last executing test programs: 5m1.070663822s ago: executing program 3 (id=1005): r0 = socket$kcm(0x2, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0), 0x2, 0xffffffffffffffff, 0x4}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="130000000700000028b62bb15d98da706282b4f6e10cb3e5ee56285f234611425bd0c8d21f99c4d436a16b0f2052e5c3bf1e214037c108c53e408a172a4c415ecda385bbace9bd7fba36923f5cb04e521f9f"], 0x48) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000000)="14000000320081024e81f782db44b904021d0800", 0x14}], 0x1}, 0x0) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1f, 0x0, 0x19) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000100)) 5m0.423113609s ago: executing program 3 (id=1009): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r5) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xb, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40000040) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x2, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000004c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x8d2ab000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r6, &(0x7f0000000000), 0x2a979d) gettid() bpf$LINK_DETACH(0x22, 0x0, 0x0) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f0000000040)={0x2, 0x80, 0x7f, 0x5, 0x6, 0x10, 0x0, 0x1, 0x20000, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x4, @perf_bp={&(0x7f0000000000), 0xa}, 0x400, 0x7fffffffffffffff, 0xfffff001, 0x2, 0x1, 0x8, 0x1, 0x0, 0x2, 0x0, 0x8}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 4m59.632181002s ago: executing program 3 (id=1018): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x400, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x4, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xf, 0x4, 0x2, 0xdc, 0x7, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xd, 0xffffffffffffffff, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xffff, 0xfffffffc, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb7020000000000001823", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m59.079053805s ago: executing program 3 (id=1021): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0xfffffffd, 0x1}, 0x0, 0x100000001, 0xffffffffffffffff, 0x0) (async) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) (async) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f7ffffff0000000000000000180100002020562500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000006000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x3}, 0x202, 0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r8, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r9, 0x4) (async) r10 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_ttl={{0x14, 0x110}}], 0x18}, 0x0) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10) close(r11) 4m58.161140723s ago: executing program 3 (id=1025): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2581, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x200, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8e}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x97, 0x9, 0x14, 0xc, 0x0, 0x9, 0x28020, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x5}, 0x2411, 0x5, 0x80000000, 0x0, 0x5eba, 0x13, 0x3, 0x0, 0xffffffff, 0x0, 0xffffffffffffffff}, 0x0, 0x3, 0xffffffffffffffff, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) openat$cgroup_ro(r3, &(0x7f0000000040)='memory.swap.events\x00', 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f2, &(0x7f0000000080)) 4m56.881228466s ago: executing program 3 (id=1034): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m56.474611453s ago: executing program 32 (id=1034): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.726644351s ago: executing program 1 (id=2315): r0 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000534a4095b728f3e290c6d6d42f791ba4f8ab5f118d11419f71e9ee862f5b70bf", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="7c410200100000008500000015000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="000000000000e7ff930500000800000085000000a5000000183200000500000000000000000000002893f8ffffffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000140)=r5, 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x1}], 0x1}, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x98f7}, 0x8b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0xffffffffffffffff) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x49) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r8) r9 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0600000000000000309547c9b3e3242b11e01740290f97736e43f1", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2e00000011008188040f80ec59acbc0413a181003100000001010000000000000e000a000f000000028002002d1fb6", 0x2f}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0xc0189436, &(0x7f00000002c0)={'tunl0\x00'}) 5.448439974s ago: executing program 1 (id=2326): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1b, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000008000000000000000000008018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000083000000bf090000000000005509010000000400000000000000000018210000", @ANYRES32, @ANYBLOB="00000000ff07000018470000fcffffff0000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x78, &(0x7f0000000180)=""/120, 0x41000, 0x40, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x1, 0x0, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000340)=[{0x5, 0x1, 0xd, 0x1}, {0x1, 0x5, 0xd, 0x1}], 0x10, 0x1}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e120800067c00001001a8001600a400034003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="050000000000000063112100000000008510000002000000850000000500000095000000000000009500a50500000000ab46e77dfa08d5a5ed5007e537903330f1afe48b17a6845b244c02a146f56ddd3f9e75c53f23a73b9cf5236b08c5d8b43438b69cf7597730c6e6e853123566668dba7b212b32f7597beeae88aa942d4a2bd732d4d1"], &(0x7f0000000080)='GPL\x00', 0xfffffffe, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000010008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000780)=0xffffffffffffffff, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000001f0000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000080000000000e8fc6fede72fb4860476357996272cc49474c7d443df772f396c4ded18eb224e2f72568894dafe75c336a60263592323c9b2899b78e6f7137e655b5c383bc77b7bfda3"], 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700368df3757f0086dd6317ce8000377ac9b0e0865a6596aff57b00"/42], 0xffffffffffffffc7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000121068f865783bf73d42", @ANYRES32, @ANYBLOB="0a00000000a3f500950004000000010045"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0xfffffffffffffdba) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000980)={r1, 0x20, &(0x7f0000000940)={&(0x7f0000000840), 0x0, 0x0, &(0x7f0000000880)=""/185, 0xb9}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000009c0)={0x1}, 0x4) 5.156750556s ago: executing program 1 (id=2328): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="0600000004000000ad3700005c00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000badec0f0d177a9f8a803b1eb18f798a805b12436189220115fe5b4faf1cdaf404722d1d6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) 5.013263192s ago: executing program 1 (id=2330): r0 = socket$kcm(0xa, 0x1, 0x106) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x80}, {0x6, 0x0, 0x0, 0x4}]}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0f02000039000511d25a80648c63940d0324fc600b003540280009", 0x1b}], 0x1}, 0xe000) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe00006a"], 0xfe33) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001ac0)={0x11, 0x5, &(0x7f0000001880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6ffb}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0x1}]}, &(0x7f00000018c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[r3, r3], 0x0, 0x10, 0x5}, 0x94) sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @remote, 0xfffffffe}, 0x80, 0x0}, 0x20040010) socket$kcm(0x18, 0x0, 0x2) 4.663523617s ago: executing program 1 (id=2333): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x8) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r1, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x40010102) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x276, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000a00)={0x5, 0x6, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000dc0)={r2, 0x0, 0xe4, 0x6c, &(0x7f0000000b00)="ee3c593a6fb60c3755164a0858ab1d90cea219cea93f291096690ef9e9aedefad63bcadc2d894434b30f6ec7e89c7942246c9d1278a20000744d61218aa6f442282733a20edec346f4ada322e5c1e888a9f8de3f6f2e138390230d7ad719f20ea1694d3490ec48486872d4d87977380c40de6dacbfc45c2dd561575a2a9d4532016c68066b69aa76b84ba537c57ebbae3ceed676339d88b1dbfa8af1bb213df384c8357f71ab7e4297ee2324c17b478f7b29338ea01fd5631effd38d13c6db1e9150f72a13a6e859a4000cb1b354b5eeac5db8992d5fe7aecbdcf4d2a4d2065e8babc8f1", &(0x7f0000000c00)=""/108, 0x400, 0x0, 0x0, 0x0, &(0x7f0000000c80), &(0x7f0000000d80), 0x82e645fae7071017, 0x0, 0x91}, 0x50) recvmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/203, 0xcb}], 0x1}, 0x100) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000007c0), 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000d80)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="6e045ea46cc81b0008000000c7bd0953ef0cb6f9bfdab039488769b0b073d40c2a42ef16a324984b470ed0b63b572aea5e73ec463ddd70cbf561cba2a83de023e640429b70ea3c000000000000b8d4e4b6943f96f9eeefad690932cad6f9627bd62a201e4ec45a3b4cb62e4b27fa2aa17da09fb0d77e354ea9b1173910607a61f389e7dbe2890e2fb9ef7ce5b774894e61f80b839f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x27}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r6}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffd) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), &(0x7f0000000440)=r4}, 0x20) r7 = syz_clone(0x45004400, &(0x7f00000005c0)="1b22165bf3aa436a334fc79511f9ec133ddb586c4351890fae1a4411a7d4967e4670bcf1d4f802c4cd1ed0acf148d911e90bd98b81d4ba4af75be804383744bab63efdca798c089340542781b944", 0x4e, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000680)="8fb4aabecd9f4cc5b90caec89398e3f9495daedc742b2e5ea40eb2013a787aa4bf84ce8afe462e3dfd02960815a35e5b8e50f0069f1a65c8e49308178d2d142a669a968d549a54888d64c0c8c806097557253368960dd24c91006dcb7f") syz_open_procfs$namespace(r7, &(0x7f0000000700)='ns/time_for_children\x00') 4.057200742s ago: executing program 0 (id=2338): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'veth0_vlan\x00', @random="01350037cd2d"}) (fail_nth: 4) 4.049689062s ago: executing program 2 (id=2339): socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000004000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000208500000017000000bf91000000000000b7020000210000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) recvmsg$unix(r0, &(0x7f00000016c0)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000001580)=[{&(0x7f0000000380)=""/154, 0x9a}, {&(0x7f0000000440)=""/15, 0xf}, {&(0x7f0000000480)=""/234, 0xea}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x4, &(0x7f00000015c0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}, 0x40002123) 3.570463742s ago: executing program 2 (id=2340): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="06000005000902000021834103152daddae22bb70004080000010100000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x1, 0x0}, 0x8) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x14, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @alu={0x4, 0x0, 0x9, 0x9, 0x1, 0xffffffffffffffe0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='GPL\x00', 0x4, 0x83, &(0x7f0000000600)=""/131, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x3, 0xe, 0x6d68, 0xa31}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000740)=[r0, r0], &(0x7f0000000780)=[{0x2, 0x4, 0x3, 0x2}, {0x2, 0x3, 0xd, 0xb}, {0x3ff, 0x2, 0xf, 0x9}, {0x2, 0x4, 0xe, 0x9}, {0x2, 0x4, 0x0, 0x9}, {0x1, 0x3, 0x5, 0x9}], 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1f, 0x6, &(0x7f0000000180)=@raw=[@map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @ldst={0x1, 0x3, 0x1, 0x9, 0x3, 0xfffffffffffffffe, 0xfffffffffffffff6}, @exit], &(0x7f00000002c0)='GPL\x00', 0xfffff000, 0xb9, &(0x7f0000000300)=""/185, 0x41000, 0x18, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x9, 0x400, 0x8}, 0x10, r1, r2, 0xa, &(0x7f0000000800)=[r0, r0, r0, r0, r0], &(0x7f0000000a00)=[{0x4, 0x2, 0x5, 0xb}, {0x4, 0x1, 0x9, 0xb}, {0x5, 0x4, 0xf, 0x8}, {0x2, 0x4, 0x10, 0x6}, {0x1, 0x1, 0x3}, {0x5, 0x3, 0x0, 0xc}, {0x5, 0x5, 0x9, 0x7}, {0x0, 0x5, 0x8, 0x5}, {0x3, 0x4, 0x10, 0x7}, {0x5, 0x3, 0x1, 0x9}], 0x10, 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0}, 0x400c0) r4 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) sendmsg$inet(r4, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xfffd}], 0x1}, 0x80d1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="06000005000902000021834103152daddae22bb70004080000010100000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) close(0x3) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x1}, 0x8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x14, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @alu={0x4, 0x0, 0x9, 0x9, 0x1, 0xffffffffffffffe0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='GPL\x00', 0x4, 0x83, &(0x7f0000000600)=""/131, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x3, 0xe, 0x6d68, 0xa31}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000740)=[r0, r0], &(0x7f0000000780)=[{0x2, 0x4, 0x3, 0x2}, {0x2, 0x3, 0xd, 0xb}, {0x3ff, 0x2, 0xf, 0x9}, {0x2, 0x4, 0xe, 0x9}, {0x2, 0x4, 0x0, 0x9}, {0x1, 0x3, 0x5, 0x9}], 0x10, 0x8}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1f, 0x6, &(0x7f0000000180)=@raw=[@map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x100}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @ldst={0x1, 0x3, 0x1, 0x9, 0x3, 0xfffffffffffffffe, 0xfffffffffffffff6}, @exit], &(0x7f00000002c0)='GPL\x00', 0xfffff000, 0xb9, &(0x7f0000000300)=""/185, 0x41000, 0x18, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x9, 0x400, 0x8}, 0x10, r1, r2, 0xa, &(0x7f0000000800)=[r0, r0, r0, r0, r0], &(0x7f0000000a00)=[{0x4, 0x2, 0x5, 0xb}, {0x4, 0x1, 0x9, 0xb}, {0x5, 0x4, 0xf, 0x8}, {0x2, 0x4, 0x10, 0x6}, {0x1, 0x1, 0x3}, {0x5, 0x3, 0x0, 0xc}, {0x5, 0x5, 0x9, 0x7}, {0x0, 0x5, 0x8, 0x5}, {0x3, 0x4, 0x10, 0x7}, {0x5, 0x3, 0x1, 0x9}], 0x10, 0x8}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0}, 0x400c0) (async) socket$kcm(0x2, 0x5, 0x84) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) close(r6) (async) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) (async) sendmsg$inet(r4, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xfffd}], 0x1}, 0x80d1) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) (async) 3.530987644s ago: executing program 0 (id=2341): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r1, &(0x7f0000000100)="d616d4004876ccdd7414df2503e9cf83f1cd132e6b81faca1df726fbe53aaf85e5d39d782428d2adb6284c571d18a05bf0e2bbc3c38c77e3ab7953b99589705a9228a6242aabccf57cde58738ea1ccf974cbab228ad283e8a6f3af5ab95e710bc033acf1eb85f9af3cf7c163d7ad91ca2b43af1e83daf659d489464626d909a671398e9bad391faea795f12d67505875b813dcb64f1fe2ae2543d90af09f3545b9bc5979d29aa5b9d3b0bc5c15150f89467f705d2ef1c33f29f0d82e5deeba9f1a34cfc5809561"}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x13, 0x13, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4337d648, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@map_val={0x18, 0x1, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6}, @map_val={0x18, 0xf, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xf}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='syzkaller\x00', 0x80000000, 0x6, &(0x7f0000000400)=""/6, 0x41100, 0x2, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x5, 0x7, 0x10000}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f00000005c0)=[r1, r1, r1, r1], &(0x7f0000000600)=[{0x5, 0x4, 0x0, 0x3}, {0x3, 0x4, 0xd, 0x1}, {0x0, 0x1, 0x3, 0x7}, {0x0, 0x5, 0x9, 0x9}, {0x4, 0x2, 0x7, 0xa}], 0x10, 0x18000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x8, 0x0, 0x0, 0x7, 0x0, 0x8, 0x8602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x11f2a3, 0x2, 0x0, 0x1, 0x3}, 0x0, 0x0, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)="16000000140081ae0000dc676f97daf01e2357f9ffff", 0x16}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000680)=""/151, 0x97}], 0x1, 0xfffffffffffffffe}, 0x0) close(r4) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, 0x0, 0x0) write$cgroup_int(r7, &(0x7f00000000c0), 0x12) 3.434342938s ago: executing program 2 (id=2342): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0xf100, 0x61, 0x11, 0x8c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 3.288954174s ago: executing program 0 (id=2343): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002480)=ANY=[@ANYRES16, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) (async) r1 = socket$kcm(0x10, 0x67551bdf08a1a390, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0901020028000b05d25a806f8c6394f90224fc600d00030009000100ff3582c137153e370248018010000000d1bd", 0x33fe0}], 0x1}, 0x0) (async) r2 = socket$kcm(0x2, 0x5, 0x84) r3 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x113, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) (async, rerun: 32) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) socket$kcm(0x21, 0x2, 0xa) (async) sendmsg$kcm(r1, &(0x7f0000001980)={&(0x7f0000000340)=@vsock={0x28, 0x0, 0xffffffff, @my=0x1}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="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", 0xfb}, {&(0x7f0000001680)="191db193842d84dcf170bd47c139f6038204ab8a2c65e9fccd27acb95dbc25e6fe06f027a0d20bda0650e0183c06d36724d7be4280596e600a8adb47be373b0fdd", 0x41}, {&(0x7f0000001700)="fa43b4e76feab22f7d37ab21c34c97d152b995ba737edfa1fb6ce34f85b6dee30c53d7a0a0c05a03cbf21f5d722f0b81320f684a886da66977a3c992d3cd3f1ad91ee2b79b13e0cdc8a31bda76fd57a69ba4c0b80760fef442578baf73a84708085ddbfeeb414fe7db1f447a3f4fc8103548d2bdbc9d0bcc95bbca9097972db3b4c6f0131b4a63a1c4ad5fe0ca1106137fbcb6ae8695c3c780b1d236fa479d3dff0e7705121014644e99a9cac5ba7d35ffe2df2d064c60a72d0287dc7462627a", 0xc0}], 0x4, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x180}, 0x80) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) r8 = socket$kcm(0x2, 0x3, 0x2) write$cgroup_subtree(r8, 0x0, 0xfe1b) (async, rerun: 32) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) (async, rerun: 32) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r1, r7}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x21, &(0x7f0000002600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x1, 0x2, 0x0, r7}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x835d}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @generic={0x4, 0xe, 0x2, 0x6, 0xfffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x12, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000940)=ANY=[@ANYRES32=r1, @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000f6ffffffb7"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) (async) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, 0x0, 0x0) (async) socket$kcm(0x2, 0x5, 0x84) (async, rerun: 32) r11 = socket$kcm(0x10, 0x2, 0x4) (rerun: 32) socket$kcm(0x11, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYRESDEC=r11], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 3.244480096s ago: executing program 2 (id=2345): r0 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000534a4095b728f3e290c6d6d42f791ba4f8ab5f118d11419f71e9ee862f5b70bf", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="7c410200100000008500000015000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="000000000000e7ff930500000800000085000000a5000000183200000500000000000000000000002893f8ffffffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000140)=r5, 