last executing test programs: 20.787266246s ago: executing program 1 (id=2521): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990000000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1914d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) (fail_nth: 7) 20.178468676s ago: executing program 1 (id=2530): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001b40)={r2, 0x58, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f00000004c0)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000001a80)=[{&(0x7f0000001900)}, {&(0x7f0000001940)="0190de4d48eb548800d5015368cdcf0887b6538a37cb57869a7cf1a09a45296ab7ea09eb32423d69eede209650d29915abc14782987b0fdf905af070d416ec06d06c4545ef59f60a09f097b942adc21e814326283448955c67636f40fdf3205ba7a20e705d811da3f6b09cac952e03af78bfff358e1ed6b98606953edb8f215bbc13d61f884c77ba5fc2dee41eaa974abee95faf", 0x94}, {&(0x7f0000001a00)="216a8bb10da38c69c451d973a7a4ab4e76a662e1597f6200dba3134335580e4023594f8b282ff95368c90d1308404d605030312263a19fda58d8d4b9918f34c98c7bc985533a3b2218cbe5f2c4bfd7bf2328426bbce63653f6e1852d81a91697dfb33c9bc8d51fcfda7cf5ec377b01f3086d05", 0x73}], 0x3, &(0x7f0000001b80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @loopback, @private=0xa010102}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fff}}], 0x50}, 0x40) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6}, [@map_val={0x18, 0xa, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x3b}]}, &(0x7f0000001a40)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x20, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdc000000}, 0x94) 19.771624403s ago: executing program 1 (id=2523): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000100), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000180)=""/153, 0x99}], 0x1, &(0x7f0000000280)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x120) socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="13000000320081084e81f782db44b904021d08", 0x13}], 0x1}, 0x8000) 18.7715364s ago: executing program 1 (id=2533): socketpair(0x3f, 0x1, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x9, 0x5, 0x7, 0xc1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000500), 0x3f, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001880), 0x0, 0x1, r1}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x1, 0x2, 0x1, {0xa, 0x4e21, 0x100, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xed}}}, 0x80, &(0x7f0000000340)=[{&(0x7f00000001c0)="372f6494fd0a2bf1f66f15da6fe4a8de62388a6c1e8cf5c2f2b2603a5e0ba1091039cbc2411a029a886a510526ec50a4c3c834a91fbf1297c61b5a18ebd468032328cf4b24bf628b39b4a5ba07c626e83064e2131728db2311eeaafa9ac95c6049eb1a064fcd4996e421f54a8cdaf5399e706f712a1bdce8d102f06545825381b39ff50be9751dfba2d52f00d33898eb909101143990f120dbf621a818793ded28cc481970c9e7cb2c5c73ac5fd8305bc8ef65f3982c802b", 0xb8}, {&(0x7f0000000280)="e6224967885d5eb07503df996e6430c15d0526b69bc09293e1cf89b469e9ba29332e47239adb03a5026255d8597f841f0c687dd45e82f56aa5902e956d06bbc1d63ef6be749d205cb4", 0x49}], 0x2, &(0x7f0000000640)=ANY=[@ANYBLOB="28000000000000001401000080000000d8dbcb83a301e23f00f9b7ed07d4a8be7bf6d58213b4000030000000000000000c0100000f0000006ba6315283442f8c39b8672a68a49c5e380d4bf9c1a3ea5c18b90000000000003000000000000000090100000300000052016aff1baa9db8f45409d716559a6d913eecb3f0a5c0b92d28000000000000c000000000000000080100000500000004aa24a8392242307c795dd4ea59f9da157dd1adc69aa55700cf50813a30fb988c758bd87fdae029573b8bbf312f6a471f625afb0143416046ccc2dc00bfbc3bba58869806fdaca41ed09bd3d7919e07e8b9837324ab15a56667f9048cee453729e46386115189ba9a738012db1110acb235385e57ac99ff32a2fe186db90d90ce2ed3f3aecf965b70b5aa5be3ab5c01ebee8f1af662e0c997843f360d5e001b9bb2f69c3e17c5b49a0000000000000048000000000000000d0100000e000000963662cc4d769fe287a1d1fa691c034859064f0c67f2fdb3d519a4d382958ccc3c5d7560d4a121fc4883d0f1bff7651d709829cbab2f0000e0000000000000001401000000040000d8484dcecb9df854fab6f985ef6956d7be2703a8b4907fe4d46cccdfcec8f935d9f797d376c0bec2fdfe3e4d1cd185fd3190b4750a890156e3c8f0579eefa7b5043b45e68559fb8bca910b7d614bce8dd74467c10c69dab4f5da2bc8f7c221d9947521c000195ae51fbb87ae8e5d99c811483b97f9d7c58730c7bbe578c0a243aa959095282a544efed47f7d51cf2093612b8f15aa7745ea6858be94c68cdb50c2686efe907d2c13e45f499f051dd6fc4f2ec8469c3b33159cdb2d46d86bc7cb2f9d552afb11ba2f1c66320487000000700000000000000001000000080000005cff54efd4c19476ee7356c828c83ba9948e41f4de4a8fe59488c177d04e8d5b548e850bd5d040e9f43b2baeea2f26293cafceb594be574818e089e3c7b3171ab3bdce27df350ad5fc0810ab48d840ca374cffd4707b2c000681d2b83abdd2d8500000000000000019010000060000004be2b6e009a4acf49cbd45617605fd5071cd83d2394aa14b84be33b8366e6d272ef3d154a09984b9a0ffd4011a0552560dd3f5ab5a1235fb9d00000000000000"], 0x330}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0000000000000000400000ffffff7f00"], 0x50) r2 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0x0, 0x1ff}, 0xc) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="1400000017000b63d25a80648c2594f934a3c92b", 0x14}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x0, 0xfc, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x3, 0xfefffffffffffffe, 0x2, 0x401}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x23, &(0x7f0000000040), 0xcf) r4 = socket$kcm(0xf, 0x3, 0x2) recvmsg$kcm(r4, &(0x7f0000000140)={0x0, 0xfffffffffffffec7, 0x0}, 0x0) sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0xfffffeff, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="826d", 0x2}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x48000}, 0x0) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x9f, 0x1, 0x0, 0x0, 0x0, 0x400000300800, 0xe0145, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) recvmsg(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/24, 0x18}, {0x0}, {&(0x7f0000000540)=""/106, 0x6a}], 0x3, &(0x7f0000000300)=""/38, 0x26}, 0x2000) 18.463992885s ago: executing program 2 (id=2463): r0 = getpid() r1 = perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x8, 0x3, 0x8, 0x0, 0x8000, 0x44010, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000180), 0xa}, 0x100341, 0x2b, 0xda, 0x8, 0x2, 0x7, 0x3, 0x0, 0x7fff, 0x0, 0x3ff}, 0x0, 0xf, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x80, 0x8, 0x8, 0x8, 0x0, 0x3, 0x10001, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x2, 0x9}, 0x800, 0x8, 0x9, 0x1, 0x5, 0xff, 0x0, 0x0, 0x7fff, 0x0, 0xf0}, r0, 0x6, r1, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1a0c000000000099f354c9000000000000d67d38d29cf3142426d305c118000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x4, 0xfc, 0x4, 0x0, 0x0, 0x7, 0x9dd46, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10078, 0x100003, 0x3, 0xfe8d42e69ac4daf8, 0x7f, 0xffffffff, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, r5, 0x4}, 0x38) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r6, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) 18.447904805s ago: executing program 0 (id=2536): socket$kcm(0x2, 0x922000000001, 0x106) r0 = socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000e200000000611118"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x804, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext={0x1}, 0x20a0, 0x58, 0x80000000, 0x4, 0x2, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x6e8}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="180900000000000000000000ca00000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f0000000400), &(0x7f0000000500)}, 0x20) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) 18.282982078s ago: executing program 2 (id=2537): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0003000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400070404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r3, 0x0, 0x0}, 