0x750 [ 377.952018][ T9781] ? netlink_sendmsg+0x645/0xbc0 [ 377.957004][ T9781] __alloc_skb+0x22c/0x750 [ 377.961484][ T9781] netlink_sendmsg+0x645/0xbc0 [ 377.966321][ T9781] ? netlink_getsockopt+0x560/0x560 [ 377.971565][ T9781] ? aa_sock_msg_perm+0x94/0x150 [ 377.976543][ T9781] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 377.981846][ T9781] ? security_socket_sendmsg+0x7c/0xa0 [ 377.987318][ T9781] ? netlink_getsockopt+0x560/0x560 [ 377.992533][ T9781] ____sys_sendmsg+0x5a2/0x8c0 [ 377.997331][ T9781] ? memset+0x1e/0x40 [ 378.001321][ T9781] ? __sys_sendmsg_sock+0x30/0x30 [ 378.006385][ T9781] ? import_iovec+0x6f/0xa0 [ 378.010914][ T9781] ___sys_sendmsg+0x1f0/0x260 [ 378.015653][ T9781] ? __sys_sendmsg+0x250/0x250 [ 378.020489][ T9781] ? trace_event_raw_event_lock+0x250/0x250 [ 378.026395][ T9781] ? vfs_write+0x84d/0xd00 [ 378.030894][ T9781] ? __fdget+0x18b/0x210 [ 378.035161][ T9781] __se_sys_sendmsg+0x190/0x250 [ 378.040034][ T9781] ? __x64_sys_sendmsg+0x80/0x80 [ 378.044978][ T9781] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 378.051021][ T9781] ? lockdep_hardirqs_on+0x94/0x140 [ 378.056248][ T9781] do_syscall_64+0x4c/0xa0 [ 378.060668][ T9781] ? clear_bhb_loop+0x30/0x80 [ 378.065347][ T9781] ? clear_bhb_loop+0x30/0x80 [ 378.070043][ T9781] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 378.075938][ T9781] RIP: 0033:0x7f3ba6790fc9 [ 378.080368][ T9781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.099977][ T9781] RSP: 002b:00007f3ba49f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 378.108397][ T9781] RAX: ffffffffffffffda RBX: 00007f3ba69e7fa0 RCX: 00007f3ba6790fc9 [ 378.116367][ T9781] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 378.124345][ T9781] RBP: 00007f3ba49f8090 R08: 0000000000000000 R09: 0000000000000000 [ 378.132315][ T9781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.140284][ T9781] R13: 00007f3ba69e8038 R14: 00007f3ba69e7fa0 R15: 00007ffdce922bd8 [ 378.148314][ T9781] [ 378.900684][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.907050][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.725878][ T9811] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1982'. [ 380.091858][ T9826] validate_nla: 1 callbacks suppressed [ 380.091875][ T9826] netlink: 'syz.0.1984': attribute type 13 has an invalid length. [ 380.156383][ T9826] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1984'. [ 380.232741][ T9826] erspan0: refused to change device tx_queue_len [ 380.269539][ T9826] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 380.272845][ T9833] netlink: 'syz.3.1986': attribute type 10 has an invalid length. [ 380.383727][ T9833] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1986'. [ 380.443898][ T9833] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 381.028066][ T9849] netlink: 'syz.2.1991': attribute type 10 has an invalid length. [ 381.138016][ T9849] device hsr_slave_0 left promiscuous mode [ 381.172238][ T9860] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1999'. [ 381.507033][ T9849] device hsr_slave_1 left promiscuous mode [ 382.185282][ T9892] FAULT_INJECTION: forcing a failure. [ 382.185282][ T9892] name failslab, interval 1, probability 0, space 0, times 0 [ 382.198277][ T9892] CPU: 1 PID: 9892 Comm: syz.4.2011 Not tainted syzkaller #0 [ 382.205669][ T9892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 382.215739][ T9892] Call Trace: [ 382.219032][ T9892] [ 382.221971][ T9892] dump_stack_lvl+0x168/0x230 [ 382.226669][ T9892] ? show_regs_print_info+0x20/0x20 [ 382.231886][ T9892] ? load_image+0x3b0/0x3b0 [ 382.236431][ T9892] ? verify_lock_unused+0x140/0x140 [ 382.241659][ T9892] should_fail+0x38c/0x4c0 [ 382.246096][ T9892] should_failslab+0x5/0x20 [ 382.250613][ T9892] slab_pre_alloc_hook+0x51/0xc0 [ 382.255567][ T9892] ? inet_frag_find+0x8ec/0x1e10 [ 382.260518][ T9892] kmem_cache_alloc+0x3d/0x290 [ 382.265301][ T9892] inet_frag_find+0x8ec/0x1e10 [ 382.270079][ T9892] ? ip6frag_obj_hashfn+0x20/0x20 [ 382.275132][ T9892] ? inet_frag_destroy_rcu+0xc0/0xc0 [ 382.280448][ T9892] nf_ct_frag6_gather+0x6e5/0x1ca0 [ 382.285570][ T9892] ? __lock_acquire+0x12d9/0x7c60 [ 382.290636][ T9892] ? ipv6_defrag+0x3a0/0x3a0 [ 382.295253][ T9892] ipv6_defrag+0x2a5/0x3a0 [ 382.299675][ T9892] ? defrag6_net_exit+0xb0/0xb0 [ 382.304532][ T9892] nf_hook_slow+0xb9/0x200 [ 382.308954][ T9892] ? refcount_add+0x80/0x80 [ 382.313464][ T9892] NF_HOOK+0x1cb/0x360 [ 382.317535][ T9892] ? refcount_add+0x80/0x80 [ 382.322038][ T9892] ? ip6_rcv_core+0x1620/0x1620 [ 382.326897][ T9892] ? refcount_add+0x80/0x80 [ 382.331405][ T9892] ? ip6_rcv_finish_core+0x420/0x420 [ 382.336684][ T9892] __netif_receive_skb+0xcc/0x290 [ 382.341699][ T9892] ? ktime_get_with_offset+0x2d7/0x320 [ 382.347156][ T9892] netif_receive_skb+0x19e/0x6c0 [ 382.352085][ T9892] ? netif_receive_skb_core+0x210/0x210 [ 382.357629][ T9892] tun_rx_batched+0x5a1/0x6d0 [ 382.362292][ T9892] ? local_bh_enable+0x20/0x20 [ 382.367043][ T9892] ? __local_bh_enable_ip+0x12a/0x1b0 [ 382.372405][ T9892] ? read_lock_is_recursive+0x10/0x10 [ 382.377764][ T9892] ? __local_bh_enable_ip+0x12a/0x1b0 [ 382.383123][ T9892] ? _local_bh_enable+0xa0/0xa0 [ 382.387955][ T9892] ? skb_copy_datagram_from_iter+0x5ab/0x6a0 [ 382.393933][ T9892] tun_get_user+0x23f0/0x38d0 [ 382.398620][ T9892] ? tun_ring_recv+0xc30/0xc30 [ 382.403382][ T9892] ? rcu_lock_release+0x5/0x20 [ 382.408137][ T9892] ? __lock_acquire+0x7c60/0x7c60 [ 382.413163][ T9892] tun_chr_write_iter+0x112/0x1e0 [ 382.418175][ T9892] vfs_write+0x712/0xd00 [ 382.422411][ T9892] ? file_end_write+0x250/0x250 [ 382.427252][ T9892] ? __fget_files+0x40f/0x480 [ 382.431920][ T9892] ? __fdget_pos+0x1e2/0x370 [ 382.436493][ T9892] ? ksys_write+0x71/0x250 [ 382.440898][ T9892] ksys_write+0x14d/0x250 [ 382.445214][ T9892] ? __ia32_sys_read+0x80/0x80 [ 382.449972][ T9892] ? lockdep_hardirqs_on+0x94/0x140 [ 382.455419][ T9892] do_syscall_64+0x4c/0xa0 [ 382.459818][ T9892] ? clear_bhb_loop+0x30/0x80 [ 382.464480][ T9892] ? clear_bhb_loop+0x30/0x80 [ 382.469142][ T9892] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 382.475023][ T9892] RIP: 0033:0x7f3ba6790fc9 [ 382.479428][ T9892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.499021][ T9892] RSP: 002b:00007f3ba49f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 382.507424][ T9892] RAX: ffffffffffffffda RBX: 00007f3ba69e7fa0 RCX: 00007f3ba6790fc9 [ 382.515383][ T9892] RDX: 000000000000fdef RSI: 0000200000000100 RDI: 00000000000000c8 [ 382.523340][ T9892] RBP: 00007f3ba49f8090 R08: 0000000000000000 R09: 0000000000000000 [ 382.531296][ T9892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.539253][ T9892] R13: 00007f3ba69e8038 R14: 00007f3ba69e7fa0 R15: 00007ffdce922bd8 [ 382.547224][ T9892] [ 382.600453][ T9898] netlink: 'syz.3.2012': attribute type 10 has an invalid length. [ 382.608303][ T9898] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2012'. [ 