last executing test programs: 5.726751522s ago: executing program 2 (id=2754): r0 = socket$kcm(0x2, 0x200000000000003, 0x106) setsockopt$sock_attach_bpf(r0, 0x0, 0x16, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socket$kcm(0x18, 0x7, 0x0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd, 0x6}, 0x1101, 0x0, 0x0, 0x8, 0x6, 0x4080000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000680)="b9ff03316844268cb89e14f00800", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@ifindex=0x0, 0x26, 0x0, 0x9, &(0x7f0000000500)=[0x0], 0x1, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r7}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="2a0000001800000038e15608", @ANYRES32=r7, @ANYBLOB, @ANYRES64=r6], 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f0000000240), 0x0}, 0x20) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x27, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000005000000000000000900000018210000", @ANYRES32=r9, @ANYBLOB="00000000fbffffff1d603000100000008520000003000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000085000000280000001801000020756c2500000000002020207b1af8ff00000000bfa100deffffff0007010000f8ffffffb702000008000000b7030000050000008500000006000000dab10000ffffffff1800000000000000000000000800000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000186800000000000000000000ff0000009500000000000000"], &(0x7f0000000700)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', r5, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0x10, 0x3, 0x8e90}, 0x10, 0xffffffffffffffff, r9, 0x2, &(0x7f00000007c0)=[r8, r8, r9, r9], &(0x7f0000000800)=[{0x2, 0x3, 0x2, 0x3}, {0x2, 0x2, 0x7, 0xa}], 0x10, 0xf}, 0x94) ioctl$SIOCSIFHWADDR(r9, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@map=r8, r2, 0x5, 0x8, 0x0, @void, @value=r9, @void, @void, r6}, 0x20) recvmsg$unix(r9, &(0x7f00000009c0)={&(0x7f0000000900)=@abs, 0x6e, &(0x7f0000000980)}, 0x40000000) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000040000000000000000008500000027000000950000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a0053"], 0xfe33) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa6, 0xa6, 0x5, [@var={0x1, 0x0, 0x0, 0xe, 0x2}, @datasec={0xa, 0x5, 0x0, 0xf, 0x2, [{0x4, 0x0, 0x3}, {0x2, 0xcace, 0x6}, {0x4, 0x6b, 0x7}, {0x2, 0x2}, {0x2, 0x7, 0x6}], "d3fd"}, @ptr={0x5, 0x0, 0x0, 0x2, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x2}}, @int={0xd, 0x0, 0x0, 0x1, 0x0, 0x68, 0x0, 0x52}, @fwd={0x1}, @ptr]}, {0x0, [0x0, 0x0, 0x30]}}, &(0x7f0000001880)=""/4096, 0xc5, 0x1000, 0x1, 0xa}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r11, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000002c0)={'veth0\x00', 0xe00}) 4.839321398s ago: executing program 4 (id=2762): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_config_ext={0x9, 0x2}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079d}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f00000000c0)="f516033b3bd489886569796ecd", &(0x7f0000000140)=""/29}, 0x20) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) 4.783755829s ago: executing program 2 (id=2763): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1c, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000003e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff892f00004000633277fbac14142ce934a0a662079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 3.922004353s ago: executing program 2 (id=2769): r0 = socket$kcm(0x2, 0x200000000000003, 0x106) setsockopt$sock_attach_bpf(r0, 0x0, 0x16, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socket$kcm(0x18, 0x7, 0x0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd, 0x6}, 0x1101, 0x0, 0x0, 0x8, 0x6, 0x4080000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000680)="b9ff03316844268cb89e14f00800", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@ifindex=0x0, 0x26, 0x0, 0x9, &(0x7f0000000500)=[0x0], 0x1, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r7}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="2a0000001800000038e15608", @ANYRES32=r7, @ANYBLOB, @ANYRES64=r6], 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000500)='%-5lx \x00'}, 0x20) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x27, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000005000000000000000900000018210000", @ANYRES32=r9, @ANYBLOB="00000000fbffffff1d603000100000008520000003000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000085000000280000001801000020756c2500000000002020207b1af8ff00000000bfa100deffffff0007010000f8ffffffb702000008000000b7030000050000008500000006000000dab10000ffffffff1800000000000000000000000800000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000186800000000000000000000ff0000009500000000000000"], &(0x7f0000000700)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', r5, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0x10, 0x3, 0x8e90}, 0x10, 0xffffffffffffffff, r9, 0x2, &(0x7f00000007c0)=[r8, r8, r9, r9], &(0x7f0000000800)=[{0x2, 0x3, 0x2, 0x3}, {0x2, 0x2, 0x7, 0xa}], 0x10, 0xf}, 0x94) ioctl$SIOCSIFHWADDR(r9, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@map=r8, r2, 0x5, 0x8, 0x0, @void, @value=r9, @void, @void, r6}, 0x20) recvmsg$unix(r9, &(0x7f00000009c0)={&(0x7f0000000900)=@abs, 0x6e, &(0x7f0000000980)}, 0x40000000) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000040000000000000000008500000027000000950000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a0053"], 0xfe33) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa6, 0xa6, 0x5, [@var={0x1, 0x0, 0x0, 0xe, 0x2}, @datasec={0xa, 0x5, 0x0, 0xf, 0x2, [{0x4, 0x0, 0x3}, {0x2, 0xcace, 0x6}, {0x4, 0x6b, 0x7}, {0x2, 0x2}, {0x2, 0x7, 0x6}], "d3fd"}, @ptr={0x5, 0x0, 0x0, 0x2, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x2}}, @int={0xd, 0x0, 0x0, 0x1, 0x0, 0x68, 0x0, 0x52}, @fwd={0x1}, @ptr]}, {0x0, [0x0, 0x0, 0x30]}}, &(0x7f0000001880)=""/4096, 0xc5, 0x1000, 0x1, 0xa}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r11, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001605000008004e002d3501000000000095004100000000006916360000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf530000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000002c0)={'veth0\x00', 0xe00}) 3.904756994s ago: executing program 0 (id=2770): socket$kcm(0x2, 0x200000000000001, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r2 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000001280), 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='cpuacct.usage\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000000c0)=0x5, 0x12) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xb3b, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002ac0)={@map, 0x2e, 0x0, 0x75af, &(0x7f00000029c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000002a00)=[0x0], &(0x7f0000002a40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002a80)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000002b40)=@base={0x21, 0x0, 0xc, 0x559, 0xa, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)={@map, 0xffffffffffffffff, 0xd, 0x20, 0x0, @void, @void, @void, @value, r6}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe2f, 0xffffff99, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd65e0ffff00122c00631177fbac14030a44079f03fe8000ff80000000000000000008ffff3a050b038da1880b251810a59d943be3f4aed50ea5a6b8686731cb89ef77523c899b699eeaa0eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000380)="b101000000353b", &(0x7f0000000000), 0x0, 0x700}, 0x2c) 3.817112895s ago: executing program 3 (id=2771): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d649379071c33390e418ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad95a1c57a05f4f979ea13201bafe4f0f6ea508000000a0c548552b5708005647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177dc46c4604bca492ecec37e83efceefd7ca2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6fe2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679043e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d264e77124d18d4f5987baab97a9bfbd8f185b5631820420b75b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21579fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b1a4090631e1b9e16587bb5f721303e6b89e5c54d680ac66d09af0a1f5b83e69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a4734487062437da23e1efa6ef7674108aaa3ffac859c3577c2637bb3bdc69bc365b1f20dba96b8acca62f3f80045318de0facf2ed44b814e842c2a520159bb6c320cec0910c0b8bd3d547bdfba2e0bb24d117ed0388afd37affbad2f9c77c9c1314a16ffe64f5e3744a2fffd7039670f5706e589a4c3868ffd08cd0e05023f4d8f95712207450e39a7550f42419bf30b31cac3fa1404e449c1cee0fff0d86a98dc9bf38a1e0b4fa5225dae5e781b43545b51681b2158f41bab16f8a7df758b00ffa6e8522bd83e320ff897f177367278a1f0cdbde082d9983308b40c39740b6fd1ba4aa10c3a19c7374278d00"/1952], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000500)=r3, 0x4) sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000240)={0x2, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x200440e4) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x9, 0x1, 0xfd, 0x0, 0x0, 0x7fef, 0x20002, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r5}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4050000000000007910510000000000070000000000000095000000000000002dd8c15f081784e3f39a5b7c26b75286788b822103e350af3f5e40b74a436157e1c89d619d54dd3e6907eaec007b914fb036329df8146290d276d9736f7556fd"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x1000, 0x3, 0x6, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x58, &(0x7f0000000340)}, 0x10) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)}, 0x0) 2.896958611s ago: executing program 0 (id=2772): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/1952], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x2, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x200440e4) 2.805439512s ago: executing program 4 (id=2773): socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000017000095"], &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) 2.656195605s ago: executing program 3 (id=2774): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000001280), 0x4) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20008840) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x4, 0x2, 0x0, {0xa, 0x4e21, 0x333, @remote}}}, 0x80, 0x0}, 0x4000000) socket$kcm(0x1e, 0x1, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/19, 0x13}, 0x10100) 2.528896627s ago: executing program 4 (id=2775): r0 = socket$kcm(0x2, 0x200000000000003, 0x106) setsockopt$sock_attach_bpf(r0, 0x0, 0x16, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socket$kcm(0x18, 0x7, 0x0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd, 0x6}, 0x1101, 0x0, 0x0, 0x8, 0x6, 0x4080000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000680)="b9ff03316844268cb89e14f00800", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@ifindex=0x0, 0x26, 0x0, 0x9, &(0x7f0000000500)=[0x0], 0x1, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r7}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="2a0000001800000038e15608", @ANYRES32=r7, @ANYBLOB, @ANYRES64=r6], 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f0000000240), 0x0}, 0x20) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x27, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000005000000000000000900000018210000", @ANYRES32=r9, @ANYBLOB="00000000fbffffff1d603000100000008520000003000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000085000000280000001801000020756c2500000000002020207b1af8ff00000000bfa100deffffff0007010000f8ffffffb702000008000000b7030000050000008500000006000000dab10000ffffffff1800000000000000000000000800000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000186800000000000000000000ff0000009500000000000000"], &(0x7f0000000700)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', r5, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0x10, 0x3, 0x8e90}, 0x10, 0xffffffffffffffff, r9, 0x2, &(0x7f00000007c0)=[r8, r8, r9, r9], &(0x7f0000000800)=[{0x2, 0x3, 0x2, 0x3}, {0x2, 0x2, 0x7, 0xa}], 0x10, 0xf}, 0x94) ioctl$SIOCSIFHWADDR(r9, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@map=r8, r2, 0x5, 0x8, 0x0, @void, @value=r9, @void, @void, r6}, 0x20) recvmsg$unix(r9, &(0x7f00000009c0)={&(0x7f0000000900)=@abs, 0x6e, &(0x7f0000000980)}, 0x40000000) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000040000000000000000008500000027000000950000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a0053"], 0xfe33) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa6, 0xa6, 0x5, [@var={0x1, 0x0, 0x0, 0xe, 0x2}, @datasec={0xa, 0x5, 0x0, 0xf, 0x2, [{0x4, 0x0, 0x3}, {0x2, 0xcace, 0x6}, {0x4, 0x6b, 0x7}, {0x2, 0x2}, {0x2, 0x7, 0x6}], "d3fd"}, @ptr={0x5, 0x0, 0x0, 0x2, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x2}}, @int={0xd, 0x0, 0x0, 0x1, 0x0, 0x68, 0x0, 0x52}, @fwd={0x1}, @ptr]}, {0x0, [0x0, 0x0, 0x30]}}, &(0x7f0000001880)=""/4096, 0xc5, 0x1000, 0x1, 0xa}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r11, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000002c0)={'veth0\x00', 0xe00}) 2.528103997s ago: executing program 0 (id=2776): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x0, 0xa, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100808, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/mnt\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r3}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (fail_nth: 2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa10000000000000701000012ffff"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) socket$kcm(0x10, 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$kcm(0xa, 0x2, 0x3a) 2.503414237s ago: executing program 2 (id=2777): perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0xf477, 0x61}, 0x8ac02, 0x3, 0x8, 0x0, 0x0, 0x200, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x20, 0x4, 0x0, 0x0, 0x5, 0x81402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000980), 0x7}, 0x80, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffff0000000000, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x2b, 0x1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_config_ext={0x9, 0x2}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x300000, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0xfd, 0x0, 0xffdffffffffffffa, 0x22048, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x3, 0x1}, 0x8080, 0x20000000000000, 0x0, 0x2, 0x0, 0xfffffffc, 0xffff}, 0x0, 0x0, r0, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x20000000000001a6, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0xe1c}, 0x116800, 0xca, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x3, 0xffffffffffffffff, 0x0) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYRES8=r2, @ANYRES8=r3], 0x9a) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xff22) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000002c0)='D', 0x1}], 0x1}, 0x20004040) sendmsg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 2.33710468s ago: executing program 3 (id=2778): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88caffff4000638477fbac14142ce934a0a662079f4b4d2f87e56dca6aab085013f288a81a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1c, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000003e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 1.980974296s ago: executing program 1 (id=2779): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x27) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r2, 0xffffffffffffffff, 0x4, r1}, 0x10) 1.845347349s ago: executing program 1 (id=2780): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x12, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) close(r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x8, 0x0, &(0x7f0000000180)="0005000000000001", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYRES8=r1], 0x9a) 1.792175869s ago: executing program 0 (id=2781): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000040)="b90103606989068c3c270040f000009e0ff008001fffffe1ffff8100632f080686dd00017f020001", 0x0, 0x104, 0x6000000000000000, 0x10c, 0x0, &(0x7f0000000400)="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"}, 0x50) 1.72727413s ago: executing program 1 (id=2782): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x7f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x403d87c21de2ff3f, &(0x7f0000000040)="b90103606989068c3c270040f000009e0ff008001fffffe1ffff8100632f080686dd00017f020001be", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 1.607859303s ago: executing program 2 (id=2783): socket$kcm(0x2, 0x200000000000001, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r2 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000001280), 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='cpuacct.usage\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000000c0)=0x5, 0x12) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xb3b, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002ac0)={@map, 0x2e, 0x0, 0x75af, &(0x7f00000029c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000002a00)=[0x0], &(0x7f0000002a40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002a80)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000002b40)=@base={0x21, 0x0, 0xc, 0x559, 0xa, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)={@map, 0xffffffffffffffff, 0xd, 0x20, 0x0, @void, @void, @void, @value, r6}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe2f, 0xffffff99, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd65e0ffff00122c00631177fbac14030a44079f03fe8000ff80000000000000000008ffff3a050b038da1880b251810a59d943be3f4aed50ea5a6b8686731cb89ef77523c899b699eeaa0eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000380)="b101000000353b", &(0x7f0000000000), 0x0, 0x700}, 0x2c) 1.597304093s ago: executing program 3 (id=2784): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/1952], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000500)=r3, 0x4) sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000240)={0x2, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x200440e4) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x9, 0x1, 0xfd, 0x0, 0x0, 0x7fef, 