0x10) openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7000000000000007b5af8ff00000000bfa200000000000007020000d6ffffffb703000008000000b704000000000000850000001400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0xfffffed7, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000150081044e81f782db44b9040a11080211000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x10000000000001cd, 0x0, 0x0, 0x7400}, 0x20042080) 18.216804429s ago: executing program 3 (id=2538): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000006c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r2}, 0x10) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d7"], 0x10b8}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0xa, 0x1}, 0x20) socket$kcm(0xa, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c00050004c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 18.215509979s ago: executing program 0 (id=2539): r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x2}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x39}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x3, 0x0, &(0x7f0000000200)="63eced", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000000c0)="76389e147583ddd0569ba56a5cfd", 0x0, 0x7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x84, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/28], 0x48) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="e03f03003b000b05d25a802e8c6394f90324fc601000050008000900053582c104003e37000c0180fc0b1d00f80b", 0x2e}], 0x1}, 0x400c4) 18.12988596s ago: executing program 3 (id=2540): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) close(r0) 18.051658931s ago: executing program 2 (id=2541): ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x3) syz_clone(0x108000, 0x0, 0x0, 0x0, 0x0, 0x0) 17.941298503s ago: executing program 0 (id=2542): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000c00)=ANY=[@ANYRES8=r5, @ANYBLOB='>'], 0x12) recvmsg$kcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/86, 0x56}, {&(0x7f0000000200)=""/101, 0x65}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000000300)=""/80, 0x50}, {&(0x7f0000000440)=""/185, 0xb9}, {&(0x7f0000000500)=""/193, 0xc1}], 0x6, &(0x7f0000000680)=""/210, 0xd2}, 0x40012041) write$cgroup_subtree(r6, &(0x7f00000000c0)={[{0x2b, 'rdma'}]}, 0x6) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) 17.865348485s ago: executing program 2 (id=2543): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000300)=r1, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="39000000140081ae10003c000500018311001f9f660fcf066a05acb612f691f3bd3508abca1be6eeb89c44ebb3730800000000000000e92155", 0x39}], 0x1}, 0x0) 17.864523445s ago: executing program 3 (id=2544): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x200000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a0000000000000000", 0xd5}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 17.771444146s ago: executing program 1 (id=2545): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x2000000, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x0, 0x4, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x8808, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x4108, 0x3, 0x0, 0x6, 0x7, 0xffffffff, 0x802, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x19) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') syz_clone(0xab009500, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) r9 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r9, 0x0, 0x3, 0x0, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYRES8=r7, @ANYBLOB="3eca", @ANYRES8=r6], 0x9a) openat$cgroup_freezer_state(r8, &(0x7f0000000000), 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x10, 0x7, 0x0, 0xb81, 0x78d39, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xa, 0x0, @perf_config_ext={0xffffffffffffffff, 0x10}, 0x2, 0x100000000000003, 0x205, 0x0, 0x1, 0x5, 0x6, 0x0, 0x2, 0x0, 0x4a8}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1000000004000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000de1e2c9f288f28d3b60243457d0000000000e5ffffffffffffff00009f4f5d3400f119bd2bde995ede4ba1f9a607e267c0f6b8e11c20c7817574f1e68c8c7f7e1319eeb6589cd21f328f5cdaea659eb4f35dc50d71538bd0349290a88dfcf8a7dbeea927a96517ed80fc558bf33d1277d2a7974c28595181dc6c50b5d433468e5103463d44350b07858843813642f3b6978c5e892be055c4f588f55192f61381aa60e7e8f61ac7df85c2a7a43c2c700eeb3a5e6d790a64d73e83eafaf22ae57497988da8dbdc7e"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r10, &(0x7f00000001c0), &(0x7f0000000080)=""/45}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f0, &(0x7f0000000080)) 17.765599006s ago: executing program 0 (id=2546): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="040000000400000004000000050001"], 0x48) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() r5 = socket$kcm(0x2, 0x3, 0x84) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="00000000000000000200"/20, @ANYBLOB="a31e8b96d94df0b86113aa366684223828818b10c3c6d3e237bf3e177ab7f700407fd22832da7a70d6ad70258a6a6913b0e61d983a0d2f82856019deed27f333bddd1976fba2dfa9caeb274f88e88525bf9959af3b8804c2942f55210ba8402b50638ba46cb78247bb034ada7f5de107e0538c7ef18153e1a7490dd56fc593da6c09d001a750f8f6144ee2c5084508ef5489ba597e24c706890ca16270451420f3d63846b3b653f99a882e58c9954168ee7703457dd19a6b31556fab48e5db2bf4a2a0cc6c7ebd579f8d", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000094", @ANYRES16=r0], 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x890b, &(0x7f0000000100)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r4, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x4f, &(0x7f00000003c0)=[{}], 0x8, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x1a, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='cgroup.events\x00', 0x0, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0100000000000000000000004000000000000000c30d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000030000000500"/28], 0x50) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x25, 0x18}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x12, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1000}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}, @generic={0xf1, 0x9, 0x7, 0x80, 0x400}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x35}}, @generic={0x4, 0x4, 0x0, 0x1, 0x5}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x5}]}, &(0x7f0000000080)='GPL\x00', 0x36, 0x0, 0x0, 0x40f00, 0x18, '\x00', r7, 0x1c, r8, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0xe, 0xce, 0x3}, 0x10, 0x29773, r3, 0x1, &(0x7f00000009c0)=[r6, r1, r1, r9, r10, r1, r2, r1], &(0x7f0000000a00)=[{0x0, 0x1, 0x9, 0x3}], 0x10, 0x3ff}, 0x94) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r11, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) close(r1) 17.665123908s ago: executing program 2 (id=2547): socket$kcm(0x2, 0x922000000001, 0x106) r0 = socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000e200000000611118"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x804, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext={0x1}, 0x20a0, 0x58, 0x80000000, 0x4, 0x2, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x6e8}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="180900000000000000000000ca00000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f0000000400), &(0x7f0000000500)}, 0x20) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) 17.623105108s ago: executing program 3 (id=2548): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000006c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r2}, 0x10) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d7"], 0x10b8}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0xa, 0x1}, 0x20) socket$kcm(0xa, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c00050004c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 