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x1}], 0x1}, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x98f7}, 0x8b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0xffffffffffffffff) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x49) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r8) r9 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0600000000000000309547c9b3e3242b11e01740290f97736e43f1", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2e00000011008188040f80ec59acbc0413a181003100000001010000000000000e000a000f000000028002002d1fb6", 0x2f}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0xc0189436, &(0x7f00000002c0)={'tunl0\x00'}) 3.111673311s ago: executing program 0 (id=2346): socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x8, 0x2}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0xf9c, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0, 0x36, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0xffffffffffffff11, 0x10, &(0x7f0000000300), &(0x7f0000000380), 0x8, 0xd4, 0x8, 0xffffffffffffff41, &(0x7f0000000440)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x595, 0x1, 0x0, 0x1, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000840)={0x0, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x8, 0x240b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x828, 0x0, 0x0, 0x0, 0x4, 0x820000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xc, 0xffffffffffffffff, 0x1) socketpair(0x18, 0x800, 0x3, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d80000001d0081044e81f782db44b9040a1d080005000000e8fe54a1180015000600142603600e1208000f0000000401a80016002000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffec", 0xbd}], 0x1}, 0x0) socket$kcm(0xa, 0x6, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00001c000000000000000000000000ada38e10d721c880ed1efdbb190000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/11], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRESHEX, @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000b65d546cd1bc9f55359dc6c3b7ec4cb496de2827bd85fa5f5858e5ec6f5b740b7849311ae7d08f80cd3a530557c811bfdb0e4679614c8d2e24ddb51fa4002750e95f"], 0x50) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x6) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x34) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="76cecd75e9", 0x5}], 0x1}, 0x20004000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE(0x0, 0x0, 0x48) 3.110986011s ago: executing program 4 (id=2347): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1b, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000008000000000000000000008018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000083000000bf090000000000005509010000000400000000000000000018210000", @ANYRES32, @ANYBLOB="00000000ff07000018470000fcffffff0000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x78, &(0x7f0000000180)=""/120, 0x41000, 0x40, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x1, 0x0, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000340)=[{0x5, 0x1, 0xd, 0x1}, {0x1, 0x5, 0xd, 0x1}], 0x10, 0x1}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e120800067c00001001a8001600a400034003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="050000000000000063112100000000008510000002000000850000000500000095000000000000009500a50500000000ab46e77dfa08d5a5ed5007e537903330f1afe48b17a6845b244c02a146f56ddd3f9e75c53f23a73b9cf5236b08c5d8b43438b69cf7597730c6e6e853123566668dba7b212b32f7597beeae88aa942d4a2bd732d4d1"], &(0x7f0000000080)='GPL\x00', 0xfffffffe, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000010008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000780)=0xffffffffffffffff, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000001f0000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000080000000000e8fc6fede72fb4860476357996272cc49474c7d443df772f396c4ded18eb224e2f72568894dafe75c336a60263592323c9b2899b78e6f7137e655b5c383bc77b7bfda3"], 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700368df3757f0086dd6317ce8000377ac9b0e0865a6596aff57b00"/42], 0xffffffffffffffc7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000121068f865783bf73d42", @ANYRES32, @ANYBLOB="0a00000000a3f500950004000000010045"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0xfffffffffffffdba) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000980)={r1, 0x20, &(0x7f0000000940)={&(0x7f0000000840), 0x0, 0x0, &(0x7f0000000880)=""/185, 0xb9}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000009c0)={0x1}, 0x4) 2.913135159s ago: executing program 2 (id=2348): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2}]}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2, 0x5, 0x84) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x104111, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={0xffffffffffffffff, r5}, 0xc) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000140)='cpuset.cpus\x00', 0x2, 0x0) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r8, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) r9 = socket$kcm(0xa, 0x3, 0x73) setsockopt$sock_attach_bpf(r9, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r9, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00\v'], 0x28}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000340)=ANY=[@ANYBLOB='N-N'], 0x6a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r3, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x1) setsockopt$sock_attach_bpf(r2, 0x29, 0x13, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) 2.89133142s ago: executing program 4 (id=2349): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f00000003c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) (async) r3 = perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x59, 0xe, 0x80, 0x5, 0x0, 0xd, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb60, 0x5}, 0xe010, 0xff, 0xf, 0x9, 0x2, 0x3, 0x101, 0x0, 0x8, 0x0, 0x9}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x30}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) (async) perf_event_open(&(0x7f00000004c0)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x10000, 0x3, 0x5, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8ac}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = socket$kcm(0x29, 0x3, 0x0) recvmsg$kcm(r5, &(0x7f0000000300)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/163, 0xa3}, {&(0x7f0000000400)=""/168, 0xa8}, {&(0x7f0000000080)=""/34, 0x22}, {&(0x7f0000000240)=""/46, 0x2e}], 0x4, &(0x7f0000000640)=""/159, 0x9f}, 0x40012025) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.65999913s ago: executing program 4 (id=2350): r0 = socket$kcm(0xa, 0x3, 0x3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$kcm(r0, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7000000, @dev}, 0x80, &(0x7f0000000080), 0x1}, 0x0) 2.626002071s ago: executing program 1 (id=2351): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000040000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x13, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0xd}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000000}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0xa}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1}, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x61, &(0x7f0000000580)=[{&(0x7f0000001ec0)=""/4039, 0xfd1}, {&(0x7f0000000ec0)=""/4073, 0xfe9}, {&(0x7f0000000800)=""/221, 0xdd}, {&(0x7f0000000600)=""/239, 0xef}, {&(0x7f00000002c0)=""/173, 0xb2}, {&(0x7f0000000940)=""/239, 0xef}, {&(0x7f00000003c0)=""/192, 0xc0}], 0x7}, 0xbf9d5a5a4c2f3718) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x3}, 0x10}, 0x94) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000240), 0x0}, 0x20) r5 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x3e}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00f00000088080ffb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000002040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x5}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 2.355625882s ago: executing program 4 (id=2352): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x4}, 0x50) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0x10, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004081) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) 1.993284538s ago: executing program 0 (id=2353): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10305, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3c, &(0x7f0000000280), 0x4) 1.983184528s ago: executing program 4 (id=2354): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x0, 0x6, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x400200000000003e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x7, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x84a46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x8, 0xfffffffe, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x7000002}, 0x2c) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b07d25a806c8c6f94f90624fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 1.908413371s ago: executing program 0 (id=2355): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0x1, &(0x7f00000001c0)="120598ee3d858ab39d1974e712e3abbc1b73e50b94306f1e54f40e78acf5", &(0x7f0000000040)=""/50, 0x4}, 0x20) perf_event_open(&(0x7f0000000380)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x90, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7100000000000004e0000000000000040020000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001740)}], 0x4}, 0x0) 1.861164833s ago: executing program 2 (id=2356): r0 = socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x21, 0x2, 0x2) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000300"/25, @ANYRES8, @ANYRES64], 0x50) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8, r2}, 0x18) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xf5f9, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1, 0x2b4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fe9cb7907021175f37538e486dd"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="95008000f2c7d6e3ef3e2d"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x6f}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x5, 0x17, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYRESOCT=r5, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='kfree\x00', r7}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r8 = perf_event_open(&(0x7f0000000fc0)={0x4, 0x80, 0x2, 0x1, 0x0, 0x88, 0x0, 0x9, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23fffffd, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3}, 0xffffffffffffffff, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r10, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r11, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x16, 0xfc, 0x5, 0xffffffff}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) 0s ago: executing program 4 (id=2357): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1b, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000008000000000000000000008018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000083000000bf090000000000005509010000000400000000000000000018210000", @ANYRES32, @ANYBLOB="00000000ff07000018470000fcffffff0000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x78, &(0x7f0000000180)=""/120, 0x41000, 0x40, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x1, 0x0, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000340)=[{0x5, 0x1, 0xd, 0x1}, {0x1, 0x5, 0xd, 0x1}], 0x10, 0x1}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e120800067c00001001a8001600a400034003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="050000000000000063112100000000008510000002000000850000000500000095000000000000009500a50500000000ab46e77dfa08d5a5ed5007e537903330f1afe48b17a6845b244c02a146f56ddd3f9e75c53f23a73b9cf5236b08c5d8b43438b69cf7597730c6e6e853123566668dba7b212b32f7597beeae88aa942d4a2bd732d4d1"], &(0x7f0000000080)='GPL\x00', 0xfffffffe, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000010008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000780)=0xffffffffffffffff, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = getpid() syz_open_procfs$namespace(r6, &(0x7f0000000080)='ns/mnt\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000001f0000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000080000000000e8fc6fede72fb4860476357996272cc49474c7d443df772f396c4ded18eb224e2f72568894dafe75c336a60263592323c9b2899b78e6f7137e655b5c383bc77b7bfda3"], 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700368df3757f0086dd6317ce8000377ac9b0e0865a6596aff57b00"/42], 0xffffffffffffffc7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000121068f865783bf73d42", @ANYRES32, @ANYBLOB="0a00000000a3f500950004000000010045"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0xfffffffffffffdba) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000980)={r1, 0x20, &(0x7f0000000940)={&(0x7f0000000840), 0x0, 0x0, &(0x7f0000000880)=""/185, 0xb9}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000009c0)={0x1}, 0x4) kernel console output (not intermixed with test programs): yz.1.1496'. [ 392.847905][T10867] netlink: 'syz.1.1497': attribute type 10 has an invalid length. [ 393.319814][T10870] netlink: 'syz.1.1499': attribute type 9 has an invalid length. [ 393.377004][T10870] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1499'. [ 393.408610][T10873] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1500'. [ 393.752556][T10877] netlink: 'syz.1.1499': attribute type 9 has an invalid length. [ 393.792699][T10877] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1499'. [ 394.147612][T10886] netlink: 'syz.1.1504': attribute type 21 has an invalid length. [ 394.422378][T10891] netlink: 'syz.0.1506': attribute type 9 has an invalid length. [ 394.440534][T10891] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1506'. [ 394.798114][T10894] netlink: 'syz.0.1515': attribute type 9 has an invalid length. [ 394.835924][T10894] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1515'. [ 395.412135][T10906] netlink: 'syz.0.1509': attribute type 10 has an invalid length. [ 396.438690][T10913] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1520'. [ 396.664744][T10919] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.1514'. [ 397.610743][T10933] netlink: 'syz.4.1517': attribute type 9 has an invalid length. [ 397.638306][T10933] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1517'. [ 397.797483][T10935] netlink: 'syz.0.1518': attribute type 9 has an invalid length. [ 397.805508][T10935] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1518'. [ 397.836363][T10936] netlink: 'syz.4.1517': attribute type 9 has an invalid length. [ 397.868291][T10936] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1517'. [ 398.288787][T10948] netlink: 'syz.0.1530': attribute type 9 has an invalid length. [ 398.306253][T10948] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1530'. [ 398.376234][T10950] netlink: 'syz.4.1522': attribute type 10 has an invalid length. [ 398.692953][T10958] netlink: 'syz.4.1525': attribute type 9 has an invalid length. [ 398.733039][T10958] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1525'. [ 398.765604][T10957] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1526'. [ 398.843045][T10952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1523'. [ 398.907081][T10959] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1525'. [ 399.346229][T10969] bridge0: port 3(dummy0) entered disabled state [ 399.352912][T10969] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.353391][T10967] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.1528'. [ 399.360487][T10969] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.377902][T10969] bridge0: entered allmulticast mode [ 399.491920][T10969] dummy0: left allmulticast mode [ 399.498713][T10969] bridge0: port 3(dummy0) entered disabled state [ 399.571187][T10969] bridge_slave_1: left allmulticast mode [ 399.591148][T10969] bridge_slave_1: left promiscuous mode [ 399.612878][T10969] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.647708][T10969] bridge_slave_0: left allmulticast mode [ 399.662291][T10969] bridge_slave_0: left promiscuous mode [ 399.677134][T10969] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.252698][T10979] validate_nla: 1 callbacks suppressed [ 400.252720][T10979] netlink: 'syz.2.1532': attribute type 9 has an invalid length. [ 400.282628][T10979] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1532'. [ 400.650067][T10980] netlink: 'syz.2.1532': attribute type 9 has an invalid length. [ 401.170195][T10988] netlink: 'syz.1.1534': attribute type 9 has an invalid length. [ 401.506128][ T5801] Bluetooth: hci2: command 0x0406 tx timeout [ 401.855122][T11004] netlink: 'syz.0.1538': attribute type 9 has an invalid length. [ 402.235897][T11005] netlink: 'syz.0.1538': attribute type 9 has an invalid length. [ 403.017575][T11020] bridge0: port 3(dummy0) entered disabled state [ 403.024328][T11020] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.031986][T11020] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.100061][T11020] bridge0: entered allmulticast mode [ 403.287217][T11023] dummy0: left allmulticast mode [ 403.302875][T11023] bridge0: port 3(dummy0) entered disabled state [ 403.457210][T11023] bridge_slave_1: left allmulticast mode [ 403.536244][T11023] bridge_slave_1: left promiscuous mode [ 403.542132][T11023] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.848095][T11028] netlink: 'syz.4.1545': attribute type 9 has an invalid length. [ 403.895953][T11028] __nla_validate_parse: 7 callbacks suppressed [ 403.895973][T11028] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1545'. [ 403.957181][T11023] bridge_slave_0: left allmulticast mode [ 403.973243][T11023] bridge_slave_0: left promiscuous mode [ 404.016485][T11023] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.297461][T11029] netlink: 'syz.4.1545': attribute type 9 has an invalid length. [ 404.305283][T11029] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1545'. [ 404.474826][T11034] netlink: 'syz.1.1547': attribute type 9 has an invalid length. [ 404.504286][T11034] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1547'. [ 404.770143][T11043] netlink: 'syz.1.1549': attribute type 9 has an invalid length. [ 404.788290][T11043] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1549'. [ 405.008070][T11044] netlink: 'syz.1.1549': attribute type 9 has an invalid length. [ 405.054102][T11044] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1549'. [ 405.544474][T11052] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1551'. [ 406.014659][T11062] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.1553'. [ 406.239468][T11067] netlink: 'syz.2.1554': attribute type 9 has an invalid length. [ 406.339001][T11067] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1554'. [ 406.849647][T11068] netlink: 'syz.2.1554': attribute type 9 has an invalid length. [ 406.905937][T11068] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1554'. [ 407.693889][T11086] netlink: 'syz.2.1558': attribute type 9 has an invalid length. [ 407.731507][T11085] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1565'. [ 408.058945][T11087] Q±6ã×\b‹¡Y­4: renamed from lo (while UP) [ 408.580384][T11095] netlink: 'syz.2.1560': attribute type 9 has an invalid length. [ 409.011988][T11096] netlink: 'syz.2.1560': attribute type 9 has an invalid length. [ 409.050517][T11096] __nla_validate_parse: 2 callbacks suppressed [ 409.050538][T11096] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1560'. [ 409.416310][T11103] netlink: 'syz.4.1562': attribute type 9 has an invalid length. [ 409.465906][T11103] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1562'. [ 409.554890][T11110] netlink: 'syz.1.1564': attribute type 10 has an invalid length. [ 409.642837][T11105] netlink: 'syz.4.1562': attribute type 9 has an invalid length. [ 409.688167][T11105] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1562'. [ 409.951279][T11115] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1566'. [ 410.340386][T11124] netlink: 'syz.0.1568': attribute type 9 has an invalid length. [ 410.363387][T11124] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1568'. [ 411.034073][T11133] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.1570'. [ 412.045690][T11142] netlink: 'syz.4.1572': attribute type 9 has an invalid length. [ 412.067241][T11140] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.1580'. [ 412.097338][T11142] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1572'. [ 412.176561][T11143] Q±6ã×\b‹¡Y­4: renamed from lo (while UP) [ 412.443285][T11144] netlink: 'syz.4.1572': attribute type 9 has an invalid length. [ 412.508746][T11144] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1572'. [ 413.305562][T11159] netlink: 'syz.4.1576': attribute type 9 has an invalid length. [ 413.324916][T11159] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1576'. [ 413.445937][T11162] netlink: 'syz.4.1576': attribute type 9 has an invalid length. [ 413.814268][T11174] netlink: 'syz.1.1582': attribute type 9 has an invalid length. [ 414.054246][T11180] netlink: 'syz.4.1583': attribute type 9 has an invalid length. [ 414.062320][T11180] __nla_validate_parse: 3 callbacks suppressed [ 414.062335][T11180] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1583'. [ 414.163199][T11182] netlink: 'syz.4.1583': attribute type 9 has an invalid length. [ 414.203230][T11182] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1583'. [ 414.432814][T11187] netlink: 'syz.1.1593': attribute type 9 has an invalid length. [ 414.446112][T11187] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1593'. [ 414.755119][T11190] netlink: 'syz.0.1586': attribute type 10 has an invalid length. [ 415.333788][T11203] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.1589'. [ 415.513407][T11206] netlink: 'syz.0.1588': attribute type 9 has an invalid length. [ 415.566483][T11206] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1588'. [ 415.853580][T11208] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1588'. [ 416.928685][T11223] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.1596'. [ 417.078942][T11226] netlink: 'syz.0.1594': attribute type 11 has an invalid length. [ 417.115892][T11226] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.1594'. [ 417.232929][T11226] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 417.494452][T11231] validate_nla: 1 callbacks suppressed [ 417.494473][T11231] netlink: 'syz.2.1597': attribute type 9 has an invalid length. [ 417.526185][T11231] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1597'. [ 417.788103][T11236] netlink: 'syz.4.1598': attribute type 9 has an invalid length. [ 417.805303][T11236] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1598'. [ 417.878931][T11239] netlink: 'syz.4.1598': attribute type 9 has an invalid length. [ 417.922836][T11238] netlink: 'syz.1.1599': attribute type 4 has an invalid length. [ 419.347965][T11263] __nla_validate_parse: 4 callbacks suppressed [ 419.348007][T11263] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1606'. [ 419.602800][T11270] netlink: 'syz.2.1608': attribute type 9 has an invalid length. [ 419.652634][T11270] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1608'. [ 420.080079][T11278] netlink: 'syz.2.1609': attribute type 9 has an invalid length. [ 420.104100][T11278] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1609'. [ 420.302728][T11279] netlink: 'syz.2.1609': attribute type 9 has an invalid length. [ 420.367079][T11279] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1609'. [ 420.942028][T11290] netlink: 'syz.2.1611': attribute type 21 has an invalid length. [ 421.123733][T11293] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1619'. [ 421.410289][T11298] netlink: 'syz.1.1614': attribute type 10 has an invalid length. [ 421.997192][T11301] netlink: 'syz.2.1617': attribute type 9 has an invalid length. [ 422.020679][T11301] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1617'. [ 422.082993][T11303] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.1616'. [ 423.377672][T11325] FAULT_INJECTION: forcing a failure. [ 423.377672][T11325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.445690][T11325] CPU: 0 PID: 11325 Comm: syz.1.1621 Not tainted syzkaller #0 [ 423.453245][T11325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 423.463346][T11325] Call Trace: [ 423.466660][T11325] [ 423.469638][T11325] dump_stack_lvl+0x16c/0x230 [ 423.474385][T11325] ? show_regs_print_info+0x20/0x20 [ 423.479646][T11325] ? load_image+0x3b0/0x3b0 [ 423.484205][T11325] ? __lock_acquire+0x7c80/0x7c80 [ 423.489369][T11325] ? snprintf+0xdb/0x120 [ 423.493846][T11325] should_fail_ex+0x39d/0x4d0 [ 423.498585][T11325] _copy_to_user+0x2f/0xa0 [ 423.503051][T11325] simple_read_from_buffer+0xe7/0x150 [ 423.508484][T11325] proc_fail_nth_read+0x1e3/0x250 [ 423.513570][T11325] ? proc_fault_inject_write+0x340/0x340 [ 423.519261][T11325] ? fsnotify_perm+0x271/0x5e0 [ 423.524082][T11325] ? proc_fault_inject_write+0x340/0x340 [ 423.529787][T11325] vfs_read+0x27e/0x920 [ 423.534007][T11325] ? kernel_read+0x1e0/0x1e0 [ 423.538651][T11325] ? __fget_files+0x28/0x4d0 [ 423.543309][T11325] ? __fget_files+0x44a/0x4d0 [ 423.548047][T11325] ? __fdget_pos+0x2a3/0x330 [ 423.552690][T11325] ? ksys_read+0x75/0x250 [ 423.557077][T11325] ksys_read+0x147/0x250 [ 423.561384][T11325] ? vfs_write+0x940/0x940 [ 423.565854][T11325] ? lockdep_hardirqs_on+0x98/0x150 [ 423.571195][T11325] do_syscall_64+0x55/0xb0 [ 423.575666][T11325] ? clear_bhb_loop+0x40/0x90 [ 423.580388][T11325] ? clear_bhb_loop+0x40/0x90 [ 423.585138][T11325] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 423.591084][T11325] RIP: 0033:0x7ff638f8e15c [ 423.595563][T11325] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 423.615225][T11325] RSP: 002b:00007ff639f04030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 423.623700][T11325] RAX: ffffffffffffffda RBX: 00007ff6391e5fa0 RCX: 00007ff638f8e15c [ 423.631723][T11325] RDX: 000000000000000f RSI: 00007ff639f040a0 RDI: 0000000000000004 [ 423.639752][T11325] RBP: 00007ff639f04090 R08: 0000000000000000 R09: 0000000000000000 [ 423.647775][T11325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 423.655797][T11325] R13: 00007ff6391e6038 R14: 00007ff6391e5fa0 R15: 00007ffd796ba288 [ 423.663862][T11325] [ 423.856043][T11329] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1623'. [ 424.246697][T11339] netlink: 'syz.4.1625': attribute type 21 has an invalid length. [ 424.270335][T11336] netlink: 'syz.1.1626': attribute type 10 has an invalid length. [ 424.303913][T11340] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1627'. [ 424.450741][T11344] netlink: 'syz.1.1628': attribute type 9 has an invalid length. [ 424.469347][T11344] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1628'. [ 424.803684][T11348] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.1629'. [ 425.557061][T11362] netlink: 'syz.0.1631': attribute type 9 has an invalid length. [ 425.588148][T11362] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1631'. [ 426.127526][T11375] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.1644'. [ 427.479267][T11392] netlink: 'syz.0.1637': attribute type 10 has an invalid length. [ 427.579635][T11396] netlink: 'syz.4.1639': attribute type 9 has an invalid length. [ 427.587689][T11396] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1639'. [ 427.659702][T11399] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1640'. [ 428.090852][T11403] netlink: 'syz.1.1641': attribute type 9 has an invalid length. [ 428.107123][T11403] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1641'. [ 428.123909][T11407] netlink: 'syz.4.1642': attribute type 21 has an invalid length. [ 428.170455][T11406] netlink: 'syz.2.1650': attribute type 9 has an invalid length. [ 428.184023][T11406] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1650'. [ 428.302324][T11408] netlink: 'syz.1.1641': attribute type 9 has an invalid length. [ 428.312597][T11408] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1641'. [ 428.323221][T11411] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1643'. [ 430.065198][T11446] __nla_validate_parse: 4 callbacks suppressed [ 430.065237][T11446] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.1662'. [ 430.144371][T11450] validate_nla: 1 callbacks suppressed [ 430.144392][T11450] netlink: 'syz.2.1654': attribute type 9 has an invalid length. [ 430.227593][T11450] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1654'. [ 431.042201][T11459] netlink: 'syz.2.1655': attribute type 21 has an invalid length. [ 431.554117][T11467] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.1657'. [ 431.593348][T11469] netlink: 'syz.0.1660': attribute type 4 has an invalid length. [ 431.610527][T11469] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1660'. [ 431.641954][T11469] .`: renamed from bond0 (while UP) [ 431.685016][T11465] netlink: 'syz.2.1656': attribute type 10 has an invalid length. [ 432.062504][T11480] netlink: 'syz.2.1664': attribute type 9 has an invalid length. [ 432.096290][T11480] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1664'. [ 432.376903][T11484] netlink: 'syz.2.1664': attribute type 9 has an invalid length. [ 432.422142][T11484] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1664'. [ 432.659293][T11487] netlink: 'syz.0.1665': attribute type 9 has an invalid length. [ 432.669513][T11487] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1665'. [ 433.009690][T11495] netlink: 'syz.2.1666': attribute type 9 has an invalid length. [ 433.035949][T11495] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1666'. [ 433.103656][T11494] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1675'. [ 433.127935][T11498] netlink: 'syz.4.1667': attribute type 21 has an invalid length. [ 433.170035][T11499] netlink: 'syz.2.1666': attribute type 9 has an invalid length. [ 433.210972][T11499] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1666'. [ 433.787166][T11512] netlink: 'syz.4.1669': attribute type 11 has an invalid length. [ 433.962060][T11512] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 435.341942][T11534] validate_nla: 1 callbacks suppressed [ 435.341962][T11534] netlink: 'syz.4.1678': attribute type 9 has an invalid length. [ 435.397930][T11534] __nla_validate_parse: 3 callbacks suppressed [ 435.397946][T11534] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1678'. [ 435.822277][T11541] netlink: 'syz.1.1679': attribute type 9 has an invalid length. [ 435.838133][T11541] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1679'. [ 436.075405][T11542] netlink: 'syz.1.1679': attribute type 9 has an invalid length. [ 436.135930][T11542] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1679'. [ 436.145499][T11549] netlink: 'syz.4.1681': attribute type 9 has an invalid length. [ 436.183098][T11549] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1681'. [ 436.510595][T11551] netlink: 'syz.4.1681': attribute type 9 has an invalid length. [ 436.554485][T11551] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1681'. [ 436.572946][T11560] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1685'. [ 436.615423][T11556] netlink: 199816 bytes leftover after parsing attributes in process `syz.0.1684'. [ 436.922414][T11567] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.1686'. [ 437.208090][T11572] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.1687'. [ 437.268476][T11573] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1688'. [ 438.278328][T11586] netlink: 'syz.0.1691': attribute type 9 has an invalid length. [ 440.394655][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.401276][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.604316][T11621] __nla_validate_parse: 2 callbacks suppressed [ 440.604370][T11621] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.1700'. [ 440.786751][T11624] netlink: 'syz.0.1701': attribute type 9 has an invalid length. [ 440.825916][T11624] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1701'. [ 441.858708][T11635] netlink: 'syz.0.1712': attribute type 9 has an invalid length. [ 441.875874][T11635] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1712'. [ 442.054091][T11637] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.1702'. [ 442.206995][T11644] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.1704'. [ 443.606045][T11660] netlink: 'syz.2.1709': attribute type 21 has an invalid length. [ 444.364768][T11667] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.1713'. [ 444.481272][T11669] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.1714'. [ 445.522031][T11686] netlink: 'syz.4.1716': attribute type 9 has an invalid length. [ 445.550135][T11686] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1716'. [ 445.759259][T11688] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.1715'. [ 446.419073][T11704] netlink: 'syz.0.1720': attribute type 9 has an invalid length. [ 446.425196][T11702] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.1718'. [ 446.446093][T11704] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1720'. [ 446.579621][T11706] netlink: 'syz.0.1720': attribute type 9 has an invalid length. [ 446.636161][T11706] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1720'. [ 446.827089][T11708] netlink: 'syz.1.1719': attribute type 9 has an invalid length. [ 446.834915][T11708] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1719'. [ 447.128972][T11711] netlink: 'syz.1.1719': attribute type 9 has an invalid length. [ 447.140721][T11715] netlink: 'syz.0.1721': attribute type 21 has an invalid length. [ 447.175070][T11711] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1719'. [ 448.359027][T11723] netlink: 'syz.2.1724': attribute type 9 has an invalid length. [ 448.398752][T11723] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1724'. [ 448.494300][T11726] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.1726'. [ 448.585608][T11724] netlink: 'syz.2.1724': attribute type 9 has an invalid length. [ 448.616393][T11724] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1724'. [ 448.829764][T11729] netlink: 'syz.4.1727': attribute type 9 has an invalid length. [ 448.849393][T11729] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1727'. [ 450.062674][T11750] netlink: 'syz.0.1731': attribute type 21 has an invalid length. [ 450.956978][T11764] netlink: 'syz.1.1735': attribute type 9 has an invalid length. [ 450.971771][T11764] __nla_validate_parse: 1 callbacks suppressed [ 450.971790][T11764] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1735'. [ 451.063020][T11766] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.1734'. [ 451.584442][T11774] netlink: 'syz.2.1737': attribute type 10 has an invalid length. [ 451.876095][T11784] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.1740'. [ 452.286185][T11788] netlink: 'syz.1.1741': attribute type 9 has an invalid length. [ 452.337561][T11788] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1741'. [ 452.958023][T11795] netlink: 'syz.0.1742': attribute type 21 has an invalid length. [ 456.429906][T11829] netlink: 'syz.0.1750': attribute type 9 has an invalid length. [ 456.461737][T11827] netlink: 'syz.4.1749': attribute type 10 has an invalid length. [ 456.486157][T11829] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1750'. [ 457.219367][T11840] netlink: 'syz.4.1751': attribute type 9 has an invalid length. [ 457.278001][T11840] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1751'. [ 457.651589][T11845] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.1752'. [ 459.344473][T11861] netlink: 16375 bytes leftover after parsing attributes in process `syz.0.1754'. [ 459.404673][T11864] netlink: 'syz.2.1755': attribute type 21 has an invalid length. [ 460.086981][T11871] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1759'. [ 460.142026][T11873] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1758'. [ 460.290598][T11875] netlink: 'syz.4.1760': attribute type 10 has an invalid length. [ 461.445888][T11884] netlink: 'syz.2.1761': attribute type 9 has an invalid length. [ 461.464004][T11884] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1761'. [ 461.638791][T11886] netlink: 'syz.4.1763': attribute type 9 has an invalid length. [ 461.665956][T11886] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1763'. [ 461.792798][T11889] netlink: 'syz.2.1761': attribute type 9 has an invalid length. [ 461.815435][T11889] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1761'. [ 461.995182][T11896] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.1765'. [ 463.348439][T11918] netlink: 'syz.4.1769': attribute type 21 has an invalid length. [ 463.573403][T11921] netlink: 'syz.1.1770': attribute type 10 has an invalid length. [ 463.957494][T11928] netlink: 'syz.4.1773': attribute type 9 has an invalid length. [ 463.980237][T11928] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1773'. [ 464.014710][T11930] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1772'. [ 464.394829][T11936] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.1774'. [ 465.700706][T11944] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1776'. [ 466.240182][T11953] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.1777'. [ 467.702412][T11963] netlink: 'syz.4.1780': attribute type 21 has an invalid length. [ 468.357394][T11972] netlink: 'syz.2.1782': attribute type 9 has an invalid length. [ 468.365219][T11972] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1782'. [ 468.958296][T11983] netlink: 'syz.1.1783': attribute type 9 has an invalid length. [ 469.004478][T11983] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1783'. [ 469.294440][T11989] netlink: 'syz.2.1785': attribute type 21 has an invalid length. [ 470.044574][T12000] netlink: 'syz.1.1796': attribute type 21 has an invalid length. [ 470.072371][T11998] netlink: 'syz.2.1786': attribute type 10 has an invalid length. [ 470.685953][T12011] netlink: 'syz.2.1790': attribute type 21 has an invalid length. [ 470.834078][T12015] netlink: 'syz.1.1791': attribute type 9 has an invalid length. [ 470.853750][T12015] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1791'. [ 471.258739][T12020] netlink: 'syz.2.1794': attribute type 9 has an invalid length. [ 471.275909][T12020] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1794'. [ 471.735618][T12028] netlink: 'syz.2.1795': attribute type 9 has an invalid length. [ 471.791481][T12028] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1795'. [ 472.363114][T12033] FAULT_INJECTION: forcing a failure. [ 472.363114][T12033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 472.418266][T12033] CPU: 1 PID: 12033 Comm: syz.0.1798 Not tainted syzkaller #0 [ 472.425815][T12033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 472.435919][T12033] Call Trace: [ 472.439252][T12033] [ 472.442225][T12033] dump_stack_lvl+0x16c/0x230 [ 472.446964][T12033] ? show_regs_print_info+0x20/0x20 [ 472.452224][T12033] ? load_image+0x3b0/0x3b0 [ 472.456787][T12033] ? __lock_acquire+0x7c80/0x7c80 [ 