0x20002, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r5}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4050000000000007910510000000000070000000000000095000000000000002dd8c15f081784e3f39a5b7c26b75286788b822103e350af3f5e40b74a436157e1c89d619d54dd3e6907eaec007b914fb036329df8146290d276d9736f7556fd"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x1000, 0x3, 0x6, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x58, &(0x7f0000000340)}, 0x10) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)}, 0x0) 1.533044404s ago: executing program 4 (id=2785): socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) 1.441298455s ago: executing program 0 (id=2786): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_config_ext={0x9, 0x2}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079d}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f00000000c0)="f516033b3bd489886569796ecd", &(0x7f0000000140)=""/29}, 0x20) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) 1.440582775s ago: executing program 1 (id=2787): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/1952], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000500)=r2, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x2, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x200440e4) 1.001197293s ago: executing program 4 (id=2788): r0 = socket$kcm(0x2, 0x200000000000003, 0x106) setsockopt$sock_attach_bpf(r0, 0x0, 0x16, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socket$kcm(0x18, 0x7, 0x0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd, 0x6}, 0x1101, 0x0, 0x0, 0x8, 0x6, 0x4080000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000680)="b9ff03316844268cb89e14f00800", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@ifindex=0x0, 0x26, 0x0, 0x9, &(0x7f0000000500)=[0x0], 0x1, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r7}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="2a0000001800000038e15608", @ANYRES32=r7, @ANYBLOB, @ANYRES64=r6], 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000500)='%-5lx \x00'}, 0x20) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x27, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000005000000000000000900000018210000", @ANYRES32=r9, @ANYBLOB="00000000fbffffff1d603000100000008520000003000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000085000000280000001801000020756c2500000000002020207b1af8ff00000000bfa100deffffff0007010000f8ffffffb702000008000000b7030000050000008500000006000000dab10000ffffffff1800000000000000000000000800000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000186800000000000000000000ff0000009500000000000000"], &(0x7f0000000700)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', r5, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0x10, 0x3, 0x8e90}, 0x10, 0xffffffffffffffff, r9, 0x2, &(0x7f00000007c0)=[r8, r8, r9, r9], &(0x7f0000000800)=[{0x2, 0x3, 0x2, 0x3}, {0x2, 0x2, 0x7, 0xa}], 0x10, 0xf}, 0x94) ioctl$SIOCSIFHWADDR(r9, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@map=r8, r2, 0x5, 0x8, 0x0, @void, @value=r9, @void, @void, r6}, 0x20) recvmsg$unix(r9, &(0x7f00000009c0)={&(0x7f0000000900)=@abs, 0x6e, &(0x7f0000000980)}, 0x40000000) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000040000000000000000008500000027000000950000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a0053"], 0xfe33) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa6, 0xa6, 0x5, [@var={0x1, 0x0, 0x0, 0xe, 0x2}, @datasec={0xa, 0x5, 0x0, 0xf, 0x2, [{0x4, 0x0, 0x3}, {0x2, 0xcace, 0x6}, {0x4, 0x6b, 0x7}, {0x2, 0x2}, {0x2, 0x7, 0x6}], "d3fd"}, @ptr={0x5, 0x0, 0x0, 0x2, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x2}}, @int={0xd, 0x0, 0x0, 0x1, 0x0, 0x68, 0x0, 0x52}, @fwd={0x1}, @ptr]}, {0x0, [0x0, 0x0, 0x30]}}, &(0x7f0000001880)=""/4096, 0xc5, 0x1000, 0x1, 0xa}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r11, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000002c0)={'veth0\x00', 0xe00}) 727.800898ms ago: executing program 2 (id=2789): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x4, 0x6, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101, 0x7}, 0x5112, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x15, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r2}, 0x18) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000002b40)=@base={0x21, 0x0, 0xc, 0x559, 0xa, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)={@map, 0xffffffffffffffff, 0xd, 0x20, 0x0, @void, @void, @void, @value, r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2f, 0xffffff99, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd65e0ffff00122c00631177fbac14030a44079f03fe8000ff80000000000000000008ffff3a050b038da1880b251810a59d943be3f4aed50ea5a6b8686731cb89ef77523c899b699eeaa0eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000380)="b101000000353b", &(0x7f0000000000), 0x0, 0x700}, 0x2c) 445.694362ms ago: executing program 3 (id=2790): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r2, 0xffffffffffffffff, 0x4, r1}, 0x10) 191.090497ms ago: executing program 3 (id=2791): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x0, 0xa, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100808, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/mnt\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r3}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa10000000000000701000012ffff"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) socket$kcm(0x10, 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$kcm(0xa, 0x2, 0x3a) 96.045138ms ago: executing program 1 (id=2792): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x12, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) close(r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x8, 0x0, &(0x7f0000000180)="0005000000000001", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYRES8=r1], 0x9a) 93.733308ms ago: executing program 4 (id=2793): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5452, &(0x7f0000000100)) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xff0f, 0x0}, 0x3000c0c0) 0s ago: executing program 0 (id=2794): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="d8000000100081044e81f782db44b904021d080005000000e8fe552603600e1209000d0000000401a80016000a00144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e4dc3b90317008e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db7010000e006dcdf63951f215ce3bb9ad809d5e1cace140efdc0272ae6089ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701000000000000000000", 0xd8}], 0x1}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/221, 0xdd}, {&(0x7f0000000000)=""/103, 0x67}, {&(0x7f00000001c0)=""/2, 0x2}, {&(0x7f0000000200)=""/64, 0x40}], 0x4, &(0x7f0000000280)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}, 0x102) kernel console output (not intermixed with test programs): 45][ T8617] bpf_verifier_vlog+0x172/0x390 [ 296.142308][ T8617] __btf_verifier_log+0xd1/0x120 [ 296.147283][ T8617] ? btf_check_sec_info+0x330/0x330 [ 296.152522][ T8617] ? __virt_addr_valid+0x188/0x540 [ 296.157663][ T8617] btf_parse_hdr+0x3a1/0x7e0 [ 296.162273][ T8617] btf_new_fd+0x3c6/0x780 [ 296.166625][ T8617] __sys_bpf+0x57a/0x6d0 [ 296.170890][ T8617] ? bpf_link_show_fdinfo+0x340/0x340 [ 296.176295][ T8617] ? lock_chain_count+0x20/0x20 [ 296.181168][ T8617] __x64_sys_bpf+0x78/0x90 [ 296.185599][ T8617] do_syscall_64+0x4c/0xa0 [ 296.190051][ T8617] ? clear_bhb_loop+0x60/0xb0 [ 296.194737][ T8617] ? clear_bhb_loop+0x60/0xb0 [ 296.199443][ T8617] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 296.205371][ T8617] RIP: 0033:0x7ff8c058e9a9 [ 296.209825][ T8617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.229443][ T8617] RSP: 002b:00007ff8c1461038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 296.237959][ T8617] RAX: ffffffffffffffda RBX: 00007ff8c07b5fa0 RCX: 00007ff8c058e9a9 [ 296.245939][ T8617] RDX: 0000000000000020 RSI: 0000200000001500 RDI: 0000000000000012 [ 296.253923][ T8617] RBP: 00007ff8c1461090 R08: 0000000000000000 R09: 0000000000000000 [ 296.261896][ T8617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.269874][ T8617] R13: 0000000000000001 R14: 00007ff8c07b5fa0 R15: 00007ffc12846398 [ 296.277887][ T8617] [ 296.511031][ T8623] netlink: 'syz.3.1360': attribute type 10 has an invalid length. [ 296.568304][ T8627] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.1361'. [ 296.662633][ T8623] team0: Device hsr_slave_0 failed to register rx_handler [ 296.775136][ T8626] netlink: 'syz.4.1362': attribute type 10 has an invalid length. [ 296.786740][ T8627] device sit0 left promiscuous mode [ 297.180843][ T8630] device sit0 entered promiscuous mode [ 297.498272][ T8633] netlink: 'syz.3.1374': attribute type 10 has an invalid length. [ 297.538192][ T8633] team0: Device hsr_slave_0 failed to register rx_handler [ 297.660961][ T8639] netlink: 'syz.0.1373': attribute type 10 has an invalid length. [ 298.044767][ T4279] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 298.052658][ T4279] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 298.066050][ T4279] CPU: 1 PID: 4279 Comm: kworker/u5:5 Not tainted 6.1.146-syzkaller #0 [ 298.074374][ T4279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 298.084467][ T4279] Workqueue: hci2 hci_rx_work [ 298.089179][ T4279] Call Trace: [ 298.092466][ T4279] [ 298.095407][ T4279] dump_stack_lvl+0x168/0x22e [ 298.100104][ T4279] ? show_regs_print_info+0x12/0x12 [ 298.105315][ T4279] ? load_image+0x3b0/0x3b0 [ 298.109873][ T4279] sysfs_create_dir_ns+0x252/0x280 [ 298.115004][ T4279] ? hci_rx_work+0x3eb/0xd40 [ 298.119614][ T4279] ? sysfs_warn_dup+0xa0/0xa0 [ 298.124307][ T4279] ? do_raw_spin_unlock+0x11d/0x230 [ 298.129543][ T4279] kobject_add_internal+0x6b8/0xc80 [ 298.134766][ T4279] kobject_add+0x152/0x210 [ 298.139205][ T4279] ? kobject_init+0x1d0/0x1d0 [ 298.143896][ T4279] ? klist_children_get+0x50/0x50 [ 298.148951][ T4279] ? get_device_parent+0x121/0x3f0 [ 298.154078][ T4279] device_add+0x483/0xfb0 [ 298.158418][ T4279] ? kmem_cache_free+0xf7/0x290 [ 298.163290][ T4279] hci_conn_add_sysfs+0xd1/0x1e0 [ 298.168247][ T4279] le_conn_complete_evt+0xd1d/0x1320 [ 298.173579][ T4279] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 298.179841][ T4279] ? bt_info+0x150/0x150 [ 298.184102][ T4279] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 298.189751][ T4279] ? skb_pull_data+0xf7/0x200 [ 298.194450][ T4279] hci_le_conn_complete_evt+0x183/0x440 [ 298.200020][ T4279] ? hci_remote_host_features_evt+0x270/0x270 [ 298.206102][ T4279] hci_event_packet+0x791/0x1210 [ 298.211056][ T4279] ? bis_list+0x280/0x280 [ 298.215392][ T4279] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 298.221297][ T4279] ? kcov_remote_start+0x4c7/0x7e0 [ 298.226424][ T4279] ? mce_start+0x60/0x140 [ 298.230763][ T4279] ? hci_send_to_monitor+0x9c/0x4a0 [ 298.235996][ T4279] hci_rx_work+0x3eb/0xd40 [ 298.240431][ T4279] ? _raw_spin_unlock+0x40/0x40 [ 298.245302][ T4279] ? process_one_work+0x7a1/0x1160 [ 298.250423][ T4279] process_one_work+0x898/0x1160 [ 298.255387][ T4279] ? worker_detach_from_pool+0x240/0x240 [ 298.261024][ T4279] ? _raw_spin_lock_irq+0x7a/0xe0 [ 298.266070][ T4279] ? _raw_spin_lock_irq+0xab/0xe0 [ 298.271102][ T4279] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 298.276486][ T4279] ? kthread_data+0x4b/0xc0 [ 298.281016][ T4279] worker_thread+0xaa2/0x1250 [ 298.285722][ T4279] kthread+0x29d/0x330 [ 298.289839][ T4279] ? worker_clr_flags+0x1a0/0x1a0 [ 298.294876][ T4279] ? kthread_blkcg+0xd0/0xd0 [ 298.299571][ T4279] ret_from_fork+0x1f/0x30 [ 298.304013][ T4279] [ 298.307777][ T4279] kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 298.321104][ T4279] Bluetooth: hci2: failed to register connection device [ 298.329515][ T4279] Bluetooth: hci2: link tx timeout [ 298.334733][ T4279] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 298.342624][ T4279] Bluetooth: hci2: link tx timeout [ 298.347870][ T4279] Bluetooth: hci2: killing stalled connection 00:00:00:00:00:01 [ 298.355586][ T4279] Bluetooth: hci2: killing stalled connection 00:00:00:00:00:00 [ 298.363424][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 299.394251][ T8678] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.1378'. [ 299.536585][ T8678] device sit0 left promiscuous mode [ 300.351090][ T8681] device sit0 entered promiscuous mode [ 301.134942][ T8705] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1387'. [ 301.442913][ T8714] netlink: 'syz.4.1392': attribute type 10 has an invalid length. [ 302.975310][ T8748] syz.2.1402 (8748) used obsolete PPPIOCDETACH ioctl [ 303.501073][ T8765] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1418'. [ 303.726161][ T8768] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1409'. [ 303.737483][ T8765] device sit0 left promiscuous mode [ 303.862867][ T8766] device sit0 entered promiscuous mode [ 305.143057][ T8797] netlink: 'syz.4.1419': attribute type 10 has an invalid length. [ 305.171020][ T8797] team0: Device hsr_slave_0 failed to register rx_handler [ 305.256767][ T8803] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1421'. [ 305.341659][ T8803] device sit0 left promiscuous mode [ 305.556717][ T8811] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.1424'. [ 305.593332][ T8806] device sit0 entered promiscuous mode [ 306.251251][ T8811] device sit0 left promiscuous mode [ 306.590099][ T8816] device sit0 entered promiscuous mode [ 307.612572][ T8849] FAULT_INJECTION: forcing a failure. [ 307.612572][ T8849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.780430][ T8849] CPU: 0 PID: 8849 Comm: syz.1.1433 Not tainted 6.1.146-syzkaller #0 [ 307.788584][ T8849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 307.798678][ T8849] Call Trace: [ 307.801985][ T8849] [ 307.804935][ T8849] dump_stack_lvl+0x168/0x22e [ 307.809636][ T8849] ? show_regs_print_info+0x12/0x12 [ 307.814848][ T8849] ? load_image+0x3b0/0x3b0 [ 307.819380][ T8849] ? __might_fault+0xa6/0x120 [ 307.824092][ T8849] should_fail_ex+0x399/0x4d0 [ 307.828802][ T8849] copyout+0x1b/0x120 [ 307.832811][ T8849] _copy_to_iter+0x48f/0x1030 [ 307.837603][ T8849] ? iov_iter_init+0x1f0/0x1f0 [ 307.842398][ T8849] ? __virt_addr_valid+0x188/0x540 [ 307.847525][ T8849] ? __virt_addr_valid+0x465/0x540 [ 307.852702][ T8849] ? __phys_addr_symbol+0x2b/0x70 [ 307.857754][ T8849] ? __check_object_size+0x500/0xa40 [ 307.863066][ T8849] __skb_datagram_iter+0xde/0x740 [ 307.868127][ T8849] ? skb_copy_datagram_iter+0x290/0x290 [ 307.873705][ T8849] skb_copy_datagram_iter+0xd7/0x290 [ 307.879017][ T8849] netlink_recvmsg+0x2bd/0xd90 [ 307.883802][ T8849] ? netlink_sendmsg+0xbc0/0xbc0 [ 307.888764][ T8849] ? aa_sk_perm+0x7e5/0x920 [ 307.893290][ T8849] ? aa_af_perm+0x2b0/0x2b0 [ 307.897818][ T8849] ? __might_fault+0xa6/0x120 [ 307.902531][ T8849] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 307.907828][ T8849] ? security_socket_recvmsg+0x85/0xb0 [ 307.913310][ T8849] ? netlink_sendmsg+0xbc0/0xbc0 [ 307.918278][ T8849] ____sys_recvmsg+0x292/0x580 [ 307.923098][ T8849] ? __sys_recvmsg_sock+0x40/0x40 [ 307.928171][ T8849] ? import_iovec+0x6f/0xa0 [ 307.932714][ T8849] ___sys_recvmsg+0x1b2/0x510 [ 307.937419][ T8849] ? __sys_recvmsg+0x270/0x270 [ 307.942215][ T8849] ? __fget_files+0x44a/0x4d0 [ 307.946926][ T8849] ? __fdget+0x17c/0x200 [ 307.951193][ T8849] __x64_sys_recvmsg+0x1eb/0x2b0 [ 307.956153][ T8849] ? perf_trace_preemptirq_template+0x287/0x330 [ 307.962410][ T8849] ? ___sys_recvmsg+0x510/0x510 [ 307.967297][ T8849] ? lockdep_hardirqs_on+0x94/0x140 [ 307.972525][ T8849] do_syscall_64+0x4c/0xa0 [ 307.976974][ T8849] ? clear_bhb_loop+0x60/0xb0 [ 307.981664][ T8849] ? clear_bhb_loop+0x60/0xb0 [ 307.986379][ T8849] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 307.992293][ T8849] RIP: 0033:0x7f9a9bd8e9a9 [ 307.996727][ T8849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.016461][ T8849] RSP: 002b:00007f9a9cba1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 308.024910][ T8849] RAX: ffffffffffffffda RBX: 00007f9a9bfb5fa0 RCX: 00007f9a9bd8e9a9 [ 308.032917][ T8849] RDX: 0000000000002002 RSI: 00002000000002c0 RDI: 0000000000000005 [ 308.040911][ T8849] RBP: 00007f9a9cba1090 R08: 0000000000000000 R09: 0000000000000000 [ 308.048928][ T8849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.056928][ T8849] R13: 0000000000000000 R14: 00007f9a9bfb5fa0 R15: 00007ffd67792c28 [ 308.064920][ T8849] [ 308.587819][ T8866] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1440'. [ 308.619420][ T8869] netlink: 'syz.4.1442': attribute type 10 has an invalid length. [ 308.790872][ T8866] device sit0 left promiscuous mode [ 309.274767][ T8872] device sit0 entered promiscuous mode [ 310.095157][ T8895] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1449'. [ 311.041828][ T8918] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1457'. [ 311.143237][ T8920] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1456'. [ 311.397707][ T8918] device sit0 left promiscuous mode [ 311.900971][ T8921] device sit0 entered promiscuous mode [ 312.038781][ T8920] device sit0 left promiscuous mode [ 312.098348][ T8923] device sit0 entered promiscuous mode [ 313.134994][ T8959] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1468'. [ 313.241543][ T8961] netlink: 'syz.0.1469': attribute type 10 has an invalid length. [ 314.013552][ T8972] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1473'. [ 314.575651][ T8972] device sit0 left promiscuous mode [ 314.853474][ T8978] device sit0 entered promiscuous mode [ 314.955349][ T8987] netlink: 'syz.3.1478': attribute type 10 has an invalid length. [ 314.983571][ T8987] team0: Device hsr_slave_0 failed to register rx_handler [ 315.430094][ T8995] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1482'. [ 315.525511][ T8997] netlink: 'syz.3.1483': attribute type 10 has an invalid length. [ 315.814334][ T9011] netlink: 3752 bytes leftover after parsing attributes in process `syz.0.1488'. [ 315.995609][ T9018] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1491'. [ 316.086802][ T9018] device sit0 left promiscuous mode [ 316.560563][ T9022] device sit0 entered promiscuous mode [ 316.695162][ T9016] netlink: 'syz.4.1489': attribute