17.172724836s ago: executing program 3 (id=2549): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5, 0x4}, {0x10000002, 0x5}]}, 0x94) close(r1) r2 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0xff04}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x17, &(0x7f0000000000), 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000600000000000000020000007d03f4ff10b60000186b0000000000000000000006000000185100000700000000000000000000000972c2000700000084000000a500000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0xa02, 0x1000, &(0x7f0000000280)=""/4096, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x3, 0x5, 0x8, 0xb1d3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001600)={r6, 0x0, 0xf3, 0xc5, &(0x7f0000001280)="ad2e7fc9526e82cf99f907583ee786793685fa52b35a8410e4c1ac3f92fd13cce28636f9f19499523c871cdf94b9a5a91887e9d1cd8ade9c604e1bc4fd530999e42999348c4a5f128aa76b0fe5ef4eabb4e57a0c28fe8f7f64a1ca9c99b6e550c8909078b24f8191474864a7e628859a3ad702e4169a797eeaf1b87142a8cc3992bcebfe5aa2e6d82b615be8228b4695a9f942261d8b0a28e2ff143e0f0e1aa035043ccc15973754e59f4e17018714e19db1810e75fb3c84725eb5568e7d8feb0fa07a5daf01c4154213ea5373aaa8b4560ab55b8c9b53965535148f6efe46fdaa1ee51e96f187cc010130ac8a3a26cfabe3cd", &(0x7f0000001380)=""/197, 0x6021, 0x0, 0x98, 0x91, &(0x7f0000001480)="8787f075f48378f696554498e8fabefbb64060de9f02c983e3c1ac6672aaedaf9ace4cd1bda36cddb7ec7c79958bd76cf599ae625f54b3b04cca95096783a8e44b0aef296af19d4dabc333a7b1d98d7edffa4234e069be2808ada7df40a9b70ffce525f7fe7eec88475be4fc314874819c0ffdadf849ffda31fa7a80c1c2d86edee62347c9e1c18badfdd1734aa82122d59adb30bcbc2a42", &(0x7f0000001540)="a0d07441200c00966bb24e07300469206b98bcbb85ee63c69b3903239d7a5a8fef48e75e65d2c213a1cd6e6d56c9f9e9052103c8924d72e8905b1705b72329db07b68e8ddec8836cdcb62ade8f785169f25d3c332c1534a6ca9bdb18fa797d97a5a4771fe9db80dd2e1a165fc95e7266e373ba4be8a8a61b238afdf234784ae660524140248adb6b23b3051aaf5a1b1fc5", 0x2, 0x0, 0x2}, 0x50) r7 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x0, 0x11, 0x0, 0x0) 16.977897079s ago: executing program 2 (id=2550): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0x267f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.976201879s ago: executing program 0 (id=2558): socket$kcm(0x2, 0x922000000001, 0x106) r0 = socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000e200000000611118"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x804, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext={0x1}, 0x20a0, 0x58, 0x80000000, 0x4, 0x2, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x6e8}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="180900000000000000000000ca00000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) 16.558979706s ago: executing program 3 (id=2551): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="05000000030000000400000002"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000003d2626cba8ff7d32ed0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b80)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="050000001500000000000000146e9a0280e2ce878a312fca02496588ab055101846b90ea4d1f51279ecc50765b5fccbac92444ca6d8a84816f13c98e1c16ca4b76880b85f078ad7649766f8bd305bc1f072e27659898b59f5b880a80cd9e2f469630d6d94b2fa8256e", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f00000007c0)}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x3, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x1}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r5}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r4, &(0x7f0000000280), 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r6, &(0x7f0000000000), &(0x7f0000000040)=""/136}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000b40)={&(0x7f0000000900)="74a91e1aa835b8df5e01f365b7e5089e903a9629fce7fb46e88bc0ea2b0b972744c2dc88a1c38cbee8d74e9ea47a9480f66af4925a1a820136c368177138a8a56664a111959035bf993728b2de81d6565ac91618113440ff666861f71378d3f9a62931a33079517709eb58701507a7f13be622e918a8cfdbeabf775caf1dce3ae8b89db33b64f4e10a70864da328848a63ac75b1ee06beae7982de805eaa8827d66cdce89a9aa2fb1d634b56de7beb81b410c53ff53f8b9643f650ed0b9a28b700f7590da35d92c6a12d0848871a09dbecc36eaff8eee98fb435fa9f", &(0x7f0000000a00)=""/124, &(0x7f0000001380)="1a6052cfb2818729de120068ac1db478a6b8c972ac7f0e3f2f7f2e969935053166ee6c78c60643f3c0c6826bf99c8cec1a7eb6ea449040ec32256d173bb15a82304b5f590721641a04253bb0b9c51bbe96918b42d3fdd5a1c05b184987c402624a4200f8dcc7a543b88e9a88b0e32e7471153c10fdcbacb42853dee47bc7ff65c58bb8a41f249c85e18ff30f8691ec0e0bda8ae7f7564e9a5f384b43aff2e8141230c5fc9af720411f8c8425a1bf87e5852e04d98f1ced73ad2a31f2ee4930c3381078a6726baa3a485441e164e51f7f9bff9a4f95ffe24fa3886f7241dc80864facb76e6e7f1244f591607e63cfc162db0df10a1f4f1d6e15ea5d44c2584280c88cd3dfd2105e202a87c2bb00797dbbed4535c47b3217d76f50f389f8632b7e6210fe9096742e15984e2fd94017c724f79c114b81926906398888f07a92339116b76face0af430623bf2d1d42427cc8b763e775c5d9f0ce70b4896f565e689ddc698dba979a2cef36af8eb634da64ce4ed0bc683ab2a987012c218865248c4d8e1a4af5f05ccda019e039e6830c01968ec172b3ea07b05d6f0d9b8b36ca53c897ac9d17a5e02d9d3903b3dfc4a65ddda66c4b47fed1bb885991c52dcb082329f71abf3a99295416258bab0849481346db4945b9a6d9d30b315bcd14da0a0e5022cb78ecc79fea3abfb89017647cc3a36f68558749583e89a1a4af2fb94b875f161771e5ec29c0a3bcb912e1cf2505b732b693918d4c933da188324be3d7e65aa488dfd7bf9895622e4ecbdf0bac73f1bd584f8a27d96a7e03a4e95791400f21329bf9a31123c0724fc0a292cc6656a1400ea6583c94e43da69202a986e10b9629093399f74c03cee0711d368c0bd70f55a5db393aa5d95c6e644527eb3a0ccbbdba49826f7ea6694e83971a24f111a7cc45058f85304900c587f77497de8e32e1ee1a7ad54f22b483aabd54505189ea5a22ee70147b81eef8514d3aa3c709a71fa665270fa4147316f31a7510f97c953e332bbd0646dd7c69037027cf49aed8d293ed65de425eb59a256a53a6c6191a2bacb37042153a49730afc400a4d90d5d33465f07e699a5d1626ca50ee40310d8e1af00102d99d6ecdedac002bffe83dc8ab5d05fc3786db91e36a96300256825a3fd774d7a2e838eb9ec10cbc8b32c39d75c6be093a1e5f0f64224c2653a3ea2e23a618f32e92d55cac0564ea0ee71e2d13ee78699ab50fc4694e0223039cf8db5ecdafcc0e23721fd4fa1599b8893a1f543672ae68bb72aa9e3e863fb35e0468ce06cb15d884e0f1d77412ad5783275f3bf2e53fc9376dc0f3a439b714a64595c864e053c51d92690c1a13b3b9ef6653e7dc860a406ab89d8707821508965778db0fa0dab92b16a0387b7f9a9d460baf89281c1ad3e6f75da2eaf333d1df3d9a4547d86d8ea0cec336b0a01ef98fb0c6c8c4595070b3734d27e9c1e7672a37421e7c63c139f2f4efdb539659116928274e54892a56efc2fa79f5f5493e46c3860e6403dfd043b7365ff844a13f53794ed32b9f13c1dca7f17bb526897f2ea12cf3fc101747c4c004bf93db97aeb2b902a0099242b3d24e8f6e8dd48af0c619d5c1a57bc4fcd75697f6b432d90a5e4180bb358d48617152c1ebb405c10da946926ede5e4c18e6be1694f5d0c64ed490a0617117efd54ad3a09469417803f8c43605942e7a2306de00c29d2a1ac2aad04fc9625b2c5694fe048642a71e8ac8450b2f20162be49dd81de3aff3bc21d45312c25d7f1e81237a9a3852a070ab441250b419ae4c63d4ac7e541781d2c203c12bb5bf1c2890422379808a00f2a8e4e9d2b539d8d4d25eacc59b618d88f00f4adea7468c07d6ad09e70951638fd5a6a85b530b5ad007d359c66aa0c53ff7171857747342463d86dedca0b39e0bba597e2602436eb44e0b50b2edbcbf741a5502d691e37b7ab2a5dae6cf0f821bc9bb41d4f2a20b6cdf229f3b3c6fb9d4722d8ec533c7a2b34bd86939018de534308db88058300d2f309a5cf082f87091f4d147bc592de8986b78f62338e01c23693903b4467a654681aba67fa6f9534f5f2226d7247efec82f32ca474ec5c12eb7bb862f1d792e6950c9b3d3ff9bdc5fa8c5e79942a2cf7fe75748765b69eea61b253c21188d7257a26114510f4afff8f4d3a34e439a587784d095a0238ecf9678089989909513e24523ab2f93943dbae10e37d1af3b44193f8afc33cd1d76961e488725ee47214532ed4e416388eb01d6e05631846f252eb6ff30fbb05ed3961e34b15e9e4de1d0e70b49148d41d1989b6a2046ea5b94df68c159779cafa3279f52972153f4a5b56ca695b63965689385f1e38f297ccc615ca21c193132b8f71a36b49c2937a673f7030ec831462e2587a9dc8babf744ce0cd88bd8a6a981f0c095fd3ab969442f5c2b7db5b71478cbd6233ba3bdd9bd1919cf3a150d7b83441579f7e77da043fba085cac1fc809ecc8df83b4265abc190dba28b9e87055dea09ef585