472.461874][T12033] ? snprintf+0xdb/0x120 [ 472.466168][T12033] should_fail_ex+0x39d/0x4d0 [ 472.470902][T12033] _copy_to_user+0x2f/0xa0 [ 472.475374][T12033] simple_read_from_buffer+0xe7/0x150 [ 472.480816][T12033] proc_fail_nth_read+0x1e3/0x250 [ 472.485901][T12033] ? proc_fault_inject_write+0x340/0x340 [ 472.491593][T12033] ? fsnotify_perm+0x271/0x5e0 [ 472.496408][T12033] ? proc_fault_inject_write+0x340/0x340 [ 472.502098][T12033] vfs_read+0x27e/0x920 [ 472.506311][T12033] ? kernel_read+0x1e0/0x1e0 [ 472.510961][T12033] ? __fget_files+0x28/0x4d0 [ 472.515602][T12033] ? __fget_files+0x44a/0x4d0 [ 472.520339][T12033] ? __fdget_pos+0x2a3/0x330 [ 472.524975][T12033] ? ksys_read+0x75/0x250 [ 472.529358][T12033] ksys_read+0x147/0x250 [ 472.533649][T12033] ? vfs_write+0x940/0x940 [ 472.538123][T12033] ? lockdep_hardirqs_on+0x98/0x150 [ 472.543379][T12033] do_syscall_64+0x55/0xb0 [ 472.547854][T12033] ? clear_bhb_loop+0x40/0x90 [ 472.552580][T12033] ? clear_bhb_loop+0x40/0x90 [ 472.557312][T12033] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 472.563296][T12033] RIP: 0033:0x7f7e51f8e15c [ 472.567841][T12033] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 472.587499][T12033] RSP: 002b:00007f7e52eeb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 472.595965][T12033] RAX: ffffffffffffffda RBX: 00007f7e521e5fa0 RCX: 00007f7e51f8e15c [ 472.603985][T12033] RDX: 000000000000000f RSI: 00007f7e52eeb0a0 RDI: 0000000000000004 [ 472.612001][T12033] RBP: 00007f7e52eeb090 R08: 0000000000000000 R09: 0000000000000000 [ 472.620018][T12033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.628039][T12033] R13: 00007f7e521e6038 R14: 00007f7e521e5fa0 R15: 00007ffce63d45f8 [ 472.636084][T12033] [ 473.123353][T12038] netlink: 'syz.0.1799': attribute type 10 has an invalid length. [ 473.737260][T12046] netlink: 'syz.1.1803': attribute type 21 has an invalid length. [ 474.209287][T12051] netlink: 'syz.0.1804': attribute type 9 has an invalid length. [ 474.227283][T12051] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1804'. [ 474.436907][T12060] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1808'. [ 474.464598][T12062] bridge_slave_0: entered promiscuous mode [ 474.481334][T12062] bridge_slave_0: entered allmulticast mode [ 475.821172][T12085] netlink: 'syz.0.1814': attribute type 21 has an invalid length. [ 476.309330][T12094] netlink: 'syz.0.1824': attribute type 21 has an invalid length. [ 476.865401][T12104] netlink: 'syz.4.1817': attribute type 9 has an invalid length. [ 476.881828][T12104] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1817'. [ 477.930199][T12120] FAULT_INJECTION: forcing a failure. [ 477.930199][T12120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 477.988253][T12120] CPU: 0 PID: 12120 Comm: syz.0.1823 Not tainted syzkaller #0 [ 477.995909][T12120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 478.006012][T12120] Call Trace: [ 478.009330][T12120] [ 478.012293][T12120] dump_stack_lvl+0x16c/0x230 [ 478.017033][T12120] ? show_regs_print_info+0x20/0x20 [ 478.022283][T12120] ? load_image+0x3b0/0x3b0 [ 478.026923][T12120] ? __might_fault+0xaa/0x120 [ 478.031664][T12120] ? __lock_acquire+0x7c80/0x7c80 [ 478.036834][T12120] should_fail_ex+0x39d/0x4d0 [ 478.041576][T12120] _copy_from_user+0x2f/0xe0 [ 478.046223][T12120] __sys_bpf+0x1e9/0x800 [ 478.050521][T12120] ? bpf_link_show_fdinfo+0x350/0x350 [ 478.055976][T12120] ? lock_chain_count+0x20/0x20 [ 478.060893][T12120] __x64_sys_bpf+0x7c/0x90 [ 478.065359][T12120] do_syscall_64+0x55/0xb0 [ 478.069835][T12120] ? clear_bhb_loop+0x40/0x90 [ 478.074744][T12120] ? clear_bhb_loop+0x40/0x90 [ 478.079474][T12120] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 478.085425][T12120] RIP: 0033:0x7f7e51f8f749 [ 478.089897][T12120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.109598][T12120] RSP: 002b:00007f7e52eeb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 478.118164][T12120] RAX: ffffffffffffffda RBX: 00007f7e521e5fa0 RCX: 00007f7e51f8f749 [ 478.126189][T12120] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 478.134289][T12120] RBP: 00007f7e52eeb090 R08: 0000000000000000 R09: 0000000000000000 [ 478.142312][T12120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.150334][T12120] R13: 00007f7e521e6038 R14: 00007f7e521e5fa0 R15: 00007ffce63d45f8 [ 478.158372][T12120] [ 478.186943][T12122] netlink: 'syz.1.1826': attribute type 21 has an invalid length. [ 478.421258][T12127] netlink: 'syz.2.1828': attribute type 9 has an invalid length. [ 478.470801][T12127] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1828'. [ 479.594873][T12149] netlink: 211 bytes leftover after parsing attributes in process `syz.2.1833'. [ 479.686412][T12151] sit0: entered allmulticast mode [ 480.510830][T12157] netlink: 'syz.2.1836': attribute type 21 has an invalid length. [ 480.901550][T12161] netlink: 'syz.2.1837': attribute type 13 has an invalid length. [ 480.914266][T12161] macvtap0: refused to change device tx_queue_len [ 481.171563][T12163] netlink: 'syz.2.1838': attribute type 21 has an invalid length. [ 481.580603][T12168] netlink: 'syz.4.1841': attribute type 9 has an invalid length. [ 481.588759][T12168] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1841'. [ 481.846480][T12173] netlink: 'syz.2.1842': attribute type 21 has an invalid length. [ 482.013046][T12177] netlink: 'syz.4.1844': attribute type 3 has an invalid length. [ 482.021045][T12177] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1844'. [ 482.191811][T12179] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.1845'. [ 482.408594][T12188] netlink: 'syz.2.1848': attribute type 21 has an invalid length. [ 482.438981][T12189] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1849'. [ 482.453649][T12190] netlink: 'syz.1.1847': attribute type 21 has an invalid length. [ 482.714798][T12195] netlink: 'syz.4.1852': attribute type 9 has an invalid length. [ 482.740894][T12195] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1852'. [ 483.689331][T12214] FAULT_INJECTION: forcing a failure. [ 483.689331][T12214] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 483.749039][T12214] CPU: 1 PID: 12214 Comm: syz.0.1857 Not tainted syzkaller #0 [ 483.756581][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 483.766659][T12214] Call Trace: [ 483.769962][T12214] [ 483.772906][T12214] dump_stack_lvl+0x16c/0x230 [ 483.777623][T12214] ? show_regs_print_info+0x20/0x20 [ 483.782848][T12214] ? load_image+0x3b0/0x3b0 [ 483.787375][T12214] ? __lock_acquire+0x7c80/0x7c80 [ 483.792418][T12214] ? _copy_from_iter+0x181/0x1290 [ 483.797464][T12214] should_fail_ex+0x39d/0x4d0 [ 483.802165][T12214] prepare_alloc_pages+0x1e2/0x5f0 [ 483.807308][T12214] __alloc_pages+0x127/0x460 [ 483.811942][T12214] ? zone_statistics+0x170/0x170 [ 483.817018][T12214] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 483.822419][T12214] ? copy_page_from_iter+0xe8/0x100 [ 483.827646][T12214] pipe_write+0x63b/0x1af0 [ 483.832192][T12214] ? pipe_read+0x12a0/0x12a0 [ 483.836806][T12214] ? end_current_label_crit_section+0x149/0x170 [ 483.843064][T12214] ? common_file_perm+0x198/0x1f0 [ 483.848115][T12214] vfs_write+0x43b/0x940 [ 483.852387][T12214] ? file_end_write+0x250/0x250 [ 483.857260][T12214] ? __fget_files+0x44a/0x4d0 [ 483.861987][T12214] ? __fdget_pos+0x1d8/0x330 [ 483.866669][T12214] ? ksys_write+0x75/0x250 [ 483.871121][T12214] ksys_write+0x147/0x250 [ 483.875559][T12214] ? __ia32_sys_read+0x90/0x90 [ 483.880346][T12214] ? trace_sys_enter+0x1f/0x80 [ 483.885139][T12214] do_syscall_64+0x55/0xb0 [ 483.889579][T12214] ? clear_bhb_loop+0x40/0x90 [ 483.894379][T12214] ? clear_bhb_loop+0x40/0x90 [ 483.899111][T12214] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 483.905027][T12214] RIP: 0033:0x7f7e51f8f749 [ 483.909465][T12214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.929124][T12214] RSP: 002b:00007f7e52eeb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 483.937566][T12214] RAX: ffffffffffffffda RBX: 00007f7e521e5fa0 RCX: 00007f7e51f8f749 [ 483.945557][T12214] RDX: 00000000fffffdef RSI: 00002000000001c0 RDI: 0000000000000000 [ 483.953543][T12214] RBP: 00007f7e52eeb090 R08: 0000000000000000 R09: 0000000000000000 [ 483.961532][T12214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.969543][T12214] R13: 00007f7e521e6038 R14: 00007f7e521e5fa0 R15: 00007ffce63d45f8 [ 483.977586][T12214] [ 484.176273][T12227] netlink: 'syz.0.1862': attribute type 9 has an invalid length. [ 484.184093][T12227] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1862'. [ 484.394296][T12238] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.1865'. [ 485.784859][T12261] netlink: 'syz.2.1873': attribute type 9 has an invalid length. [ 485.816170][T12261] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1873'. [ 485.981730][T12262] netlink: 'syz.2.1873': attribute type 9 has an invalid length. [ 486.030700][T12262] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1873'. [ 486.060566][T12264] netlink: 'syz.4.1874': attribute type 9 has an invalid length. [ 486.080609][T12264] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.1874'. [ 486.109829][T12268] netlink: 39447 bytes leftover after parsing attributes in process `syz.0.1875'. [ 486.256340][T12273] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1877'. [ 486.310907][T12276] netlink: 'syz.0.1878': attribute type 4 has an invalid length. [ 486.323366][T12276] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1878'. [ 486.359288][T12276] .þ: renamed from .` [ 486.397854][T12279] netlink: 'syz.2.1880': attribute type 4 has an invalid length. [ 486.416057][T12279] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1880'. [ 486.699133][T12288] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.1883'. [ 486.748694][T12290] netlink: 'syz.2.1884': attribute type 9 has an invalid length. [ 486.760506][T12290] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1884'. [ 486.836725][T12292] netlink: 'syz.1.1885': attribute type 29 has an invalid length. [ 486.892069][T12292] netlink: 'syz.1.1885': attribute type 29 has an invalid length. [ 486.956001][T12294] netlink: 'syz.2.1884': attribute type 9 has an invalid length. [ 487.006029][T12294] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1884'. [ 488.174427][T12319] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 488.351807][T12321] syzkaller0: entered promiscuous mode [ 488.366080][T12321] syzkaller0: entered allmulticast mode [ 488.446392][T12330] netlink: 'syz.0.1896': attribute type 9 has an invalid length. [ 490.880095][T12331] netlink: 'syz.0.1896': attribute type 9 has an invalid length. [ 490.888678][T12331] __nla_validate_parse: 1 callbacks suppressed [ 490.888694][T12331] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1896'. [ 491.080856][T12345] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.1901'. [ 491.712865][T12355] IPv6: NLM_F_CREATE should be specified when creating new route [ 492.042512][T12359] netlink: 'syz.1.1905': attribute type 21 has an invalid length. [ 492.261186][T12361] netlink: 'syz.4.1906': attribute type 10 has an invalid length. [ 492.264034][T12367] netlink: 'syz.0.1909': attribute type 9 has an invalid length. [ 492.278912][T12367] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1909'. [ 492.375934][T12369] netlink: 'syz.0.1909': attribute type 9 has an invalid length. [ 492.397834][T12369] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1909'. [ 492.617177][T12380] netlink: 'syz.0.1914': attribute type 17 has an invalid length. [ 492.628233][T12380] netlink: 'syz.0.1914': attribute type 41 has an invalid length. [ 493.116157][T12387] netlink: 'syz.0.1917': attribute type 21 has an invalid length. [ 493.387965][T12389] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.1918'. [ 493.887595][T12406] netlink: 'syz.4.1922': attribute type 9 has an invalid length. [ 493.917815][T12406] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1922'. [ 494.142545][T12407] netlink: 'syz.4.1922': attribute type 9 has an invalid length. [ 494.175908][T12407] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1922'. [ 495.254169][T12422] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 495.630008][T12435] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1932'. [ 495.861551][T12444] FAULT_INJECTION: forcing a failure. [ 495.861551][T12444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 495.885247][T12444] CPU: 1 PID: 12444 Comm: syz.1.1934 Not tainted syzkaller #0 [ 495.892794][T12444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 495.902916][T12444] Call Trace: [ 495.906242][T12444] [ 495.909213][T12444] dump_stack_lvl+0x16c/0x230 [ 495.913949][T12444] ? show_regs_print_info+0x20/0x20 [ 495.919201][T12444] ? load_image+0x3b0/0x3b0 [ 495.923761][T12444] ? __might_fault+0xaa/0x120 [ 495.928505][T12444] ? __lock_acquire+0x7c80/0x7c80 [ 495.933688][T12444] should_fail_ex+0x39d/0x4d0 [ 495.938428][T12444] _copy_from_iter+0x1d3/0x1290 [ 495.943414][T12444] ? slab_post_alloc_hook+0x8a/0x4d0 [ 495.948765][T12444] ? __virt_addr_valid+0x18c/0x540 [ 495.953939][T12444] ? __lock_acquire+0x7c80/0x7c80 [ 495.959024][T12444] ? rcu_is_watching+0x15/0xb0 [ 495.963854][T12444] ? copyout_mc+0x70/0x70 [ 495.968251][T12444] ? __virt_addr_valid+0x18c/0x540 [ 495.973511][T12444] ? __virt_addr_valid+0x18c/0x540 [ 495.978675][T12444] ? __virt_addr_valid+0x469/0x540 [ 495.983842][T12444] ? __check_object_size+0x506/0xa30 [ 495.989190][T12444] netlink_sendmsg+0x75c/0xbe0 [ 495.994029][T12444] ? netlink_getsockopt+0x580/0x580 [ 495.999293][T12444] ? aa_sock_msg_perm+0x94/0x150 [ 496.004292][T12444] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 496.009636][T12444] ? security_socket_sendmsg+0x80/0xa0 [ 496.015159][T12444] ? netlink_getsockopt+0x580/0x580 [ 496.020414][T12444] ____sys_sendmsg+0x5bf/0x950 [ 496.025245][T12444] ? __asan_memset+0x22/0x40 [ 496.029890][T12444] ? __sys_sendmsg_sock+0x30/0x30 [ 496.034974][T12444] ? __import_iovec+0x5f2/0x860 [ 496.039896][T12444] ? import_iovec+0x73/0xa0 [ 496.044480][T12444] ___sys_sendmsg+0x220/0x290 [ 496.049220][T12444] ? __sys_sendmsg+0x270/0x270 [ 496.054092][T12444] __se_sys_sendmsg+0x1a5/0x270 [ 496.059001][T12444] ? perf_trace_preemptirq_template+0x281/0x340 [ 496.065300][T12444] ? __x64_sys_sendmsg+0x80/0x80 [ 496.070317][T12444] ? lockdep_hardirqs_on+0x98/0x150 [ 496.075571][T12444] do_syscall_64+0x55/0xb0 [ 496.080049][T12444] ? clear_bhb_loop+0x40/0x90 [ 496.084779][T12444] ? clear_bhb_loop+0x40/0x90 [ 496.089508][T12444] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 496.095453][T12444] RIP: 0033:0x7ff638f8f749 [ 496.099920][T12444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.119579][T12444] RSP: 002b:00007ff639f04038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 496.128144][T12444] RAX: ffffffffffffffda RBX: 00007ff6391e5fa0 RCX: 00007ff638f8f749 [ 496.136264][T12444] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000007 [ 496.144293][T12444] RBP: 00007ff639f04090 R08: 0000000000000000 R09: 0000000000000000 [ 496.152311][T12444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.160331][T12444] R13: 00007ff6391e6038 R14: 00007ff6391e5fa0 R15: 00007ffd796ba288 [ 496.168367][T12444] [ 496.344539][T12450] validate_nla: 4 callbacks suppressed [ 496.344564][T12450] netlink: 'syz.2.1937': attribute type 10 has an invalid length. [ 496.521013][T12453] netlink: 16187 bytes leftover after parsing attributes in process `syz.1.1935'. [ 497.715888][T12483] netdevsim netdevsim0: Direct firmware load for ß failed with error -2 [ 497.739428][T12483] netdevsim netdevsim0: Falling back to sysfs fallback for: ß [ 498.162525][T12494] delete_channel: no stack [ 498.438368][T12498] netlink: 'syz.1.1952': attribute type 21 has an invalid length. [ 498.452167][T12498] netlink: 'syz.1.1952': attribute type 1 has an invalid length. [ 498.461523][T12498] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1952'. [ 498.612835][T12503] netlink: 'syz.1.1954': attribute type 9 has an invalid length. [ 498.636159][T12503] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1954'. [ 498.737079][T12505] netlink: 'syz.1.1954': attribute type 9 has an invalid length. [ 498.752110][T12505] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1954'. [ 498.933007][T12512] netlink: 16187 bytes leftover after parsing attributes in process `syz.0.1956'. [ 499.592837][T12519] netlink: 'syz.1.1957': attribute type 3 has an invalid length. [ 499.600782][T12519] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.1957'. [ 501.070529][T12526] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1960'. [ 501.093653][T12526] netlink: 'syz.1.1960': attribute type 10 has an invalid length. [ 501.173570][T12541] netlink: 'syz.0.1963': attribute type 10 has an invalid length. [ 501.346614][T12546] netlink: 'syz.0.1966': attribute type 9 has an invalid length. [ 501.364676][T12546] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1966'. [ 501.422164][T12547] netlink: 16187 bytes leftover after parsing attributes in process `syz.1.1967'. [ 501.565087][T12548] netlink: 'syz.0.1966': attribute type 9 has an invalid length. [ 501.604341][T12548] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1966'. [ 501.846368][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.852913][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.656581][T12567] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.1972'. [ 502.803168][T12572] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1974'. [ 502.818900][T12572] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 502.831112][T12572] CPU: 1 PID: 12572 Comm: syz.0.1974 Not tainted syzkaller #0 [ 502.838669][T12572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 502.848799][T12572] Call Trace: [ 502.852130][T12572] [ 502.855109][T12572] dump_stack_lvl+0x16c/0x230 [ 502.859855][T12572] ? show_regs_print_info+0x20/0x20 [ 502.865114][T12572] ? load_image+0x3b0/0x3b0 [ 502.869898][T12572] sysfs_warn_dup+0x8e/0xa0 [ 502.874487][T12572] sysfs_do_create_link_sd+0xc0/0x110 [ 502.879933][T12572] device_add_class_symlinks+0x1cf/0x240 [ 502.885639][T12572] device_add+0x507/0xc20 [ 502.890044][T12572] wiphy_register+0x1e74/0x2c00 [ 502.895005][T12572] ? cfg80211_event_work+0x40/0x40 [ 502.900181][T12572] ? minstrel_ht_alloc+0x88a/0x990 [ 502.905367][T12572] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 502.911502][T12572] ieee80211_register_hw+0x2de8/0x3b10 [ 502.917060][T12572] ? ieee80211_register_hw+0xed1/0x3b10 [ 502.922695][T12572] ? ieee80211_tasklet_handler+0x20/0x20 [ 502.928396][T12572] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 502.934362][T12572] ? __debug_object_init+0xe8/0x430 [ 502.939641][T12572] ? __asan_memset+0x22/0x40 [ 502.944302][T12572] ? __hrtimer_init+0x186/0x270 [ 502.949226][T12572] mac80211_hwsim_new_radio+0x2a00/0x4cf0 [ 502.955075][T12572] ? mac80211_hwsim_free+0x220/0x220 [ 502.960415][T12572] ? rcu_is_watching+0x15/0xb0 [ 502.965239][T12572] ? kstrndup+0xbd/0x140 [ 502.969566][T12572] hwsim_new_radio_nl+0xd78/0x19d0 [ 502.974759][T12572] ? __nla_validate+0x50/0x50 [ 502.979533][T12572] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 502.985963][T12572] ? __nla_parse+0x40/0x50 [ 502.990454][T12572] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 502.996876][T12572] genl_family_rcv_msg_doit+0x209/0x2f0 [ 503.002517][T12572] ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0 [ 503.008687][T12572] ? bpf_lsm_capable+0x9/0x10 [ 503.013441][T12572] ? security_capable+0x89/0xb0 [ 503.018379][T12572] genl_rcv_msg+0x60b/0x790 [ 503.022968][T12572] ? genl_bind+0x360/0x360 [ 503.027448][T12572] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 503.033841][T12572] ? perf_trace_lock+0x2ed/0x380 [ 503.038876][T12572] netlink_rcv_skb+0x216/0x480 [ 503.043719][T12572] ? genl_bind+0x360/0x360 [ 503.048247][T12572] ? netlink_ack+0x1110/0x1110 [ 503.053112][T12572] ? __lock_acquire+0x7c80/0x7c80 [ 503.058196][T12572] ? net_generic+0x1e/0x240 [ 503.062772][T12572] ? down_read+0x1ac/0x2e0 [ 503.067246][T12572] genl_rcv+0x28/0x40 [ 503.071305][T12572] netlink_unicast+0x751/0x8d0 [ 503.076200][T12572] netlink_sendmsg+0x8c1/0xbe0 [ 503.081062][T12572] ? netlink_getsockopt+0x580/0x580 [ 503.086346][T12572] ? aa_sock_msg_perm+0x94/0x150 [ 503.091374][T12572] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 503.096751][T12572] ? security_socket_sendmsg+0x80/0xa0 [ 503.102290][T12572] ? netlink_getsockopt+0x580/0x580 [ 503.107655][T12572] ____sys_sendmsg+0x5bf/0x950 [ 503.112515][T12572] ? __asan_memset+0x22/0x40 [ 503.117182][T12572] ? __sys_sendmsg_sock+0x30/0x30 [ 503.122282][T12572] ? __import_iovec+0x5f2/0x860 [ 503.127221][T12572] ? import_iovec+0x73/0xa0 [ 503.131810][T12572] ___sys_sendmsg+0x220/0x290 [ 503.136564][T12572] ? __sys_sendmsg+0x270/0x270 [ 503.141569][T12572] __se_sys_sendmsg+0x1a5/0x270 [ 503.146519][T12572] ? __x64_sys_sendmsg+0x80/0x80 [ 503.151563][T12572] ? lockdep_hardirqs_on+0x98/0x150 [ 503.156827][T12572] do_syscall_64+0x55/0xb0 [ 503.161307][T12572] ? clear_bhb_loop+0x40/0x90 [ 503.166046][T12572] ? clear_bhb_loop+0x40/0x90 [ 503.170888][T12572] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 503.176967][T12572] RIP: 0033:0x7f7e51f8f749 [ 503.181444][T12572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.201124][T12572] RSP: 002b:00007f7e52eeb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 503.209618][T12572] RAX: ffffffffffffffda RBX: 00007f7e521e5fa0 RCX: 00007f7e51f8f749 [ 503.217657][T12572] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 503.225683][T12572] RBP: 00007f7e52013f91 R08: 0000000000000000 R09: 0000000000000000 [ 503.233720][T12572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 503.241752][T12572] R13: 00007f7e521e6038 R14: 00007f7e521e5fa0 R15: 00007ffce63d45f8 [ 503.249834][T12572] [ 503.513004][T12572] netlink: 'syz.0.1974': attribute type 10 has an invalid length. [ 503.573654][T12572] dummy0: left promiscuous mode [ 503.630989][T12572] team0: Port device dummy0 added [ 503.763467][T12573] netlink: 'syz.0.1974': attribute type 10 has an invalid length. [ 504.053075][T12573] team0: Port device dummy0 removed [ 504.173455][T12588] netlink: 'syz.1.1979': attribute type 9 has an invalid length. [ 504.173953][T12573] .