type 10 has an invalid length. [ 317.004275][ T9038] netlink: 'syz.2.1497': attribute type 10 has an invalid length. [ 317.090085][ T9038] bond0: (slave macvlan0): Releasing backup interface [ 317.189513][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.196042][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.228909][ T9038] team0: Port device macvlan0 added [ 317.241461][ T9043] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1499'. [ 317.258691][ T9038] syz.2.1497 (9038) used greatest stack depth: 19720 bytes left [ 317.275404][ T9041] netlink: 'syz.3.1498': attribute type 10 has an invalid length. [ 319.746691][ T9079] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1509'. [ 319.834576][ T9083] netlink: 'syz.2.1512': attribute type 10 has an invalid length. [ 320.009626][ T9081] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1513'. [ 320.041578][ T9079] device sit0 left promiscuous mode [ 320.064268][ T9093] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.1515'. [ 320.702529][ T9084] device sit0 entered promiscuous mode [ 320.753696][ T9099] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1516'. [ 320.944193][ T9103] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1517'. [ 321.142221][ T9109] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1519'. [ 321.249212][ T9109] device sit0 left promiscuous mode [ 321.657862][ T9111] netlink: 'syz.3.1520': attribute type 10 has an invalid length. [ 322.086222][ T9115] device sit0 entered promiscuous mode [ 322.458872][ T9131] netlink: 'syz.0.1526': attribute type 10 has an invalid length. [ 322.506722][ T9134] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1528'. [ 322.612899][ T9134] device sit0 left promiscuous mode [ 322.846610][ T9144] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.1531'. [ 322.942120][ T9138] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1529'. [ 322.985384][ T9136] device sit0 entered promiscuous mode [ 323.232904][ T9157] netlink: 'syz.0.1534': attribute type 9 has an invalid length. [ 323.691690][ T9168] netlink: 'syz.3.1538': attribute type 10 has an invalid length. [ 323.765146][ T9171] netlink: 139024 bytes leftover after parsing attributes in process `syz.1.1539'. [ 323.871921][ T9176] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1541'. [ 324.458955][ T9188] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1546'. [ 324.499051][ T9191] netlink: 'syz.0.1545': attribute type 10 has an invalid length. [ 324.773761][ T9191] bond0: (slave netdevsim0): Releasing backup interface [ 325.014853][ T9191] device netdevsim0 entered promiscuous mode [ 325.046357][ T9191] team0: Port device netdevsim0 added [ 325.163066][ T9191] syz.0.1545 (9191) used greatest stack depth: 19656 bytes left [ 325.420267][ T9217] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1555'. [ 325.691955][ T9226] netlink: 'syz.3.1558': attribute type 10 has an invalid length. [ 325.728316][ T9226] team0: Device hsr_slave_0 failed to register rx_handler [ 325.817746][ T4279] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 325.825286][ T4279] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 325.983269][ T9238] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1565'. [ 326.203953][ T9245] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1566'. [ 326.450443][ T9255] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1569'. [ 326.899956][ T4279] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 326.908131][ T4279] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 327.087484][ T9302] netlink: 'syz.3.1577': attribute type 10 has an invalid length. [ 327.215313][ T9302] team0: Device hsr_slave_0 failed to register rx_handler [ 327.810237][ T9350] __nla_validate_parse: 4 callbacks suppressed [ 327.810255][ T9350] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1579'. [ 328.781476][ T9358] device sit0 left promiscuous mode [ 328.841526][ T9359] device sit0 entered promiscuous mode [ 329.021778][ T4279] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 329.029532][ T4279] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 329.211560][ T9376] netlink: 'syz.2.1587': attribute type 10 has an invalid length. [ 329.226555][ T9380] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1590'. [ 329.487551][ T9388] netlink: 'syz.1.1592': attribute type 10 has an invalid length. [ 329.495445][ T9388] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1592'. [ 329.557623][ T9389] netlink: 'syz.1.1592': attribute type 10 has an invalid length. [ 329.565513][ T9389] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1592'. [ 329.574614][ T9399] netlink: 'syz.0.1595': attribute type 10 has an invalid length. [ 329.591017][ T9399] team0: Device hsr_slave_0 failed to register rx_handler [ 329.645617][ T9388] netlink: 'syz.1.1592': attribute type 10 has an invalid length. [ 329.659899][ T9388] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1592'. [ 329.952508][ T9410] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1601'. [ 330.123582][ T4279] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 330.130795][ T9410] device sit0 left promiscuous mode [ 330.136537][ T4279] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 330.755938][ T9415] device sit0 entered promiscuous mode [ 330.940142][ T9420] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1605'. [ 330.960212][ T9418] netlink: 'syz.0.1604': attribute type 10 has an invalid length. [ 331.024543][ T9434] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1608'. [ 331.296148][ T9442] netlink: 'syz.4.1611': attribute type 10 has an invalid length. [ 331.350144][ T9442] team0: Device hsr_slave_0 failed to register rx_handler [ 331.459869][ T9450] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1615'. [ 331.673036][ T9456] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1626'. [ 331.701860][ T9459] netlink: 'syz.4.1617': attribute type 10 has an invalid length. [ 331.721806][ T9459] team0: Device hsr_slave_0 failed to register rx_handler [ 332.011823][ T9465] device sit0 left promiscuous mode [ 332.772701][ T9469] device sit0 entered promiscuous mode [ 332.912262][ T9472] netlink: 'syz.2.1621': attribute type 10 has an invalid length. [ 333.184161][ T9491] __nla_validate_parse: 1 callbacks suppressed [ 333.184184][ T9491] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1624'. [ 334.145303][ T9533] netlink: 'syz.0.1628': attribute type 10 has an invalid length. [ 334.168089][ T9533] team0: Device hsr_slave_0 failed to register rx_handler [ 334.348830][ T9539] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.1630'. [ 334.411934][ T9543] netlink: 'syz.1.1632': attribute type 10 has an invalid length. [ 334.488599][ T9543] team0: Device hsr_slave_0 failed to register rx_handler [ 334.504050][ T9546] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1634'. [ 334.691653][ T9552] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1636'. [ 334.739750][ T9552] device sit0 left promiscuous mode [ 335.162751][ T9557] device sit0 entered promiscuous mode [ 335.536729][ T9568] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1640'. [ 335.565953][ T9564] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1638'. [ 335.876094][ T9581] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1643'. [ 336.117270][ T9588] netlink: 'syz.1.1645': attribute type 10 has an invalid length. [ 336.160950][ T9588] team0: Device hsr_slave_0 failed to register rx_handler [ 337.145991][ T9622] netlink: 'syz.1.1649': attribute type 10 has an invalid length. [ 337.405425][ T9630] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1652'. [ 337.705034][ T9638] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.1653'. [ 337.755330][ T9640] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1656'. [ 337.812935][ T9638] device sit0 left promiscuous mode [ 338.274152][ T9643] device sit0 entered promiscuous mode [ 338.324670][ T9645] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1657'. [ 338.416166][ T9651] netlink: 'syz.1.1658': attribute type 10 has an invalid length. [ 338.535222][ T9657] netlink: 'syz.2.1660': attribute type 10 has an invalid length. [ 338.586435][ T9657] team0: Device hsr_slave_0 failed to register rx_handler [ 341.790480][ T9711] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1669'. [ 342.214362][ T9719] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.1673'. [ 342.245224][ T9717] netlink: 'syz.3.1672': attribute type 10 has an invalid length. [ 342.294766][ T9719] device sit0 left promiscuous mode [ 342.636156][ T9723] device sit0 entered promiscuous mode [ 343.063597][ T9741] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1680'. [ 343.150332][ T9741] device sit0 left promiscuous mode [ 344.137466][ T9743] device sit0 entered promiscuous mode [ 344.573418][ T9763] netlink: 'syz.2.1686': attribute type 10 has an invalid length. [ 344.661913][ T9767] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.1688'. [ 344.975524][ T9776] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1694'. [ 345.029457][ T9778] netlink: 'syz.2.1693': attribute type 10 has an invalid length. [ 345.091786][ T9778] team0: Device hsr_slave_0 failed to register rx_handler [ 345.116958][ T9776] device sit0 left promiscuous mode [ 345.736818][ T9783] device sit0 entered promiscuous mode [ 345.781209][ T9798] netlink: 'syz.2.1698': attribute type 10 has an invalid length. [ 346.034544][ T9803] FAULT_INJECTION: forcing a failure. [ 346.034544][ T9803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.100350][ T9803] CPU: 0 PID: 9803 Comm: syz.3.1700 Not tainted 6.1.146-syzkaller #0 [ 346.108494][ T9803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 346.118587][ T9803] Call Trace: [ 346.121903][ T9803] [ 346.124872][ T9803] dump_stack_lvl+0x168/0x22e [ 346.129591][ T9803] ? show_regs_print_info+0x12/0x12 [ 346.134839][ T9803] ? load_image+0x3b0/0x3b0 [ 346.139391][ T9803] ? __lock_acquire+0x7c50/0x7c50 [ 346.144459][ T9803] ? verify_lock_unused+0x140/0x140 [ 346.149704][ T9803] should_fail_ex+0x399/0x4d0 [ 346.154440][ T9803] _copy_from_user+0x2c/0x170 [ 346.159151][ T9803] ___sys_sendmsg+0x155/0x290 [ 346.163882][ T9803] ? __sys_sendmsg+0x270/0x270 [ 346.168697][ T9803] ? __lock_acquire+0x7c50/0x7c50 [ 346.173775][ T9803] ? __fdget+0x17c/0x200 [ 346.178060][ T9803] __se_sys_sendmsg+0x19e/0x270 [ 346.182955][ T9803] ? __x64_sys_sendmsg+0x80/0x80 [ 346.187948][ T9803] ? lockdep_hardirqs_on+0x94/0x140 [ 346.193196][ T9803] do_syscall_64+0x4c/0xa0 [ 346.197646][ T9803] ? clear_bhb_loop+0x60/0xb0 [ 346.202443][ T9803] ? clear_bhb_loop+0x60/0xb0 [ 346.207163][ T9803] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 346.213099][ T9803] RIP: 0033:0x7ff8c058e9a9 [ 346.214969][ T9808] netlink: 'syz.2.1703': attribute type 10 has an invalid length. [ 346.217535][ T9803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.217554][ T9803] RSP: 002b:00007ff8c1461038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.217576][ T9803] RAX: ffffffffffffffda RBX: 00007ff8c07b5fa0 RCX: 00007ff8c058e9a9 [ 346.217592][ T9803] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 346.269497][ T9803] RBP: 00007ff8c1461090 R08: 0000000000000000 R09: 0000000000000000 [ 346.277504][ T9803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.285507][ T9803] R13: 0000000000000000 R14: 00007ff8c07b5fa0 R15: 00007ffc12846398 [ 346.293697][ T9803] [ 346.601401][ T9819] netlink: 'syz.3.1708': attribute type 10 has an invalid length. [ 346.696756][ T9819] team0: Device hsr_slave_0 failed to register rx_handler [ 346.718880][ T9825] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1709'. [ 346.944032][ T4279] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 346.953053][ T4279] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 346.975323][ T9831] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.1712'. [ 347.034604][ T9831] device sit0 left promiscuous mode [ 347.546706][ T9836] device sit0 entered promiscuous mode [ 347.762059][ T9841] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1725'. [ 348.119070][ T9854] netlink: 'syz.1.1717': attribute type 10 has an invalid length. [ 348.634489][ T9870] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.1727'. [ 348.738019][ T9874] FAULT_INJECTION: forcing a failure. [ 348.738019][ T9874] name failslab, interval 1, probability 0, space 0, times 0 [ 348.887815][ T9874] CPU: 1 PID: 9874 Comm: syz.0.1728 Not tainted 6.1.146-syzkaller #0 [ 348.895968][ T9874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 348.906063][ T9874] Call Trace: [ 348.909378][ T9874] [ 348.912345][ T9874] dump_stack_lvl+0x168/0x22e [ 348.917066][ T9874] ? show_regs_print_info+0x12/0x12 [ 348.922311][ T9874] ? load_image+0x3b0/0x3b0 [ 348.926876][ T9874] ? __might_sleep+0xd0/0xd0 [ 348.931524][ T9874] ? __lock_acquire+0x7c50/0x7c50 [ 348.936591][ T9874] should_fail_ex+0x399/0x4d0 [ 348.941332][ T9874] should_failslab+0x5/0x20 [ 348.945904][ T9874] slab_pre_alloc_hook+0x59/0x310 [ 348.950991][ T9874] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 348.956759][ T9874] __kmem_cache_alloc_node+0x4f/0x260 [ 348.962173][ T9874] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 348.967937][ T9874] __kmalloc+0xa0/0x240 [ 348.972151][ T9874] tomoyo_realpath_from_path+0xdf/0x5d0 [ 348.977747][ T9874] tomoyo_path_number_perm+0x1e3/0x600 [ 348.983249][ T9874] ? tomoyo_path_number_perm+0x1b6/0x600 [ 348.988928][ T9874] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 348.994464][ T9874] ? __fget_files+0x28/0x4d0 [ 348.999119][ T9874] security_file_ioctl+0x6c/0xa0 [ 349.004100][ T9874] __se_sys_ioctl+0x48/0x170 [ 349.008728][ T9874] do_syscall_64+0x4c/0xa0 [ 349.013169][ T9874] ? clear_bhb_loop+0x60/0xb0 [ 349.017878][ T9874] ? clear_bhb_loop+0x60/0xb0 [ 349.022583][ T9874] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 349.028522][ T9874] RIP: 0033:0x7f95f7d8e9a9 [ 349.032949][ T9874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.052577][ T9874] RSP: 002b:00007f95f8b85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 349.061024][ T9874] RAX: ffffffffffffffda RBX: 00007f95f7fb5fa0 RCX: 00007f95f7d8e9a9 [ 349.069006][ T9874] RDX: 0000200000000500 RSI: 0000000040082406 RDI: 0000000000000003 [ 349.076987][ T9874] RBP: 00007f95f8b85090 R08: 0000000000000000 R09: 0000000000000000 [ 349.084963][ T9874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.092941][ T9874] R13: 0000000000000000 R14: 00007f95f7fb5fa0 R15: 00007ffe89227c28 [ 349.100935][ T9874] [ 349.143666][ T9874] ERROR: Out of memory at tomoyo_realpath_from_path. [ 349.387814][ T9883] netlink: 763 bytes leftover after parsing attributes in process `syz.4.1731'. [ 349.422186][ T9887] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1732'. [ 349.464465][ T9887] device sit0 left promiscuous mode [ 350.053395][ T9888] device sit0 entered promiscuous mode [ 350.212357][ T9895] netlink: 'syz.2.1736': attribute type 10 has an invalid length. [ 350.274887][ T9906] delete_channel: no stack [ 350.316717][ T9906] delete_channel: no stack [ 350.868414][ T9927] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1746'. [ 351.514955][ T9939] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1751'. [ 351.603023][ T9945] FAULT_INJECTION: forcing a failure. [ 351.603023][ T9945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.616408][ T9945] CPU: 1 PID: 9945 Comm: syz.3.1754 Not tainted 6.1.146-syzkaller #0 [ 351.624691][ T9945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 351.634755][ T9945] Call Trace: [ 351.638041][ T9945] [ 351.640970][ T9945] dump_stack_lvl+0x168/0x22e [ 351.645680][ T9945] ? show_regs_print_info+0x12/0x12 [ 351.650912][ T9945] ? load_image+0x3b0/0x3b0 [ 351.655488][ T9945] ? __lock_acquire+0x7c50/0x7c50 [ 351.656645][ T9946] netlink: 'syz.4.1753': attribute type 10 has an invalid length. [ 351.660542][ T9945] should_fail_ex+0x399/0x4d0 [ 351.660584][ T9945] _copy_from_user+0x2c/0x170 [ 351.660612][ T9945] ___sys_recvmsg+0x12b/0x510 [ 351.660646][ T9945] ? __sys_recvmsg+0x270/0x270 [ 351.687316][ T9945] ? common_file_perm+0x171/0x1c0 [ 351.692395][ T9945] ? __fget_files+0x44a/0x4d0 [ 351.697114][ T9945] ? __fdget+0x17c/0x200 [ 351.701373][ T9945] __x64_sys_recvmsg+0x1eb/0x2b0 [ 351.706407][ T9945] ? ___sys_recvmsg+0x510/0x510 [ 351.711307][ T9945] ? lockdep_hardirqs_on+0x94/0x140 [ 351.716533][ T9945] do_syscall_64+0x4c/0xa0 [ 351.720971][ T9945] ? clear_bhb_loop+0x60/0xb0 [ 351.725672][ T9945] ? clear_bhb_loop+0x60/0xb0 [ 351.730377][ T9945] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 351.736288][ T9945] RIP: 0033:0x7ff8c058e9a9 [ 351.740702][ T9945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.760327][ T9945] RSP: 002b:00007ff8c1461038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 351.768765][ T9945] RAX: ffffffffffffffda RBX: 00007ff8c07b5fa0 RCX: 00007ff8c058e9a9 [ 351.776743][ T9945] RDX: 0000000000002002 RSI: 00002000000002c0 RDI: 0000000000000003 [ 351.784719][ T9945] RBP: 00007ff8c1461090 R08: 0000000000000000 R09: 0000000000000000 [ 351.792709][ T9945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.800699][ T9945] R13: 0000000000000000 R14: 00007ff8c07b5fa0 R15: 00007ffc12846398 [ 351.808706][ T9945] [ 352.713802][ T9976] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.1765'. [ 352.929270][ T9978] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1766'. [ 353.077285][ T9987] netlink: 'syz.1.1770': attribute type 10 has an invalid length. [ 353.258676][ T9992] netlink: 'syz.0.1771': attribute type 10 has an invalid length. [ 353.302151][ T9992] team0: Device hsr_slave_0 failed to register rx_handler [ 353.363085][ T4279] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 353.370740][ T4279] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 354.394559][ T4279] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 354.402485][ T4279] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 354.496768][T10031] netlink: 'syz.3.1785': attribute type 10 has an invalid length. [ 354.518431][T10035] netlink: 'syz.2.1788': attribute type 10 has an invalid length. [ 354.527288][T10035] team0: Device hsr_slave_0 failed to register rx_handler [ 354.791337][T10043] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.1792'. [ 354.951431][T10047] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1794'. [ 355.766745][T10070] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1810'. [ 356.269452][T10078] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1802'. [ 356.758651][T10089] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1804'. [ 356.852227][T10096] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.1807'. [ 357.374007][T10114] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1813'. [ 357.811414][T10127] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.1817'. [ 358.834119][T10143] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1821'. [ 358.929580][T10145] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1823'. [ 359.414956][T10160] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1840'. [ 359.425704][T10162] netlink: 'syz.4.1830': attribute type 10 has an invalid length. [ 359.434560][T10162] team0: Device hsr_slave_0 failed to register rx_handler [ 359.743961][T10172] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.1834'. [ 361.122021][T10207] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1846'. [ 361.934135][T10226] netlink: 'syz.4.1850': attribute type 10 has an invalid length. [ 361.976786][T10227] netlink: 'syz.0.1851': attribute type 21 has an invalid length. [ 362.041168][T10227] netlink: 'syz.0.1851': attribute type 3 has an invalid length. [ 362.085721][T10227] __nla_validate_parse: 1 callbacks suppressed [ 362.085741][T10227] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1851'. [ 362.163262][T10236] FAULT_INJECTION: forcing a failure. [ 362.163262][T10236] name failslab, interval 1, probability 0, space 0, times 0 [ 362.200788][T10236] CPU: 1 PID: 10236 Comm: syz.2.1854 Not tainted 6.1.146-syzkaller #0 [ 362.209044][T10236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 362.219247][T10236] Call Trace: [ 362.222577][T10236] [ 362.225542][T10236] dump_stack_lvl+0x168/0x22e [ 362.230271][T10236] ? show_regs_print_info+0x12/0x12 [ 362.235515][T10236] ? load_image+0x3b0/0x3b0 [ 362.240070][T10236] ? __lock_acquire+0x7c50/0x7c50 [ 362.245151][T10236] should_fail_ex+0x399/0x4d0 [ 362.249876][T10236] should_failslab+0x5/0x20 [ 362.254419][T10236] slab_pre_alloc_hook+0x59/0x310 [ 362.259465][T10236] ? bpf_test_init+0xc0/0x150 [ 362.264173][T10236] __kmem_cache_alloc_node+0x4f/0x260 [ 362.269570][T10236] ? bpf_test_init+0xc0/0x150 [ 362.274261][T10236] __kmalloc+0xa0/0x240 [ 362.278441][T10236] bpf_test_init+0xc0/0x150 [ 362.282982][T10236] bpf_prog_test_run_xdp+0x359/0xe50 [ 362.288301][T10236] ? dev_put+0x80/0x80 [ 362.292398][T10236] ? dev_put+0x80/0x80 [ 362.296501][T10236] bpf_prog_test_run+0x31e/0x390 [ 362.301497][T10236] __sys_bpf+0x593/0x6d0 [ 362.305785][T10236] ? bpf_link_show_fdinfo+0x340/0x340 [ 362.311219][T10236] ? lock_chain_count+0x20/0x20 [ 362.316106][T10236] __x64_sys_bpf+0x78/0x90 [ 362.320569][T10236] do_syscall_64+0x4c/0xa0 [ 362.325014][T10236] ? clear_bhb_loop+0x60/0xb0 [ 362.329701][T10236] ? clear_bhb_loop+0x60/0xb0 [ 362.334394][T10236] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 362.340322][T10236] RIP: 0033:0x7fba1658e9a9 [ 362.344763][T10236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.364394][T10236] RSP: 002b:00007fba174e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 362.372818][T10236] RAX: ffffffffffffffda RBX: 00007fba167b5fa0 RCX: 00007fba1658e9a9 [ 362.380802][T10236] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 362.388784][T10236] RBP: 00007fba174e0090 R08: 0000000000000000 R09: 0000000000000000 [ 362.396763][T10236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.404812][T10236] R13: 0000000000000000 R14: 00007fba167b5fa0 R15: 00007ffcbb6c6108 [ 362.412804][T10236] [ 362.660417][T10242] netlink: 'syz.2.1856': attribute type 10 has an invalid length. [ 362.778431][T10248] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1860'. [ 362.888375][T10250] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1859'. [ 363.205080][T10261] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.1864'. [ 363.432145][T10265] netlink: 'syz.1.1865': attribute type 10 has an invalid length. [ 363.936535][T10278] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1871'. [ 364.014377][T10282] netlink: 'syz.3.1873': attribute type 10 has an invalid length. [ 364.360596][T10291] netlink: 'syz.0.1877': attribute type 10 has an invalid length. [ 364.977890][T10304] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1881'. [ 366.131165][T10318] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.1885'. [ 366.405051][T10327] netlink: 'syz.1.1889': attribute type 10 has an invalid length. [ 366.528669][T10332] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.1891'. [ 366.580611][T10332] device sit0 left promiscuous mode [ 366.965240][T10333] device sit0 entered promiscuous mode [ 367.114964][T10337] netlink: 'syz.0.1892': attribute type 10 has an invalid length. [ 367.334427][T10351] netlink: 'syz.3.1896': attribute type 21 has an invalid length. [ 367.380396][T10352] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1897'. [ 367.409780][T10351] netlink: 'syz.3.1896': attribute type 3 has an invalid length. [ 367.445459][T10351] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1896'. [ 368.397233][T10372] netlink: 'syz.3.1903': attribute type 10 has an invalid length. [ 368.589446][T10380] netlink: 'syz.1.1907': attribute type 10 has an invalid length. [ 368.702771][T10384] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.1909'. [ 368.722567][T10386] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1908'. [ 369.033063][T10398] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.1913'. [ 369.068385][T10399] netlink: 'syz.1.1914': attribute type 21 has an invalid length. [ 369.116120][T10399] netlink: 'syz.1.1914': attribute type 3 has an invalid length. [ 369.139678][T10399] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1914'. [ 369.652472][T10407] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.1915'. [ 370.071464][T10417] netlink: 'syz.2.1919': attribute type 10 has an invalid length. [ 370.195464][T10423] netlink: 'syz.3.1922': attribute type 10 has an invalid length. [ 370.366885][T10430] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1926'. [ 370.754044][T10440] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.1930'. [ 370.864359][T10445] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 370.914426][T10445] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 371.567674][T10455] validate_nla: 1 callbacks suppressed [ 371.567703][T10455] netlink: 'syz.2.1936': attribute type 10 has an invalid length. [ 371.698798][T10465] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1950'. [ 372.801756][T10492] netlink: 'syz.0.1947': attribute type 1 has an invalid length. [ 372.820900][T10492] __nla_validate_parse: 1 callbacks suppressed [ 372.820920][T10492] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.1947'. [ 372.985533][T10497] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 373.089550][T10497] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 373.347291][T10507] netlink: 'syz.2.1955': attribute type 10 has an invalid length. [ 373.489441][T10514] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.1958'. [ 374.688844][T10545] netlink: 'syz.2.1968': attribute type 1 has an invalid length. [ 374.745208][T10545] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.1968'. [ 374.912449][T10548] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 375.021467][T10548] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 375.109511][T10553] netlink: 'syz.4.1970': attribute type 10 has an invalid length. [ 375.562636][T10566] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.1974'. [ 375.897404][T10566] device sit0 left promiscuous mode [ 376.051386][T10578] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1979'. [ 376.149330][T10572] netlink: 'syz.0.1975': attribute type 2 has an invalid length. [ 376.166033][T10572] netlink: 'syz.0.1975': attribute type 8 has an invalid length. [ 376.201878][T10572] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1975'. [ 376.652568][T10589] netlink: 'syz.0.1983': attribute type 10 has an invalid length. [ 377.324106][T10608] FAULT_INJECTION: forcing a failure. [ 377.324106][T10608] name failslab, interval 1, probability 0, space 0, times 0 [ 377.366365][T10608] CPU: 1 PID: 10608 Comm: syz.4.1992 Not tainted 6.1.146-syzkaller #0 [ 377.374614][T10608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 377.384705][T10608] Call Trace: [ 377.388017][T10608] [ 377.390985][T10608] dump_stack_lvl+0x168/0x22e [ 377.395704][T10608] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 377.401916][T10608] ? show_regs_print_info+0x12/0x12 [ 377.407162][T10608] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 377.413395][T10608] should_fail_ex+0x399/0x4d0 [ 377.418137][T10608] should_failslab+0x5/0x20 [ 377.422711][T10608] slab_pre_alloc_hook+0x59/0x310 [ 377.427780][T10608] ? slab_pre_alloc_hook+0x1/0x310 [ 377.432941][T10608] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 377.438718][T10608] __kmem_cache_alloc_node+0x4f/0x260 [ 377.444149][T10608] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 377.449941][T10608] __kmalloc+0xa0/0x240 [ 377.454169][T10608] tomoyo_realpath_from_path+0xdf/0x5d0 [ 377.459805][T10608] tomoyo_path_number_perm+0x1e3/0x600 [ 377.465318][T10608] ? tomoyo_path_number_perm+0x1b6/0x600 [ 377.471005][T10608] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 377.476526][T10608] ? irqentry_enter+0x33/0x50 [ 377.481299][T10608] ? __fget_files+0x28/0x4d0 [ 377.485956][T10608] security_file_ioctl+0x6c/0xa0 [ 377.490947][T10608] __se_sys_ioctl+0x48/0x170 [ 377.495591][T10608] do_syscall_64+0x4c/0xa0 [ 377.500050][T10608] ? clear_bhb_loop+0x60/0xb0 [ 377.504777][T10608] ? clear_bhb_loop+0x60/0xb0 [ 377.509496][T10608] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 377.515448][T10608] RIP: 0033:0x7fcd1f58e9a9 [ 377.519903][T10608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.539564][T10608] RSP: 002b:00007fcd20488038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 377.548034][T10608] RAX: ffffffffffffffda RBX: 00007fcd1f7b5fa0 RCX: 00007fcd1f58e9a9 [ 377.556050][T10608] RDX: 0000200000000040 RSI: 0000000000008931 RDI: 0000000000000005 [ 377.564077][T10608] RBP: 00007fcd20488090 R08: 0000000000000000 R09: 0000000000000000 [ 377.572108][T10608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.580128][T10608] R13: 0000000000000000 R14: 00007fcd1f7b5fa0 R15: 00007ffe700a41d8 [ 377.588426][T10608] [ 377.622918][T10608] ERROR: Out of memory at tomoyo_realpath_from_path. [ 378.424071][T10634] FAULT_INJECTION: forcing a failure. [ 378.424071][T10634] name failslab, interval 1, probability 0, space 0, times 0 [ 378.447787][T10634] CPU: 1 PID: 10634 Comm: syz.1.2001 Not tainted 6.1.146-syzkaller #0 [ 378.456027][T10634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 378.466124][T10634] Call Trace: [ 378.469438][T10634] [ 378.472421][T10634] dump_stack_lvl+0x168/0x22e [ 378.477160][T10634] ? show_regs_print_info+0x12/0x12 [ 378.482407][T10634] ? load_image+0x3b0/0x3b0 [ 378.486966][T10634] ? __might_sleep+0xd0/0xd0 [ 378.491610][T10634] ? __lock_acquire+0x7c50/0x7c50 [ 378.496690][T10634] should_fail_ex+0x399/0x4d0 [ 378.501423][T10634] should_failslab+0x5/0x20 [ 378.505967][T10634] slab_pre_alloc_hook+0x59/0x310 [ 378.511027][T10634] ? __get_vm_area_node+0x122/0x330 [ 378.516272][T10634] __kmem_cache_alloc_node+0x4f/0x260 [ 378.521702][T10634] ? __get_vm_area_node+0x122/0x330 [ 378.526958][T10634] kmalloc_node_trace+0x22/0xe0 [ 378.531006][T10637] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.2002'. [ 378.531846][T10634] __get_vm_area_node+0x122/0x330 [ 378.546112][T10634] ? __local_bh_enable_ip+0x12a/0x1b0 [ 378.551531][T10634] __vmalloc_node_range+0x357/0x1390 [ 378.556860][T10634] ? netlink_sendmsg+0x5dd/0xbc0 [ 378.561848][T10634] ? release_sock+0x2b/0x1b0 [ 378.566497][T10634] ? netlink_insert+0x101f/0x13b0 [ 378.571573][T10634] ? netlink_insert+0x274/0x13b0 [ 378.576572][T10634] ? free_vm_area+0x50/0x50 [ 378.581127][T10634] ? netlink_sendmsg+0x5dd/0xbc0 [ 378.586110][T10634] vmalloc+0x75/0x80 [ 378.590045][T10634] ? netlink_sendmsg+0x5dd/0xbc0 [ 378.595021][T10634] netlink_sendmsg+0x5dd/0xbc0 [ 378.599858][T10634] ? netlink_getsockopt+0x540/0x540 [ 378.605107][T10634] ? aa_file_perm+0x3ef/0xec0 [ 378.609851][T10634] ? aa_file_perm+0x117/0xec0 [ 378.614587][T10634] ? aa_sock_msg_perm+0x94/0x150 [ 378.619571][T10634] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 378.624907][T10634] ? security_socket_sendmsg+0x7c/0xa0 [ 378.630418][T10634] sock_write_iter+0x2b5/0x3a0 [ 378.635221][T10634] ? sock_read_iter+0x370/0x370 [ 378.640122][T10634] ? common_file_perm+0x171/0x1c0 [ 378.645195][T10634] ? fsnotify_perm+0x5a/0x550 [ 378.649932][T10634] vfs_write+0x44c/0x960 [ 378.654234][T10634] ? file_end_write+0x250/0x250 [ 378.659140][T10634] ? __fget_files+0x44a/0x4d0 [ 378.663869][T10634] ? __fdget_pos+0x1d4/0x360 [ 378.668627][T10634] ? ksys_write+0x71/0x240 [ 378.673091][T10634] ksys_write+0x143/0x240 [ 378.677465][T10634] ? __ia32_sys_read+0x80/0x80 [ 378.682281][T10634] ? lockdep_hardirqs_on+0x94/0x140 [ 378.687529][T10634] do_syscall_64+0x4c/0xa0 [ 378.691980][T10634] ? clear_bhb_loop+0x60/0xb0 [ 378.696688][T10634] ? clear_bhb_loop+0x60/0xb0 [ 378.701401][T10634] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 378.707354][T10634] RIP: 0033:0x7f9a9bd8e9a9 [ 378.711808][T10634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.731462][T10634] RSP: 002b:00007f9a9cba1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 378.739937][T10634] RAX: ffffffffffffffda RBX: 00007f9a9bfb5fa0 RCX: 00007f9a9bd8e9a9 [ 378.748123][T10634] RDX: 000000000000fe33 RSI: 0000200000000200 RDI: 000000000000001d [ 378.756130][T10634] RBP: 00007f9a9cba1090 R08: 0000000000000000 R09: 0000000000000000 [ 378.764134][T10634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.772181][T10634] R13: 0000000000000000 R14: 00007f9a9bfb5fa0 R15: 00007ffd67792c28 [ 378.780212][T10634] [ 378.786545][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.792896][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.804334][T10634] syz.1.2001: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 378.819536][T10634] CPU: 0 PID: 10634 Comm: syz.1.2001 Not tainted 6.1.146-syzkaller #0 [ 378.827827][T10634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 378.837914][T10634] Call Trace: [ 378.841246][T10634] [ 378.844213][T10634] dump_stack_lvl+0x168/0x22e [ 378.849032][T10634] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 378.855505][T10634] ? show_regs_print_info+0x12/0x12 [ 378.860758][T10634] ? load_image+0x3b0/0x3b0 [ 378.865308][T10634] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 378.871774][T10634] ? cpuset_print_current_mems_allowed+0x2df/0x360 [ 378.878325][T10634] warn_alloc+0x20c/0x300 [ 378.882712][T10634] ? zone_watermark_ok_safe+0x270/0x270 [ 378.888315][T10634] ? __get_vm_area_node+0x318/0x330 [ 378.893553][T10634] ? __local_bh_enable_ip+0x12a/0x1b0 [ 378.898987][T10634] __vmalloc_node_range+0x37c/0x1390 [ 378.904320][T10634] ? release_sock+0x2b/0x1b0 [ 378.909047][T10634] ? netlink_insert+0x101f/0x13b0 [ 378.914113][T10634] ? netlink_insert+0x274/0x13b0 [ 378.919093][T10634] ? free_vm_area+0x50/0x50 [ 378.923647][T10634] ? netlink_sendmsg+0x5dd/0xbc0 [ 378.928626][T10634] vmalloc+0x75/0x80 [ 378.932566][T10634] ? netlink_sendmsg+0x5dd/0xbc0 [ 378.937543][T10634] netlink_sendmsg+0x5dd/0xbc0 [ 378.942360][T10634] ? netlink_getsockopt+0x540/0x540 [ 378.947593][T10634] ? aa_file_perm+0x3ef/0xec0 [ 378.952357][T10634] ? aa_file_perm+0x117/0xec0 [ 378.957079][T10634] ? aa_sock_msg_perm+0x94/0x150 [ 378.962064][T10634] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 378.967386][T10634] ? security_socket_sendmsg+0x7c/0xa0 [ 378.972892][T10634] sock_write_iter+0x2b5/0x3a0 [ 378.977705][T10634] ? sock_read_iter+0x370/0x370 [ 378.982608][T10634] ? common_file_perm+0x171/0x1c0 [ 378.987722][T10634] ? fsnotify_perm+0x5a/0x550 [ 378.992461][T10634] vfs_write+0x44c/0x960 [ 378.996761][T10634] ? file_end_write+0x250/0x250 [ 379.001679][T10634] ? __fget_files+0x44a/0x4d0 [ 379.006411][T10634] ? __fdget_pos+0x1d4/0x360 [ 379.011033][T10634] ? ksys_write+0x71/0x240 [ 379.015475][T10634] ksys_write+0x143/0x240 [ 379.019828][T10634] ? __ia32_sys_read+0x80/0x80 [ 379.024610][T10634] ? lockdep_hardirqs_on+0x94/0x140 [ 379.029842][T10634] do_syscall_64+0x4c/0xa0 [ 379.034286][T10634] ? clear_bhb_loop+0x60/0xb0 [ 379.038970][T10634] ? clear_bhb_loop+0x60/0xb0 [ 379.043672][T10634] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 379.049612][T10634] RIP: 0033:0x7f9a9bd8e9a9 [ 379.054065][T10634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.073702][T10634] RSP: 002b:00007f9a9cba1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 379.082152][T10634] RAX: ffffffffffffffda RBX: 00007f9a9bfb5fa0 RCX: 00007f9a9bd8e9a9 [ 379.090150][T10634] RDX: 000000000000fe33 RSI: 0000200000000200 RDI: 000000000000001d [ 379.098133][T10634] RBP: 00007f9a9cba1090 R08: 0000000000000000 R09: 0000000000000000 [ 379.106120][T10634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.114097][T10634] R13: 0000000000000000 R14: 00007f9a9bfb5fa0 R15: 00007ffd67792c28 [ 379.122107][T10634] [ 379.127070][T10634] Mem-Info: [ 379.130278][T10634] active_anon:5057 inactive_anon:0 isolated_anon:0 [ 379.130278][T10634] active_file:18587 inactive_file:39942 isolated_file:0 [ 379.130278][T10634] unevictable:768 dirty:274 writeback:0 [ 379.130278][T10634] slab_reclaimable:20678 slab_unreclaimable:99207 [ 379.130278][T10634] mapped:31052 shmem:1361 pagetables:654 [ 379.130278][T10634] sec_pagetables:0 bounce:0 [ 379.130278][T10634] kernel_misc_reclaimable:0 [ 379.130278][T10634] free:1317786 free_pcp:11647 free_cma:0 [ 379.178654][T10634] Node 0 active_anon:20228kB inactive_anon:0kB