678a0eee765a66ddc6c2c2f3d7aabc59e93307d47a27602a9ba50c303f1b809a9e371147c7e63d0573d4ea89241495763ecebc16a77442732723ab3c882271a67f2c66729b618a7e0e2c0d9986a725a49836d66a268ad88869403f99745e9310b4b32bc8903637d851332309699df60661ebb7571130a85c99f8d337a7c853dd580c330663d1486f4d829379436e9303e68dffb7c62768d9e079df53e3a2e4d369a834cd434b56987b9f671b00f338e29106b7ee4f9d5e0af7bcf51e97e05cfdecf1aac92da5c8a7994661d9c46c36c8e1e34e3f6d537124dc5392f418617f72e46c8459d3bb80b7684c74ff672a43f2bae20538ed309bfcc4ee2b5cf594578937272daf12a37930e96f89651bb50abb18460395a605cc9a6bc894f99777e600b19f877fef349f6a9a20e9f232517902e28e23a44af48ab1f1dff7d604dc77875dc1a5512342a1726cd4f9a5b8e6ac15c09c1454e80fe8e0349d167f4bda69372d7f6c508047dfe97d093fbed6be93874a5a3aa415a9804a113e2c9a99e3369f0fb319dbb94be3a185edc471488b456ec11c4dc6ff13a4754114fc056dcbe0f1f8689252e69b1b8f126f39ecb1f9060d1a5c0b203d365b11ae68d8c8fe5c0912c77f23c65f042ea6df04d67ed549e4cb93963f9145334d32628388dbceedde4bf83c3e9509c6aed4cb32ecdb53269a720ab122aa24058d23da93dbf692d2740686255934b92e2d2f1127d073d7835d1248bb641e7c9b61039b718e957e7b98a641ac8909585de1180ba345426bdb3221de5d61290ce2d5e04242652b59c1dff0dce6cdddbca7a0aa7a0bccb0a59880add209dab30b4bfc99e2b2b39a34ae6c139fdf8a9aaf4eedafb2f790ee2a0824527a3543e677f0727b8e79396eca574931be6ba2028a42af041efbc740af3f59655dcbd9c15ffbcf0ad5311a5ca3ba21b48b278ee9387991a2a14ebe72ac83607938cec2c8edbf2374cf4208be4b4509bab04624ab66751eac44d1723266f4627afe8ec634f6f750c89fb23c7e4729174cd7c69ca3729da29ac5060ccc4a51f1c4c9e7e404cc72a09f5eaa96c07e380a041a4f8e75f57a9e08b331aeece9dbb5051d4e0398d2072914ec1646686434813a03e37481c43542fa5a0d4b42f1a5348a999febe66cd982bd7baea75da3eb4e268e62a744d49daa4e3cb731dc459db48ae2e22fbb1e489465889558b2450d21c7c4ffb8fd56748ce6097c27cf5f4f697459a36520906be9497847f138660018e5e201a5331b075b0c9c687b6bc0435a2bbfe21fecf714f4a0d406d1cc2d26c6b727031cfd03f16e2befced6d3335fcff2409f7c76e92169c64fb7ce0a5d15ca9df8951f5300cd98908e0ef0df6ceecc5414faea3a44e6bf2fda716c1c159d93722e186a7f80eaa8d6b6642385098c97e859259d8bb71712f3afc11b7a982b53ea2d5c4adaafd7f1b30e889748c984451450257fbbac408c3c719c0aad48e2ee8c743114529d00adf829b2952ba2590024d04374b9c50177b58dd2d91a30cff12cb6d824e5bd1bae4df0587a0a844e5d58d7b11ccb4a61b174d218add4aeb9a44aa03c26d8d94b77b59d59192045a21f6a73290e2598c78818579801a63ae7e5bb20d2bccd8e8183f4fcbd9a6d039821e733532aa215f0f79d4f0193d53d904437127dcfcc8497bf7eac90c77764adc498b0f1b62849009b50ee93691b819f636fc1cb2a2bc5c6d11ccdd0a5e812816844c33c8b974383392709c77dcb36a6108acfc6fd647ce3fade2b91c20b5b7f02e13e07e9ba7b4ff57e07d0b0d74f2b31130fe80ed5f548c9b4326e33b80df8a48cb8f0252889c34cc1050736d29dc34ef55a74c0d630cafcd10df3ce71a1ab5ded0b4a760b59edd94daa5630dc44c995d7fb6ce6e757779c3ccb9aaf237c2284cb14aadce1686daafce88728f8428e42779856270245e87a74b680f587b063ceb188b3d4f8eff25053cbe3c17d64c6ec234df7bac26adbb1d215a2eaf34b6f727f4b1cc91997014eff93a41b4e4851cea059ea980f4fc04f244480ddd962f21b27293228de15290d481405531c748675899879ef1cacc5e6a4dd0662b85aeb13cd1326fbca97af104964cf190bf82b674a46687fa6ae9e8fd58f85333e0e90d1d06cdfa3e4796194cee4fd6def22122629f45b04edbbe97be53ceeb3f4271f1d81b28c6ef7f75f1f097c007880cdc896ad21d85335f62253dad005e693c16a2753e034bf05bceffad7527a0fe41f351d8c0565c9f6f5f2c48fa1ddeb3a58eca1ff0d88f89e0e6a6b4c0dd715375ec01cb2275f757cb95a20b9858fdfe28c87a2a29d1811d352d224ec00c12e3e6aaee042e2ad0662099dea7a16510f63c664ebbc66c2a17fd3e2814fa4febd1bc34c9c294760028635455f3f581daeaf8ca5aa965166b5e260f145213ce2658c93174cbb63400af2198cde9a912d3598be93e0f8b2a69f87d424ee4e3cdeac9da040a6349fcff47a5c1b940d06ff3c1ca41a12aaad711a9597963bded7235a70ce52c7e45e2c9c388c28e0316fac74c29ce6aae72bba734dfe474a5a78a60a35838a8edf5cecb824bec87becea11f88b02260d59d9ad6fa6b92f496da24dc11d49d1f4e72add992bf9a7ce167914755b6312265b93ef103546eb70dc6052a53a6599ffb1e70c6efde6d81eadba318f133ff35cc5b24c880f40062b35b0bc526db5cb7d0d276dee429e4fa332dfdf42cfe9c88bfb8d58a8605fd2db84d0572d543d5c3cd7294db9f8e7601f5cea5422394e5807a0c424516af3e03237c67115e12ddf1d42fc88790bdaeb65fba2327a15e061c8d56f3848faf479d09a8e629a9a6faab73ee06d790a5395f703e127d1f80d12cfe14168e98b7b9b1b37b1123d747e62ca6c9545705a55e6ca706fb4fccd72d979e126770aa1618960f436b2b8f959127043511ac71013d4fc1760db5e5520a747920648b74fd3df01e0bc032de0a6797053c259540e4538f4d8e2d58bdfae2ba261b6cec2129d8e76a313d6f3977d993c1aa698dcdc2eb2c0bdbb1456cc49832bb23e45f4565d05e18aae22c25cebd6907e9e15728e3193e0fb3ba75013d7dd2f5d31d673ab328916f5acefc35204f7549161575f9e5314627d52cb918630df5b3a6021ebc86352bc1d23ff8b71095b1a2f0049a11ab52499b7c796639268d081ba5b1e5bcbddffc776ccd070e4b4d0a4bb72759a4288def3f6fb8dd660ff5b671e0191dd4cece4e5ac02ae33a534994c175143ff1ec0cada63555fb1ca2a19092", &(0x7f0000000a80)="7e14b9b080762c5319fd4bf94ed313179242e302402116c5b778d3a0b22f9f092ab45022338f60d790e95c6ebe751fab3036b77ec08efe82fc20ab9241dc4dceeeba47117cbfc4d464a22761ff08e53074e3b7dcfe64f88a9908e287057c529d6cb13690d4953b549ea56c852789ee67ab31ec8f2dbaca6add472f9207a2bfdbc2bad8b0183490cb499f5ccb44a3adb026d52f0af801a124b26642b42e880818c9689d3e0c2d007f5f72030913246cf1fc29", 0x8, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f00000001c0), &(0x7f0000000340)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$kcm(0x10, 0x5, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/225, 0xe1}, {&(0x7f0000000600)=""/182, 0xb6}, {&(0x7f00000006c0)=""/233, 0xe9}], 0x3, &(0x7f00000007c0)=[@rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}, 0x100) recvmsg(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000240)=""/251, 0xfb}, {&(0x7f0000002ac0)=""/4095, 0xfff}], 0x2}, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000cb0046000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r11, 0x1, 0x2a, &(0x7f0000000100)=r13, 0x4) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f0000000040)='GPL\x00'}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)={@map=r10, r14, 0x11}, 0x20) sendmsg$unix(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="a50c30816bdf4d6d9ec245a40cf4258217773a890d0d732a7b6d96ed1af02a2b06faf0a80bfb74a093eae49d1e782dfcfc0dbdf367e1a9e7b77e04d69173e0db2ea74af6d82b0edce4f12845576015287683f04cfdcd90519e2b280b683da4e34ec5c5a55f8b9bc6b86bacfbc0c575c182b95cf7a82e23b2b4", 0x79}], 0x1, 0x0, 0x0, 0x4000051}, 0x204c808) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xd0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x4610, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x1, @perf_config_ext={0x5, 0x80000000000006}, 0x0, 0x0, 0x0, 0x6, 0xc, 0x2, 0x64, 0x0, 0x0, 0x0, 0xfffffffffbffffff}, 0x0, 0x1, r9, 0x0) 16.479224637s ago: executing program 1 (id=2552): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0xca, 0x0, 0x0, 0x8, 0xfffffffc, 0x0, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x6, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x80, 0x0, 0x4, 0x0, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b35d25a806c8c6f94f90c24fc60", 0x14}], 0x1}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x108) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff15661aaa50e7369dfbac141416e000004062079f4b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$sock(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0], 0x0}, 0x94) close(r9) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000000)=r10, 0x4) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0x18, 0x0, 0x2) 16.471273507s ago: executing program 0 (id=2553): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) close(r0) 1.676618242s ago: executing program 32 (id=2550): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0x267f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 703.724998ms ago: executing program 33 (id=2553): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) close(r0) 384.499544ms ago: executing program 34 (id=2552): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0xca, 0x0, 0x0, 0x8, 0xfffffffc, 0x0, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x6, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x80, 0x0, 0x4, 0x0, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b35d25a806c8c6f94f90c24fc60", 0x14}], 0x1}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x108) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff15661aaa50e7369dfbac141416e000004062079f4b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$sock(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0], 0x0}, 0x94) close(r9) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000000)=r10, 0x4) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0x18, 0x0, 0x2) 0s ago: executing program 35 (id=2551): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="05000000030000000400000002"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000003d2626cba8ff7d32ed0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b80)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="050000001500000000000000146e9a0280e2ce878a312fca02496588ab055101846b90ea4d1f51279ecc50765b5fccbac92444ca6d8a84816f13c98e1c16ca4b76880b85f078ad7649766f8bd305bc1f072e27659898b59f5b880a80cd9e2f469630d6d94b2fa8256e", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f00000007c0)}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x3, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x1}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r5}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r4, &(0x7f0000000280), 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r6, &(0x7f0000000000), &(0x7f0000000040)=""/136}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000b40)={&(0x7f0000000900)="74a91e1aa835b8df5e01f365b7e5089e903a9629fce7fb46e88bc0ea2b0b972744c2dc88a1c38cbee8d74e9ea47a9480f66af4925a1a820136c368177138a8a56664a111959035bf993728b2de81d6565ac91618113440ff666861f71378d3f9a62931a33079517709eb58701507a7f13be622e918a8cfdbeabf775caf1dce3ae8b89db33b64f4e10a70864da328848a63ac75b1ee06beae7982de805eaa8827d66cdce89a9aa2fb1d634b56de7beb81b410c53ff53f8b9643f650ed0b9a28b700f7590da35d92c6a12d0848871a09dbecc36eaff8eee98fb435fa9f", &(0x7f0000000a00)=""/124, &(0x7f0000001380)="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", &(0x7f0000000a80)="7e14b9b080762c5319fd4bf94ed313179242e302402116c5b778d3a0b22f9f092ab45022338f60d790e95c6ebe751fab3036b77ec08efe82fc20ab9241dc4dceeeba47117cbfc4d464a22761ff08e53074e3b7dcfe64f88a9908e287057c529d6cb13690d4953b549ea56c852789ee67ab31ec8f2dbaca6add472f9207a2bfdbc2bad8b0183490cb499f5ccb44a3adb026d52f0af801a124b26642b42e880818c9689d3e0c2d007f5f72030913246cf1fc29", 0x8, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f00000001c0), &(0x7f0000000340)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$kcm(0x10, 0x5, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/225, 0xe1}, {&(0x7f0000000600)=""/182, 0xb6}, {&(0x7f00000006c0)=""/233, 0xe9}], 0x3, &(0x7f00000007c0)=[@rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}, 0x100) recvmsg(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000240)=""/251, 0xfb}, {&(0x7f0000002ac0)=""/4095, 0xfff}], 0x2}, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000cb0046000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r11, 0x1, 0x2a, &(0x7f0000000100)=r13, 0x4) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f0000000040)='GPL\x00'}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)={@map=r10, r14, 0x11}, 0x20) sendmsg$unix(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="a50c30816bdf4d6d9ec245a40cf4258217773a890d0d732a7b6d96ed1af02a2b06faf0a80bfb74a093eae49d1e782dfcfc0dbdf367e1a9e7b77e04d69173e0db2ea74af6d82b0edce4f12845576015287683f04cfdcd90519e2b280b683da4e34ec5c5a55f8b9bc6b86bacfbc0c575c182b95cf7a82e23b2b4", 0x79}], 0x1, 0x0, 0x0, 0x4000051}, 0x204c808) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xd0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x4610, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x1, @perf_config_ext={0x5, 0x80000000000006}, 0x0, 0x0, 0x0, 0x6, 0xc, 0x2, 0x64, 0x0, 0x0, 0x0, 0xfffffffffbffffff}, 0x0, 0x1, r9, 0x0) kernel console output (not intermixed with test programs): vl+0x16c/0x230 [ 337.437440][T10959] ? show_regs_print_info+0x20/0x20 [ 337.442700][T10959] ? load_image+0x3b0/0x3b0 [ 337.447282][T10959] ? __might_sleep+0xe0/0xe0 [ 337.451930][T10959] ? __lock_acquire+0x7c80/0x7c80 [ 337.457019][T10959] should_fail_ex+0x39d/0x4d0 [ 337.461779][T10959] should_failslab+0x9/0x20 [ 337.466353][T10959] slab_pre_alloc_hook+0x59/0x310 [ 337.471443][T10959] ? kvmalloc_node+0x70/0x180 [ 337.476179][T10959] ? kvmalloc_node+0x70/0x180 [ 337.480918][T10959] __kmem_cache_alloc_node+0x53/0x260 [ 337.486358][T10959] ? kvmalloc_node+0x70/0x180 [ 337.491093][T10959] __kmalloc_node+0xa4/0x230 [ 337.495759][T10959] kvmalloc_node+0x70/0x180 [ 337.500331][T10959] page_pool_create+0x1f7/0x5e0 [ 337.505246][T10959] bpf_test_run_xdp_live+0x1c1/0x1a20 [ 337.510686][T10959] ? 0xffffffffa0004740 [ 337.514908][T10959] ? bpf_dispatcher_change_prog+0xa76/0xcc0 [ 337.520869][T10959] ? __sys_bpf+0x440/0x800 [ 337.525323][T10959] ? __x64_sys_bpf+0x7c/0x90 [ 337.529933][T10959] ? do_syscall_64+0x55/0xb0 [ 337.534552][T10959] ? xdp_convert_md_to_buff+0x330/0x330 [ 337.540152][T10959] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 337.546420][T10959] ? _copy_from_user+0xa5/0xe0 [ 337.551205][T10959] ? bpf_test_init+0x134/0x150 [ 337.555992][T10959] ? xdp_convert_md_to_buff+0x5b/0x330 [ 337.561479][T10959] bpf_prog_test_run_xdp+0x76c/0xfa0 [ 337.566803][T10959] ? dev_put+0x80/0x80 [ 337.570912][T10959] ? dev_put+0x80/0x80 [ 337.575010][T10959] bpf_prog_test_run+0x321/0x390 [ 337.579972][T10959] __sys_bpf+0x440/0x800 [ 337.584240][T10959] ? bpf_link_show_fdinfo+0x350/0x350 [ 337.589641][T10959] ? lock_chain_count+0x20/0x20 [ 337.594523][T10959] __x64_sys_bpf+0x7c/0x90 [ 337.598961][T10959] do_syscall_64+0x55/0xb0 [ 337.603398][T10959] ? clear_bhb_loop+0x40/0x90 [ 337.608087][T10959] ? clear_bhb_loop+0x40/0x90 [ 337.612780][T10959] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 337.618706][T10959] RIP: 0033:0x7f26bd18e9a9 [ 337.623139][T10959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.642767][T10959] RSP: 002b:00007f26bdfec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 337.651219][T10959] RAX: ffffffffffffffda RBX: 00007f26bd3b5fa0 RCX: 00007f26bd18e9a9 [ 337.659210][T10959] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 337.667198][T10959] RBP: 00007f26bdfec090 R08: 0000000000000000 R09: 0000000000000000 [ 337.675190][T10959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.683180][T10959] R13: 0000000000000000 R14: 00007f26bd3b5fa0 R15: 00007ffc78b61368 [ 337.691186][T10959] [ 337.736704][T10963] __nla_validate_parse: 2 callbacks suppressed [ 337.736724][T10963] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1921'. [ 337.795713][T10959] page_pool_create() gave up with errno -12 [ 337.930647][T10961] netlink: 'syz.1.1920': attribute type 10 has an invalid length. [ 337.949124][T10961] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1920'. [ 337.975385][T10961] ipvlan1: entered promiscuous mode [ 337.984272][T10961] ipvlan1: entered allmulticast mode [ 337.996900][T10961] veth0_vlan: entered allmulticast mode [ 338.036906][T10961] bridge0: port 3(ipvlan1) entered blocking state [ 338.057845][T10961] bridge0: port 3(ipvlan1) entered disabled state [ 338.075931][T10961] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 338.095867][T10970] netlink: 'syz.3.1922': attribute type 10 has an invalid length. [ 338.140256][T10974] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1924'. [ 338.250538][T10977] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1926'. [ 