þ: (slave dummy0): Enslaving as an active interface with an up link [ 504.181575][T12588] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1979'. [ 504.374580][T12589] netlink: 'syz.1.1979': attribute type 9 has an invalid length. [ 504.382900][T12589] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1979'. [ 504.571844][T12594] netlink: 'syz.4.1980': attribute type 9 has an invalid length. [ 504.615972][T12594] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1980'. [ 504.959525][T12595] netlink: 'syz.4.1980': attribute type 9 has an invalid length. [ 504.967618][T12595] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1980'. [ 505.781856][T12610] netlink: 'syz.4.1987': attribute type 10 has an invalid length. [ 505.862854][T12619] netlink: 'syz.1.1992': attribute type 9 has an invalid length. [ 505.870915][T12619] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1992'. [ 506.012650][T12621] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1992'. [ 506.973348][T12636] validate_nla: 1 callbacks suppressed [ 506.973465][T12636] netlink: 'syz.1.1998': attribute type 10 has an invalid length. [ 507.719882][T12636] team0: Device veth1_macvtap failed to register rx_handler [ 507.741805][T12637] netlink: 'syz.1.1998': attribute type 1 has an invalid length. [ 507.820782][T12646] netlink: 'syz.4.2001': attribute type 10 has an invalid length. [ 508.049490][T12659] netlink: 'syz.1.2005': attribute type 9 has an invalid length. [ 508.058232][T12659] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2005'. [ 508.198662][T12662] netlink: 'syz.1.2005': attribute type 9 has an invalid length. [ 508.228063][T12662] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2005'. [ 508.401261][T12669] netlink: 'syz.2.2007': attribute type 12 has an invalid length. [ 508.416483][T12669] netlink: 197276 bytes leftover after parsing attributes in process `syz.2.2007'. [ 508.644166][T12675] netlink: 'syz.1.2018': attribute type 9 has an invalid length. [ 508.665960][T12675] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2018'. [ 508.796498][T12679] netlink: 'syz.1.2018': attribute type 9 has an invalid length. [ 508.830364][T12679] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2018'. [ 509.491827][T12684] netlink: 'syz.4.2010': attribute type 3 has an invalid length. [ 509.507169][T12684] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.2010'. [ 509.664769][T12689] netlink: 'syz.1.2013': attribute type 10 has an invalid length. [ 509.738724][T12694] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2014'. [ 510.496961][T12707] FAULT_INJECTION: forcing a failure. [ 510.496961][T12707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.517962][T12707] CPU: 0 PID: 12707 Comm: syz.4.2020 Not tainted syzkaller #0 [ 510.525512][T12707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 510.535631][T12707] Call Trace: [ 510.538956][T12707] [ 510.541937][T12707] dump_stack_lvl+0x16c/0x230 [ 510.546691][T12707] ? show_regs_print_info+0x20/0x20 [ 510.551956][T12707] ? load_image+0x3b0/0x3b0 [ 510.556523][T12707] ? __might_fault+0xaa/0x120 [ 510.561258][T12707] ? __lock_acquire+0x7c80/0x7c80 [ 510.566348][T12707] should_fail_ex+0x39d/0x4d0 [ 510.571097][T12707] _copy_from_user+0x2f/0xe0 [ 510.575748][T12707] __sys_bpf+0x1e9/0x800 [ 510.580077][T12707] ? bpf_link_show_fdinfo+0x350/0x350 [ 510.585518][T12707] ? lock_chain_count+0x20/0x20 [ 510.590431][T12707] __x64_sys_bpf+0x7c/0x90 [ 510.594893][T12707] do_syscall_64+0x55/0xb0 [ 510.599358][T12707] ? clear_bhb_loop+0x40/0x90 [ 510.604091][T12707] ? clear_bhb_loop+0x40/0x90 [ 510.608823][T12707] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 510.614768][T12707] RIP: 0033:0x7f6ec538f749 [ 510.619243][T12707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.638994][T12707] RSP: 002b:00007f6ec35f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 510.647469][T12707] RAX: ffffffffffffffda RBX: 00007f6ec55e5fa0 RCX: 00007f6ec538f749 [ 510.655489][T12707] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 510.663595][T12707] RBP: 00007f6ec35f6090 R08: 0000000000000000 R09: 0000000000000000 [ 510.671714][T12707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.679734][T12707] R13: 00007f6ec55e6038 R14: 00007f6ec55e5fa0 R15: 00007ffff48442d8 [ 510.687773][T12707] [ 510.979439][T12716] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2023'. [ 511.107637][T12718] FAULT_INJECTION: forcing a failure. [ 511.107637][T12718] name failslab, interval 1, probability 0, space 0, times 0 [ 511.165717][T12718] CPU: 0 PID: 12718 Comm: syz.4.2025 Not tainted syzkaller #0 [ 511.173251][T12718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 511.183348][T12718] Call Trace: [ 511.186651][T12718] [ 511.189631][T12718] dump_stack_lvl+0x16c/0x230 [ 511.194344][T12718] ? show_regs_print_info+0x20/0x20 [ 511.199655][T12718] ? load_image+0x3b0/0x3b0 [ 511.204183][T12718] ? __lock_acquire+0x7c80/0x7c80 [ 511.209233][T12718] should_fail_ex+0x39d/0x4d0 [ 511.213959][T12718] should_failslab+0x9/0x20 [ 511.218484][T12718] slab_pre_alloc_hook+0x59/0x310 [ 511.223540][T12718] ? apparmor_sk_alloc_security+0x77/0x100 [ 511.229368][T12718] __kmem_cache_alloc_node+0x53/0x260 [ 511.234792][T12718] ? apparmor_sk_alloc_security+0x77/0x100 [ 511.240665][T12718] kmalloc_trace+0x2a/0xe0 [ 511.245120][T12718] apparmor_sk_alloc_security+0x77/0x100 [ 511.250854][T12718] security_sk_alloc+0x6e/0xa0 [ 511.255666][T12718] sk_prot_alloc+0x101/0x210 [ 511.260291][T12718] sk_alloc+0x3a/0x360 [ 511.264388][T12718] unix_create1+0xb0/0x790 [ 511.268867][T12718] unix_create+0x154/0x1f0 [ 511.273307][T12718] __sock_create+0x4a6/0x940 [ 511.277931][T12718] __sys_socketpair+0x1c1/0x550 [ 511.282820][T12718] __x64_sys_socketpair+0x9b/0xb0 [ 511.287874][T12718] do_syscall_64+0x55/0xb0 [ 511.292314][T12718] ? clear_bhb_loop+0x40/0x90 [ 511.297010][T12718] ? clear_bhb_loop+0x40/0x90 [ 511.301704][T12718] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 511.307616][T12718] RIP: 0033:0x7f6ec538f749 [ 511.312045][T12718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.331666][T12718] RSP: 002b:00007f6ec35f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 511.340110][T12718] RAX: ffffffffffffffda RBX: 00007f6ec55e5fa0 RCX: 00007f6ec538f749 [ 511.348102][T12718] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 511.356087][T12718] RBP: 00007f6ec35f6090 R08: 0000000000000000 R09: 0000000000000000 [ 511.364163][T12718] R10: 00002000000029c0 R11: 0000000000000246 R12: 0000000000000001 [ 511.372152][T12718] R13: 00007f6ec55e6038 R14: 00007f6ec55e5fa0 R15: 00007ffff48442d8 [ 511.380332][T12718] [ 511.402955][T12719] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2023'. [ 512.503707][T12741] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.2031'. [ 512.567116][T12737] validate_nla: 4 callbacks suppressed [ 512.567156][T12737] netlink: 'syz.1.2037': attribute type 10 has an invalid length. [ 512.676453][T12741] netlink: 'syz.4.2031': attribute type 2 has an invalid length. [ 512.785826][T12746] netlink: 'syz.2.2029': attribute type 3 has an invalid length. [ 513.070704][T12746] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.2029'. [ 513.661495][T12751] FAULT_INJECTION: forcing a failure. [ 513.661495][T12751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 513.715981][T12751] CPU: 0 PID: 12751 Comm: syz.1.2033 Not tainted syzkaller #0 [ 513.723540][T12751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 513.733637][T12751] Call Trace: [ 513.737042][T12751] [ 513.740023][T12751] dump_stack_lvl+0x16c/0x230 [ 513.744749][T12751] ? show_regs_print_info+0x20/0x20 [ 513.749995][T12751] ? load_image+0x3b0/0x3b0 [ 513.754544][T12751] ? __might_fault+0xaa/0x120 [ 513.759268][T12751] ? __lock_acquire+0x7c80/0x7c80 [ 513.764426][T12751] ? perf_trace_preemptirq_template+0xa4/0x340 [ 513.770651][T12751] should_fail_ex+0x39d/0x4d0 [ 513.775386][T12751] _copy_from_iter+0x1d3/0x1290 [ 513.780285][T12751] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 513.786579][T12751] ? lockdep_hardirqs_on+0x98/0x150 [ 513.791828][T12751] ? copyout_mc+0x70/0x70 [ 513.796222][T12751] ? __check_object_size+0x506/0xa30 [ 513.801575][T12751] netlink_sendmsg+0x75c/0xbe0 [ 513.806402][T12751] ? netlink_getsockopt+0x580/0x580 [ 513.811674][T12751] ? ____sys_sendmsg+0x53f/0x950 [ 513.816678][T12751] ? netlink_getsockopt+0x580/0x580 [ 513.821932][T12751] ____sys_sendmsg+0x5bf/0x950 [ 513.826759][T12751] ? __asan_memset+0x22/0x40 [ 513.831406][T12751] ? __sys_sendmsg_sock+0x30/0x30 [ 513.836528][T12751] ? __import_iovec+0x5f2/0x860 [ 513.841448][T12751] ? import_iovec+0x73/0xa0 [ 513.846008][T12751] ___sys_sendmsg+0x220/0x290 [ 513.850742][T12751] ? __sys_sendmsg+0x270/0x270 [ 513.855589][T12751] ? seqcount_lockdep_reader_access+0x160/0x1c0 [ 513.861912][T12751] __se_sys_sendmsg+0x1a5/0x270 [ 513.866824][T12751] ? __x64_sys_sendmsg+0x80/0x80 [ 513.871831][T12751] ? lockdep_hardirqs_on+0x98/0x150 [ 513.877082][T12751] do_syscall_64+0x55/0xb0 [ 513.881550][T12751] ? clear_bhb_loop+0x40/0x90 [ 513.886268][T12751] ? clear_bhb_loop+0x40/0x90 [ 513.890987][T12751] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 513.896931][T12751] RIP: 0033:0x7ff638f8f749 [ 513.901394][T12751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.921229][T12751] RSP: 002b:00007ff639f04038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 513.929694][T12751] RAX: ffffffffffffffda RBX: 00007ff6391e5fa0 RCX: 00007ff638f8f749 [ 513.937707][T12751] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 513.945728][T12751] RBP: 00007ff639f04090 R08: 0000000000000000 R09: 0000000000000000 [ 513.953749][T12751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.961771][T12751] R13: 00007ff6391e6038 R14: 00007ff6391e5fa0 R15: 00007ffd796ba288 [ 513.969809][T12751] [ 514.945473][T12758] netlink: 'syz.4.2035': attribute type 10 has an invalid length. [ 515.046361][T12758] veth1_macvtap: left promiscuous mode [ 515.305420][T12763] netlink: 'syz.1.2036': attribute type 10 has an invalid length. [ 515.990162][T12766] netlink: 'syz.4.2039': attribute type 1 has an invalid length. [ 516.006188][T12766] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.2039'. [ 517.230530][T12774] netlink: 'syz.2.2042': attribute type 10 has an invalid length. [ 517.497511][T12784] netlink: 'syz.4.2044': attribute type 9 has an invalid length. [ 517.519681][T12784] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2044'. [ 517.692345][T12787] netlink: 'syz.2.2045': attribute type 10 has an invalid length. [ 517.769941][T12787] veth1_macvtap: left promiscuous mode [ 518.216391][T12785] netlink: 'syz.4.2044': attribute type 9 has an invalid length. [ 518.256615][T12785] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2044'. [ 518.571557][T12794] netlink: 'syz.2.2047': attribute type 9 has an invalid length. [ 518.586168][T12792] netlink: 'syz.1.2056': attribute type 21 has an invalid length. [ 518.610034][T12794] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2047'. [ 518.958523][T12796] netlink: 'syz.2.2047': attribute type 9 has an invalid length. [ 518.966649][T12803] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2049'. [ 518.976427][T12803] bridge_slave_0: entered allmulticast mode [ 518.982786][T12796] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2047'. [ 519.155141][T12800] netlink: 'syz.4.2048': attribute type 2 has an invalid length. [ 519.163110][T12800] netlink: 185412 bytes leftover after parsing attributes in process `syz.4.2048'. [ 519.930009][T12813] netlink: 'syz.2.2054': attribute type 10 has an invalid length. [ 520.221701][T12821] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2058'. [ 520.398506][T12825] netlink: 'syz.4.2059': attribute type 21 has an invalid length. [ 520.579083][T12829] netlink: 'syz.2.2060': attribute type 9 has an invalid length. [ 520.587056][T12829] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2060'. [ 520.668786][T12832] netlink: 'syz.2.2060': attribute type 9 has an invalid length. [ 520.678431][T12832] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2060'. [ 520.884924][T12837] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2063'. [ 520.953228][T12841] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2063'. [ 522.669255][T12889] FAULT_INJECTION: forcing a failure. [ 522.669255][T12889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 522.695867][T12889] CPU: 1 PID: 12889 Comm: syz.4.2082 Not tainted syzkaller #0 [ 522.703410][T12889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 522.713605][T12889] Call Trace: [ 522.716904][T12889] [ 522.719866][T12889] dump_stack_lvl+0x16c/0x230 [ 522.724577][T12889] ? show_regs_print_info+0x20/0x20 [ 522.729801][T12889] ? load_image+0x3b0/0x3b0 [ 522.734326][T12889] ? __lock_acquire+0x7c80/0x7c80 [ 522.739370][T12889] ? snprintf+0xdb/0x120 [ 522.743636][T12889] should_fail_ex+0x39d/0x4d0 [ 522.748342][T12889] _copy_to_user+0x2f/0xa0 [ 522.752776][T12889] simple_read_from_buffer+0xe7/0x150 [ 522.758185][T12889] proc_fail_nth_read+0x1e3/0x250 [ 522.763242][T12889] ? proc_fault_inject_write+0x340/0x340 [ 522.768928][T12889] ? fsnotify_perm+0x271/0x5e0 [ 522.773742][T12889] ? proc_fault_inject_write+0x340/0x340 [ 522.779415][T12889] vfs_read+0x27e/0x920 [ 522.783631][T12889] ? kernel_read+0x1e0/0x1e0 [ 522.788248][T12889] ? __fget_files+0x28/0x4d0 [ 522.792858][T12889] ? __fget_files+0x44a/0x4d0 [ 522.797570][T12889] ? __fdget_pos+0x2a3/0x330 [ 522.802186][T12889] ? ksys_read+0x75/0x250 [ 522.806558][T12889] ksys_read+0x147/0x250 [ 522.810833][T12889] ? vfs_write+0x940/0x940 [ 522.815277][T12889] ? lockdep_hardirqs_on+0x98/0x150 [ 522.820498][T12889] do_syscall_64+0x55/0xb0 [ 522.824936][T12889] ? clear_bhb_loop+0x40/0x90 [ 522.829629][T12889] ? clear_bhb_loop+0x40/0x90 [ 522.834329][T12889] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 522.840245][T12889] RIP: 0033:0x7f6ec538e15c [ 522.844677][T12889] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 522.864329][T12889] RSP: 002b:00007f6ec35f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 522.872766][T12889] RAX: ffffffffffffffda RBX: 00007f6ec55e5fa0 RCX: 00007f6ec538e15c [ 522.880754][T12889] RDX: 000000000000000f RSI: 00007f6ec35f60a0 RDI: 0000000000000005 [ 522.888748][T12889] RBP: 00007f6ec35f6090 R08: 0000000000000000 R09: 0000000000000000 [ 522.896736][T12889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.904723][T12889] R13: 00007f6ec55e6038 R14: 00007f6ec55e5fa0 R15: 00007ffff48442d8 [ 522.912729][T12889] [ 522.965930][T12893] validate_nla: 5 callbacks suppressed [ 522.965950][T12893] netlink: 'syz.0.2080': attribute type 9 has an invalid length. [ 523.017861][T12895] netlink: 'syz.1.2084': attribute type 21 has an invalid length. [ 523.206966][T12898] netlink: 'syz.0.2080': attribute type 9 has an invalid length. [ 523.460163][T12912] __nla_validate_parse: 5 callbacks suppressed [ 523.460185][T12912] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.2090'. [ 523.520248][T12912] netlink: 'syz.2.2090': attribute type 2 has an invalid length. [ 524.172058][T12921] FAULT_INJECTION: forcing a failure. [ 524.172058][T12921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 524.249437][T12921] CPU: 1 PID: 12921 Comm: syz.0.2092 Not tainted syzkaller #0 [ 524.257008][T12921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 524.267116][T12921] Call Trace: [ 524.270435][T12921] [ 524.273398][T12921] dump_stack_lvl+0x16c/0x230 [ 524.278183][T12921] ? show_regs_print_info+0x20/0x20 [ 524.283465][T12921] ? load_image+0x3b0/0x3b0 [ 524.288055][T12921] ? __lock_acquire+0x7c80/0x7c80 [ 524.293170][T12921] ? snprintf+0xdb/0x120 [ 524.297513][T12921] should_fail_ex+0x39d/0x4d0 [ 524.302295][T12921] _copy_to_user+0x2f/0xa0 [ 524.306883][T12921] simple_read_from_buffer+0xe7/0x150 [ 524.312364][T12921] proc_fail_nth_read+0x1e3/0x250 [ 524.317481][T12921] ? proc_fault_inject_write+0x340/0x340 [ 524.323222][T12921] ? fsnotify_perm+0x271/0x5e0 [ 524.328085][T12921] ? proc_fault_inject_write+0x340/0x340 [ 524.333808][T12921] vfs_read+0x27e/0x920 [ 524.338075][T12921] ? kernel_read+0x1e0/0x1e0 [ 524.342765][T12921] ? __fget_files+0x28/0x4d0 [ 524.347443][T12921] ? __fget_files+0x44a/0x4d0 [ 524.352229][T12921] ? __fdget_pos+0x2a3/0x330 [ 524.356899][T12921] ? ksys_read+0x75/0x250 [ 524.361322][T12921] ksys_read+0x147/0x250 [ 524.365654][T12921] ? vfs_write+0x940/0x940 [ 524.370180][T12921] ? lockdep_hardirqs_on+0x98/0x150 [ 524.375471][T12921] do_syscall_64+0x55/0xb0 [ 524.379981][T12921] ? clear_bhb_loop+0x40/0x90 [ 524.384731][T12921] ? clear_bhb_loop+0x40/0x90 [ 524.389495][T12921] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 524.395457][T12921] RIP: 0033:0x7f7e51f8e15c [ 524.399940][T12921] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 524.419640][T12921] RSP: 002b:00007f7e52eeb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 524.428151][T12921] RAX: ffffffffffffffda RBX: 00007f7e521e5fa0 RCX: 00007f7e51f8e15c [ 524.436209][T12921] RDX: 000000000000000f RSI: 00007f7e52eeb0a0 RDI: 0000000000000004 [ 524.444339][T12921] RBP: 00007f7e52eeb090 R08: 0000000000000000 