382.649613][ T9898] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 382.831530][ T9904] netlink: 'syz.1.2016': attribute type 10 has an invalid length. [ 382.870266][ T9904] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2016'. [ 382.916274][ T9904] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 383.047468][ T9914] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2021'. [ 383.102120][ T9917] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2020'. [ 383.141261][ T9921] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.2023'. [ 383.179354][ T9921] netlink: get zone limit has 8 unknown bytes [ 383.296609][ T9923] netlink: 'syz.3.2024': attribute type 21 has an invalid length. [ 383.317896][ T9923] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2024'. [ 383.417853][ T9930] FAULT_INJECTION: forcing a failure. [ 383.417853][ T9930] name failslab, interval 1, probability 0, space 0, times 0 [ 383.430809][ T9930] CPU: 1 PID: 9930 Comm: syz.3.2026 Not tainted syzkaller #0 [ 383.438186][ T9930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 383.448248][ T9930] Call Trace: [ 383.451532][ T9930] [ 383.454457][ T9930] dump_stack_lvl+0x168/0x230 [ 383.459131][ T9930] ? show_regs_print_info+0x20/0x20 [ 383.464320][ T9930] ? load_image+0x3b0/0x3b0 [ 383.468820][ T9930] should_fail+0x38c/0x4c0 [ 383.473229][ T9930] should_failslab+0x5/0x20 [ 383.477714][ T9930] slab_pre_alloc_hook+0x51/0xc0 [ 383.482633][ T9930] ? radix_tree_node_alloc+0x7e/0x3a0 [ 383.487991][ T9930] kmem_cache_alloc+0x3d/0x290 [ 383.492740][ T9930] radix_tree_node_alloc+0x7e/0x3a0 [ 383.497927][ T9930] idr_get_free+0x2af/0xa60 [ 383.502420][ T9930] idr_alloc_cyclic+0x19e/0x530 [ 383.507258][ T9930] ? idr_alloc+0x2b0/0x2b0 [ 383.511658][ T9930] ? do_raw_spin_lock+0x11d/0x280 [ 383.516670][ T9930] ? __radix_tree_preload+0x3cf/0x450 [ 383.522022][ T9930] ? btf_alloc_id+0x2e/0x180 [ 383.526603][ T9930] btf_alloc_id+0x4d/0x180 [ 383.531002][ T9930] btf_new_fd+0x6bc/0x910 [ 383.535319][ T9930] __sys_bpf+0x51c/0x670 [ 383.539548][ T9930] ? bpf_link_show_fdinfo+0x340/0x340 [ 383.544910][ T9930] ? vtime_user_exit+0x2dc/0x400 [ 383.549835][ T9930] __x64_sys_bpf+0x78/0x90 [ 383.554238][ T9930] do_syscall_64+0x4c/0xa0 [ 383.558645][ T9930] ? clear_bhb_loop+0x30/0x80 [ 383.563309][ T9930] ? clear_bhb_loop+0x30/0x80 [ 383.567967][ T9930] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 383.573840][ T9930] RIP: 0033:0x7fd338425fc9 [ 383.578240][ T9930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.597830][ T9930] RSP: 002b:00007fd33668d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 383.606225][ T9930] RAX: ffffffffffffffda RBX: 00007fd33867cfa0 RCX: 00007fd338425fc9 [ 383.614181][ T9930] RDX: 0000000000000020 RSI: 0000200000000100 RDI: 0000000000000012 [ 383.622219][ T9930] RBP: 00007fd33668d090 R08: 0000000000000000 R09: 0000000000000000 [ 383.630172][ T9930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 383.638125][ T9930] R13: 00007fd33867d038 R14: 00007fd33867cfa0 R15: 00007ffe1417e9d8 [ 383.646115][ T9930] [ 383.950625][ T9938] FAULT_INJECTION: forcing a failure. [ 383.950625][ T9938] name failslab, interval 1, probability 0, space 0, times 0 [ 384.009171][ T9938] CPU: 1 PID: 9938 Comm: syz.1.2031 Not tainted syzkaller #0 [ 384.016582][ T9938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 384.026647][ T9938] Call Trace: [ 384.029939][ T9938] [ 384.032876][ T9938] dump_stack_lvl+0x168/0x230 [ 384.037569][ T9938] ? show_regs_print_info+0x20/0x20 [ 384.042779][ T9938] ? load_image+0x3b0/0x3b0 [ 384.047306][ T9938] ? __might_sleep+0xf0/0xf0 [ 384.051903][ T9938] ? __lock_acquire+0x7c60/0x7c60 [ 384.056943][ T9938] should_fail+0x38c/0x4c0 [ 384.061376][ T9938] should_failslab+0x5/0x20 [ 384.065880][ T9938] slab_pre_alloc_hook+0x51/0xc0 [ 384.070826][ T9938] kmem_cache_alloc_node+0x47/0x2d0 [ 384.076029][ T9938] ? __alloc_skb+0xf4/0x750 [ 384.080536][ T9938] ? mark_lock+0x94/0x320 [ 384.084879][ T9938] __alloc_skb+0xf4/0x750 [ 384.089223][ T9938] alloc_skb_with_frags+0xa7/0x730 [ 384.094352][ T9938] ? trace_event_raw_event_lock+0x250/0x250 [ 384.100261][ T9938] sock_alloc_send_pskb+0x853/0x980 [ 384.105488][ T9938] ? sock_kzfree_s+0x50/0x50 [ 384.110098][ T9938] packet_sendmsg+0x33e5/0x4fe0 [ 384.114973][ T9938] ? __lock_acquire+0x12d9/0x7c60 [ 384.120006][ T9938] ? __might_sleep+0xf0/0xf0 [ 384.124618][ T9938] ? aa_sk_perm+0x7b4/0x8f0 [ 384.129130][ T9938] ? packet_getsockopt+0x950/0x950 [ 384.134261][ T9938] ? aa_sock_msg_perm+0x94/0x150 [ 384.139205][ T9938] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 384.144501][ T9938] ? security_socket_sendmsg+0x7c/0xa0 [ 384.149967][ T9938] ? packet_getsockopt+0x950/0x950 [ 384.155091][ T9938] ____sys_sendmsg+0x5a2/0x8c0 [ 384.159867][ T9938] ? memset+0x1e/0x40 [ 384.163858][ T9938] ? __sys_sendmsg_sock+0x30/0x30 [ 384.168906][ T9938] ? import_iovec+0x6f/0xa0 [ 384.173425][ T9938] ___sys_sendmsg+0x1f0/0x260 [ 384.178114][ T9938] ? __sys_sendmsg+0x250/0x250 [ 384.182896][ T9938] ? trace_event_raw_event_lock+0x250/0x250 [ 384.188793][ T9938] ? vfs_write+0x84d/0xd00 [ 384.193242][ T9938] ? __fdget+0x18b/0x210 [ 384.197496][ T9938] __se_sys_sendmsg+0x190/0x250 [ 384.202357][ T9938] ? __x64_sys_sendmsg+0x80/0x80 [ 384.207298][ T9938] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 384.213302][ T9938] ? lockdep_hardirqs_on+0x94/0x140 [ 384.218510][ T9938] do_syscall_64+0x4c/0xa0 [ 384.223103][ T9938] ? clear_bhb_loop+0x30/0x80 [ 384.227783][ T9938] ? clear_bhb_loop+0x30/0x80 [ 384.232472][ T9938] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 384.238368][ T9938] RIP: 0033:0x7fa20d90efc9 [ 384.242786][ T9938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.262399][ T9938] RSP: 002b:00007fa20bb76038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.270825][ T9938] RAX: ffffffffffffffda RBX: 00007fa20db65fa0 RCX: 00007fa20d90efc9 [ 384.278805][ T9938] RDX: 0000000000000000 RSI: 0000200000000fc0 RDI: 0000000000000003 [ 384.286781][ T9938] RBP: 00007fa20bb76090 R08: 0000000000000000 R09: 0000000000000000 [ 384.294755][ T9938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.302731][ T9938] R13: 00007fa20db66038 R14: 00007fa20db65fa0 R15: 00007ffd465450b8 [ 384.310726][ T9938] [ 384.759299][ T9953] netlink: 166 bytes leftover after parsing attributes in process `syz.1.2033'. [ 384.876624][ T9957] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2033'. [ 384.892148][ T9959] netlink: 'syz.2.2038': attribute type 10 has an invalid length. [ 384.914995][ T9959] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2038'. [ 384.942752][ T9959] device virt_wifi0 entered promiscuous mode [ 384.993095][ T9959] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 403.019082][ T21] Bluetooth: hci6: command 0x0409 tx timeout [ 403.025883][ T21] Bluetooth: hci5: command 0x0409 tx timeout [ 404.139067][ T21] Bluetooth: hci7: command 