338.270707][T10977] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1926'. [ 338.354549][T10980] netlink: 'syz.3.1927': attribute type 10 has an invalid length. [ 338.497086][T10990] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1930'. [ 338.652769][T10997] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1933'. [ 338.689844][T10999] netlink: 'syz.3.1934': attribute type 3 has an invalid length. [ 338.700798][T10999] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1934'. [ 338.709928][T10999] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 338.851811][T11001] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1935'. [ 339.394485][T11003] netlink: 'syz.1.1936': attribute type 10 has an invalid length. [ 339.473339][T11005] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1938'. [ 339.533940][T11009] netlink: 'syz.2.1939': attribute type 10 has an invalid length. [ 339.924731][T11029] FAULT_INJECTION: forcing a failure. [ 339.924731][T11029] name failslab, interval 1, probability 0, space 0, times 0 [ 339.942852][T11029] CPU: 0 PID: 11029 Comm: syz.2.1947 Not tainted 6.6.100-syzkaller #0 [ 339.951102][T11029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 339.961222][T11029] Call Trace: [ 339.964561][T11029] [ 339.967549][T11029] dump_stack_lvl+0x16c/0x230 [ 339.972302][T11029] ? show_regs_print_info+0x20/0x20 [ 339.977569][T11029] ? load_image+0x3b0/0x3b0 [ 339.982162][T11029] ? __might_sleep+0xe0/0xe0 [ 339.986833][T11029] ? __lock_acquire+0x7c80/0x7c80 [ 339.991948][T11029] should_fail_ex+0x39d/0x4d0 [ 339.996754][T11029] should_failslab+0x9/0x20 [ 340.001336][T11029] slab_pre_alloc_hook+0x59/0x310 [ 340.006450][T11029] kmem_cache_alloc_lru+0x4d/0x2e0 [ 340.011628][T11029] ? __d_alloc+0x31/0x730 [ 340.016030][T11029] __d_alloc+0x31/0x730 [ 340.020255][T11029] ? idr_preload_end+0xe4/0x200 [ 340.025179][T11029] d_alloc_pseudo+0x1d/0x70 [ 340.029755][T11029] alloc_file_pseudo+0xcc/0x200 [ 340.034692][T11029] ? alloc_empty_backing_file+0xe0/0xe0 [ 340.040308][T11029] ? __lock_acquire+0x7c80/0x7c80 [ 340.045363][T11029] ? __local_bh_enable_ip+0x12e/0x1c0 [ 340.050758][T11029] ? _local_bh_enable+0xa0/0xa0 [ 340.055643][T11029] anon_inode_getfile+0xc5/0x1a0 [ 340.060625][T11029] bpf_link_prime+0xa6/0x1d0 [ 340.065241][T11029] bpf_raw_tp_link_attach+0x33c/0x560 [ 340.070652][T11029] ? bpf_insn_prepare_dump+0x840/0x840 [ 340.076173][T11029] bpf_raw_tracepoint_open+0x197/0x210 [ 340.081663][T11029] __sys_bpf+0x364/0x800 [ 340.085939][T11029] ? bpf_link_show_fdinfo+0x350/0x350 [ 340.091375][T11029] ? lock_chain_count+0x20/0x20 [ 340.096282][T11029] __x64_sys_bpf+0x7c/0x90 [ 340.100750][T11029] do_syscall_64+0x55/0xb0 [ 340.105220][T11029] ? clear_bhb_loop+0x40/0x90 [ 340.109925][T11029] ? clear_bhb_loop+0x40/0x90 [ 340.114628][T11029] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 340.120561][T11029] RIP: 0033:0x7f7fd138e9a9 [ 340.125003][T11029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.144662][T11029] RSP: 002b:00007f7fd216f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 340.153109][T11029] RAX: ffffffffffffffda RBX: 00007f7fd15b5fa0 RCX: 00007f7fd138e9a9 [ 340.161115][T11029] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000011 [ 340.169114][T11029] RBP: 00007f7fd216f090 R08: 0000000000000000 R09: 0000000000000000 [ 340.177108][T11029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.185121][T11029] R13: 0000000000000000 R14: 00007f7fd15b5fa0 R15: 00007ffcdacc03f8 [ 340.193265][T11029] [ 341.925588][T11031] netlink: 'syz.2.1948': attribute type 10 has an invalid length. [ 341.937590][T11036] netlink: 'syz.3.1950': attribute type 12 has an invalid length. [ 342.059560][T11039] netlink: 'syz.0.1951': attribute type 10 has an invalid length. [ 342.211691][T11053] FAULT_INJECTION: forcing a failure. [ 342.211691][T11053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.247696][T11053] CPU: 0 PID: 11053 Comm: syz.1.1953 Not tainted 6.6.100-syzkaller #0 [ 342.255937][T11053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 342.266047][T11053] Call Trace: [ 342.269375][T11053] [ 342.272341][T11053] dump_stack_lvl+0x16c/0x230 [ 342.277075][T11053] ? show_regs_print_info+0x20/0x20 [ 342.282318][T11053] ? load_image+0x3b0/0x3b0 [ 342.286882][T11053] ? __lock_acquire+0x7c80/0x7c80 [ 342.291961][T11053] ? snprintf+0xdb/0x120 [ 342.296286][T11053] should_fail_ex+0x39d/0x4d0 [ 342.301022][T11053] _copy_to_user+0x2f/0xa0 [ 342.305488][T11053] simple_read_from_buffer+0xe7/0x150 [ 342.310928][T11053] proc_fail_nth_read+0x1e3/0x250 [ 342.316008][T11053] ? proc_fault_inject_write+0x340/0x340 [ 342.321697][T11053] ? fsnotify_perm+0x271/0x5e0 [ 342.326525][T11053] ? proc_fault_inject_write+0x340/0x340 [ 342.332211][T11053] vfs_read+0x27e/0x920 [ 342.336429][T11053] ? kernel_read+0x1e0/0x1e0 [ 342.341081][T11053] ? __fget_files+0x28/0x4d0 [ 342.345722][T11053] ? __fget_files+0x44a/0x4d0 [ 342.350460][T11053] ? __fdget_pos+0x2a3/0x330 [ 342.355117][T11053] ? ksys_read+0x75/0x250 [ 342.359512][T11053] ksys_read+0x147/0x250 [ 342.363812][T11053] ? vfs_write+0x940/0x940 [ 342.368287][T11053] ? lockdep_hardirqs_on+0x98/0x150 [ 342.373545][T11053] do_syscall_64+0x55/0xb0 [ 342.378006][T11053] ? clear_bhb_loop+0x40/0x90 [ 342.382724][T11053] ? clear_bhb_loop+0x40/0x90 [ 342.387449][T11053] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 342.393406][T11053] RIP: 0033:0x7f517238d3bc [ 342.397864][T11053] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 342.417531][T11053] RSP: 002b:00007f5173225030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 342.426000][T11053] RAX: ffffffffffffffda RBX: 00007f51725b6080 RCX: 00007f517238d3bc [ 342.434017][T11053] RDX: 000000000000000f RSI: 00007f51732250a0 RDI: 0000000000000006 [ 342.442036][T11053] RBP: 00007f5173225090 R08: 0000000000000000 R09: 0000000000000000 [ 342.450056][T11053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.458068][T11053] R13: 0000000000000001 R14: 00007f51725b6080 R15: 00007fff7370f658 [ 342.466108][T11053] [ 343.351181][T11066] __nla_validate_parse: 9 callbacks suppressed [ 343.351202][T11066] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1959'. [ 344.758603][T11070] netlink: 'syz.2.1961': attribute type 10 has an invalid length. [ 344.874636][T11072] netlink: 'syz.3.1962': attribute type 3 has an invalid length. [ 344.891062][T11072] netlink: 'syz.3.1962': attribute type 4 has an invalid length. [ 344.905133][T11072] netlink: 'syz.3.1962': attribute type 7 has an invalid length. [ 344.923091][T11072] netlink: 'syz.3.1962': attribute type 8 has an invalid length. [ 344.931828][T11074] netlink: 'syz.0.1963': attribute type 10 has an invalid length. [ 344.940772][T11072] netlink: 'syz.3.1962': attribute type 7 has an invalid length. [ 344.954328][T11072] netlink: 198048 bytes leftover after parsing attributes in process `syz.3.1962'. [ 344.972014][T11078] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1965'. [ 345.385603][T11094] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1971'. [ 345.520688][T11096] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1972'. [ 346.110409][T11102] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1974'. [ 346.675212][T11124] FAULT_INJECTION: forcing a failure. [ 346.675212][T11124] name failslab, interval 1, probability 0, space 0, times 0 [ 346.704693][T11124] CPU: 0 PID: 11124 Comm: syz.0.1981 Not tainted 6.6.100-syzkaller #0 [ 346.712940][T11124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 346.723049][T11124] Call Trace: [ 346.726377][T11124] [ 346.729349][T11124] dump_stack_lvl+0x16c/0x230 [ 346.734093][T11124] ? show_regs_print_info+0x20/0x20 [ 346.739365][T11124] ? load_image+0x3b0/0x3b0 [ 346.743939][T11124] ? __might_sleep+0xe0/0xe0 [ 346.748584][T11124] ? __lock_acquire+0x7c80/0x7c80 [ 346.753664][T11124] ? mark_lock+0x94/0x320 [ 346.758059][T11124] should_fail_ex+0x39d/0x4d0 [ 346.762804][T11124] should_failslab+0x9/0x20 [ 346.767357][T11124] slab_pre_alloc_hook+0x59/0x310 [ 346.772439][T11124] ? __get_vm_area_node+0x125/0x370 [ 346.777692][T11124] __kmem_cache_alloc_node+0x53/0x260 [ 346.783129][T11124] ? __get_vm_area_node+0x125/0x370 [ 346.788380][T11124] kmalloc_node_trace+0x26/0xe0 [ 346.793300][T11124] __get_vm_area_node+0x125/0x370 [ 346.798387][T11124] __vmalloc_node_range+0x36e/0x1320 [ 346.803733][T11124] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 346.809339][T11124] ? mark_lock+0x94/0x320 [ 346.813730][T11124] ? __lock_acquire+0x1334/0x7c80 [ 346.818909][T11124] ? verify_lock_unused+0x140/0x140 [ 346.824168][T11124] ? free_vm_area+0x50/0x50 [ 346.828720][T11124] ? end_current_label_crit_section+0x170/0x170 [ 346.835025][T11124] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 346.840620][T11124] __vmalloc+0x7a/0x90 [ 346.844740][T11124] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 346.850334][T11124] bpf_prog_alloc_no_stats+0x47/0x440 [ 346.855762][T11124] ? bpf_prog_alloc+0x2b/0x1b0 [ 346.860593][T11124] bpf_prog_alloc+0x3d/0x1b0 [ 346.865246][T11124] bpf_prog_load+0x6b8/0x16d0 [ 346.869996][T11124] ? map_freeze+0x420/0x420 [ 346.874580][T11124] ? __might_fault+0xaa/0x120 [ 346.879303][T11124] ? __lock_acquire+0x7c80/0x7c80 [ 346.884373][T11124] ? file_end_write+0x159/0x250 [ 346.889280][T11124] ? __might_fault+0xaa/0x120 [ 346.894008][T11124] ? __might_fault+0xc6/0x120 [ 346.898732][T11124] ? __might_fault+0xaa/0x120 [ 346.901438][T11134] FAULT_INJECTION: forcing a failure. [ 346.901438][T11134] name failslab, interval 1, probability 0, space 0, times 0 [ 346.903438][T11124] ? bpf_lsm_bpf+0x9/0x10 [ 346.903471][T11124] ? security_bpf+0x7e/0xa0 [ 346.924939][T11124] __sys_bpf+0x55a/0x800 [ 346.929233][T11124] ? bpf_link_show_fdinfo+0x350/0x350 [ 346.934643][T11124] ? lock_chain_count+0x20/0x20 [ 346.939536][T11124] __x64_sys_bpf+0x7c/0x90 [ 346.944066][T11124] do_syscall_64+0x55/0xb0 [ 346.948513][T11124] ? clear_bhb_loop+0x40/0x90 [ 346.953218][T11124] ? clear_bhb_loop+0x40/0x90 [ 346.957922][T11124] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 346.963868][T11124] RIP: 0033:0x7f26bd18e9a9 [ 346.968320][T11124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.987965][T11124] RSP: 002b:00007f26bdfec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 346.996436][T11124] RAX: ffffffffffffffda RBX: 00007f26bd3b5fa0 RCX: 00007f26bd18e9a9 [ 347.004455][T11124] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 347.012478][T11124] RBP: 00007f26bdfec090 R08: 0000000000000000 R09: 0000000000000000 [ 347.020493][T11124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.028506][T11124] R13: 0000000000000000 R14: 00007f26bd3b5fa0 R15: 00007ffc78b61368 [ 347.036534][T11124] [ 347.039592][T11134] CPU: 1 PID: 11134 Comm: syz.2.1985 Not tainted 6.6.100-syzkaller #0 [ 347.047795][T11134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 347.048543][T11124] syz.0.1981: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 347.057892][T11134] Call Trace: [ 347.057907][T11134] [ 347.057917][T11134] dump_stack_lvl+0x16c/0x230 [ 347.057951][T11134] ? show_regs_print_info+0x20/0x20 [ 347.071816][T11124] ,cpuset= [ 347.075057][T11134] ? load_image+0x3b0/0x3b0 [ 347.078043][T11124] syz0 [ 347.082681][T11134] ? __might_sleep+0xe0/0xe0 [ 347.082714][T11134] ? __lock_acquire+0x7c80/0x7c80 [ 347.088772][T11124] ,mems_allowed=0-1 [ 347.091200][T11134] ? mark_lock+0x94/0x320 [ 347.095702][T11124] [ 347.098379][T11134] should_fail_ex+0x39d/0x4d0 [ 347.098417][T11134] should_failslab+0x9/0x20 [ 347.098446][T11134] slab_pre_alloc_hook+0x59/0x310 [ 347.132825][T11134] ? __get_vm_area_node+0x125/0x370 [ 347.138070][T11134] __kmem_cache_alloc_node+0x53/0x260 [ 347.143574][T11134] ? __get_vm_area_node+0x125/0x370 [ 347.148811][T11134] kmalloc_node_trace+0x26/0xe0 [ 347.153691][T11134] __get_vm_area_node+0x125/0x370 [ 347.158751][T11134] __vmalloc_node_range+0x36e/0x1320 [ 347.164064][T11134] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 347.169630][T11134] ? mark_lock+0x94/0x320 [ 347.173981][T11134] ? __lock_acquire+0x1334/0x7c80 [ 347.179040][T11134] ? verify_lock_unused+0x140/0x140 [ 347.184274][T11134] ? free_vm_area+0x50/0x50 [ 347.188823][T11134] ? end_current_label_crit_section+0x170/0x170 [ 347.195092][T11134] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 347.200659][T11134] __vmalloc+0x7a/0x90 [ 347.204753][T11134] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 347.210318][T11134] bpf_prog_alloc_no_stats+0x47/0x440 [ 347.215711][T11134] ? bpf_prog_alloc+0x2b/0x1b0 [ 347.220500][T11134] bpf_prog_alloc+0x3d/0x1b0 [ 347.225132][T11134] bpf_prog_load+0x6b8/0x16d0 [ 347.229857][T11134] ? map_freeze+0x420/0x420 [ 347.234471][T11134] ? __might_fault+0xaa/0x120 [ 347.239190][T11134] ? __lock_acquire+0x7c80/0x7c80 [ 347.244246][T11134] ? file_end_write+0x159/0x250 [ 347.249123][T11134] ? __might_fault+0xaa/0x120 [ 347.253817][T11134] ? __might_fault+0xc6/0x120 [ 347.258510][T11134] ? __might_fault+0xaa/0x120 [ 347.263206][T11134] ? bpf_lsm_bpf+0x9/0x10 [ 347.267560][T11134] ? security_bpf+0x7e/0xa0 [ 347.272086][T11134] __sys_bpf+0x55a/0x800 [ 347.276351][T11134] ? bpf_link_show_fdinfo+0x350/0x350 [ 347.281752][T11134] ? lock_chain_count+0x20/0x20 [ 347.286629][T11134] __x64_sys_bpf+0x7c/0x90 [ 347.291200][T11134] do_syscall_64+0x55/0xb0 [ 347.295650][T11134] ? clear_bhb_loop+0x40/0x90 [ 347.300361][T11134] ? clear_bhb_loop+0x40/0x90 [ 347.305095][T11134] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 347.311034][T11134] RIP: 0033:0x7f7fd138e9a9 [ 347.315497][T11134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.335144][T11134] RSP: 002b:00007f7fd216f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 347.343588][T11134] RAX: ffffffffffffffda RBX: 00007f7fd15b5fa0 RCX: 00007f7fd138e9a9 [ 347.351582][T11134] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 347.359585][T11134] RBP: 00007f7fd216f090 R08: 0000000000000000 R09: 0000000000000000 [ 347.367577][T11134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.375564][T11134] R13: 0000000000000000 R14: 00007f7fd15b5fa0 R15: 00007ffcdacc03f8 [ 347.383568][T11134] [ 347.391368][T11124] CPU: 1 PID: 11124 Comm: syz.0.1981 Not tainted 6.6.100-syzkaller #0 [ 347.399602][T11124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 347.409709][T11124] Call Trace: [ 347.413025][T11124] [ 347.415979][T11124] dump_stack_lvl+0x16c/0x230 [ 347.420690][T11124] ? show_regs_print_info+0x20/0x20 [ 347.425918][T11124] ? load_image+0x3b0/0x3b0 [ 347.430453][T11124] ? __rcu_read_unlock+0x7c/0xd0 [ 347.435416][T11124] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 347.441851][T11124] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 347.448377][T11124] warn_alloc+0x210/0x300 [ 347.452737][T11124] ? __get_vm_area_node+0x125/0x370 [ 347.457966][T11124] ? zone_watermark_ok_safe+0x230/0x230 [ 347.463559][T11124] ? rcu_is_watching+0x15/0xb0 [ 347.468350][T11124] ? __get_vm_area_node+0x356/0x370 [ 347.473579][T11124] __vmalloc_node_range+0x393/0x1320 [ 347.478887][T11124] ? mark_lock+0x94/0x320 [ 347.483243][T11124] ? __lock_acquire+0x1334/0x7c80 [ 347.488288][T11124] ? verify_lock_unused+0x140/0x140 [ 347.493517][T11124] ? free_vm_area+0x50/0x50 [ 347.498048][T11124] ? end_current_label_crit_section+0x170/0x170 [ 347.504318][T11124] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 347.509885][T11124] __vmalloc+0x7a/0x90 [ 347.513976][T11124] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 347.519539][T11124] bpf_prog_alloc_no_stats+0x47/0x440 [ 