R09: 0000000000000000 [ 524.452398][T12921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.460445][T12921] R13: 00007f7e521e6038 R14: 00007f7e521e5fa0 R15: 00007ffce63d45f8 [ 524.468556][T12921] [ 525.283660][T12935] netlink: 'syz.4.2097': attribute type 21 has an invalid length. [ 526.652312][T12946] netlink: 'syz.0.2100': attribute type 9 has an invalid length. [ 526.743075][T12946] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2100'. [ 529.006165][T12966] netlink: 'syz.2.2106': attribute type 21 has an invalid length. [ 529.087897][T12968] netlink: 'syz.4.2107': attribute type 10 has an invalid length. [ 529.355323][T12971] netlink: 'syz.0.2108': attribute type 10 has an invalid length. [ 529.709111][T12984] FAULT_INJECTION: forcing a failure. [ 529.709111][T12984] name failslab, interval 1, probability 0, space 0, times 0 [ 529.722347][T12984] CPU: 1 PID: 12984 Comm: syz.0.2112 Not tainted syzkaller #0 [ 529.729868][T12984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 529.739967][T12984] Call Trace: [ 529.743289][T12984] [ 529.746265][T12984] dump_stack_lvl+0x16c/0x230 [ 529.751003][T12984] ? stack_trace_snprint+0xf0/0xf0 [ 529.756178][T12984] ? show_regs_print_info+0x20/0x20 [ 529.761493][T12984] ? load_image+0x3b0/0x3b0 [ 529.766113][T12984] ? lockdep_unlock+0x137/0x2d0 [ 529.771069][T12984] should_fail_ex+0x39d/0x4d0 [ 529.775846][T12984] should_failslab+0x9/0x20 [ 529.780427][T12984] slab_pre_alloc_hook+0x59/0x310 [ 529.785570][T12984] kmem_cache_alloc+0x5a/0x2e0 [ 529.790428][T12984] ? fib6_add_1+0x9ab/0x1430 [ 529.795086][T12984] fib6_add_1+0x9ab/0x1430 [ 529.799628][T12984] fib6_add+0x1da/0x3d20 [ 529.804085][T12984] ? trace_event_raw_event_lock+0x230/0x230 [ 529.810037][T12984] ? fib6_update_sernum_stub+0x1e0/0x1e0 [ 529.815774][T12984] ? do_raw_spin_lock+0x121/0x2c0 [ 529.820862][T12984] ? __rwlock_init+0x150/0x150 [ 529.825685][T12984] ? ip6_ins_rt+0xb3/0x120 [ 529.830160][T12984] ip6_ins_rt+0xc9/0x120 [ 529.834445][T12984] ? rt6_lookup+0x1d0/0x1d0 [ 529.839015][T12984] ? do_raw_spin_unlock+0x121/0x230 [ 529.844274][T12984] __ipv6_dev_ac_inc+0x62c/0x830 [ 529.849289][T12984] ipv6_sock_ac_join+0x4a4/0x6c0 [ 529.854335][T12984] do_ipv6_setsockopt+0x1ed8/0x3c30 [ 529.859626][T12984] ? sk_dst_reset+0xa0/0xa0 [ 529.864179][T12984] ? trace_call_bpf+0xc3/0x690 [ 529.869030][T12984] ? trace_call_bpf+0xc3/0x690 [ 529.873884][T12984] ? __lock_acquire+0x7c80/0x7c80 [ 529.878993][T12984] ? mark_lock+0x94/0x320 [ 529.883398][T12984] ? __lock_acquire+0x1260/0x7c80 [ 529.888535][T12984] ? aa_label_sk_perm+0x3ec/0x500 [ 529.893671][T12984] ? aa_sk_perm+0x930/0x930 [ 529.898305][T12984] ? __might_sleep+0xe0/0xe0 [ 529.903053][T12984] ? aa_sk_perm+0x7fc/0x930 [ 529.907646][T12984] ? __fget_files+0x28/0x4d0 [ 529.912282][T12984] ? aa_sock_opt_perm+0x74/0x100 [ 529.917274][T12984] ipv6_setsockopt+0x59/0x190 [ 529.922000][T12984] ? sock_common_recvmsg+0x1b0/0x1b0 [ 529.927350][T12984] do_sock_setsockopt+0x175/0x1a0 [ 529.932439][T12984] ? __fdget+0x180/0x210 [ 529.936744][T12984] __x64_sys_setsockopt+0x184/0x200 [ 529.942010][T12984] do_syscall_64+0x55/0xb0 [ 529.946472][T12984] ? clear_bhb_loop+0x40/0x90 [ 529.951196][T12984] ? clear_bhb_loop+0x40/0x90 [ 529.955961][T12984] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 529.962244][T12984] RIP: 0033:0x7f7e51f8f749 [ 529.966728][T12984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.986392][T12984] RSP: 002b:00007f7e52eeb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 529.994879][T12984] RAX: ffffffffffffffda RBX: 00007f7e521e5fa0 RCX: 00007f7e51f8f749 [ 530.002898][T12984] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000006 [ 530.011088][T12984] RBP: 00007f7e52eeb090 R08: 00000000000000a1 R09: 0000000000000000 [ 530.019106][T12984] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 530.027130][T12984] R13: 00007f7e521e6038 R14: 00007f7e521e5fa0 R15: 00007ffce63d45f8 [ 530.035237][T12984] [ 530.251750][T12990] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2115'. [ 530.325816][T12990] bridge0: port 3(dummy0) entered disabled state [ 530.352452][T12990] dummy0 (unregistering): left allmulticast mode [ 530.359230][T12990] bridge0: port 3(dummy0) entered disabled state [ 530.397688][T12992] netlink: 703 bytes leftover after parsing attributes in process `syz.0.2116'. [ 530.728722][T12999] netlink: 'syz.0.2118': attribute type 21 has an invalid length. [ 531.007343][T13002] netlink: 'syz.2.2119': attribute type 10 has an invalid length. [ 531.171582][T13007] netlink: 'syz.1.2121': attribute type 10 has an invalid length. [ 531.228764][T13011] netlink: 'syz.4.2123': attribute type 12 has an invalid length. [ 531.243101][T13011] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2123'. [ 531.473301][T13024] netlink: 'syz.1.2128': attribute type 21 has an invalid length. [ 531.655609][T13028] netlink: 'syz.0.2130': attribute type 10 has an invalid length. [ 531.891145][T13032] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.2132'. [ 532.515483][T13043] netlink: 'syz.4.2135': attribute type 10 has an invalid length. [ 533.433271][T13064] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2141'. [ 533.610075][T13067] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2141'. [ 533.614038][T13070] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2143'. [ 533.779523][T13080] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.2145'. [ 534.955561][T13094] FAULT_INJECTION: forcing a failure. [ 534.955561][T13094] name failslab, interval 1, probability 0, space 0, times 0 [ 534.969911][T13094] CPU: 0 PID: 13094 Comm: syz.0.2150 Not tainted syzkaller #0 [ 534.977478][T13094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 534.987618][T13094] Call Trace: [ 534.990975][T13094] [ 534.993987][T13094] dump_stack_lvl+0x16c/0x230 [ 534.998783][T13094] ? show_regs_print_info+0x20/0x20 [ 535.004085][T13094] ? load_image+0x3b0/0x3b0 [ 535.008705][T13094] ? __might_sleep+0xe0/0xe0 [ 535.013398][T13094] ? __lock_acquire+0x7c80/0x7c80 [ 535.018502][T13094] ? __asan_memset+0x22/0x40 [ 535.023197][T13094] should_fail_ex+0x39d/0x4d0 [ 535.027997][T13094] should_failslab+0x9/0x20 [ 535.032588][T13094] slab_pre_alloc_hook+0x59/0x310 [ 535.037738][T13094] kmem_cache_alloc+0x5a/0x2e0 [ 535.042602][T13094] ? security_inode_alloc+0x34/0x110 [ 535.048007][T13094] security_inode_alloc+0x34/0x110 [ 535.053219][T13094] inode_init_always+0x8fc/0xc90 [ 535.058237][T13094] ? new_inode_pseudo+0x82/0x1d0 [ 535.063276][T13094] new_inode_pseudo+0x95/0x1d0 [ 535.068122][T13094] ? __ns_get_path+0x2c/0x640 [ 535.072887][T13094] __ns_get_path+0x24d/0x640 [ 535.077569][T13094] ? _raw_spin_unlock+0x28/0x40 [ 535.082508][T13094] ns_get_path+0x54/0x90 [ 535.086886][T13094] proc_ns_get_link+0xf0/0x230 [ 535.091742][T13094] ? proc_ns_instantiate+0xf0/0xf0 [ 535.096946][T13094] ? try_to_unlazy+0x34c/0x5a0 [ 535.101804][T13094] ? proc_ns_instantiate+0xf0/0xf0 [ 535.106991][T13094] pick_link+0x666/0xdd0 [ 535.111354][T13094] step_into+0xc3d/0xf10 [ 535.115708][T13094] ? pid_revalidate+0x22/0x260 [ 535.120553][T13094] ? pid_revalidate+0x22/0x260 [ 535.125447][T13094] ? set_root+0x3a0/0x3a0 [ 535.129870][T13094] ? lookup_fast+0x4a2/0x4d0 [ 535.134564][T13094] path_openat+0x16bb/0x3190 [ 535.139358][T13094] ? do_filp_open+0x3d0/0x3d0 [ 535.144155][T13094] ? trace_event_raw_event_lock+0x230/0x230 [ 535.150188][T13094] do_filp_open+0x1c5/0x3d0 [ 535.154801][T13094] ? vfs_tmpfile+0x490/0x490 [ 535.159571][T13094] ? _raw_spin_unlock+0x28/0x40 [ 535.164501][T13094] ? alloc_fd+0x58f/0x630 [ 535.168950][T13094] do_sys_openat2+0x12c/0x1c0 [ 535.173754][T13094] ? do_sys_open+0xe0/0xe0 [ 535.178299][T13094] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 535.184479][T13094] ? lock_chain_count+0x20/0x20 [ 535.189438][T13094] __x64_sys_openat+0x139/0x160 [ 535.194404][T13094] do_syscall_64+0x55/0xb0 [ 535.198929][T13094] ? clear_bhb_loop+0x40/0x90 [ 535.203696][T13094] ? clear_bhb_loop+0x40/0x90 [ 535.208473][T13094] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 535.214446][T13094] RIP: 0033:0x7f7e51f8df90 [ 535.218963][T13094] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 535.238667][T13094] RSP: 002b:00007f7e52eeaf10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 535.247183][T13094] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7e51f8df90 [ 535.255240][T13094] RDX: 0000000000000000 RSI: 00007f7e52eeafa0 RDI: 00000000ffffff9c [ 535.263322][T13094] RBP: 00007f7e52eeafa0 R08: 0000000000000000 R09: 0000000000000000 [ 535.271380][T13094] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 535.279439][T13094] R13: 00007f7e521e6038 R14: 00007f7e521e5fa0 R15: 00007ffce63d45f8 [ 535.287559][T13094] [ 535.431494][T13098] validate_nla: 6 callbacks suppressed [ 535.431515][T13098] netlink: 'syz.1.2152': attribute type 21 has an invalid length. [ 535.689151][T13102] FAULT_INJECTION: forcing a failure. [ 535.689151][T13102] name failslab, interval 1, probability 0, space 0, times 0 [ 535.703170][T13102] CPU: 1 PID: 13102 Comm: syz.1.2154 Not tainted syzkaller #0 [ 535.710696][T13102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 535.720847][T13102] Call Trace: [ 535.724160][T13102] [ 535.727125][T13102] dump_stack_lvl+0x16c/0x230 [ 535.731860][T13102] ? show_regs_print_info+0x20/0x20 [ 535.737119][T13102] ? load_image+0x3b0/0x3b0 [ 535.741678][T13102] ? __might_sleep+0xe0/0xe0 [ 535.746315][T13102] ? __lock_acquire+0x7c80/0x7c80 [ 535.751399][T13102] should_fail_ex+0x39d/0x4d0 [ 535.756132][T13102] should_failslab+0x9/0x20 [ 535.760702][T13102] slab_pre_alloc_hook+0x59/0x310 [ 535.765831][T13102] ? __get_vm_area_node+0x125/0x370 [ 535.771107][T13102] __kmem_cache_alloc_node+0x53/0x260 [ 535.776542][T13102] ? __get_vm_area_node+0x125/0x370 [ 535.781794][T13102] kmalloc_node_trace+0x26/0xe0 [ 535.786702][T13102] __get_vm_area_node+0x125/0x370 [ 535.791795][T13102] __vmalloc_node_range+0x36e/0x1320 [ 535.797153][T13102] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 535.802750][T13102] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 535.808534][T13102] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 535.814566][T13102] ? lock_chain_count+0x20/0x20 [ 535.819469][T13102] ? free_vm_area+0x50/0x50 [ 535.824019][T13102] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 535.830231][T13102] ? lockdep_hardirqs_on+0x98/0x150 [ 535.835477][T13102] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 535.841710][T13102] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 535.847303][T13102] __vmalloc+0x7a/0x90 [ 535.851427][T13102] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 535.857024][T13102] bpf_prog_alloc_no_stats+0x47/0x440 [ 535.862442][T13102] ? bpf_prog_alloc+0x2b/0x1b0 [ 535.867263][T13102] bpf_prog_alloc+0x3d/0x1b0 [ 535.871897][T13102] bpf_prog_load+0x6b8/0x16d0 [ 535.876634][T13102] ? map_freeze+0x420/0x420 [ 535.881178][T13102] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 535.887381][T13102] ? lockdep_hardirqs_on+0x98/0x150 [ 535.892626][T13102] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 535.898847][T13102] ? rcuref_put_slowpath+0x101/0x150 [ 535.904186][T13102] ? rep_movs_alternative+0x4a/0x90 [ 535.909437][T13102] ? bpf_lsm_bpf+0x9/0x10 [ 535.913847][T13102] ? security_bpf+0x7e/0xa0 [ 535.918398][T13102] __sys_bpf+0x55a/0x800 [ 535.922688][T13102] ? bpf_link_show_fdinfo+0x350/0x350 [ 535.928127][T13102] __x64_sys_bpf+0x7c/0x90 [ 535.932588][T13102] do_syscall_64+0x55/0xb0 [ 535.937052][T13102] ? clear_bhb_loop+0x40/0x90 [ 535.941769][T13102] ? clear_bhb_loop+0x40/0x90 [ 535.946497][T13102] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 535.952447][T13102] RIP: 0033:0x7ff638f8f749 [ 535.956902][T13102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.976641][T13102] RSP: 002b:00007ff639f04038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 535.985126][T13102] RAX: ffffffffffffffda RBX: 00007ff6391e5fa0 RCX: 00007ff638f8f749 [ 535.993144][T13102] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 536.001163][T13102] RBP: 00007ff639f04090 R08: 0000000000000000 R09: 0000000000000000 [ 536.009190][T13102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.017223][T13102] R13: 00007ff6391e6038 R14: 00007ff6391e5fa0 R15: 00007ffd796ba288 [ 536.025262][T13102] [ 536.056487][T13102] syz.1.2154: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 536.075679][T13102] CPU: 1 PID: 13102 Comm: syz.1.2154 Not tainted syzkaller #0 [ 536.083296][T13102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 536.093406][T13102] Call Trace: [ 536.096735][T13102] [ 536.099700][T13102] dump_stack_lvl+0x16c/0x230 [ 536.104427][T13102] ? show_regs_print_info+0x20/0x20 [ 536.109678][T13102] ? load_image+0x3b0/0x3b0 [ 536.114236][T13102] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 536.120698][T13102] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 536.127251][T13102] warn_alloc+0x210/0x300 [ 536.131637][T13102] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 536.137864][T13102] ? zone_watermark_ok_safe+0x230/0x230 [ 536.143557][T13102] ? __get_vm_area_node+0x356/0x370 [ 536.148818][T13102] __vmalloc_node_range+0x393/0x1320 [ 536.154260][T13102] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 536.160040][T13102] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 536.166073][T13102] ? lock_chain_count+0x20/0x20 [ 536.170980][T13102] ? free_vm_area+0x50/0x50 [ 536.175505][T13102] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 536.181677][T13102] ? lockdep_hardirqs_on+0x98/0x150 [ 536.186894][T13102] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 536.193077][T13102] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 536.198655][T13102] __vmalloc+0x7a/0x90 [ 536.202785][T13102] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 536.208364][T13102] bpf_prog_alloc_no_stats+0x47/0x440 [ 536.213762][T13102] ? bpf_prog_alloc+0x2b/0x1b0 [ 536.218633][T13102] bpf_prog_alloc+0x3d/0x1b0 [ 536.223247][T13102] bpf_prog_load+0x6b8/0x16d0 [ 536.228049][T13102] ? map_freeze+0x420/0x420 [ 536.232585][T13102] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 536.238767][T13102] ? lockdep_hardirqs_on+0x98/0x150 [ 536.243987][T13102] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 536.250171][T13102] ? rcuref_put_slowpath+0x101/0x150 [ 536.255480][T13102] ? rep_movs_alternative+0x4a/0x90 [ 536.260704][T13102] ? bpf_lsm_bpf+0x9/0x10 [ 536.265057][T13102] ? security_bpf+0x7e/0xa0 [ 536.269590][T13102] __sys_bpf+0x55a/0x800 [ 536.273865][T13102] ? bpf_link_show_fdinfo+0x350/0x350 [ 536.279278][T13102] __x64_sys_bpf+0x7c/0x90 [ 536.283718][T13102] do_syscall_64+0x55/0xb0 [ 536.288165][T13102] ? clear_bhb_loop+0x40/0x90 [ 536.292862][T13102] ? clear_bhb_loop+0x40/0x90 [ 536.297557][T13102] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 536.303475][T13102] RIP: 0033:0x7ff638f8f749 [ 536.307915][T13102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.327574][T13102] RSP: 002b:00007ff639f04038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 536.336012][T13102] RAX: ffffffffffffffda RBX: 00007ff6391e5fa0 RCX: 00007ff638f8f749 [ 536.344024][T13102] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 536.352015][T13102] RBP: 00007ff639f04090 R08: 0000000000000000 R09: 0000000000000000 [ 536.360006][T13102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.368084][T13102] R13: 00007ff6391e6038 R14: 00007ff6391e5fa0 R15: 00007ffd796ba288 [ 536.376090][T13102] [ 536.401846][T13102] Mem-Info: [ 536.405990][T13102] active_anon:7399 inactive_anon:0 isolated_anon:0 [ 536.405990][T13102] active_file:18933 inactive_file:40058 isolated_file:0 [ 536.405990][T13102] unevictable:768 dirty:331 writeback:0 [ 536.405990][T13102] slab_reclaimable:12423 slab_unreclaimable:104057 [ 536.405990][T13102] mapped:24335 shmem:2608 pagetables:474 [ 536.405990][T13102] sec_pagetables:0 bounce:0 [ 536.405990][T13102] kernel_misc_reclaimable:0 [ 536.405990][T13102] free:1330683 free_pcp:10900 free_cma:0 [ 536.467328][T13102] Node 0 active_anon:24696kB inactive_anon:0kB active_file:75732kB inactive_file:160028kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97340kB dirty:1324kB writeback:0kB shmem:3996kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10388kB pagetables:1896kB sec_pagetables:0kB all_unreclaimable? no [ 536.500119][T13102] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 536.532565][T13102] Node 0 [ 536.532734][T13100] netlink: 'syz.0.2153': attribute type 10 has an invalid length. [ 536.544231][T13102] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 536.572701][T13102] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 536.579079][T13102] Node 0 DMA32 free:1429624kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:24648kB inactive_anon:0kB active_file:75732kB inactive_file:158696kB unevictable:1536kB writepending:1324kB present:3129332kB managed:2589596kB mlocked:0kB bounce:0kB free_pcp:7560kB local_pcp:7560kB free_cma:0kB [ 536.611189][T13102] lowmem_reserve[]: 0 0 1 1 1 [ 536.616554][T13102] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1332kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 536.659548][T13102] lowmem_reserve[]: 0 0 0 0 0 [ 536.673350][T13102] Node 1 Normal free:3902880kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:15904kB local_pcp:8928kB free_cma:0kB [ 536.689313][T13105] netlink: 'syz.0.2155': attribute type 9 has an invalid length. [ 536.719492][T13105] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2155'. [ 536.730016][T13102] lowmem_reserve[]: 0 0 0 0 0 [ 536.734881][T13102] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 536.748026][T13102] Node 0 DMA32: 1890*4kB (UME) 2037*8kB (UME) 987*16kB (UME) 523*32kB (UME) 332*64kB (ME) 141*128kB (UME) 95*256kB (UME) 51*512kB (UME) 21*1024kB (ME) 14*2048kB (UM) 301*4096kB (M) = 1429184kB [ 536.774880][T13102] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 536.796022][T13102] Node 1 Normal: 212*4kB (UME) 62*8kB (UME) 48*16kB (UME) 73*32kB (UME) 19*64kB (UME) 5*128kB (UME) 1*256kB (M) 2*512kB (UE) 2*1024kB (UE) 1*2048kB (E) 950*4096kB (M) = 3902880kB [ 536.837835][T13106] netlink: 'syz.0.2155': attribute type 9 has an invalid length. [ 536.847617][T13106] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2155'. [ 536.857735][T13102] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 536.875890][T13102] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 536.885255][T13102] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 536.905914][T13102] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 536.927790][T13102] 60374 total pagecache pages [ 536.932639][T13102] 0 pages in swap cache [ 536.951650][T13102] Free swap = 124996kB [ 536.957977][T13102] Total swap = 124996kB [ 536.965108][T13102] 2097051 pages RAM [ 536.969688][T13102] 0 pages HighMem/MovableOnly [ 536.974407][T13102] 416138 pages reserved [ 536.978686][T13102] 0 pages cma reserved [ 537.175677][T13111] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.2157'. [ 537.337479][T13116] netlink: 'syz.2.2158': attribute type 9 has an invalid length. [ 537.345514][T13116] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2158'. [ 537.556918][T13119] netlink: 'syz.2.2158': attribute type 9 has an invalid length. [ 537.580626][T13119] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2158'. [ 538.343811][T13128] netlink: 'syz.2.2163': attribute type 10 has an invalid length. [ 538.466007][T13133] : renamed from veth0_to_bond (while UP) [ 539.468242][T13151] netlink: 'syz.2.2168': attribute type 9 has an invalid length. [ 539.495792][T13151] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2168'. [ 539.614956][T13153] netlink: 