0x0409 tx timeout [ 404.299054][ T21] Bluetooth: hci9: command 0x0409 tx timeout [ 404.305677][ T21] Bluetooth: hci8: command 0x0409 tx timeout [ 405.099013][ T21] Bluetooth: hci5: command 0x041b tx timeout [ 405.105527][ T21] Bluetooth: hci6: command 0x041b tx timeout [ 406.218999][ T21] Bluetooth: hci7: command 0x041b tx timeout [ 406.379079][ T21] Bluetooth: hci8: command 0x041b tx timeout [ 406.385214][ T21] Bluetooth: hci9: command 0x041b tx timeout [ 407.181072][ T21] Bluetooth: hci6: command 0x040f tx timeout [ 407.188414][ T21] Bluetooth: hci5: command 0x040f tx timeout [ 408.299000][ T21] Bluetooth: hci7: command 0x040f tx timeout [ 408.459068][ T21] Bluetooth: hci9: command 0x040f tx timeout [ 408.466237][ T21] Bluetooth: hci8: command 0x040f tx timeout [ 409.259192][ T21] Bluetooth: hci5: command 0x0419 tx timeout [ 409.265286][ T21] Bluetooth: hci6: command 0x0419 tx timeout [ 410.379015][ T21] Bluetooth: hci7: command 0x0419 tx timeout [ 410.539016][ T21] Bluetooth: hci8: command 0x0419 tx timeout [ 410.545093][ T21] Bluetooth: hci9: command 0x0419 tx timeout [ 463.659233][ T2856] Bluetooth: hci10: command 0x0409 tx timeout [ 463.738963][ T2856] Bluetooth: hci11: command 0x0409 tx timeout [ 464.859070][ T2856] Bluetooth: hci12: command 0x0409 tx timeout [ 464.939225][ T2856] Bluetooth: hci14: command 0x0409 tx timeout [ 464.945453][ T2856] Bluetooth: hci13: command 0x0409 tx timeout [ 465.739224][ T2856] Bluetooth: hci10: command 0x041b tx timeout [ 465.819052][ T2856] Bluetooth: hci11: command 0x041b tx timeout [ 466.939044][ T2856] Bluetooth: hci12: command 0x041b tx timeout [ 467.019249][ T2856] Bluetooth: hci13: command 0x041b tx timeout [ 467.025482][ T2856] Bluetooth: hci14: command 0x041b tx timeout [ 467.819220][ T2856] Bluetooth: hci10: command 0x040f tx timeout [ 467.898971][ T2856] Bluetooth: hci11: command 0x040f tx timeout [ 469.019030][ T2856] Bluetooth: hci12: command 0x040f tx timeout [ 469.099310][ T2856] Bluetooth: hci14: command 0x040f tx timeout [ 469.106271][ T2856] Bluetooth: hci13: command 0x040f tx timeout [ 469.899215][ T2856] Bluetooth: hci10: command 0x0419 tx timeout [ 469.979082][ T2856] Bluetooth: hci11: command 0x0419 tx timeout [ 471.099086][ T2856] Bluetooth: hci12: command 0x0419 tx timeout [ 471.179222][ T2856] Bluetooth: hci13: command 0x0419 tx timeout [ 471.185381][ T2856] Bluetooth: hci14: command 0x0419 tx timeout [ 490.968920][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 490.975896][ C1] rcu: 0-....: (11 ticks this GP) idle=595/1/0x4000000000000002 softirq=24773/24774 fqs=5247 [ 490.986992][ C1] (detected by 1, t=10502 jiffies, g=27673, q=1160) [ 490.993675][ C1] Sending NMI from CPU 1 to CPUs 0: [ 490.998878][ C0] NMI backtrace for cpu 0 [ 490.998888][ C0] CPU: 0 PID: 9988 Comm: syz.3.2051 Not tainted syzkaller #0 [ 490.998903][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 490.998912][ C0] RIP: 0010:kasan_check_range+0xb/0x290 [ 490.998935][ C0] Code: 31 c0 c3 0f 0b b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 00 00 cc cc 00 00 cc cc 00 00 cc cc b0 01 48 85 f6 0f 84 a4 01 00 00 <41> 57 41 56 53 49 89 f8 49 01 f0 0f 82 57 02 00 00 49 89 f8 49 c1 [ 490.998947][ C0] RSP: 0018:ffffc90000006f78 EFLAGS: 00000002 [ 490.998960][ C0] RAX: 0000000000000001 RBX: 0000000000000015 RCX: ffffffff815c1079 [ 490.998969][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8ffbd0c0 [ 490.998978][ C0] RBP: ffffc900000071d0 R08: dffffc0000000000 R09: fffffbfff1ff7a19 [ 490.998989][ C0] R10: fffffbfff1ff7a19 R11: 1ffffffff1ff7a18 R12: 00000000e3db5d87 [ 490.998999][ C0] R13: ffff88802208bb80 R14: 0000000038c72385 R15: ffff88802208c708 [ 490.999009][ C0] FS: 00007fd33668d6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 490.999021][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 490.999031][ C0] CR2: 00007fd33664bd58 CR3: 000000006477d000 CR4: 00000000003506f0 [ 490.999044][ C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 490.999052][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 490.999067][ C0] Call Trace: [ 490.999072][ C0] [ 490.999083][ C0] __lock_acquire+0x12d9/0x7c60 [ 490.999103][ C0] ? mark_lock+0x94/0x320 [ 490.999121][ C0] ? __lock_acquire+0x12d9/0x7c60 [ 490.999137][ C0] ? mark_lock+0x94/0x320 [ 490.999151][ C0] ? verify_lock_unused+0x140/0x140 [ 490.999165][ C0] ? __lock_acquire+0x12d9/0x7c60 [ 490.999185][ C0] ? __lock_acquire+0x12d9/0x7c60 [ 490.999202][ C0] lock_acquire+0x197/0x3f0 [ 490.999216][ C0] ? rcu_lock_acquire+0x5/0x30 [ 490.999232][ C0] ? read_lock_is_recursive+0x10/0x10 [ 490.999249][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 490.999263][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 490.999279][ C0] rcu_lock_acquire+0x2a/0x30 [ 490.999290][ C0] ? rcu_lock_acquire+0x5/0x30 [ 490.999301][ C0] perf_output_begin_forward+0x97/0xa30 [ 490.999319][ C0] ? perf_prepare_sample+0x1680/0x1cb0 [ 490.999334][ C0] ? __perf_cgroup_move+0x140/0x140 [ 490.999349][ C0] ? perf_callchain+0x190/0x190 [ 490.999366][ C0] perf_event_output_forward+0x15c/0x280 [ 490.999379][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 490.999393][ C0] ? perf_get_page_size+0x420/0x420 [ 490.999407][ C0] ? tracing_gen_ctx_irq_test+0xb3/0x130 [ 490.999424][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 490.999438][ C0] __perf_event_overflow+0x364/0x530 [ 490.999454][ C0] perf_tp_event+0x32c/0xb50 [ 490.999469][ C0] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 490.999481][ C0] ? __perf_event_overflow+0x415/0x530 [ 490.999506][ C0] ? trace_event_raw_event_lock+0x250/0x250 [ 490.999527][ C0] perf_trace_run_bpf_submit+0xf3/0x1c0 [ 490.999543][ C0] perf_trace_preemptirq_template+0x2be/0x380 [ 490.999559][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 490.999575][ C0] ? trace_event_raw_event_preemptirq_template+0x270/0x270 [ 490.999590][ C0] ? __irq_exit_rcu+0x13b/0x220 [ 490.999603][ C0] ? irq_exit_rcu+0x20/0x20 [ 490.999616][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 490.999629][ C0] trace_irq_enable_rcuidle+0x108/0x180 [ 490.999643][ C0] trace_hardirqs_on+0x57/0x80 [ 490.999656][ C0] asm_sysvec_irq_work+0x16/0x20 [ 490.999669][ C0] RIP: 0010:rcu_read_unlock_special+0x84/0x480 [ 490.999683][ C0] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 6d 13 9e 7e 41 f7 c6 00 00 f0 00 74 45 <48> c7 44 24 20 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b [ 490.999694][ C0] RSP: 0018:ffffc90000007ae0 EFLAGS: 00000206 [ 490.999704][ C0] RAX: 26545a03fd873000 RBX: 1ffff92000000f60 RCX: 26545a03fd873000 [ 490.999715][ C0] RDX: dffffc0000000000 RSI: ffffffff8a0b18a0 RDI: ffffffff8a59a880 [ 490.999724][ C0] RBP: ffffc90000007bb8 R08: dffffc0000000000 R09: ffffed1017207662 [ 490.999734][ C0] R10: ffffed1017207662 R11: 1ffff11017207661 R12: ffffffff8c120c00 [ 490.999744][ C0] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000001 [ 