active_file:74348kB inactive_file:159564kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124208kB dirty:1096kB writeback:0kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:12592kB pagetables:2616kB sec_pagetables:0kB all_unreclaimable? no [ 379.212108][T10634] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 379.264295][T10634] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 379.299475][T10634] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 379.315062][T10634] Node 0 DMA32 free:1360660kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:20028kB inactive_anon:0kB active_file:74348kB inactive_file:159564kB unevictable:1536kB writepending:1096kB present:3129332kB managed:2593360kB mlocked:0kB bounce:0kB free_pcp:28184kB local_pcp:8504kB free_cma:0kB [ 379.364428][T10634] lowmem_reserve[]: 0 0 1 1 1 [ 379.369344][T10634] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 379.398362][T10634] lowmem_reserve[]: 0 0 0 0 0 [ 379.403307][T10634] Node 1 Normal free:3895124kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:19268kB local_pcp:7168kB free_cma:0kB [ 379.433237][T10634] lowmem_reserve[]: 0 0 0 0 0 [ 379.438103][T10634] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 379.450995][T10634] Node 0 DMA32: 739*4kB (M) 1141*8kB (UM) 898*16kB (UME) 452*32kB (UM) 321*64kB (UME) 68*128kB (UME) 29*256kB (M) 6*512kB (UM) 2*1024kB (ME) 2*2048kB (UM) 311*4096kB (M) = 1360660kB [ 379.476316][T10634] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 379.522091][T10634] Node 1 Normal: 253*4kB (UME) 68*8kB (UME) 44*16kB (UME) 32*32kB (UE) 8*64kB (UME) 7*128kB (UME) 3*256kB (UM) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3895124kB [ 379.527005][T10644] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.2014'. [ 379.546617][T10634] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 379.633044][T10634] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 379.653943][T10634] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 379.664493][T10634] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 379.679640][T10634] 59890 total pagecache pages [ 379.684423][T10634] 0 pages in swap cache [ 379.713212][T10634] Free swap = 124996kB [ 379.744629][T10634] Total swap = 124996kB [ 379.768253][T10634] 2097051 pages RAM [ 379.787108][T10634] 0 pages HighMem/MovableOnly [ 379.793569][T10634] 415110 pages reserved [ 379.817427][T10634] 0 pages cma reserved [ 380.137267][T10661] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2007'. [ 380.652433][T10676] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2010'. [ 380.770729][T10676] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2010'. [ 380.876185][T10672] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2010'. [ 380.938482][T10684] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2010'. [ 383.707012][T10694] FAULT_INJECTION: forcing a failure. [ 383.707012][T10694] name failslab, interval 1, probability 0, space 0, times 0 [ 383.791288][T10694] CPU: 0 PID: 10694 Comm: syz.2.2018 Not tainted 6.1.146-syzkaller #0 [ 383.799527][T10694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 383.809711][T10694] Call Trace: [ 383.813024][T10694] [ 383.815997][T10694] dump_stack_lvl+0x168/0x22e [ 383.820719][T10694] ? show_regs_print_info+0x12/0x12 [ 383.825960][T10694] ? load_image+0x3b0/0x3b0 [ 383.830505][T10694] ? __might_sleep+0xd0/0xd0 [ 383.835138][T10694] ? __lock_acquire+0x7c50/0x7c50 [ 383.840201][T10694] should_fail_ex+0x399/0x4d0 [ 383.844931][T10694] should_failslab+0x5/0x20 [ 383.849459][T10694] slab_pre_alloc_hook+0x59/0x310 [ 383.854522][T10694] kmem_cache_alloc_node+0x5a/0x320 [ 383.859752][T10694] ? __alloc_skb+0xfc/0x7e0 [ 383.864318][T10694] __alloc_skb+0xfc/0x7e0 [ 383.868674][T10694] alloc_skb_with_frags+0xa7/0x710 [ 383.873818][T10694] ? trace_event_raw_event_lock+0x230/0x230 [ 383.879730][T10694] ? perf_trace_lock+0xf3/0x370 [ 383.884604][T10694] sock_alloc_send_pskb+0x853/0x980 [ 383.889851][T10694] ? sock_kzfree_s+0x50/0x50 [ 383.894472][T10694] ? do_raw_spin_lock+0x11d/0x280 [ 383.899517][T10694] ? __rwlock_init+0x140/0x140 [ 383.904301][T10694] ? do_raw_spin_unlock+0x11d/0x230 [ 383.909525][T10694] unix_dgram_sendmsg+0x592/0x16c0 [ 383.914675][T10694] ? aa_sk_perm+0x7e5/0x920 [ 383.919199][T10694] ? unix_dgram_poll+0x660/0x660 [ 383.924159][T10694] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 383.930602][T10694] ? aa_sock_msg_perm+0x94/0x150 [ 383.935564][T10694] ? unix_seqpacket_sendmsg+0x108/0x1d0 [ 383.941133][T10694] ? unix_dgram_peer_wake_me+0x430/0x430 [ 383.946791][T10694] ____sys_sendmsg+0x59b/0x970 [ 383.951570][T10694] ? __might_fault+0xa6/0x120 [ 383.956293][T10694] ? __sys_sendmsg_sock+0x30/0x30 [ 383.961355][T10694] ? __import_iovec+0x315/0x500 [ 383.966226][T10694] ? __might_fault+0xa6/0x120 [ 383.970929][T10694] ? import_iovec+0x6f/0xa0 [ 383.975467][T10694] ___sys_sendmsg+0x21c/0x290 [ 383.980183][T10694] ? __sys_sendmsg+0x270/0x270 [ 383.984992][T10694] ? __lock_acquire+0x7c50/0x7c50 [ 383.990091][T10694] ? __fdget+0x17c/0x200 [ 383.994380][T10694] __se_sys_sendmsg+0x19e/0x270 [ 383.999256][T10694] ? perf_trace_preemptirq_template+0x287/0x330 [ 384.005632][T10694] ? __x64_sys_sendmsg+0x80/0x80 [ 384.010612][T10694] ? lockdep_hardirqs_on+0x94/0x140 [ 384.015854][T10694] do_syscall_64+0x4c/0xa0 [ 384.020303][T10694] ? clear_bhb_loop+0x60/0xb0 [ 384.025008][T10694] ? clear_bhb_loop+0x60/0xb0 [ 384.029711][T10694] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 384.035641][T10694] RIP: 0033:0x7fba1658e9a9 [ 384.040073][T10694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.059786][T10694] RSP: 002b:00007fba174e0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.068218][T10694] RAX: ffffffffffffffda RBX: 00007fba167b5fa0 RCX: 00007fba1658e9a9 [ 384.076203][T10694] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 384.084181][T10694] RBP: 00007fba174e0090 R08: 0000000000000000 R09: 0000000000000000 [ 384.092167][T10694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.100156][T10694] R13: 0000000000000000 R14: 00007fba167b5fa0 R15: 00007ffcbb6c6108 [ 384.108184][T10694] [ 384.279997][T10706] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.2022'. [ 384.547977][T10710] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2023'. [ 385.282138][ T4279] Bluetooth: hci1: unexpected event 0x05 length: 151 > 4 [ 385.366271][T10732] netlink: 'syz.2.2029': attribute type 3 has an invalid length. [ 385.454147][T10732] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2029'. [ 385.497858][T10742] FAULT_INJECTION: forcing a failure. [ 385.497858][T10742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.524572][T10742] CPU: 0 PID: 10742 Comm: syz.0.2033 Not tainted 6.1.146-syzkaller #0 [ 385.529505][T10739] netlink: 'syz.4.2032': attribute type 10 has an invalid length. [ 385.532787][T10742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 385.532832][T10742] Call Trace: [ 385.532840][T10742] [ 385.532850][T10742] dump_stack_lvl+0x168/0x22e [ 385.532881][T10742] ? show_regs_print_info+0x12/0x12 [ 385.566927][T10742] ? load_image+0x3b0/0x3b0 [ 385.571483][T10742] ? __lock_acquire+0x7c50/0x7c50 [ 385.576563][T10742] ? snprintf+0xd7/0x120 [ 385.580853][T10742] should_fail_ex+0x399/0x4d0 [ 385.585558][T10742] _copy_to_user+0x2c/0x130 [ 385.590078][T10742] simple_read_from_buffer+0xe3/0x150 [ 385.595477][T10742] proc_fail_nth_read+0x19a/0x210 [ 385.600518][T10742] ? proc_fault_inject_write+0x2f0/0x2f0 [ 385.606164][T10742] ? fsnotify_perm+0x248/0x550 [ 385.610941][T10742] ? proc_fault_inject_write+0x2f0/0x2f0 [ 385.616582][T10742] vfs_read+0x2c0/0x920 [ 385.620756][T10742] ? kernel_read+0x1e0/0x1e0 [ 385.625412][T10742] ? __fget_files+0x28/0x4d0 [ 385.630021][T10742] ? __fget_files+0x44a/0x4d0 [ 385.634723][T10742] ? __fdget_pos+0x2ae/0x360 [ 385.639329][T10742] ? ksys_read+0x71/0x240 [ 385.643685][T10742] ksys_read+0x143/0x240 [ 385.647949][T10742] ? vfs_write+0x960/0x960 [ 385.652382][T10742] ? lockdep_hardirqs_on+0x94/0x140 [ 385.657591][T10742] do_syscall_64+0x4c/0xa0 [ 385.662012][T10742] ? clear_bhb_loop+0x60/0xb0 [ 385.666738][T10742] ? clear_bhb_loop+0x60/0xb0 [ 385.671419][T10742] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 385.677337][T10742] RIP: 0033:0x7f95f7d8d3bc [ 385.681759][T10742] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 385.701374][T10742] RSP: 002b:00007f95f8b85030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 385.709797][T10742] RAX: ffffffffffffffda RBX: 00007f95f7fb5fa0 RCX: 00007f95f7d8d3bc [ 385.717791][T10742] RDX: 000000000000000f RSI: 00007f95f8b850a0 RDI: 0000000000000006 [ 385.725771][T10742] RBP: 00007f95f8b85090 R08: 0000000000000000 R09: 0000000000000000 [ 385.733755][T10742] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 385.741732][T10742] R13: 0000000000000000 R14: 00007f95f7fb5fa0 R15: 00007ffe89227c28 [ 385.749726][T10742] [ 385.953692][T10745] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.2034'. [ 386.375562][T10760] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2039'. [ 386.599447][T10768] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.2041'. [ 387.003032][T10781] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2046'. [ 387.031871][T10781] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2046'. [ 387.061560][T10780] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2046'. [ 387.085266][T10781] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2046'. [ 387.445624][T10793] device sit0 left promiscuous mode [ 387.914269][T10809] device sit0 left promiscuous mode [ 388.770049][ T4279] Bluetooth: hci4: unexpected event 0x05 length: 151 > 4 [ 388.872318][T10828] FAULT_INJECTION: forcing a failure. [ 388.872318][T10828] name failslab, interval 1, probability 0, space 0, times 0 [ 388.894096][T10828] CPU: 1 PID: 10828 Comm: syz.4.2061 Not tainted 6.1.146-syzkaller #0 [ 388.902318][T10828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 388.912499][T10828] Call Trace: [ 388.915820][T10828] [ 388.918787][T10828] dump_stack_lvl+0x168/0x22e [ 388.923527][T10828] ? show_regs_print_info+0x12/0x12 [ 388.928782][T10828] ? load_image+0x3b0/0x3b0 [ 388.933315][T10828] ? __lock_acquire+0x7c50/0x7c50 [ 388.938377][T10828] should_fail_ex+0x399/0x4d0 [ 388.943091][T10828] should_failslab+0x5/0x20 [ 388.947646][T10828] slab_pre_alloc_hook+0x59/0x310 [ 388.952699][T10828] ? verify_lock_unused+0x140/0x140 [ 388.957921][T10828] ? perf_swevent_event+0xc8/0x530 [ 388.963051][T10828] ? bpf_test_init+0xc0/0x150 [ 388.967753][T10828] __kmem_cache_alloc_node+0x4f/0x260 [ 388.973314][T10828] ? bpf_test_init+0xc0/0x150 [ 388.978009][T10828] __kmalloc+0xa0/0x240 [ 388.982187][T10828] bpf_test_init+0xc0/0x150 [ 388.986715][T10828] bpf_prog_test_run_xdp+0x359/0xe50 [ 388.992032][T10828] ? dev_put+0x80/0x80 [ 388.996130][T10828] ? dev_put+0x80/0x80 [ 389.000220][T10828] bpf_prog_test_run+0x31e/0x390 [ 389.005199][T10828] __sys_bpf+0x593/0x6d0 [ 389.009460][T10828] ? bpf_link_show_fdinfo+0x340/0x340 [ 389.014865][T10828] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 389.021053][T10828] __x64_sys_bpf+0x78/0x90 [ 389.025491][T10828] do_syscall_64+0x4c/0xa0 [ 389.029922][T10828] ? clear_bhb_loop+0x60/0xb0 [ 389.034627][T10828] ? clear_bhb_loop+0x60/0xb0 [ 389.039357][T10828] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 389.045341][T10828] RIP: 0033:0x7fcd1f58e9a9 [ 389.049793][T10828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.069427][T10828] RSP: 002b:00007fcd20488038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 389.078032][T10828] RAX: ffffffffffffffda RBX: 00007fcd1f7b5fa0 RCX: 00007fcd1f58e9a9 [ 389.086016][T10828] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 389.094000][T10828] RBP: 00007fcd20488090 R08: 0000000000000000 R09: 0000000000000000 [ 389.101983][T10828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.109969][T10828] R13: 0000000000000000 R14: 00007fcd1f7b5fa0 R15: 00007ffe700a41d8 [ 389.117970][T10828] [ 389.284871][ T4279] Bluetooth: hci0: unexpected event 0x05 length: 151 > 4 [ 389.399575][ T4279] Bluetooth: hci3: unexpected event 0x05 length: 151 > 4 [ 389.778116][T10848] __nla_validate_parse: 8 callbacks suppressed [ 389.778134][T10848] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.2068'. [ 389.871307][T10846] netlink: 'syz.1.2067': attribute type 10 has an invalid length. [ 389.987002][T10848] device sit0 entered promiscuous mode [ 390.284234][T10864] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.2073'. [ 390.845574][T10866] device sit0 left promiscuous mode [ 391.310529][ T4279] Bluetooth: hci1: unexpected event 0x05 length: 151 > 4 [ 391.423520][T10888] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2078'. [ 391.480240][T10888] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2078'. [ 391.596112][T10887] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2078'. [ 391.716796][T10890] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2078'. [ 391.788197][ T4279] Bluetooth: hci4: unexpected event 0x05 length: 151 > 4 [ 392.098835][T10903] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.2083'. [ 392.154706][T10905] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2086'. [ 392.156785][T10908] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.2084'. [ 392.240152][T10909] netlink: 'syz.2.2085': attribute type 10 has an invalid length. [ 392.288058][T10910] device sit0 entered promiscuous mode [ 393.208763][ T4279] Bluetooth: hci0: unexpected event 0x05 length: 151 > 4 [ 393.471564][T10945] FAULT_INJECTION: forcing a failure. [ 393.471564][T10945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.586067][T10945] CPU: 1 PID: 10945 Comm: syz.4.2097 Not tainted 6.1.146-syzkaller #0 [ 393.594660][T10945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 393.604772][T10945] Call Trace: [ 393.608080][T10945] [ 393.611027][T10945] dump_stack_lvl+0x168/0x22e [ 393.615721][T10945] ? show_regs_print_info+0x12/0x12 [ 393.620937][T10945] ? load_image+0x3b0/0x3b0 [ 393.625471][T10945] ? __lock_acquire+0x7c50/0x7c50 [ 393.630522][T10945] ? perf_trace_lock+0x2ec/0x370 [ 393.635479][T10945] should_fail_ex+0x399/0x4d0 [ 393.640203][T10945] _copy_from_user+0x2c/0x170 [ 393.644899][T10945] do_vfs_ioctl+0x17a4/0x1d10 [ 393.649626][T10945] ? __ia32_compat_sys_ioctl+0x780/0x780 [ 393.655324][T10945] ? tomoyo_path_number_perm+0x1b6/0x600 [ 393.660991][T10945] ? tomoyo_path_number_perm+0x4ae/0x600 [ 393.666649][T10945] ? __kmem_cache_free+0xb6/0x1f0 [ 393.671782][T10945] ? tomoyo_path_number_perm+0x503/0x600 [ 393.677428][T10945] ? tomoyo_path_number_perm+0x1b6/0x600 [ 393.683077][T10945] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 393.688586][T10945] ? __fget_files+0x28/0x4d0 [ 393.693205][T10945] ? bpf_lsm_file_ioctl+0x5/0x10 [ 393.698249][T10945] ? security_file_ioctl+0x7c/0xa0 [ 393.703380][T10945] __se_sys_ioctl+0x83/0x170 [ 393.707990][T10945] do_syscall_64+0x4c/0xa0 [ 393.712436][T10945] ? clear_bhb_loop+0x60/0xb0 [ 393.717334][T10945] ? clear_bhb_loop+0x60/0xb0 [ 393.722022][T10945] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 393.727938][T10945] RIP: 0033:0x7fcd1f58e9a9 [ 393.732363][T10945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.751984][T10945] RSP: 002b:00007fcd20488038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 393.760410][T10945] RAX: ffffffffffffffda RBX: 00007fcd1f7b5fa0 RCX: 00007fcd1f58e9a9 [ 393.768392][T10945] RDX: 0000200000000040 RSI: 0000000040305829 RDI: 0000000000000007 [ 393.776389][T10945] RBP: 00007fcd20488090 R08: 0000000000000000 R09: 0000000000000000 [ 393.784374][T10945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.792351][T10945] R13: 0000000000000000 R14: 00007fcd1f7b5fa0 R15: 00007ffe700a41d8 [ 393.800347][T10945] [ 394.340772][T10965] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2105'. [ 395.027948][T10980] __nla_validate_parse: 3 callbacks suppressed [ 395.027968][T10980] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2108'. [ 395.136025][T10980] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2108'. [ 395.188805][T10979] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2108'. [ 395.206704][T10989] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.2111'. [ 395.218437][T10982] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2108'. [ 395.693577][T11004] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2115'. [ 395.754354][T11004] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2115'. [ 395.765116][T11000] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2115'. [ 395.775119][T11005] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2115'. [ 396.051856][T11012] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2119'. [ 397.762516][T11037] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 399.063919][T11048] netlink: 'syz.2.2131': attribute type 29 has an invalid length. [ 399.083747][T11048] netlink: 'syz.2.2131': attribute type 29 has an invalid length. [ 399.107582][T11051] netlink: 'syz.2.2131': attribute type 29 has an invalid length. [ 399.120029][T11052] netlink: 'syz.2.2131': attribute type 29 has an invalid length. [ 399.155067][T11048] netlink: 'syz.2.2131': attribute type 29 has an invalid length. [ 399.375675][T11048] @: port 1(ip6gretap0) entered blocking state [ 399.402473][T11048] @: port 1(ip6gretap0) entered disabled state [ 399.565004][T11048] device ip6gretap0 entered promiscuous mode [ 399.802352][T11057] device sit0 entered promiscuous mode [ 400.734982][T11086] __nla_validate_parse: 3 callbacks suppressed [ 400.734999][T11086] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.2143'. [ 400.797212][T11086] device sit0 entered promiscuous mode [ 401.012850][T11094] FAULT_INJECTION: forcing a failure. [ 401.012850][T11094] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.037861][T11095] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.2145'. [ 401.056012][T11094] CPU: 0 PID: 11094 Comm: syz.1.2146 Not tainted 6.1.146-syzkaller #0 [ 401.064326][T11094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 401.074509][T11094] Call Trace: [ 401.077825][T11094] [ 401.080787][T11094] dump_stack_lvl+0x168/0x22e [ 401.085517][T11094] ? show_regs_print_info+0x12/0x12 [ 401.090756][T11094] ? load_image+0x3b0/0x3b0 [ 401.095327][T11094] ? __lock_acquire+0x7c50/0x7c50 [ 401.100394][T11094] should_fail_ex+0x399/0x4d0 [ 401.105141][T11094] _copy_from_user+0x2c/0x170 [ 401.109867][T11094] iovec_from_user+0x143/0x360 [ 401.114688][T11094] __import_iovec+0x6d/0x500 [ 401.119327][T11094] ? __might_fault+0xa6/0x120 [ 401.124054][T11094] import_iovec+0x6f/0xa0 [ 401.128442][T11094] ___sys_recvmsg+0x433/0x510 [ 401.133167][T11094] ? __sys_recvmsg+0x270/0x270 [ 401.137970][T11094] ? common_file_perm+0x171/0x1c0 [ 401.143058][T11094] ? __fget_files+0x44a/0x4d0 [ 401.147790][T11094] ? __fdget+0x17c/0x200 [ 401.152080][T11094] __x64_sys_recvmsg+0x1eb/0x2b0 [ 401.157063][T11094] ? ___sys_recvmsg+0x510/0x510 [ 401.161967][T11094] ? lockdep_hardirqs_on+0x94/0x140 [ 401.167214][T11094] do_syscall_64+0x4c/0xa0 [ 401.171664][T11094] ? clear_bhb_loop+0x60/0xb0 [ 401.176549][T11094] ? clear_bhb_loop+0x60/0xb0 [ 401.181262][T11094] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 401.187196][T11094] RIP: 0033:0x7f9a9bd8e9a9 [ 401.191626][T11094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.211260][T11094] RSP: 002b:00007f9a9cba1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 401.219698][T11094] RAX: ffffffffffffffda RBX: 00007f9a9bfb5fa0 RCX: 00007f9a9bd8e9a9 [ 401.227698][T11094] RDX: 0000000040000100 RSI: 0000200000000040 RDI: 0000000000000003 [ 401.235682][T11094] RBP: 00007f9a9cba1090 R08: 0000000000000000 R09: 0000000000000000 [ 401.243750][T11094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.251728][T11094] R13: 0000000000000000 R14: 00007f9a9bfb5fa0 R15: 00007ffd67792c28 [ 401.259721][T11094] [ 401.330393][T11097] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2146'. [ 401.376542][T11095] device sit0 left promiscuous mode [ 401.774629][T11097] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2146'. [ 401.799137][T11096] device sit0 entered promiscuous mode [ 402.112758][T11116] netlink: 'syz.0.2150': attribute type 29 has an invalid length. [ 402.398024][T11116] netlink: 'syz.0.2150': attribute type 29 has an invalid length. [ 402.425102][T11117] netlink: 'syz.0.2150': attribute type 29 has an invalid length. [ 402.501115][T11124] netlink: 'syz.3.2155': attribute type 10 has an invalid length. [ 402.544033][T11119] netlink: 'syz.0.2150': attribute type 29 has an invalid length. [ 402.978390][T11110] @: port 1(ip6gretap0) entered blocking state [ 402.984701][T11110] @: port 1(ip6gretap0) entered disabled state [ 403.026920][T11110] device ip6gretap0 entered promiscuous mode [ 403.120414][T11143] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.2162'. [ 403.627483][T11157] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.2166'. [ 404.036143][T11157] device sit0 left promiscuous mode [ 404.374772][T11159] device sit0 entered promiscuous mode [ 404.656208][T11171] validate_nla: 1 callbacks suppressed [ 404.656246][T11171] netlink: 'syz.1.2169': attribute type 10 has an invalid length. [ 404.754697][T11179] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2170'. [ 405.543878][T11191] netlink: 'syz.3.2176': attribute type 29 has an invalid length. [ 405.583240][T11191] netlink: 'syz.3.2176': attribute type 29 has an invalid length. [ 405.611467][T11197] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2177'. [ 405.625460][T11190] netlink: 'syz.3.2176': attribute type 29 has an invalid length. [ 405.650488][T11197] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2177'. [ 405.669711][T11190] netlink: 'syz.3.2176': attribute type 29 has an invalid length. [ 405.692829][T11194] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2177'. [ 405.710004][T11190] netlink: 'syz.3.2176': attribute type 29 has an invalid length. [ 406.025714][T11207] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.2180'. [ 406.661622][T11191] @: port 1(ip6gretap0) entered blocking state [ 406.677422][T11191] @: port 1(ip6gretap0) entered disabled state [ 406.696590][T11191] device ip6gretap0 entered promiscuous mode [ 408.931567][T11244] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.2187'. [ 409.055740][T11250] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.2192'. [ 409.217249][T11256] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.2193'. [ 409.264785][T11256] device sit0 left promiscuous mode [ 409.514958][T11260] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.2194'. [ 409.742253][T11257] device sit0 entered promiscuous mode [ 409.991167][T11260] device sit0 left promiscuous mode [ 410.464742][T11262] device sit0 entered promiscuous mode [ 410.621066][T11240] delete_channel: no stack [ 410.628962][T11269] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2195'. [ 411.390623][T11285] netlink: 'syz.0.2201': attribute type 10 has an invalid length. [ 411.421719][T11285] device veth0_macvtap left promiscuous mode [ 411.520445][T11285] batman_adv: batadv0: Adding interface: macvtap0 [ 411.576248][T11285] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.694989][T11285] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 411.718959][T11294] netlink: 'syz.0.2201': attribute type 10 has an invalid length. [ 411.746726][T11295] netlink: 'syz.1.2205': attribute type 2 has an invalid length. [ 411.801420][T11295] netlink: 'syz.1.2205': attribute type 8 has an invalid length. [ 411.875983][T11295] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2205'. [ 412.016730][T11295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2205'. [ 412.034833][T11305] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.2207'. [ 412.048365][T11299] netlink: 'syz.2.2206': attribute type 10 has an invalid length. [ 412.392707][T11293] delete_channel: no stack [ 412.633790][T11319] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2214'. [ 413.433723][T11341] netlink: 'syz.3.2220': attribute type 10 has an invalid length. [ 413.788116][T11341] device veth0_macvtap left promiscuous mode [ 413.857523][T11341] batman_adv: batadv0: Adding interface: macvtap0 [ 413.864027][T11341] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.981123][T11341] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 414.030304][T11342] netlink: 'syz.3.2220': attribute type 10 has an invalid length. [ 414.545702][T11360] netlink: 'syz.2.2226': attribute type 2 has an invalid length. [ 414.565878][T11360] netlink: 'syz.2.2226': attribute type 8 has an invalid length. [ 414.573683][T11360] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2226'. [ 414.672341][T11366] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.2229'. [ 414.848993][T11368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2226'. [ 414.901922][T11366] device sit0 left promiscuous mode [ 416.352149][T11373] device sit0 entered promiscuous mode [ 416.737580][T11398] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.2236'. [ 416.756006][T11359] delete_channel: no stack [ 416.891240][T11400] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2238'. [ 417.849901][T11426] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.2246'. [ 418.194793][T11429] device sit0 left promiscuous mode [ 418.376843][T11426] device sit0 entered promiscuous mode [ 418.931640][ T4279] Bluetooth: hci3: unexpected event 0x05 length: 151 > 4 [ 418.952264][T11447] netlink: 'syz.3.2250': attribute type 2 has an invalid length. [ 419.069121][ T4279] Bluetooth: hci1: unexpected event 0x05 length: 151 > 4 [ 419.078560][T11447] netlink: 'syz.3.2250': attribute type 8 has an invalid length. [ 419.158131][T11447] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2250'. [ 419.213252][T11447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2250'. [ 419.261223][T11456] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2254'. [ 419.426469][T11462] netlink: 'syz.4.2257': attribute type 10 has an invalid length. [ 419.440229][T11465] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.2256'. [ 419.590360][T11462] device veth0_macvtap left promiscuous mode [ 419.607653][T11462] batman_adv: batadv0: Adding interface: macvtap0 [ 419.614269][T11462] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.642518][T11462] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 419.664838][T11446] delete_channel: no stack [ 419.890442][T11474] netlink: 'syz.3.2259': attribute type 10 has an invalid length. [ 419.935701][T11476] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.2261'. [ 420.054724][T11476] device sit0 left promiscuous mode [ 420.442946][T11481] device sit0 entered promiscuous mode [ 420.459230][T11486] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.2264'. [ 420.542024][ T4279] Bluetooth: hci2: unexpected event 0x05 length: 151 > 4 [ 421.303938][T11500] FAULT_INJECTION: forcing a failure. [ 421.303938][T11500] name failslab, interval 1, probability 0, space 0, times 0 [ 421.379264][T11503] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2272'. [ 421.392397][T11500] CPU: 0 PID: 11500 Comm: syz.4.2271 Not tainted 6.1.146-syzkaller #0 [ 421.400635][T11500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 421.410747][T11500] Call Trace: [ 421.414072][T11500] [ 421.417048][T11500] dump_stack_lvl+0x168/0x22e [ 421.421786][T11500] ? show_regs_print_info+0x12/0x12 [ 421.427056][T11500] ? load_image+0x3b0/0x3b0 [ 421.431626][T11500] ? __lock_acquire+0x7c50/0x7c50 [ 421.436725][T11500] should_fail_ex+0x399/0x4d0 [ 421.441476][T11500] should_failslab+0x5/0x20 [ 421.446045][T11500] slab_pre_alloc_hook+0x59/0x310 [ 421.451122][T11500] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 421.457258][T11500] kmem_cache_alloc_node+0x5a/0x320 [ 421.462515][T11500] ? alloc_vmap_area+0x185/0x1880 [ 421.467612][T11500] alloc_vmap_area+0x185/0x1880 [ 421.471056][T11508] netlink: 'syz.0.2273': attribute type 2 has an invalid length. [ 421.472516][T11500] ? vm_map_ram+0xab0/0xab0 [ 421.482765][T11508] netlink: 'syz.0.2273': attribute type 8 has an invalid length. [ 421.484742][T11500] ? rcu_is_watching+0x11/0xa0 [ 421.494174][T11508] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2273'. [ 421.497244][T11500] __get_vm_area_node+0x158/0x330 [ 421.497281][T11500] ? __local_bh_enable_ip+0x12a/0x1b0 [ 421.497327][T11500] __vmalloc_node_range+0x357/0x1390 [ 421.497355][T11500] ? netlink_sendmsg+0x5dd/0xbc0 [ 421.497382][T11500] ? release_sock+0x2b/0x1b0 [ 421.497424][T11500] ? netlink_insert+0x101f/0x13b0 [ 421.497471][T11500] ? netlink_insert+0x274/0x13b0 [ 421.497518][T11500] ? free_vm_area+0x50/0x50 [ 421.497573][T11500] ? netlink_sendmsg+0x5dd/0xbc0 [ 421.497600][T11500] vmalloc+0x75/0x80 [ 421.497628][T11500] ? netlink_sendmsg+0x5dd/0xbc0 [ 421.560499][T11500] netlink_sendmsg+0x5dd/0xbc0 [ 421.565340][T11500] ? netlink_getsockopt+0x540/0x540 [ 421.570592][T11500] ? aa_file_perm+0x3ef/0xec0 [ 421.575342][T11500] ? aa_file_perm+0x117/0xec0 [ 421.580080][T11500] ? aa_sock_msg_perm+0x94/0x150 [ 421.585100][T11500] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 421.590440][T11500] ? security_socket_sendmsg+0x7c/0xa0 [ 421.595977][T11500] sock_write_iter+0x2b5/0x3a0 [ 421.600810][T11500] ? sock_read_iter+0x370/0x370 [ 421.605739][T11500] ? common_file_perm+0x171/0x1c0 [ 421.610834][T11500] ? fsnotify_perm+0x5a/0x550 [ 421.615584][T11500] vfs_write+0x44c/0x960 [ 421.619896][T11500] ? file_end_write+0x250/0x250 [ 421.624811][T11500] ? __fget_files+0x44a/0x4d0 [ 421.629566][T11500] ? __fdget_pos+0x1d4/0x360 [ 421.634200][T11500] ? ksys_write+0x71/0x240 [ 421.638673][T11500] ksys_write+0x143/0x240 [ 421.643073][T11500] ? __ia32_sys_read+0x80/0x80 [ 421.647897][T11500] ? lockdep_hardirqs_on+0x94/0x140 [ 421.653154][T11500] do_syscall_64+0x4c/0xa0 [ 421.657616][T11500] ? clear_bhb_loop+0x60/0xb0 [ 421.662325][T11500] ? clear_bhb_loop+0x60/0xb0 [ 421.667061][T11500] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 421.673020][T11500] RIP: 0033:0x7fcd1f58e9a9 [ 421.677497][T11500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.697163][T11500] RSP: 002b:00007fcd20488038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 421.705630][T11500] RAX: ffffffffffffffda RBX: 00007fcd1f7b5fa0 RCX: 00007fcd1f58e9a9 [ 421.713645][T11500] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000004 [ 421.721686][T11500] RBP: 00007fcd20488090 R08: 0000000000000000 R09: 0000000000000000 [ 421.729701][T11500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.737736][T11500] R13: 0000000000000000 R14: 00007fcd1f7b5fa0 R15: 00007ffe700a41d8 [ 421.745814][T11500] [ 422.229199][T11500] syz.4.2271: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 422.243891][T11509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2273'. [ 422.253342][T11500] CPU: 1 PID: 11500 Comm: syz.4.2271 Not tainted 6.1.146-syzkaller #0 [ 422.261539][T11500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 422.271624][T11500] Call Trace: [ 422.274943][T11500] [ 422.277901][T11500] dump_stack_lvl+0x168/0x22e [ 422.282611][T11500] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 422.289170][T11500] ? show_regs_print_info+0x12/0x12 [ 422.294408][T11500] ? load_image+0x3b0/0x3b0 [ 422.298943][T11500] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 422.305397][T11500] ? cpuset_print_current_mems_allowed+0x2df/0x360 [ 422.311918][T11500] warn_alloc+0x20c/0x300 [ 422.316264][T11500] ? slab_free_freelist_hook+0x131/0x1a0 [ 422.321910][T11500] ? zone_watermark_ok_safe+0x270/0x270 [ 422.327473][T11500] ? __get_vm_area_node+0x16d/0x330 [ 422.332696][T11500] ? __get_vm_area_node+0x16d/0x330 [ 422.337897][T11500] ? __local_bh_enable_ip+0x12a/0x1b0 [ 422.343299][T11500] __vmalloc_node_range+0x37c/0x1390 [ 422.348595][T11500] ? release_sock+0x2b/0x1b0 [ 422.353205][T11500] ? netlink_insert+0x101f/0x13b0 [ 422.358252][T11500] ? netlink_insert+0x274/0x13b0 [ 422.363206][T11500] ? free_vm_area+0x50/0x50 [ 422.367742][T11500] ? netlink_sendmsg+0x5dd/0xbc0 [ 422.372695][T11500] vmalloc+0x75/0x80 [ 422.376601][T11500] ? netlink_sendmsg+0x5dd/0xbc0 [ 422.381562][T11500] netlink_sendmsg+0x5dd/0xbc0 [ 422.386357][T11500] ? netlink_getsockopt+0x540/0x540 [ 422.391584][T11500] ? aa_file_perm+0x3ef/0xec0 [ 422.396276][T11500] ? aa_file_perm+0x117/0xec0 [ 422.400984][T11500] ? aa_sock_msg_perm+0x94/0x150 [ 422.405942][T11500] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 422.411243][T11500] ? security_socket_sendmsg+0x7c/0xa0 [ 422.416712][T11500] sock_write_iter+0x2b5/0x3a0 [ 422.421497][T11500] ? sock_read_iter+0x370/0x370 [ 422.426376][T11500] ? common_file_perm+0x171/0x1c0 [ 422.431441][T11500] ? fsnotify_perm+0x5a/0x550 [ 422.436131][T11500] vfs_write+0x44c/0x960 [ 422.440403][T11500] ? file_end_write+0x250/0x250 [ 422.445273][T11500] ? __fget_files+0x44a/0x4d0 [ 422.449969][T11500] ? __fdget_pos+0x1d4/0x360 [ 422.454571][T11500] ? ksys_write+0x71/0x240 [ 422.459007][T11500] ksys_write+0x143/0x240 [ 422.463360][T11500] ? __ia32_sys_read+0x80/0x80 [ 422.468139][T11500] ? lockdep_hardirqs_on+0x94/0x140 [ 422.473347][T11500] do_syscall_64+0x4c/0xa0 [ 422.477774][T11500] ? clear_bhb_loop+0x60/0xb0 [ 422.482454][T11500] ? clear_bhb_loop+0x60/0xb0 [ 422.487138][T11500] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 422.493066][T11500] RIP: 0033:0x7fcd1f58e9a9 [ 422.497492][T11500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.517104][T11500] RSP: 002b:00007fcd20488038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 422.525525][T11500] RAX: ffffffffffffffda RBX: 00007fcd1f7b5fa0 RCX: 00007fcd1f58e9a9 [ 422.533519][T11500] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000004 [ 422.541503][T11500] RBP: 00007fcd20488090 R08: 0000000000000000 R09: 0000000000000000 [ 422.549503][T11500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.557495][T11500] R13: 0000000000000000 R14: 00007fcd1f7b5fa0 R15: 00007ffe700a41d8 [ 422.565500][T11500] [ 422.582484][T11500] Mem-Info: [ 422.585663][T11500] active_anon:4999 inactive_anon:0 isolated_anon:0 [ 422.585663][T11500] active_file:18604 inactive_file:39960 isolated_file:0 [ 422.585663][T11500] unevictable:768 dirty:427 writeback:0 [ 422.585663][T11500] slab_reclaimable:20869 slab_unreclaimable:98367 [ 422.585663][T11500] mapped:32157 shmem:1361 pagetables:651 [ 422.585663][T11500] sec_pagetables:0 bounce:0 [ 422.585663][T11500] kernel_misc_reclaimable:0 [ 422.585663][T11500] free:1323247 free_pcp:6966 free_cma:0 [ 422.641942][T11500] Node 0 active_anon:20196kB inactive_anon:0kB active_file:74416kB inactive_file:159636kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128628kB dirty:1708kB writeback:0kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:12472kB pagetables:2704kB sec_pagetables:0kB all_unreclaimable? no [ 422.734094][T11500] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 422.801119][T11500] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 422.824626][T11507] delete_channel: no stack [ 422.838298][T11524] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.2277'. [ 422.863015][T11500] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 422.870059][T11500] Node 0 DMA32 free:1382568kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:20096kB inactive_anon:0kB active_file:74416kB inactive_file:159636kB unevictable:1536kB writepending:1708kB present:3129332kB managed:2593360kB mlocked:0kB bounce:0kB free_pcp:8612kB local_pcp:5028kB free_cma:0kB [ 422.903561][T11500] lowmem_reserve[]: 0 0 1 1 1 [ 422.911147][T11500] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 422.977779][T11500] lowmem_reserve[]: 0 0 0 0 0 [ 422.985273][T11500] Node 1 Normal free:3895124kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:19300kB local_pcp:12132kB free_cma:0kB [ 423.180156][T11500] lowmem_reserve[]: 0 0 0 0 0 [ 423.185004][T11500] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 423.265126][T11500] Node 0 DMA32: 2604*4kB (UME) 1807*8kB (UME) 1068*16kB (UM) 858*32kB (UME) 455*64kB (UME) 69*128kB (UME) 30*256kB (M) 6*512kB (UM) 3*1024kB (UME) 2*2048kB (UM) 307*4096kB (M) = 1382760kB [ 423.286000][T11500] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 423.302594][T11500] Node 1 Normal: 253*4kB (UME) 68*8kB (UME) 