'syz.2.2168': attribute type 9 has an invalid length. [ 539.645845][T13153] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2168'. [ 539.691466][T13162] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.2172'. [ 539.764637][T13157] netlink: 'syz.4.2171': attribute type 9 has an invalid length. [ 539.774133][T13157] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2171'. [ 539.923008][T13159] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2171'. [ 541.045701][T13182] validate_nla: 1 callbacks suppressed [ 541.090213][T13182] netlink: 'syz.1.2175': attribute type 10 has an invalid length. [ 541.811693][T13206] netlink: 'syz.0.2184': attribute type 21 has an invalid length. [ 542.678579][T13228] netlink: 'syz.1.2189': attribute type 2 has an invalid length. [ 542.766977][T13228] netlink: 'syz.1.2189': attribute type 1 has an invalid length. [ 542.812718][T13228] __nla_validate_parse: 2 callbacks suppressed [ 542.812738][T13228] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2189'. [ 543.227208][T13237] netlink: 'syz.2.2190': attribute type 10 has an invalid length. [ 543.414941][T13239] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2192'. [ 543.722667][T13245] netlink: 'syz.1.2195': attribute type 21 has an invalid length. [ 543.916711][T13249] FAULT_INJECTION: forcing a failure. [ 543.916711][T13249] name failslab, interval 1, probability 0, space 0, times 0 [ 543.946278][T13249] CPU: 0 PID: 13249 Comm: syz.4.2197 Not tainted syzkaller #0 [ 543.953821][T13249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 543.964019][T13249] Call Trace: [ 543.967318][T13249] [ 543.970272][T13249] dump_stack_lvl+0x16c/0x230 [ 543.974979][T13249] ? show_regs_print_info+0x20/0x20 [ 543.980199][T13249] ? load_image+0x3b0/0x3b0 [ 543.984816][T13249] ? __might_sleep+0xe0/0xe0 [ 543.989697][T13249] ? __lock_acquire+0x7c80/0x7c80 [ 543.994744][T13249] ? __put_user_ns+0x50/0x50 [ 543.999355][T13249] should_fail_ex+0x39d/0x4d0 [ 544.007297][T13249] should_failslab+0x9/0x20 [ 544.011848][T13249] slab_pre_alloc_hook+0x59/0x310 [ 544.016907][T13249] ? rxrpc_alloc_bundle+0x78/0x580 [ 544.022163][T13249] __kmem_cache_alloc_node+0x53/0x260 [ 544.027570][T13249] ? do_raw_spin_lock+0x121/0x2c0 [ 544.032629][T13249] ? rxrpc_alloc_bundle+0x78/0x580 [ 544.037778][T13249] kmalloc_trace+0x2a/0xe0 [ 544.042263][T13249] rxrpc_alloc_bundle+0x78/0x580 [ 544.047237][T13249] rxrpc_look_up_bundle+0x395/0x930 [ 544.052461][T13249] ? _raw_spin_unlock+0x28/0x40 [ 544.057341][T13249] rxrpc_new_client_call+0xbcd/0x1410 [ 544.062751][T13249] rxrpc_do_sendmsg+0xc2c/0x11f0 [ 544.067751][T13249] ? rxrpc_propose_abort+0x200/0x200 [ 544.073075][T13249] ? rxrpc_sendmsg+0x391/0x5b0 [ 544.077993][T13249] ? rxrpc_getsockopt+0x150/0x150 [ 544.083046][T13249] ____sys_sendmsg+0x5bf/0x950 [ 544.087850][T13249] ? __sys_sendmsg_sock+0x30/0x30 [ 544.092906][T13249] ? __import_iovec+0x3fa/0x860 [ 544.097793][T13249] ? import_iovec+0x73/0xa0 [ 544.102347][T13249] ___sys_sendmsg+0x220/0x290 [ 544.107055][T13249] ? __sys_sendmsg+0x270/0x270 [ 544.111876][T13249] ? __lock_acquire+0x7c80/0x7c80 [ 544.116948][T13249] __se_sys_sendmsg+0x1a5/0x270 [ 544.121826][T13249] ? perf_trace_preemptirq_template+0x281/0x340 [ 544.128099][T13249] ? __x64_sys_sendmsg+0x80/0x80 [ 544.133120][T13249] ? lockdep_hardirqs_on+0x98/0x150 [ 544.138458][T13249] do_syscall_64+0x55/0xb0 [ 544.142933][T13249] ? clear_bhb_loop+0x40/0x90 [ 544.147658][T13249] ? clear_bhb_loop+0x40/0x90 [ 544.152380][T13249] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 544.158300][T13249] RIP: 0033:0x7f6ec538f749 [ 544.162736][T13249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.182369][T13249] RSP: 002b:00007f6ec35f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 544.190895][T13249] RAX: ffffffffffffffda RBX: 00007f6ec55e5fa0 RCX: 00007f6ec538f749 [ 544.198909][T13249] RDX: 0000000000043480 RSI: 0000200000000300 RDI: 0000000000000003 [ 544.206908][T13249] RBP: 00007f6ec35f6090 R08: 0000000000000000 R09: 0000000000000000 [ 544.214903][T13249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 544.222891][T13249] R13: 00007f6ec55e6038 R14: 00007f6ec55e5fa0 R15: 00007ffff48442d8 [ 544.230910][T13249] [ 544.455369][T13254] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 545.007919][T13272] netlink: 'syz.1.2206': attribute type 21 has an invalid length. [ 545.142237][T13270] netlink: 'syz.2.2204': attribute type 10 has an invalid length. [ 546.320631][T13299] FAULT_INJECTION: forcing a failure. [ 546.320631][T13299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 546.337278][T13295] bond0: entered allmulticast mode [ 546.342951][T13295] bond_slave_0: entered allmulticast mode [ 546.366676][T13299] CPU: 0 PID: 13299 Comm: syz.4.2216 Not tainted syzkaller #0 [ 546.374220][T13299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 546.384327][T13299] Call Trace: [ 546.387643][T13299] [ 546.390605][T13299] dump_stack_lvl+0x16c/0x230 [ 546.395340][T13299] ? show_regs_print_info+0x20/0x20 [ 546.400591][T13299] ? load_image+0x3b0/0x3b0 [ 546.405138][T13299] ? __lock_acquire+0x7c80/0x7c80 [ 546.410207][T13299] should_fail_ex+0x39d/0x4d0 [ 546.414939][T13299] _copy_from_user+0x2f/0xe0 [ 546.419570][T13299] __copy_msghdr+0x3bb/0x580 [ 546.424213][T13299] ___sys_sendmsg+0x1a6/0x290 [ 546.428939][T13299] ? __sys_sendmsg+0x270/0x270 [ 546.433753][T13299] ? __lock_acquire+0x7c80/0x7c80 [ 546.438819][T13299] __se_sys_sendmsg+0x1a5/0x270 [ 546.443697][T13299] ? perf_trace_preemptirq_template+0x281/0x340 [ 546.449961][T13299] ? __x64_sys_sendmsg+0x80/0x80 [ 546.454946][T13299] ? lockdep_hardirqs_on+0x98/0x150 [ 546.460191][T13299] do_syscall_64+0x55/0xb0 [ 546.464630][T13299] ? clear_bhb_loop+0x40/0x90 [ 546.469364][T13299] ? clear_bhb_loop+0x40/0x90 [ 546.474084][T13299] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 546.480005][T13299] RIP: 0033:0x7f6ec538f749 [ 546.484447][T13299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.504084][T13299] RSP: 002b:00007f6ec35f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 546.512528][T13299] RAX: ffffffffffffffda RBX: 00007f6ec55e5fa0 RCX: 00007f6ec538f749 [ 546.520521][T13299] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 546.528603][T13299] RBP: 00007f6ec35f6090 R08: 0000000000000000 R09: 0000000000000000 [ 546.536602][T13299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.544595][T13299] R13: 00007f6ec55e6038 R14: 00007f6ec55e5fa0 R15: 00007ffff48442d8 [ 546.552611][T13299] [ 546.574464][T13295] bond_slave_1: entered allmulticast mode [ 546.761972][T13305] netlink: 'syz.1.2218': attribute type 21 has an invalid length. [ 547.076768][T13309] netlink: 'syz.4.2220': attribute type 10 has an invalid length. [ 547.116658][T13313] netlink: 'syz.0.2222': attribute type 22 has an invalid length. [ 547.205611][ T7638] wlan1: Trigger new scan to find an IBSS to join [ 547.697477][T13326] netlink: 'syz.1.2227': attribute type 21 has an invalid length. [ 547.860526][T13332] netlink: 'syz.2.2229': attribute type 21 has an invalid length. [ 549.242814][T13358] netlink: 'syz.4.2238': attribute type 21 has an invalid length. [ 549.251358][T13358] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2238'. [ 549.438140][T13359] netlink: 'syz.0.2233': attribute type 10 has an invalid length. [ 549.898600][T13363] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.2240'. [ 549.918158][T13363] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2240'. [ 550.214879][T13368] netlink: 'syz.4.2242': attribute type 21 has an invalid length. [ 550.494748][T13371] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2244'. [ 550.608403][T13371] netlink: 'syz.0.2244': attribute type 3 has an invalid length. [ 550.626255][T13371] netlink: 'syz.0.2244': attribute type 1 has an invalid length. [ 551.009977][T13385] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 551.021499][T13385] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 551.031277][T13385] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 551.041976][T13385] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 551.050605][T13385] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 551.085970][T13385] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 551.131198][ T7631] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.192742][T13388] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2247'. [ 551.257638][ T7631] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.269270][ T7653] wlan1: Trigger new scan to find an IBSS to join [ 553.319874][T13385] Bluetooth: hci3: command tx timeout [ 555.538498][T13385] Bluetooth: hci3: command tx timeout [ 556.294472][ T7631] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.344240][ T7653] wlan1: Creating new IBSS network, BSSID d6:a1:6b:c5:50:db [ 556.479397][ T7631] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.577671][T13412] netlink: 'syz.2.2252': attribute type 21 has an invalid length. [ 556.610183][T13383] chnl_net:caif_netlink_parms(): no params data found [ 556.650690][T13409] netlink: 'syz.4.2251': attribute type 10 has an invalid length. [ 556.898714][T13421] netlink: 'syz.2.2254': attribute type 29 has an invalid length. [ 556.947510][T13383] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.969173][T13383] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.974558][T13426] netlink: 'syz.0.2255': attribute type 2 has an invalid length. [ 556.977724][T13383] bridge_slave_0: entered allmulticast mode [ 556.991312][T13426] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2255'. [ 556.998984][T13383] bridge_slave_0: entered promiscuous mode [ 557.015366][T13421] netlink: 'syz.2.2254': attribute type 29 has an invalid length. [ 557.024751][T13427] netlink: 'syz.2.2254': attribute type 29 has an invalid length. [ 557.211730][T13383] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.219216][T13383] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.226986][T13383] bridge_slave_1: entered allmulticast mode [ 557.235074][T13383] bridge_slave_1: entered promiscuous mode [ 557.328294][T13383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.384982][T13383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.532713][T13383] team0: Port device team_slave_0 added [ 557.554884][T13383] team0: Port device team_slave_1 added [ 557.596029][T13385] Bluetooth: hci3: command tx timeout [ 557.621266][T13446] netlink: 'syz.0.2261': attribute type 21 has an invalid length. [ 557.687840][T13383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.695033][T13383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 557.727877][T13383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.023551][T13383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.030686][T13383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.058022][T13383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.268173][T13456] netlink: 'syz.4.2263': attribute type 10 has an invalid length. [ 558.382534][T13463] syzkaller0: entered promiscuous mode [ 558.401142][T13463] syzkaller0: entered allmulticast mode [ 558.419415][T13383] hsr_slave_0: entered promiscuous mode [ 558.427816][T13383] hsr_slave_1: entered promiscuous mode [ 558.538601][T13467] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.2269'. [ 558.862109][T13475] netlink: 18187 bytes leftover after parsing attributes in process `syz.2.2271'. [ 558.971766][T13477] netlink: 'syz.4.2273': attribute type 21 has an invalid length. [ 559.267995][T13483] netlink: 'syz.2.2275': attribute type 21 has an invalid length. [ 559.676131][T13385] Bluetooth: hci3: command tx timeout [ 560.337135][T13383] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 560.352938][T13383] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 560.370357][T13383] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 560.401622][T13383] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 560.448853][T13505] FAULT_INJECTION: forcing a failure. [ 560.448853][T13505] name failslab, interval 1, probability 0, space 0, times 0 [ 560.461789][T13505] CPU: 1 PID: 13505 Comm: syz.2.2282 Not tainted syzkaller #0 [ 560.469292][T13505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 560.479368][T13505] Call Trace: [ 560.482665][T13505] [ 560.485618][T13505] dump_stack_lvl+0x16c/0x230 [ 560.490436][T13505] ? show_regs_print_info+0x20/0x20 [ 560.495661][T13505] ? load_image+0x3b0/0x3b0 [ 560.500193][T13505] ? __might_sleep+0xe0/0xe0 [ 560.504806][T13505] ? __lock_acquire+0x7c80/0x7c80 [ 560.509858][T13505] should_fail_ex+0x39d/0x4d0 [ 560.514598][T13505] should_failslab+0x9/0x20 [ 560.519130][T13505] slab_pre_alloc_hook+0x59/0x310 [ 560.524182][T13505] ? apparmor_sk_alloc_security+0x77/0x100 [ 560.530032][T13505] __kmem_cache_alloc_node+0x53/0x260 [ 560.535454][T13505] ? apparmor_sk_alloc_security+0x77/0x100 [ 560.541318][T13505] kmalloc_trace+0x2a/0xe0 [ 560.545776][T13505] apparmor_sk_alloc_security+0x77/0x100 [ 560.551437][T13505] security_sk_alloc+0x6e/0xa0 [ 560.556236][T13505] sk_prot_alloc+0x101/0x210 [ 560.560845][T13505] ? sk_alloc+0x24/0x360 [ 560.565105][T13505] sk_alloc+0x3a/0x360 [ 560.569198][T13505] ? bpf_ctx_init+0x163/0x1a0 [ 560.573893][T13505] ? bpf_prog_test_run_skb+0x268/0x11c0 [ 560.579478][T13505] bpf_prog_test_run_skb+0x39a/0x11c0 [ 560.584892][T13505] ? __fget_files+0x28/0x4d0 [ 560.589674][T13505] ? cpu_online+0x60/0x60 [ 560.594042][T13505] bpf_prog_test_run+0x321/0x390 [ 560.599024][T13505] __sys_bpf+0x440/0x800 [ 560.603287][T13505] ? bpf_link_show_fdinfo+0x350/0x350 [ 560.608707][T13505] ? lock_chain_count+0x20/0x20 [ 560.613585][T13505] __x64_sys_bpf+0x7c/0x90 [ 560.618022][T13505] do_syscall_64+0x55/0xb0 [ 560.622462][T13505] ? clear_bhb_loop+0x40/0x90 [ 560.627155][T13505] ? clear_bhb_loop+0x40/0x90 [ 560.631851][T13505] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 560.637763][T13505] RIP: 0033:0x7fdd0938f749 [ 560.642193][T13505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 560.661825][T13505] RSP: 002b:00007fdd0a15c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 560.670263][T13505] RAX: ffffffffffffffda RBX: 00007fdd095e5fa0 RCX: 00007fdd0938f749 [ 560.678253][T13505] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 560.686238][T13505] RBP: 00007fdd0a15c090 R08: 0000000000000000 R09: 0000000000000000 [ 560.694223][T13505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 560.702207][T13505] R13: 00007fdd095e6038 R14: 00007fdd095e5fa0 R15: 00007ffffca51e58 [ 560.710209][T13505] [ 561.579593][T13383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.738286][T13383] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.839818][ T7631] veth0_macvtap: left promiscuous mode [ 561.846758][ T7631] veth1_vlan: left promiscuous mode [ 561.852221][ T7631] veth0_vlan: left promiscuous mode [ 562.071443][T13538] FAULT_INJECTION: forcing a failure. [ 562.071443][T13538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 562.084834][T13538] CPU: 1 PID: 13538 Comm: syz.2.2293 Not tainted syzkaller #0 [ 562.092355][T13538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 562.102466][T13538] Call Trace: [ 562.105786][T13538] [ 562.108761][T13538] dump_stack_lvl+0x16c/0x230 [ 562.113490][T13538] ? show_regs_print_info+0x20/0x20 [ 562.118732][T13538] ? load_image+0x3b0/0x3b0 [ 562.123271][T13538] ? __lock_acquire+0x7c80/0x7c80 [ 562.128326][T13538] should_fail_ex+0x39d/0x4d0 [ 562.133032][T13538] _copy_from_user+0x2f/0xe0 [ 562.137645][T13538] __copy_msghdr+0x3bb/0x580 [ 562.142267][T13538] ___sys_sendmsg+0x1a6/0x290 [ 562.146987][T13538] ? __sys_sendmsg+0x270/0x270 [ 562.151803][T13538] ? __lock_acquire+0x7c80/0x7c80 [ 562.156879][T13538] __se_sys_sendmsg+0x1a5/0x270 [ 562.161768][T13538] ? __x64_sys_sendmsg+0x80/0x80 [ 562.166766][T13538] ? lockdep_hardirqs_on+0x98/0x150 [ 562.172005][T13538] do_syscall_64+0x55/0xb0 [ 562.176465][T13538] ? clear_bhb_loop+0x40/0x90 [ 562.181191][T13538] ? clear_bhb_loop+0x40/0x90 [ 562.185910][T13538] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 562.191948][T13538] RIP: 0033:0x7fdd0938f749 [ 562.196383][T13538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 562.216004][T13538] RSP: 002b:00007fdd0a15c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 562.224438][T13538] RAX: ffffffffffffffda RBX: 00007fdd095e5fa0 RCX: 00007fdd0938f749 [ 562.232607][T13538] RDX: 0000000000040001 RSI: 0000200000000180 RDI: 0000000000000004 [ 562.240594][T13538] RBP: 00007fdd0a15c090 R08: 0000000000000000 R09: 0000000000000000 [ 562.248683][T13538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.256763][T13538] R13: 00007fdd095e6038 R14: 00007fdd095e5fa0 R15: 00007ffffca51e58 [ 562.264768][T13538] [ 562.724238][ T7631] team0 (unregistering): Port device team_slave_1 removed [ 562.772376][ T7631] team0 (unregistering): Port device team_slave_0 removed [ 562.823247][ T7631] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 562.880537][ T7631] .` (unregistering): (slave 77ÿ): Releasing backup interface [ 563.279669][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.294610][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.377491][ T7631] .