490.999762][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 490.999780][ C0] __rcu_read_unlock+0x78/0xd0 [ 490.999793][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 490.999808][ C0] ieee80211_iterate_active_interfaces_atomic+0x132/0x140 [ 490.999825][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 490.999840][ C0] __hrtimer_run_queues+0x53d/0xc40 [ 490.999855][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 490.999867][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 490.999882][ C0] ? hw_scan_work+0xeb0/0xeb0 [ 490.999899][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 490.999918][ C0] hrtimer_run_softirq+0x176/0x240 [ 490.999934][ C0] handle_softirqs+0x328/0x820 [ 490.999948][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 490.999963][ C0] ? do_softirq+0x200/0x200 [ 490.999977][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 490.999991][ C0] __irq_exit_rcu+0x12f/0x220 [ 491.000004][ C0] ? irq_exit_rcu+0x20/0x20 [ 491.000020][ C0] irq_exit_rcu+0x5/0x20 [ 491.000031][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 491.000046][ C0] [ 491.000050][ C0] [ 491.000055][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 491.000073][ C0] RIP: 0010:preempt_schedule_irq+0xac/0x150 [ 491.000088][ C0] Code: 44 24 20 f6 44 24 21 02 74 0b 0f 0b 48 f7 03 08 00 00 00 74 70 bf 01 00 00 00 e8 cf d7 9f f7 e8 9a 4f cc f7 fb bf 01 00 00 00 ef b5 ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24 [ 491.000098][ C0] RSP: 0018:ffffc90002faf780 EFLAGS: 00000282 [ 491.000108][ C0] RAX: 26545a03fd873000 RBX: ffff88802208bb80 RCX: 26545a03fd873000 [ 491.000119][ C0] RDX: dffffc0000000000 RSI: ffffffff8a0b18a0 RDI: 0000000000000001 [ 491.000128][ C0] RBP: ffffc90002faf830 R08: dffffc0000000000 R09: ffffed1017207662 [ 491.000138][ C0] R10: ffffed1017207662 R11: 1ffff11017207661 R12: 0000000000000000 [ 491.000148][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920005f5ef0 [ 491.000165][ C0] ? __cond_resched+0xb0/0xb0 [ 491.000179][ C0] ? rcu_is_watching+0x11/0xa0 [ 491.000193][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 491.000206][ C0] irqentry_exit+0x63/0x70 [ 491.000218][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 491.000231][ C0] RIP: 0010:try_to_unlazy+0x3e1/0x6d0 [ 491.000247][ C0] Code: 24 e8 a3 14 ad ff c6 05 05 25 8b 0b 01 48 c7 c7 00 b6 16 8a be 02 03 00 00 48 c7 c2 a0 b6 16 8a e8 84 ef d3 07 e8 ff a4 99 ff fa fb ff ff 49 83 c6 30 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 [ 491.000257][ C0] RSP: 0018:ffffc90002faf8f8 EFLAGS: 00000287 [ 491.000268][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 491.000275][ C0] RDX: dffffc0000000000 RSI: ffffffff8a0b18a0 RDI: 00000000ffffffff [ 491.000285][ C0] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed1017207662 [ 491.000294][ C0] R10: ffffed1017207662 R11: 1ffff11017207661 R12: ffffc90002fafc60 [ 491.000304][ C0] R13: dffffc0000000000 R14: ffffc90002fafc40 R15: ffff88802097e758 [ 491.000321][ C0] ? try_to_unlazy+0x3e1/0x6d0 [ 491.000338][ C0] complete_walk+0x113/0x350 [ 491.000353][ C0] path_openat+0x20a2/0x2f30 [ 491.000375][ C0] ? lock_chain_count+0x20/0x20 [ 491.000393][ C0] ? do_filp_open+0x3e0/0x3e0 [ 491.000404][ C0] ? perf_trace_lock+0xdf/0x370 [ 491.000417][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 491.000433][ C0] ? trace_event_raw_event_lock+0x250/0x250 [ 491.000451][ C0] do_filp_open+0x1b3/0x3e0 [ 491.000465][ C0] ? vfs_tmpfile+0x300/0x300 [ 491.000486][ C0] ? _raw_spin_unlock+0x24/0x40 [ 491.000497][ C0] ? alloc_fd+0x598/0x630 [ 491.000515][ C0] do_sys_openat2+0x142/0x4a0 [ 491.000534][ C0] ? do_sys_open+0xe0/0xe0 [ 491.000549][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 491.000566][ C0] __x64_sys_openat+0x135/0x160 [ 491.000583][ C0] do_syscall_64+0x4c/0xa0 [ 491.000595][ C0] ? clear_bhb_loop+0x30/0x80 [ 491.000606][ C0] ? clear_bhb_loop+0x30/0x80 [ 491.000619][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 491.000633][ C0] RIP: 0033:0x7fd338425fc9 [ 491.000646][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.000657][ C0] RSP: 002b:00007fd33668d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 491.000669][ C0] RAX: ffffffffffffffda RBX: 00007fd33867cfa0 RCX: 00007fd338425fc9 [ 491.000679][ C0] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 491.000689][ C0] RBP: 00007fd3384a8f91 R08: 0000000000000000 R09: 0000000000000000 [ 491.000697][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 491.000705][ C0] R13: 00007fd33867d038 R14: 00007fd33867cfa0 R15: 00007ffe1417e9d8 [ 491.000721][ C0] [ 496.140031][ T4239] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-... } 10997 jiffies s: 10685 root: 0x1/. [ 496.167713][ T4239] rcu: blocking rcu_node structures (internal RCU debug): [ 496.186125][ T4239] Task dump for CPU 0: [ 496.190303][ T4239] task:syz.3.2051 state:R running task stack:23296 pid: 9988 ppid: 4193 flags:0x0000400c [ 496.201222][ T4239] Call Trace: [ 496.204503][ T4239] [ 496.207434][ T4239] ? perf_trace_preemptirq_template+0x2be/0x380 [ 496.214446][ T4239] ? rcu_nmi_exit+0x6f/0xf0 [ 496.219153][ T4239] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 496.225144][ T4239] ? lock_chain_count+0x20/0x20 [ 496.230025][ T4239] ? rcu_is_watching+0x11/0xa0 [ 496.234789][ T4239] ? trace_hardirqs_off_finish+0xca/0x1f0 [ 496.240538][ T4239] ? sysvec_apic_timer_interrupt+0x80/0xc0 [ 496.246346][ T4239] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 496.252536][ T4239] ? preempt_schedule_irq+0xac/0x150 [ 496.257827][ T4239] ? __cond_resched+0xb0/0xb0 [ 496.262531][ T4239] ? rcu_is_watching+0x11/0xa0 [ 496.267297][ T4239] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 496.273125][ T4239] ? irqentry_exit+0x63/0x70 [ 496.277712][ T4239] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 496.283901][ T4239] ? try_to_unlazy+0x3e1/0x6d0 [ 496.288672][ T4239] ? try_to_unlazy+0x3e1/0x6d0 [ 496.293469][ T4239] ? complete_walk+0x113/0x350 [ 496.298238][ T4239] ? path_openat+0x20a2/0x2f30 [ 496.303051][ T4239] ? lock_chain_count+0x20/0x20 [ 496.307919][ T4239] ? do_filp_open+0x3e0/0x3e0 [ 496.312615][ T4239] ? perf_trace_lock+0xdf/0x370 [ 496.317472][ T4239] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 496.323654][ T4239] ? trace_event_raw_event_lock+0x250/0x250 [ 496.329587][ T4239] ? do_filp_open+0x1b3/0x3e0 [ 496.334265][ T4239] ? vfs_tmpfile+0x300/0x300 [ 496.338905][ T4239] ? _raw_spin_unlock+0x24/0x40 [ 496.343759][ T4239] ? alloc_fd+0x598/0x630 [ 496.348096][ T4239] ? do_sys_openat2+0x142/0x4a0 [ 496.352977][ T4239] ? do_sys_open+0xe0/0xe0 [ 496.357396][ T4239] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 496.363581][ T4239] ? __x64_sys_openat+0x135/0x160 [ 496.368612][ T4239] ? do_syscall_64+0x4c/0xa0 [ 496.373224][ T4239] ? clear_bhb_loop+0x30/0x80 [ 496.377906][ T4239] ? clear_bhb_loop+0x30/0x80 [ 496.382612][ T4239] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 496.388891][ T4239]