44*16kB (UME) 32*32kB (UE) 8*64kB (UME) 7*128kB (UME) 3*256kB (UM) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3895124kB [ 423.328255][T11500] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 423.348943][T11500] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 423.378985][T11500] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 423.408190][T11500] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 423.433362][T11500] 59925 total pagecache pages [ 423.443142][T11500] 0 pages in swap cache [ 423.450051][T11500] Free swap = 124996kB [ 423.459372][T11500] Total swap = 124996kB [ 423.463587][T11500] 2097051 pages RAM [ 423.483578][T11500] 0 pages HighMem/MovableOnly [ 423.492959][T11500] 415110 pages reserved [ 423.500589][T11500] 0 pages cma reserved [ 423.861822][T11544] netlink: 'syz.4.2286': attribute type 10 has an invalid length. [ 424.017846][T11550] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2289'. [ 424.151151][ T4279] Bluetooth: hci2: unexpected event 0x05 length: 151 > 4 [ 424.305572][T11554] netlink: 'syz.1.2301': attribute type 10 has an invalid length. [ 424.476647][T11562] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.2294'. [ 424.549421][T11563] device sit0 left promiscuous mode [ 424.628783][T11567] FAULT_INJECTION: forcing a failure. [ 424.628783][T11567] name failslab, interval 1, probability 0, space 0, times 0 [ 424.746041][T11567] CPU: 1 PID: 11567 Comm: syz.1.2296 Not tainted 6.1.146-syzkaller #0 [ 424.754330][T11567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 424.764442][T11567] Call Trace: [ 424.767772][T11567] [ 424.770753][T11567] dump_stack_lvl+0x168/0x22e [ 424.775493][T11567] ? show_regs_print_info+0x12/0x12 [ 424.780749][T11567] ? load_image+0x3b0/0x3b0 [ 424.785326][T11567] ? __might_sleep+0xd0/0xd0 [ 424.789985][T11567] ? __lock_acquire+0x7c50/0x7c50 [ 424.795097][T11567] should_fail_ex+0x399/0x4d0 [ 424.799883][T11567] should_failslab+0x5/0x20 [ 424.804501][T11567] slab_pre_alloc_hook+0x59/0x310 [ 424.809610][T11567] kmem_cache_alloc_node+0x5a/0x320 [ 424.814870][T11567] ? __alloc_skb+0xfc/0x7e0 [ 424.819569][T11567] __alloc_skb+0xfc/0x7e0 [ 424.823986][T11567] ? netlink_autobind+0xda/0x300 [ 424.829026][T11567] netlink_sendmsg+0x645/0xbc0 [ 424.833902][T11567] ? netlink_getsockopt+0x540/0x540 [ 424.839183][T11567] ? aa_sock_msg_perm+0x94/0x150 [ 424.844220][T11567] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 424.849557][T11567] ? security_socket_sendmsg+0x7c/0xa0 [ 424.855061][T11567] ? netlink_getsockopt+0x540/0x540 [ 424.860293][T11567] ____sys_sendmsg+0x59b/0x970 [ 424.865116][T11567] ? __sys_sendmsg_sock+0x30/0x30 [ 424.870172][T11567] ? __import_iovec+0x315/0x500 [ 424.875090][T11567] ? import_iovec+0x6f/0xa0 [ 424.879642][T11567] ___sys_sendmsg+0x21c/0x290 [ 424.884363][T11567] ? __sys_sendmsg+0x270/0x270 [ 424.889324][T11567] ? __lock_acquire+0x7c50/0x7c50 [ 424.894436][T11567] ? __fdget+0x17c/0x200 [ 424.898739][T11567] __se_sys_sendmsg+0x19e/0x270 [ 424.903635][T11567] ? __x64_sys_sendmsg+0x80/0x80 [ 424.908650][T11567] ? lockdep_hardirqs_on+0x94/0x140 [ 424.913891][T11567] do_syscall_64+0x4c/0xa0 [ 424.918335][T11567] ? clear_bhb_loop+0x60/0xb0 [ 424.923040][T11567] ? clear_bhb_loop+0x60/0xb0 [ 424.927751][T11567] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 424.933683][T11567] RIP: 0033:0x7f9a9bd8e9a9 [ 424.938129][T11567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.957774][T11567] RSP: 002b:00007f9a9cba1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 424.966218][T11567] RAX: ffffffffffffffda RBX: 00007f9a9bfb5fa0 RCX: 00007f9a9bd8e9a9 [ 424.974213][T11567] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000c [ 424.982228][T11567] RBP: 00007f9a9cba1090 R08: 0000000000000000 R09: 0000000000000000 [ 424.990231][T11567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.998417][T11567] R13: 0000000000000000 R14: 00007f9a9bfb5fa0 R15: 00007ffd67792c28 [ 425.006478][T11567] [ 425.153414][T11573] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.2298'. [ 425.167689][T11571] delete_channel: no stack [ 425.187703][T11571] delete_channel: no stack [ 425.200663][T11562] device sit0 entered promiscuous mode [ 425.710580][T11579] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.2300'. [ 425.777259][T11579] device sit0 left promiscuous mode [ 426.088330][T11585] device sit0 entered promiscuous mode [ 426.219294][T11591] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2305'. [ 426.384952][ T4279] Bluetooth: hci0: unexpected event 0x05 length: 151 > 4 [ 426.541456][ T4279] Bluetooth: hci1: unexpected event 0x05 length: 151 > 4 [ 426.553586][T11604] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.2311'. [ 426.631858][T11604] device sit0 left promiscuous mode [ 426.908927][T11609] netlink: 'syz.2.2312': attribute type 46 has an invalid length. [ 426.921963][T11610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.946166][T11610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.320866][T11610] batman_adv: batadv0: Removing interface: macvtap0 [ 427.685475][T11611] device sit0 entered promiscuous mode [ 427.780495][T11627] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.2317'. [ 428.262726][T11638] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.2321'. [ 428.548148][ T4279] Bluetooth: hci1: unexpected event 0x05 length: 151 > 4 [ 428.817833][ T4279] Bluetooth: hci3: unexpected event 0x05 length: 151 > 4 [ 429.187152][T11638] device sit0 left promiscuous mode [ 429.260934][T11641] device sit0 entered promiscuous mode [ 429.383972][T11644] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2323'. [ 429.469570][T11657] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2325'. [ 429.510396][T11657] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2325'. [ 429.531601][T11654] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2325'. [ 429.559137][T11660] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2325'. [ 429.598081][T11654] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.2325'. [ 429.629413][T11656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.665952][T11656] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.042032][T11664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2328'. [ 430.082893][T11669] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.2330'. [ 430.360628][T11669] device sit0 left promiscuous mode [ 430.647803][T11676] device sit0 entered promiscuous mode [ 432.037367][T11730] netlink: 'syz.4.2345': attribute type 10 has an invalid length. [ 432.323716][T11730] bond0: (slave netdevsim0): Releasing backup interface [ 432.426900][T11730] team0: Port device netdevsim0 added [ 432.433079][T11714] netlink: 'syz.4.2345': attribute type 10 has an invalid length. [ 432.680314][T11714] team0: Port device netdevsim0 removed [ 433.057861][T11714] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 433.083487][T11736] device sit0 left promiscuous mode [ 433.168633][T11739] device sit0 entered promiscuous mode [ 433.267994][T11752] __nla_validate_parse: 10 callbacks suppressed [ 433.268017][T11752] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2357'. [ 434.131512][T11775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2364'. [ 434.378960][T11782] netlink: 'syz.4.2368': attribute type 10 has an invalid length. [ 434.543880][T11790] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.2371'. [ 434.569226][T11789] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.2370'. [ 434.621170][T11782] bond0: (slave netdevsim0): Releasing backup interface [ 434.719460][T11782] team0: Port device netdevsim0 added [ 434.802662][T11786] netlink: 'syz.4.2368': attribute type 10 has an invalid length. [ 434.856431][T11786] team0: Port device netdevsim0 removed [ 434.866404][T11786] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 434.921266][T11789] device sit0 left promiscuous mode [ 435.407147][T11792] device sit0 entered promiscuous mode [ 435.817701][T11805] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.2374'. [ 436.006942][T11805] device sit0 left promiscuous mode [ 436.588338][T11808] device sit0 entered promiscuous mode [ 436.784648][T11811] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2376'. [ 438.230093][T11831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2382'. [ 438.441925][T11839] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.2386'. [ 438.499794][T11840] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.2385'. [ 438.605954][T11840] device sit0 left promiscuous mode [ 438.728551][T11842] device sit0 entered promiscuous mode [ 439.433070][T11865] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2395'. [ 440.068705][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.075166][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.443635][T11890] FAULT_INJECTION: forcing a failure. [ 440.443635][T11890] name failslab, interval 1, probability 0, space 0, times 0 [ 440.513145][T11890] CPU: 0 PID: 11890 Comm: syz.0.2405 Not tainted 6.1.146-syzkaller #0 [ 440.521390][T11890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 440.531484][T11890] Call Trace: [ 440.534802][T11890] [ 440.537757][T11890] dump_stack_lvl+0x168/0x22e [ 440.542482][T11890] ? show_regs_print_info+0x12/0x12 [ 440.547712][T11890] ? load_image+0x3b0/0x3b0 [ 440.552266][T11890] ? __might_sleep+0xd0/0xd0 [ 440.556899][T11890] ? __lock_acquire+0x7c50/0x7c50 [ 440.561973][T11890] should_fail_ex+0x399/0x4d0 [ 440.566699][T11890] should_failslab+0x5/0x20 [ 440.571243][T11890] slab_pre_alloc_hook+0x59/0x310 [ 440.576296][T11890] ? sctp_association_new+0x86/0x25d0 [ 440.581700][T11890] __kmem_cache_alloc_node+0x4f/0x260 [ 440.587086][T11890] ? sctp_association_new+0x86/0x25d0 [ 440.592482][T11890] kmalloc_trace+0x26/0xe0 [ 440.596922][T11890] sctp_association_new+0x86/0x25d0 [ 440.602132][T11890] ? sctp_do_bind+0x6bb/0x990 [ 440.606827][T11890] sctp_connect_new_asoc+0x2bb/0x690 [ 440.612130][T11890] ? __sctp_connect+0xd20/0xd20 [ 440.616994][T11890] ? __local_bh_enable_ip+0x12a/0x1b0 [ 440.622392][T11890] ? lock_sock_nested+0x66/0x100 [ 440.627342][T11890] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 440.632907][T11890] ? security_sctp_bind_connect+0x85/0xb0 [ 440.638646][T11890] sctp_sendmsg+0x15ff/0x2980 [ 440.643342][T11890] ? trace_event_raw_event_lock+0x230/0x230 [ 440.649260][T11890] ? sctp_getsockopt+0x8a0/0x8a0 [ 440.654213][T11890] ? aa_af_perm+0x2b0/0x2b0 [ 440.658744][T11890] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 440.665220][T11890] ? inet_sendmsg+0xe5/0x2f0 [ 440.669839][T11890] ? inet_send_prepare+0x260/0x260 [ 440.674972][T11890] ____sys_sendmsg+0x59b/0x970 [ 440.679774][T11890] ? __sys_sendmsg_sock+0x30/0x30 [ 440.684830][T11890] ? __import_iovec+0x315/0x500 [ 440.689710][T11890] ? import_iovec+0x6f/0xa0 [ 440.694248][T11890] ___sys_sendmsg+0x21c/0x290 [ 440.698975][T11890] ? __sys_sendmsg+0x270/0x270 [ 440.703808][T11890] ? __lock_acquire+0x7c50/0x7c50 [ 440.708884][T11890] ? __fdget+0x17c/0x200 [ 440.713158][T11890] __se_sys_sendmsg+0x19e/0x270 [ 440.718028][T11890] ? __x64_sys_sendmsg+0x80/0x80 [ 440.723088][T11890] ? lockdep_hardirqs_on+0x94/0x140 [ 440.728312][T11890] do_syscall_64+0x4c/0xa0 [ 440.732747][T11890] ? clear_bhb_loop+0x60/0xb0 [ 440.737451][T11890] ? clear_bhb_loop+0x60/0xb0 [ 440.742138][T11890] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 440.748159][T11890] RIP: 0033:0x7f95f7d8e9a9 [ 440.752711][T11890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.772353][T11890] RSP: 002b:00007f95f8b85038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 440.780883][T11890] RAX: ffffffffffffffda RBX: 00007f95f7fb5fa0 RCX: 00007f95f7d8e9a9 [ 440.788867][T11890] RDX: 0000000000000000 RSI: 0000200000000f80 RDI: 0000000000000003 [ 440.796849][T11890] RBP: 00007f95f8b85090 R08: 0000000000000000 R09: 0000000000000000 [ 440.804866][T11890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.812869][T11890] R13: 0000000000000000 R14: 00007f95f7fb5fa0 R15: 00007ffe89227c28 [ 440.820881][T11890] [ 440.991155][T11895] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.2407'. [ 441.573461][T11904] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.2408'. [ 442.057415][T11905] device sit0 left promiscuous mode [ 442.236615][T11906] device sit0 entered promiscuous mode [ 442.367728][T11915] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2411'. [ 443.015845][T11937] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.2418'. [ 444.623387][T11982] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.2433'. [ 445.663357][T12009] device sit0 left promiscuous mode [ 446.431855][T12027] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.2446'. [ 446.520296][T12027] device sit0 entered promiscuous mode [ 448.353510][T12072] FAULT_INJECTION: forcing a failure. [ 448.353510][T12072] name failslab, interval 1, probability 0, space 0, times 0 [ 448.377244][T12072] CPU: 0 PID: 12072 Comm: syz.4.2463 Not tainted 6.1.146-syzkaller #0 [ 448.385481][T12072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 448.395568][T12072] Call Trace: [ 448.398856][T12072] [ 448.401801][T12072] dump_stack_lvl+0x168/0x22e [ 448.406524][T12072] ? show_regs_print_info+0x12/0x12 [ 448.411768][T12072] ? load_image+0x3b0/0x3b0 [ 448.416324][T12072] ? __local_bh_enable_ip+0x12a/0x1b0 [ 448.421748][T12072] ? lockdep_hardirqs_on+0x94/0x140 [ 448.427041][T12072] ? __local_bh_enable_ip+0x12a/0x1b0 [ 448.432460][T12072] should_fail_ex+0x399/0x4d0 [ 448.437168][T12072] should_failslab+0x5/0x20 [ 448.441692][T12072] slab_pre_alloc_hook+0x59/0x310 [ 448.446815][T12072] ? sctp_get_port_local+0xd57/0x14e0 [ 448.452203][T12072] ? sctp_add_bind_addr+0x89/0x350 [ 448.457335][T12072] __kmem_cache_alloc_node+0x4f/0x260 [ 448.462722][T12072] ? sctp_add_bind_addr+0x89/0x350 [ 448.467846][T12072] kmalloc_trace+0x26/0xe0 [ 448.472284][T12072] sctp_add_bind_addr+0x89/0x350 [ 448.477236][T12072] sctp_do_bind+0x614/0x990 [ 448.481768][T12072] sctp_connect_new_asoc+0x252/0x690 [ 448.487077][T12072] ? __sctp_connect+0xd20/0xd20 [ 448.491941][T12072] ? __local_bh_enable_ip+0x12a/0x1b0 [ 448.497346][T12072] ? lock_sock_nested+0x66/0x100 [ 448.502297][T12072] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 448.507850][T12072] ? security_sctp_bind_connect+0x85/0xb0 [ 448.513594][T12072] sctp_sendmsg+0x15ff/0x2980 [ 448.518371][T12072] ? trace_event_raw_event_lock+0x230/0x230 [ 448.524295][T12072] ? sctp_getsockopt+0x8a0/0x8a0 [ 448.529255][T12072] ? aa_af_perm+0x2b0/0x2b0 [ 448.533770][T12072] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 448.540210][T12072] ? inet_sendmsg+0xe5/0x2f0 [ 448.544823][T12072] ? inet_send_prepare+0x260/0x260 [ 448.549951][T12072] ____sys_sendmsg+0x59b/0x970 [ 448.554739][T12072] ? __sys_sendmsg_sock+0x30/0x30 [ 448.559785][T12072] ? __import_iovec+0x315/0x500 [ 448.564665][T12072] ? import_iovec+0x6f/0xa0 [ 448.569195][T12072] ___sys_sendmsg+0x21c/0x290 [ 448.573911][T12072] ? __sys_sendmsg+0x270/0x270 [ 448.578737][T12072] ? __lock_acquire+0x7c50/0x7c50 [ 448.583794][T12072] ? __fdget+0x17c/0x200 [ 448.588144][T12072] __se_sys_sendmsg+0x19e/0x270 [ 448.593108][T12072] ? __x64_sys_sendmsg+0x80/0x80 [ 448.598119][T12072] ? lockdep_hardirqs_on+0x94/0x140 [ 448.603340][T12072] do_syscall_64+0x4c/0xa0 [ 448.607769][T12072] ? clear_bhb_loop+0x60/0xb0 [ 448.612462][T12072] ? clear_bhb_loop+0x60/0xb0 [ 448.617160][T12072] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 448.623082][T12072] RIP: 0033:0x7fcd1f58e9a9 [ 448.627533][T12072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.647167][T12072] RSP: 002b:00007fcd20488038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 448.655605][T12072] RAX: ffffffffffffffda RBX: 00007fcd1f7b5fa0 RCX: 00007fcd1f58e9a9 [ 448.663598][T12072] RDX: 0000000000000040 RSI: 00002000000003c0 RDI: 0000000000000003 [ 448.671585][T12072] RBP: 00007fcd20488090 R08: 0000000000000000 R09: 0000000000000000 [ 448.679570][T12072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.687553][T12072] R13: 0000000000000000 R14: 00007fcd1f7b5fa0 R15: 00007ffe700a41d8 [ 448.695554][T12072] [ 449.334148][T12084] netlink: 'syz.3.2466': attribute type 39 has an invalid length. [ 449.612292][T12092] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.2467'. [ 450.618544][T12120] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2474'. [ 452.685465][ T4279] Bluetooth: hci3: unexpected event 0x05 length: 151 > 4 [ 454.734956][T12156] netlink: 'syz.4.2482': attribute type 39 has an invalid length. [ 454.793648][T12159] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.2484'. [ 456.078266][ T4279] Bluetooth: hci0: unexpected event 0x05 length: 151 > 4 [ 456.139382][ T4279] Bluetooth: hci1: unexpected event 0x05 length: 151 > 4 [ 456.343740][T12195] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.2495'. [ 456.463206][T12195] device sit0 left promiscuous mode [ 456.616932][T12208] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.2499'. [ 457.266116][T12203] device sit0 entered promiscuous mode [ 457.621120][T12222] netlink: 'syz.0.2501': attribute type 39 has an invalid length. [ 457.665291][ T4279] Bluetooth: hci4: unexpected event 0x05 length: 151 > 4 [ 458.797868][ T4279] Bluetooth: hci2: unexpected event 0x05 length: 151 > 4 [ 459.710283][ T4279] Bluetooth: hci1: unexpected event 0x05 length: 151 > 4 [ 459.761065][T12261] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.2511'. [ 459.893454][T12267] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.2513'. [ 459.924664][T12265] device sit0 left promiscuous mode [ 460.200544][T12275] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.2514'. [ 460.478161][T12261] device sit0 entered promiscuous mode [ 460.555430][T12275] device sit0 left promiscuous mode [ 461.207315][ T4279] Bluetooth: hci2: unexpected event 0x05 length: 151 > 4 [ 461.266299][T12276] device sit0 entered promiscuous mode [ 461.361223][T12279] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2516'. [ 462.523833][ T4279] Bluetooth: hci3: unexpected event 0x05 length: 151 > 4 [ 462.885441][T12333] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2538'. [ 