` (unregistering): Released all slaves [ 563.420407][T13533] validate_nla: 2 callbacks suppressed [ 563.420425][T13533] netlink: 'syz.4.2290': attribute type 10 has an invalid length. [ 563.436303][T13536] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2292'. [ 563.460648][T13545] netlink: 'syz.2.2295': attribute type 21 has an invalid length. [ 563.493989][ T7652] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.501274][ T7652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.569243][ T7652] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.576551][ T7652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.959810][T13383] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 564.485920][T13560] IPv6: Can't replace route, no match found [ 564.541596][T13569] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 564.566093][T13568] netlink: 'syz.4.2302': attribute type 4 has an invalid length. [ 564.573933][T13568] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2302'. [ 564.594025][T13568] wlan1: mtu less than device minimum [ 564.653518][T13383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.736431][T13383] veth0_vlan: entered promiscuous mode [ 564.752303][T13383] veth1_vlan: entered promiscuous mode [ 564.850712][T13571] netlink: 'syz.2.2303': attribute type 10 has an invalid length. [ 564.867818][T13383] veth0_macvtap: entered promiscuous mode [ 564.882221][T13574] netlink: 'syz.4.2304': attribute type 21 has an invalid length. [ 564.898911][T13383] veth1_macvtap: entered promiscuous mode [ 564.953778][T13383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.992322][T13383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 565.004952][T13576] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 565.036218][T13578] netlink: 'syz.2.2306': attribute type 4 has an invalid length. [ 565.044047][T13578] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2306'. [ 565.083290][T13578] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 565.128804][T13383] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.139295][T13582] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2308'. [ 565.148907][T13383] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.148989][T13383] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.149019][T13383] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.180503][T13582] openvswitch: netlink: Tunnel attr 13157 out of range max 16 [ 565.373862][T13406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.397017][T13406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.465234][ T5901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.486356][ T5901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.606495][T13597] netlink: 'syz.0.2314': attribute type 21 has an invalid length. [ 565.988358][T13602] netlink: 'syz.1.2315': attribute type 10 has an invalid length. [ 566.057247][T13602] hsr_slave_0: left promiscuous mode [ 566.205551][T13602] hsr_slave_1: left promiscuous mode [ 567.085286][T13634] tap0: tun_chr_ioctl cmd 1074025677 [ 567.094286][T13634] tap0: linktype set to 805 [ 567.115114][T13640] netlink: 'syz.1.2326': attribute type 21 has an invalid length. [ 567.335361][T13648] FAULT_INJECTION: forcing a failure. [ 567.335361][T13648] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 567.366708][T13648] CPU: 0 PID: 13648 Comm: syz.0.2329 Not tainted syzkaller #0 [ 567.374272][T13648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 567.384383][T13648] Call Trace: [ 567.387700][T13648] [ 567.390654][T13648] dump_stack_lvl+0x16c/0x230 [ 567.395373][T13648] ? show_regs_print_info+0x20/0x20 [ 567.400599][T13648] ? load_image+0x3b0/0x3b0 [ 567.405130][T13648] ? __might_fault+0xaa/0x120 [ 567.409827][T13648] ? __lock_acquire+0x7c80/0x7c80 [ 567.414874][T13648] should_fail_ex+0x39d/0x4d0 [ 567.419584][T13648] _copy_from_user+0x2f/0xe0 [ 567.424195][T13648] get_user_ifreq+0x6b/0x180 [ 567.428811][T13648] sock_ioctl+0x6ea/0x7a0 [ 567.433163][T13648] ? sock_poll+0x3d0/0x3d0 [ 567.437635][T13648] ? bpf_lsm_file_ioctl+0x9/0x10 [ 567.442588][T13648] ? security_file_ioctl+0x80/0xa0 [ 567.447720][T13648] ? sock_poll+0x3d0/0x3d0 [ 567.452151][T13648] __se_sys_ioctl+0xfd/0x170 [ 567.456774][T13648] do_syscall_64+0x55/0xb0 [ 567.461220][T13648] ? clear_bhb_loop+0x40/0x90 [ 567.465923][T13648] ? clear_bhb_loop+0x40/0x90 [ 567.470620][T13648] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 567.476534][T13648] RIP: 0033:0x7f7e51f8f749 [ 567.480968][T13648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 567.500855][T13648] RSP: 002b:00007f7e52eeb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 567.509296][T13648] RAX: ffffffffffffffda RBX: 00007f7e521e5fa0 RCX: 00007f7e51f8f749 [ 567.517285][T13648] RDX: 0000200000000080 RSI: 00000000000089f2 RDI: 0000000000000004 [ 567.525273][T13648] RBP: 00007f7e52eeb090 R08: 0000000000000000 R09: 0000000000000000 [ 567.533270][T13648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.541260][T13648] R13: 00007f7e521e6038 R14: 00007f7e521e5fa0 R15: 00007ffce63d45f8 [ 567.549263][T13648] [ 567.946734][T13664] netlink: 'syz.0.2334': attribute type 10 has an invalid length. [ 568.516287][T13678] : renamed from veth0_vlan (while UP) [ 568.522197][T13678] FAULT_INJECTION: forcing a failure. [ 568.522197][T13678] name failslab, interval 1, probability 0, space 0, times 0 [ 568.535534][T13678] CPU: 0 PID: 13678 Comm: syz.0.2338 Not tainted syzkaller #0 [ 568.543145][T13678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 568.553251][T13678] Call Trace: [ 568.556577][T13678] [ 568.559547][T13678] dump_stack_lvl+0x16c/0x230 [ 568.564290][T13678] ? show_regs_print_info+0x20/0x20 [ 568.569572][T13678] ? load_image+0x3b0/0x3b0 [ 568.574139][T13678] ? __lock_acquire+0x7c80/0x7c80 [ 568.579228][T13678] should_fail_ex+0x39d/0x4d0 [ 568.583981][T13678] should_failslab+0x9/0x20 [ 568.588553][T13678] slab_pre_alloc_hook+0x59/0x310 [ 568.593651][T13678] ? device_rename+0xb3/0x1e0 [ 568.598387][T13678] ? device_rename+0xb3/0x1e0 [ 568.603134][T13678] __kmem_cache_alloc_node+0x53/0x260 [ 568.608577][T13678] ? device_rename+0xb3/0x1e0 [ 568.613320][T13678] __kmalloc_node_track_caller+0xa2/0x230 [ 568.619084][T13678] kstrdup+0x3b/0x80 [ 568.619120][T13678] device_rename+0xb3/0x1e0 [ 568.627735][T13678] dev_change_name+0x2ee/0x8a0 [ 568.632663][T13678] ? dev_alloc_name+0x1c0/0x1c0 [ 568.637564][T13678] ? __mutex_lock+0x95d/0xcc0 [ 568.642274][T13678] ? __mutex_lock+0x4e8/0xcc0 [ 568.646987][T13678] dev_ifsioc+0x8c7/0xe20 [ 568.651351][T13678] ? dev_ioctl+0x1170/0x1170 [ 568.655962][T13678] ? bpf_lsm_capable+0x9/0x10 [ 568.660666][T13678] ? security_capable+0x89/0xb0 [ 568.665632][T13678] dev_ioctl+0x705/0x1170 [ 568.669989][T13678] sock_do_ioctl+0x226/0x2f0 [ 568.674605][T13678] ? sock_show_fdinfo+0xb0/0xb0 [ 568.679487][T13678] sock_ioctl+0x623/0x7a0 [ 568.683835][T13678] ? sock_poll+0x3d0/0x3d0 [ 568.688276][T13678] ? bpf_lsm_file_ioctl+0x9/0x10 [ 568.693228][T13678] ? security_file_ioctl+0x80/0xa0 [ 568.698366][T13678] ? sock_poll+0x3d0/0x3d0 [ 568.702801][T13678] __se_sys_ioctl+0xfd/0x170 [ 568.707424][T13678] do_syscall_64+0x55/0xb0 [ 568.711861][T13678] ? clear_bhb_loop+0x40/0x90 [ 568.716553][T13678] ? clear_bhb_loop+0x40/0x90 [ 568.721250][T13678] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 568.727160][T13678] RIP: 0033:0x7f7e51f8f749 [ 568.731593][T13678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 568.751220][T13678] RSP: 002b:00007f7e52eeb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 568.759656][T13678] RAX: ffffffffffffffda RBX: 00007f7e521e5fa0 RCX: 00007f7e51f8f749 [ 568.767653][T13678] RDX: 00002000000000c0 RSI: 0000000000008923 RDI: 0000000000000004 [ 568.775642][T13678] RBP: 00007f7e52eeb090 R08: 0000000000000000 R09: 0000000000000000 [ 568.783627][T13678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.791704][T13678] R13: 00007f7e521e6038 R14: 00007f7e521e5fa0 R15: 00007ffce63d45f8 [ 568.799721][T13678] [ 569.372532][T13704] validate_nla: 1 callbacks suppressed [ 569.372552][T13704] netlink: 'syz.4.2347': attribute type 21 has an invalid length. [ 569.391772][T13699] netlink: 'syz.2.2345': attribute type 10 has an invalid length. [ 570.145014][T13717] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2351'. [ 570.196199][T13717] bond_slave_0: entered promiscuous mode [ 570.202458][T13717] bond_slave_1: entered promiscuous mode [ 572.203441][T13736] netlink: 'syz.4.2357': attribute type 21 has an invalid length. [ 585.744742][ T5101] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 585.754877][ T5101] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 585.764880][ T5101] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 585.773639][ T5101] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 585.788149][ T5101] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 585.795598][ T5101] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 586.137579][T13738] chnl_net:caif_netlink_parms(): no params data found [ 587.543451][T13385] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 587.553763][T13385] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 587.564952][T13385] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 587.575304][T13385] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 587.586089][T13385] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 587.593589][T13385] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 587.651154][ T5101] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 587.663245][ T5101] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 587.672512][ T5101] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 587.684329][ T5101] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 587.692687][ T5101] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 587.702630][ T5101] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 587.906039][ T5101] Bluetooth: hci4: command tx timeout [ 588.437183][T13385] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 588.449661][T13385] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 588.458119][T13385] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 588.468695][T13385] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 588.481525][T13385] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 588.489919][T13385] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 589.665874][ T5101] Bluetooth: hci5: command tx timeout [ 589.746077][ T5101] Bluetooth: hci6: command tx timeout [ 589.985981][ T5101] Bluetooth: hci4: command tx timeout [ 590.546010][ T5101] Bluetooth: hci7: command tx timeout [ 591.745873][ T5101] Bluetooth: hci5: command tx timeout [ 591.825831][ T5101] Bluetooth: hci6: command tx timeout [ 592.065935][ T5101] Bluetooth: hci4: command tx timeout [ 592.626007][ T5101] Bluetooth: hci7: command tx timeout [ 593.825845][ T5101] Bluetooth: hci5: command tx timeout [ 593.905882][ T5101] Bluetooth: hci6: command tx timeout [ 594.148010][ T5101] Bluetooth: hci4: command tx timeout [ 594.705909][ T5101] Bluetooth: hci7: command tx timeout [ 595.906125][ T5101] Bluetooth: hci5: command tx timeout [ 595.985827][ T5101] Bluetooth: hci6: command tx timeout [ 596.785993][ T5101] Bluetooth: hci7: command tx timeout [ 624.715574][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.722438][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 646.988626][T13385] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 647.001061][T13385] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 647.009756][T13385] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 647.022277][T13385] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 647.034254][T13385] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 647.042579][T13385] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 648.102046][ T5801] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 648.112561][ T5801] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 648.122731][ T5801] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 648.131336][ T5801] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 648.140496][ T5801] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 648.148896][ T5801] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 648.159361][ T5801] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 648.168234][ T5801] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 648.177196][ T5801] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 648.186846][ T5801] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 648.196050][ T5801] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 648.205099][ T5801] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 649.114750][T13769] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 649.123427][ T5101] Bluetooth: hci8: command tx timeout [ 649.140810][T13769] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 649.151248][T13769] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 649.161385][T13769] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 649.172178][T13769] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 649.180148][T13769] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 650.226044][T13770] Bluetooth: hci9: command tx timeout [ 650.308757][T13770] Bluetooth: hci10: command tx timeout [ 651.186007][T13770] Bluetooth: hci8: command tx timeout [ 651.266064][T13770] Bluetooth: hci11: command tx timeout [ 652.307142][T13770] Bluetooth: hci9: command tx timeout [ 652.385890][T13770] Bluetooth: hci10: command tx timeout [ 653.265928][T13770] Bluetooth: hci8: command tx timeout [ 653.345834][T13770] Bluetooth: hci11: command tx timeout [ 654.385801][T13770] Bluetooth: hci9: command tx timeout [ 654.465968][T13770] Bluetooth: hci10: command tx timeout [ 655.345952][T13770] Bluetooth: hci8: command tx timeout [ 655.427292][T13770] Bluetooth: hci11: command tx timeout [ 656.465988][T13770] Bluetooth: hci9: command tx timeout [ 656.548227][T13770] Bluetooth: hci10: command tx timeout [ 657.505926][T13770] Bluetooth: hci11: command tx timeout [ 675.555692][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 675.562484][ C0] rcu: 0-....: (10500 ticks this GP) idle=1514/1/0x4000000000000000 softirq=59819/59819 fqs=4946 [ 675.574101][ C0] rcu: hardirqs softirqs csw/system [ 675.580582][ C0] rcu: number: 1451259 0 0 [ 675.587043][ C0] rcu: cputime: 17176 35293 38 ==> 52470(ms) [ 675.594908][ C0] rcu: (t=10500 jiffies g=75053 q=1936 ncpus=2) [ 675.601291][ C0] CPU: 0 PID: 13729 Comm: syz.2.2356 Not tainted syzkaller #0 [ 675.608765][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 675.618847][ C0] RIP: 0010:seqcount_lockdep_reader_access+0x17f/0x1c0 [ 675.625760][ C0] Code: 00 4d 85 e4 75 16 e8 90 90 0f 00 eb 15 e8 89 90 0f 00 e8 94 1d f9 08 4d 85 e4 74 ea e8 7a 90 0f 00 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3e 00 00 00 00 66 43 c7 44 3e 09 00 00 43 c6 44 3e 0b 00 [ 675.645492][ C0] RSP: 0018:ffffc90000006ae0 EFLAGS: 00000246 [ 675.651572][ C0] RAX: ffffffff81760046 RBX: 0000000000000000 RCX: ffff8880295e1e00 [ 675.659550][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 675.667525][ C0] RBP: ffffc90000006b98 R08: ffffffff90da95ff R09: 1ffffffff21b52bf [ 675.675507][ C0] R10: dffffc0000000000 R11: fffffbfff21b52c0 R12: 0000000000000200 [ 675.683485][ C0] R13: 000001fb63109b96 R14: 1ffff92000000d5c R15: dffffc0000000000 [ 675.691568][ C0] FS: 00007fdd0a15c6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 675.700521][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 675.707113][ C0] CR2: 000000110c2f603c CR3: 000000007bc2e000 CR4: 00000000003506f0 [ 675.715092][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 675.723159][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 675.731135][ C0] Call Trace: [ 675.734417][ C0] [ 675.737274][ C0] ? ktime_get_real_ts64+0x420/0x420 [ 675.742574][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 675.747617][ C0] ? ieee80211_tx_dequeue+0x477b/0x4a80 [ 675.753178][ C0] ktime_get_with_offset+0x103/0x330 [ 675.758483][ C0] mac80211_hwsim_tx_frame_no_nl+0x6e9/0x1170 [ 675.764576][ C0] ? mac80211_hwsim_tx_frame_nl+0xc90/0xc90 [ 675.770495][ C0] mac80211_hwsim_tx+0x184a/0x2570 [ 675.775630][ C0] ieee80211_handle_wake_tx_queue+0x18c/0x2a0 [ 675.781714][ C0] ? ieee80211_ctstoself_duration+0x460/0x460 [ 675.787791][ C0] ? __local_bh_enable_ip+0x12e/0x1c0 [ 675.793169][ C0] ? _local_bh_enable+0xa0/0xa0 [ 675.798028][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 675.803242][ C0] ieee80211_queue_skb+0x1a11/0x2140 [ 675.808557][ C0] ieee80211_tx+0x298/0x420 [ 675.813074][ C0] ? ieee80211_skb_resize+0x630/0x630 [ 675.818463][ C0] ? ieee80211_xmit+0x310/0x3f0 [ 675.823324][ C0] __ieee80211_subif_start_xmit+0xdd8/0x14c0 [ 675.829312][ C0] ? lapic_next_event+0x11/0x20 [ 675.834170][ C0] ? clockevents_program_event+0x230/0x310 [ 675.839993][ C0] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 675.845725][ C0] ? __ieee80211_subif_start_xmit+0x2b1/0x14c0 [ 675.851887][ C0] ? ieee80211_txq_schedule_start+0x310/0x310 [ 675.858044][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 675.864032][ C0] ? ieee80211_multicast_to_unicast+0x19c/0x310 [ 675.870283][ C0] ieee80211_subif_start_xmit+0xe1/0x500 [ 675.875923][ C0] ? ieee80211_build_hdr+0x2610/0x2610 [ 675.881384][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 675.886614][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 675.892786][ C0] dev_hard_start_xmit+0x246/0x740 [ 675.897920][ C0] __dev_queue_xmit+0x1a64/0x35a0 [ 675.902953][ C0] ? lock_chain_count+0x20/0x20 [ 675.907822][ C0] ? __dev_queue_xmit+0x245/0x35a0 [ 675.913044][ C0] ? netdev_core_pick_tx+0x340/0x340 [ 675.918344][ C0] ? __asan_memcpy+0x40/0x70 [ 675.923036][ C0] ? eth_header+0x11b/0x200 [ 675.927567][ C0] ? llc_sysctl_exit+0x70/0x70 [ 675.932352][ C0] ? neigh_resolve_output+0x618/0x730 [ 675.937924][ C0] ip6_finish_output2+0xe2e/0x1650 [ 675.943068][ C0] ? ip6_finish_output2+0x661/0x1650 [ 675.948467][ C0] ? ip6_mtu+0x7d/0x3f0 [ 675.952634][ C0] ? nf_hook+0x370/0x370 [ 675.956890][ C0] ? ip6_finish_output+0x57b/0x820 [ 675.962033][ C0] ndisc_send_skb+0xbed/0x14b0 [ 675.966924][ C0] ? ndisc_send_skb+0x1f2/0x14b0 [ 675.971917][ C0] ? ndisc_mc_map+0x680/0x680 [ 675.976622][ C0] ? skb_dst+0xd0/0xd0 [ 675.980729][ C0] addrconf_rs_timer+0x2bc/0x600 [ 675.985693][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 675.991785][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 675.997778][ C0] call_timer_fn+0x16e/0x530 [ 676.002373][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 676.008559][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 676.014640][ C0] ? call_timer_fn+0xbf/0x530 [ 676.019321][ C0] ? __run_timers+0x7d0/0x7d0 [ 676.024008][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 676.030098][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 676.036182][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 676.042287][ C0] __run_timers+0x52d/0x7d0 [ 676.046807][ C0] ? detach_timer+0x2b0/0x2b0 [ 676.051586][ C0] run_timer_softirq+0x67/0xf0 [ 676.056366][ C0] handle_softirqs+0x280/0x820 [ 676.061232][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 676.066024][ C0] ? do_softirq+0x180/0x180 [ 676.070537][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 676.075760][ C0] __irq_exit_rcu+0xc7/0x190 [ 676.080369][ C0] ? irq_exit_rcu+0x20/0x20 [ 676.084905][ C0] irq_exit_rcu+0x9/0x20 [ 676.089153][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 676.094799][ C0] [ 676.097738][ C0] [ 676.100671][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 676.106657][ C0] RIP: 0010:generic_exec_single+0x476/0x4f0 [ 676.112558][ C0] Code: 75 11 e8 cd e6 0a 00 48 85 db 75 16 e8 c3 e6 0a 00 eb 15 e8 bc e6 0a 00 e8 c7 73 f4 08 48 85 db 74 ea e8 ad e6 0a 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 66 43 c7 44 2c [ 676.132177][ C0] RSP: 0018:ffffc900056e7a00 EFLAGS: 00000246 [ 676.138255][ C0] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000080000 [ 676.146241][ C0] RDX: ffffc9000d5fb000 RSI: 0000000000002cad RDI: 0000000000002cae [ 676.154256][ C0] RBP: ffffc900056e7ad0 R08: ffffffff90da95ff R09: 1ffffffff21b52bf [ 676.162325][ C0] R10: dffffc0000000000 R11: fffffbfff21b52c0 R12: 1ffff92000adcf44 [ 676.170305][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000adcf65 [ 676.178300][ C0] ? event_function+0x300/0x300 [ 676.183261][ C0] ? smp_call_function_single+0x580/0x580 [ 676.189018][ C0] smp_call_function_single+0x352/0x580 [ 676.194578][ C0] ? event_function+0x300/0x300 [ 676.199438][ C0] ? flush_smp_call_function_queue+0x240/0x240 [ 676.205779][ C0] ? event_function+0x300/0x300 [ 676.210651][ C0] perf_install_in_context+0x591/0x8e0 [ 676.216236][ C0] ? exclusive_event_installable+0x2c0/0x2c0 [ 676.222280][ C0] ? add_event_to_ctx+0x1180/0x1180 [ 676.227524][ C0] ? anon_inode_getfile+0x109/0x1a0 [ 676.232766][ C0] ? perf_event__header_size+0x165/0x220 [ 676.238428][ C0] __se_sys_perf_event_open+0x17fa/0x1c20 [ 676.244170][ C0] ? clockevents_program_event+0x230/0x310 [ 676.250011][ C0] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 676.255684][ C0] ? lock_chain_count+0x20/0x20 [ 676.260580][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 676.266601][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 676.271819][ C0] ? __x64_sys_perf_event_open+0x20/0xc0 [ 676.277474][ C0] do_syscall_64+0x55/0xb0 [ 676.281918][ C0] ? clear_bhb_loop+0x40/0x90 [ 676.286606][ C0] ? clear_bhb_loop+0x40/0x90 [ 676.291302][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 676.297307][ C0] RIP: 0033:0x7fdd0938f749 [ 676.301754][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 676.321553][ C0] RSP: 002b:00007fdd0a15c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 676.330180][ C0] RAX: ffffffffffffffda RBX: 00007fdd095e5fa0 RCX: 00007fdd0938f749 [ 676.338190][ C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140 [ 676.346202][ C0] RBP: 00007fdd09413f91 R08: 0000000000000000 R09: 0000000000000000 [ 676.354200][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 676.362203][ C0] R13: 00007fdd095e6038 R14: 00007fdd095e5fa0 R15: 00007ffffca51e58 [ 676.370208][ C0] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 678.865932][T13769] Bluetooth: hci3: command 0x0406 tx timeout