463.165708][T12344] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.2542'. [ 464.015167][ T4279] Bluetooth: hci0: unexpected event 0x05 length: 151 > 4 [ 464.632896][T12382] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2555'. [ 464.707094][T12387] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.2558'. [ 465.073858][ T4279] Bluetooth: hci4: unexpected event 0x05 length: 151 > 4 [ 465.210107][T12401] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.2562'. [ 465.382324][T12402] device sit0 left promiscuous mode [ 465.392736][T12404] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.2564'. [ 465.475624][T12401] device sit0 entered promiscuous mode [ 466.517022][T12431] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2574'. [ 466.740003][T12440] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.2578'. [ 467.665188][T12461] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.2585'. [ 467.720439][T12463] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.2586'. [ 467.865882][T12466] device sit0 left promiscuous mode [ 468.139921][T12463] device sit0 entered promiscuous mode [ 469.078343][T12484] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2592'. [ 475.081369][T12582] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.2624'. [ 475.736791][T12600] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.2631'. [ 477.235258][T12637] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.2644'. [ 477.652100][ T4279] Bluetooth: hci3: unexpected event 0x05 length: 151 > 4 [ 479.006778][T12686] netlink: 'syz.0.2657': attribute type 10 has an invalid length. [ 479.139895][T12686] device netdevsim0 left promiscuous mode [ 479.620108][T12686] team0: Port device netdevsim0 removed [ 479.663956][T12686] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 480.049933][T12705] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.2662'. [ 481.093998][T12732] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2673'. [ 481.148425][T12735] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2674'. [ 481.718036][T12760] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.2683'. [ 482.539379][T12781] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2691'. [ 483.100073][T12798] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2699'. [ 483.137991][T12798] FAULT_INJECTION: forcing a failure. [ 483.137991][T12798] name failslab, interval 1, probability 0, space 0, times 0 [ 483.162041][T12798] CPU: 1 PID: 12798 Comm: syz.1.2699 Not tainted 6.1.146-syzkaller #0 [ 483.170365][T12798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 483.180459][T12798] Call Trace: [ 483.183783][T12798] [ 483.186734][T12798] dump_stack_lvl+0x168/0x22e [ 483.191438][T12798] ? show_regs_print_info+0x12/0x12 [ 483.196658][T12798] ? load_image+0x3b0/0x3b0 [ 483.201196][T12798] should_fail_ex+0x399/0x4d0 [ 483.205907][T12798] should_failslab+0x5/0x20 [ 483.210430][T12798] slab_pre_alloc_hook+0x59/0x310 [ 483.215470][T12798] ? ref_tracker_alloc+0x129/0x450 [ 483.220607][T12798] __kmem_cache_alloc_node+0x4f/0x260 [ 483.226008][T12798] ? ref_tracker_alloc+0x129/0x450 [ 483.231134][T12798] kmalloc_trace+0x26/0xe0 [ 483.235564][T12798] ref_tracker_alloc+0x129/0x450 [ 483.240521][T12798] ? ref_tracker_dir_print+0x150/0x150 [ 483.246020][T12798] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 483.251933][T12798] ? _raw_spin_unlock+0x40/0x40 [ 483.256827][T12798] ? __debug_object_init+0xe5/0x420 [ 483.262041][T12798] ? neigh_release+0x80/0x80 [ 483.266639][T12798] ? init_timer_key+0x178/0x320 [ 483.271512][T12798] ___neigh_create+0xc96/0x24c0 [ 483.276497][T12798] ? neigh_lookup+0xad/0x3f0 [ 483.281103][T12798] ? neigh_ifdown+0x30/0x30 [ 483.285629][T12798] ? __nla_parse+0x3c/0x50 [ 483.290079][T12798] neigh_add+0xa8b/0xd20 [ 483.294333][T12798] ? rcu_is_watching+0x11/0xa0 [ 483.299134][T12798] ? neigh_proc_dointvec_unres_qlen+0x270/0x270 [ 483.305401][T12798] ? neigh_proc_dointvec_unres_qlen+0x270/0x270 [ 483.311653][T12798] ? rtnetlink_rcv_msg+0x1d8/0xed0 [ 483.316782][T12798] rtnetlink_rcv_msg+0x79b/0xed0 [ 483.321758][T12798] ? rtnetlink_bind+0x80/0x80 [ 483.326444][T12798] ? __local_bh_enable_ip+0x12a/0x1b0 [ 483.331836][T12798] ? lockdep_hardirqs_on+0x94/0x140 [ 483.337048][T12798] ? __local_bh_enable_ip+0x12a/0x1b0 [ 483.342439][T12798] ? _local_bh_enable+0xa0/0xa0 [ 483.347312][T12798] ? __dev_queue_xmit+0x26f/0x3760 [ 483.352443][T12798] ? __dev_queue_xmit+0x26f/0x3760 [ 483.357572][T12798] ? __dev_queue_xmit+0x15c9/0x3760 [ 483.362817][T12798] ? __dev_queue_xmit+0x26f/0x3760 [ 483.368387][T12798] ? netdev_core_pick_tx+0x340/0x340 [ 483.373701][T12798] ? ref_tracker_free+0x630/0x7c0 [ 483.378747][T12798] ? refcount_inc+0x70/0x70 [ 483.383271][T12798] ? __copy_skb_header+0x417/0x5a0 [ 483.388398][T12798] ? __skb_clone+0x480/0x790 [ 483.393014][T12798] netlink_rcv_skb+0x1de/0x420 [ 483.397791][T12798] ? rtnetlink_bind+0x80/0x80 [ 483.402483][T12798] ? netlink_ack+0x1100/0x1100 [ 483.407273][T12798] ? netlink_deliver_tap+0x2e/0x1b0 [ 483.412491][T12798] netlink_unicast+0x74d/0x8d0 [ 483.417282][T12798] netlink_sendmsg+0x89e/0xbc0 [ 483.422073][T12798] ? netlink_getsockopt+0x540/0x540 [ 483.427291][T12798] ? aa_sock_msg_perm+0x94/0x150 [ 483.432251][T12798] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 483.437544][T12798] ? security_socket_sendmsg+0x7c/0xa0 [ 483.443023][T12798] ? netlink_getsockopt+0x540/0x540 [ 483.448239][T12798] ____sys_sendmsg+0x59b/0x970 [ 483.453026][T12798] ? __sys_sendmsg_sock+0x30/0x30 [ 483.458067][T12798] ? __import_iovec+0x315/0x500 [ 483.463379][T12798] ? import_iovec+0x6f/0xa0 [ 483.468032][T12798] ___sys_sendmsg+0x21c/0x290 [ 483.472739][T12798] ? __sys_sendmsg+0x270/0x270 [ 483.477531][T12798] ? __lock_acquire+0x7c50/0x7c50 [ 483.482584][T12798] ? __fdget+0x17c/0x200 [ 483.486933][T12798] __se_sys_sendmsg+0x19e/0x270 [ 483.491890][T12798] ? __x64_sys_sendmsg+0x80/0x80 [ 483.496850][T12798] ? lockdep_hardirqs_on+0x94/0x140 [ 483.502076][T12798] do_syscall_64+0x4c/0xa0 [ 483.506513][T12798] ? clear_bhb_loop+0x60/0xb0 [ 483.511211][T12798] ? clear_bhb_loop+0x60/0xb0 [ 483.515994][T12798] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 483.521909][T12798] RIP: 0033:0x7f9a9bd8e9a9 [ 483.526336][T12798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.545988][T12798] RSP: 002b:00007f9a9cba1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 483.554432][T12798] RAX: ffffffffffffffda RBX: 00007f9a9bfb5fa0 RCX: 00007f9a9bd8e9a9 [ 483.562411][T12798] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 483.570394][T12798] RBP: 00007f9a9cba1090 R08: 0000000000000000 R09: 0000000000000000 [ 483.578373][T12798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.586354][T12798] R13: 0000000000000000 R14: 00007f9a9bfb5fa0 R15: 00007ffd67792c28 [ 483.594344][T12798] [ 483.821352][T12798] memory allocation failure, unreliable refcount tracker. [ 484.008416][T12810] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.2705'. [ 485.806823][ T4279] Bluetooth: hci2: unexpected event 0x05 length: 151 > 4 [ 485.846109][T12849] delete_channel: no stack [ 486.158338][T12864] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.2722'. [ 487.100663][T12890] FAULT_INJECTION: forcing a failure. [ 487.100663][T12890] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 487.183571][T12890] CPU: 1 PID: 12890 Comm: syz.2.2731 Not tainted 6.1.146-syzkaller #0 [ 487.191812][T12890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 487.201913][T12890] Call Trace: [ 487.205320][T12890] [ 487.208284][T12890] dump_stack_lvl+0x168/0x22e [ 487.213013][T12890] ? show_regs_print_info+0x12/0x12 [ 487.218245][T12890] ? load_image+0x3b0/0x3b0 [ 487.222802][T12890] ? __lock_acquire+0x7c50/0x7c50 [ 487.227866][T12890] ? ct_irq_exit_irqson+0xfa/0x160 [ 487.233015][T12890] should_fail_ex+0x399/0x4d0 [ 487.237746][T12890] prepare_alloc_pages+0x1e2/0x5f0 [ 487.242906][T12890] __alloc_pages+0x123/0x4e0 [ 487.247537][T12890] ? asm_exc_page_fault+0x22/0x30 [ 487.252605][T12890] ? zone_statistics+0x170/0x170 [ 487.257581][T12890] ? _copy_from_user+0x21/0x170 [ 487.262472][T12890] bpf_prog_test_run_xdp+0xac0/0xe50 [ 487.267833][T12890] ? dev_put+0x80/0x80 [ 487.271969][T12890] ? dev_put+0x80/0x80 [ 487.276080][T12890] bpf_prog_test_run+0x31e/0x390 [ 487.281067][T12890] __sys_bpf+0x593/0x6d0 [ 487.285446][T12890] ? bpf_link_show_fdinfo+0x340/0x340 [ 487.290870][T12890] ? lock_chain_count+0x20/0x20 [ 487.295789][T12890] __x64_sys_bpf+0x78/0x90 [ 487.300244][T12890] do_syscall_64+0x4c/0xa0 [ 487.304699][T12890] ? clear_bhb_loop+0x60/0xb0 [ 487.309414][T12890] ? clear_bhb_loop+0x60/0xb0 [ 487.314128][T12890] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 487.320071][T12890] RIP: 0033:0x7fba1658e9a9 [ 487.324518][T12890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.344261][T12890] RSP: 002b:00007fba174e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 487.352719][T12890] RAX: ffffffffffffffda RBX: 00007fba167b5fa0 RCX: 00007fba1658e9a9 [ 487.360747][T12890] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 487.368746][T12890] RBP: 00007fba174e0090 R08: 0000000000000000 R09: 0000000000000000 [ 487.376748][T12890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.384753][T12890] R13: 0000000000000000 R14: 00007fba167b5fa0 R15: 00007ffcbb6c6108 [ 487.392774][T12890] [ 489.691937][T12940] netlink: 'syz.1.2746': attribute type 2 has an invalid length. [ 489.708792][T12940] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2746'. [ 490.437147][T12963] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2750'. [ 490.815000][T12975] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2754'. [ 491.812382][T13003] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2764'. [ 492.307622][ T4279] Bluetooth: hci1: unexpected event 0x05 length: 151 > 4 [ 492.531526][T13016] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2769'. [ 493.919742][T13044] FAULT_INJECTION: forcing a failure. [ 493.919742][T13044] name failslab, interval 1, probability 0, space 0, times 0 [ 493.924197][T13043] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2775'. [ 493.966831][T13044] CPU: 1 PID: 13044 Comm: syz.0.2776 Not tainted 6.1.146-syzkaller #0 [ 493.975077][T13044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 493.985264][T13044] Call Trace: [ 493.988602][T13044] [ 493.991574][T13044] dump_stack_lvl+0x168/0x22e [ 493.996290][T13044] ? show_regs_print_info+0x12/0x12 [ 494.001515][T13044] ? load_image+0x3b0/0x3b0 [ 494.006132][T13044] ? __lock_acquire+0x7c50/0x7c50 [ 494.011196][T13044] should_fail_ex+0x399/0x4d0 [ 494.015897][T13044] should_failslab+0x5/0x20 [ 494.020423][T13044] slab_pre_alloc_hook+0x59/0x310 [ 494.025461][T13044] ? bpf_test_init+0xc0/0x150 [ 494.030182][T13044] __kmem_cache_alloc_node+0x4f/0x260 [ 494.035567][T13044] ? bpf_test_init+0xc0/0x150 [ 494.040262][T13044] __kmalloc+0xa0/0x240 [ 494.044439][T13044] bpf_test_init+0xc0/0x150 [ 494.048969][T13044] bpf_prog_test_run_xdp+0x359/0xe50 [ 494.054283][T13044] ? dev_put+0x80/0x80 [ 494.058378][T13044] ? dev_put+0x80/0x80 [ 494.062465][T13044] bpf_prog_test_run+0x31e/0x390 [ 494.067421][T13044] __sys_bpf+0x593/0x6d0 [ 494.071683][T13044] ? bpf_link_show_fdinfo+0x340/0x340 [ 494.077080][T13044] ? lock_chain_count+0x20/0x20 [ 494.082053][T13044] __x64_sys_bpf+0x78/0x90 [ 494.086484][T13044] do_syscall_64+0x4c/0xa0 [ 494.090910][T13044] ? clear_bhb_loop+0x60/0xb0 [ 494.095602][T13044] ? clear_bhb_loop+0x60/0xb0 [ 494.100289][T13044] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 494.106206][T13044] RIP: 0033:0x7f95f7d8e9a9 [ 494.110636][T13044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.130430][T13044] RSP: 002b:00007f95f8b85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 494.138866][T13044] RAX: ffffffffffffffda RBX: 00007f95f7fb5fa0 RCX: 00007f95f7d8e9a9 [ 494.146848][T13044] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 494.154825][T13044] RBP: 00007f95f8b85090 R08: 0000000000000000 R09: 0000000000000000 [ 494.162805][T13044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.170783][T13044] R13: 0000000000000000 R14: 00007f95f7fb5fa0 R15: 00007ffe89227c28 [ 494.178785][T13044] [ 494.483603][ T4279] Bluetooth: hci0: unexpected event 0x05 length: 151 > 4 [ 495.689284][T13078] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2788'. [ 496.023342][T13086] netlink: 'syz.2.2789': attribute type 2 has an invalid length. [ 496.032752][T13086] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2789'. [ 496.464450][ T4279] Bluetooth: hci0: unexpected event 0x05 length: 151 > 4 [ 496.477463][T13094] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 496.492395][T13094] #PF: supervisor instruction fetch in kernel mode [ 496.492562][T13101] netlink: 'syz.0.2794': attribute type 13 has an invalid length. [ 496.498928][T13094] #PF: error_code(0x0010) - not-present page [ 496.498961][T13094] PGD 2b1aa067 P4D 2b1aa067 PUD 0 [ 496.498994][T13094] Oops: 0010 [#1] PREEMPT SMP KASAN [ 496.523184][T13094] CPU: 1 PID: 13094 Comm: syz.3.2791 Not tainted 6.1.146-syzkaller #0 [ 496.531400][T13094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 496.540660][T13101] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2794'. [ 496.541471][T13094] RIP: 0010:0x0 [ 496.541504][T13094] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 496.561412][T13094] RSP: 0018:ffffc9000cad7398 EFLAGS: 00010246 [ 496.567515][T13094] RAX: 1ffffffff165718f RBX: 000000000000000f RCX: 0000000000000000 [ 496.575503][T13094] RDX: ffffc9000cad7440 RSI: 0000000000000001 RDI: ffff8880565ec000 [ 496.583491][T13094] RBP: ffffc9000cad74b0 R08: 0000000000001228 R09: 0000000000400000 [ 496.591483][T13094] R10: 0000000000024508 R11: 1ffff1100acbd807 R12: ffffe8ffffd490a8 [ 496.599467][T13094] R13: ffffffff8b2b8c78 R14: 0000000000000000 R15: ffff8880565ec000 [ 496.607451][T13094] FS: 00007ff8c14616c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 496.616391][T13094] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 496.622987][T13094] CR2: ffffffffffffffd6 CR3: 0000000030656000 CR4: 00000000003506e0 [ 496.630975][T13094] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 496.638960][T13094] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 496.646945][T13094] Call Trace: [ 496.650228][T13094] [ 496.653163][T13094] bond_xdp_xmit+0x309/0x520 [ 496.657783][T13094] ? bond_xdp_xmit+0x93/0x520 [ 496.662473][T13094] ? bond_xdp+0x840/0x840 [ 496.666820][T13094] bq_xmit_all+0xc99/0x10d0 [ 496.671347][T13094] ? __next_zones_zonelist+0x99/0x120 [ 496.676739][T13094] ? rcu_is_watching+0x11/0xa0 [ 496.681540][T13094] ? __alloc_pages+0x287/0x4e0 [ 496.686317][T13094] ? __dev_flush+0x1b0/0x1b0 [ 496.690925][T13094] ? zone_statistics+0x170/0x170 [ 496.695880][T13094] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 496.701894][T13094] ? irqentry_enter+0x33/0x50 [ 496.706584][T13094] ? lock_chain_count+0x20/0x20 [ 496.711447][T13094] ? __alloc_pages_bulk+0x49a/0x920 [ 496.716681][T13094] ? rcu_is_watching+0x11/0xa0 [ 496.721461][T13094] bq_enqueue+0x337/0x3d0 [ 496.725829][T13094] dev_map_enqueue+0x1b4/0x340 [ 496.730609][T13094] xdp_do_redirect_frame+0x30c/0x650 [ 496.735934][T13094] bpf_test_run_xdp_live+0x9dd/0x1970 [ 496.741358][T13094] ? bpf_test_run_xdp_live+0x45c/0x1970 [ 496.746938][T13094] ? xdp_convert_md_to_buff+0x330/0x330 [ 496.752515][T13094] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 496.758775][T13094] ? bpf_test_init+0x134/0x150 [ 496.763575][T13094] ? xdp_convert_md_to_buff+0x5b/0x330 [ 496.769069][T13094] bpf_prog_test_run_xdp+0x6f1/0xe50 [ 496.774392][T13094] ? dev_put+0x80/0x80 [ 496.778490][T13094] ? dev_put+0x80/0x80 [ 496.782580][T13094] bpf_prog_test_run+0x31e/0x390 [ 496.787537][T13094] __sys_bpf+0x593/0x6d0 [ 496.791790][T13094] ? bpf_link_show_fdinfo+0x340/0x340 [ 496.797192][T13094] ? lock_chain_count+0x20/0x20 [ 496.802086][T13094] __x64_sys_bpf+0x78/0x90 [ 496.806530][T13094] do_syscall_64+0x4c/0xa0 [ 496.810959][T13094] ? clear_bhb_loop+0x60/0xb0 [ 496.815646][T13094] ? clear_bhb_loop+0x60/0xb0 [ 496.820333][T13094] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 496.826250][T13094] RIP: 0033:0x7ff8c058e9a9 [ 496.830683][T13094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.850299][T13094] RSP: 002b:00007ff8c1461038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 496.858719][T13094] RAX: ffffffffffffffda RBX: 00007ff8c07b5fa0 RCX: 00007ff8c058e9a9 [ 496.866701][T13094] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 496.874685][T13094] RBP: 00007ff8c0610d69 R08: 0000000000000000 R09: 0000000000000000 [ 496.882664][T13094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 496.890641][T13094] R13: 0000000000000000 R14: 00007ff8c07b5fa0 R15: 00007ffc12846398 [ 496.898634][T13094] [ 496.901688][T13094] Modules linked in: [ 496.905599][T13094] CR2: 0000000000000000 [ 496.909772][T13094] ---[ end trace 0000000000000000 ]--- [ 496.915233][T13094] RIP: 0010:0x0 [ 496.918725][T13094] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 496.926103][T13094] RSP: 0018:ffffc9000cad7398 EFLAGS: 00010246 [ 496.932174][T13094] RAX: 1ffffffff165718f RBX: 000000000000000f RCX: 0000000000000000 [ 496.940149][T13094] RDX: ffffc9000cad7440 RSI: 0000000000000001 RDI: ffff8880565ec000 [ 496.948145][T13094] RBP: ffffc9000cad74b0 R08: 0000000000001228 R09: 0000000000400000 [ 496.956137][T13094] R10: 0000000000024508 R11: 1ffff1100acbd807 R12: ffffe8ffffd490a8 [ 496.964139][T13094] R13: ffffffff8b2b8c78 R14: 0000000000000000 R15: ffff8880565ec000 [ 496.972137][T13094] FS: 00007ff8c14616c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 496.981076][T13094] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 496.987670][T13094] CR2: ffffffffffffffd6 CR3: 0000000030656000 CR4: 00000000003506e0 [ 496.995687][T13094] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 497.003684][T13094] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 497.011675][T13094] Kernel panic - not syncing: Fatal exception in interrupt [ 497.019183][T13094] Kernel Offset: disabled [ 497.023523][T13094] Rebooting in 86400 seconds..