347.524927][T11124] ? bpf_prog_alloc+0x2b/0x1b0 [ 347.529718][T11124] bpf_prog_alloc+0x3d/0x1b0 [ 347.534331][T11124] bpf_prog_load+0x6b8/0x16d0 [ 347.539039][T11124] ? map_freeze+0x420/0x420 [ 347.543564][T11124] ? __might_fault+0xaa/0x120 [ 347.548262][T11124] ? __lock_acquire+0x7c80/0x7c80 [ 347.553307][T11124] ? file_end_write+0x159/0x250 [ 347.558182][T11124] ? __might_fault+0xaa/0x120 [ 347.562873][T11124] ? __might_fault+0xc6/0x120 [ 347.567560][T11124] ? __might_fault+0xaa/0x120 [ 347.572253][T11124] ? bpf_lsm_bpf+0x9/0x10 [ 347.576607][T11124] ? security_bpf+0x7e/0xa0 [ 347.581134][T11124] __sys_bpf+0x55a/0x800 [ 347.585395][T11124] ? bpf_link_show_fdinfo+0x350/0x350 [ 347.590803][T11124] ? lock_chain_count+0x20/0x20 [ 347.595681][T11124] __x64_sys_bpf+0x7c/0x90 [ 347.600128][T11124] do_syscall_64+0x55/0xb0 [ 347.604567][T11124] ? clear_bhb_loop+0x40/0x90 [ 347.609351][T11124] ? clear_bhb_loop+0x40/0x90 [ 347.614049][T11124] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 347.619967][T11124] RIP: 0033:0x7f26bd18e9a9 [ 347.624400][T11124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.644029][T11124] RSP: 002b:00007f26bdfec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 347.652475][T11124] RAX: ffffffffffffffda RBX: 00007f26bd3b5fa0 RCX: 00007f26bd18e9a9 [ 347.660467][T11124] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 347.668454][T11124] RBP: 00007f26bdfec090 R08: 0000000000000000 R09: 0000000000000000 [ 347.676441][T11124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.684424][T11124] R13: 0000000000000000 R14: 00007f26bd3b5fa0 R15: 00007ffc78b61368 [ 347.692427][T11124] [ 347.705501][T11124] Mem-Info: [ 347.710279][T11124] active_anon:5491 inactive_anon:0 isolated_anon:0 [ 347.710279][T11124] active_file:16584 inactive_file:39927 isolated_file:0 [ 347.710279][T11124] unevictable:768 dirty:300 writeback:0 [ 347.710279][T11124] slab_reclaimable:10588 slab_unreclaimable:96225 [ 347.710279][T11124] mapped:25582 shmem:1361 pagetables:498 [ 347.710279][T11124] sec_pagetables:0 bounce:0 [ 347.710279][T11124] kernel_misc_reclaimable:0 [ 347.710279][T11124] free:1347734 free_pcp:7148 free_cma:0 [ 347.780946][T11124] Node 0 active_anon:21964kB inactive_anon:0kB active_file:66336kB inactive_file:159508kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99028kB dirty:1200kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10696kB pagetables:1992kB sec_pagetables:0kB all_unreclaimable? no [ 347.834405][T11124] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 347.867097][T11124] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 347.914596][T11124] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 347.921378][T11124] Node 0 DMA32 free:1478028kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:21816kB inactive_anon:0kB active_file:66336kB inactive_file:158192kB unevictable:1536kB writepending:1200kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:12188kB local_pcp:9176kB free_cma:0kB [ 347.953436][T11124] lowmem_reserve[]: 0 0 1 1 1 [ 347.964436][T11124] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 347.992310][T11124] lowmem_reserve[]: 0 0 0 0 0 [ 348.013514][T11124] Node 1 Normal free:3897528kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17604kB local_pcp:7552kB free_cma:0kB [ 348.074721][T11124] lowmem_reserve[]: 0 0 0 0 0 [ 348.080057][T11124] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 348.093751][T11124] Node 0 DMA32: 459*4kB (ME) 1276*8kB (UME) 712*16kB (UME) 800*32kB (UME) 384*64kB (UME) 188*128kB (UME) 40*256kB (UME) 22*512kB (UME) 13*1024kB (UME) 9*2048kB (UME) 324*4096kB (UM) = 1478028kB [ 348.114049][T11124] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 348.127926][T11124] Node 1 Normal: 222*4kB (UME) 56*8kB (UME) 40*16kB (UME) 78*32kB (UME) 23*64kB (UME) 7*128kB (UME) 2*256kB (UM) 0*512kB 1*1024kB (E) 1*2048kB (E) 949*4096kB (M) = 3897528kB [ 348.146599][T11124] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 348.162729][T11124] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 348.174439][T11124] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 348.185133][T11124] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 348.195039][T11124] 57872 total pagecache pages [ 348.199963][T11124] 0 pages in swap cache [ 348.205266][T11124] Free swap = 124996kB [ 348.228049][T11124] Total swap = 124996kB [ 348.232461][T11124] 2097051 pages RAM [ 348.236500][T11124] 0 pages HighMem/MovableOnly [ 348.241428][T11124] 416137 pages reserved [ 348.246378][T11124] 0 pages cma reserved [ 348.263337][T11148] validate_nla: 2 callbacks suppressed [ 348.263358][T11148] netlink: 'syz.3.1991': attribute type 10 has an invalid length. [ 349.075992][T11182] netlink: 'syz.2.2002': attribute type 10 has an invalid length. [ 349.133476][T11184] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2003'. [ 349.170066][T11186] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2004'. [ 349.367377][T11194] netlink: 'syz.3.2006': attribute type 29 has an invalid length. [ 349.382564][T11194] netlink: 'syz.3.2006': attribute type 29 has an invalid length. [ 349.394118][T11191] netlink: 'syz.3.2006': attribute type 29 has an invalid length. [ 350.058529][T11210] wg2: left promiscuous mode [ 350.063461][T11210] wg2: left allmulticast mode [ 350.191069][T11211] wg2: entered promiscuous mode [ 350.206501][T11211] wg2: entered allmulticast mode [ 350.357817][T11213] netlink: 'syz.0.2014': attribute type 10 has an invalid length. [ 350.412212][T11215] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2015'. [ 350.438740][T11217] FAULT_INJECTION: forcing a failure. [ 350.438740][T11217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 350.452174][T11217] CPU: 1 PID: 11217 Comm: syz.1.2016 Not tainted 6.6.100-syzkaller #0 [ 350.460387][T11217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 350.470482][T11217] Call Trace: [ 350.473787][T11217] [ 350.476737][T11217] dump_stack_lvl+0x16c/0x230 [ 350.481448][T11217] ? show_regs_print_info+0x20/0x20 [ 350.486668][T11217] ? load_image+0x3b0/0x3b0 [ 350.491203][T11217] ? __lock_acquire+0x7c80/0x7c80 [ 350.496250][T11217] ? snprintf+0xdb/0x120 [ 350.500522][T11217] should_fail_ex+0x39d/0x4d0 [ 350.505236][T11217] _copy_to_user+0x2f/0xa0 [ 350.509678][T11217] simple_read_from_buffer+0xe7/0x150 [ 350.515110][T11217] proc_fail_nth_read+0x1e3/0x250 [ 350.520180][T11217] ? proc_fault_inject_write+0x340/0x340 [ 350.525860][T11217] ? fsnotify_perm+0x271/0x5e0 [ 350.530661][T11217] ? proc_fault_inject_write+0x340/0x340 [ 350.536320][T11217] vfs_read+0x27e/0x920 [ 350.540527][T11217] ? kernel_read+0x1e0/0x1e0 [ 350.545144][T11217] ? __fget_files+0x28/0x4d0 [ 350.549759][T11217] ? __fget_files+0x44a/0x4d0 [ 350.554468][T11217] ? __fdget_pos+0x2a3/0x330 [ 350.559120][T11217] ? ksys_read+0x75/0x250 [ 350.563495][T11217] ksys_read+0x147/0x250 [ 350.567770][T11217] ? vfs_write+0x940/0x940 [ 350.572220][T11217] ? lockdep_hardirqs_on+0x98/0x150 [ 350.577453][T11217] do_syscall_64+0x55/0xb0 [ 350.581897][T11217] ? clear_bhb_loop+0x40/0x90 [ 350.586593][T11217] ? clear_bhb_loop+0x40/0x90 [ 350.591292][T11217] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 350.597213][T11217] RIP: 0033:0x7f517238d3bc [ 350.601648][T11217] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 350.621282][T11217] RSP: 002b:00007f5173246030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 350.629810][T11217] RAX: ffffffffffffffda RBX: 00007f51725b5fa0 RCX: 00007f517238d3bc [ 350.637798][T11217] RDX: 000000000000000f RSI: 00007f51732460a0 RDI: 0000000000000008 [ 350.645789][T11217] RBP: 00007f5173246090 R08: 0000000000000000 R09: 0000000000000000 [ 350.653777][T11217] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 350.661766][T11217] R13: 0000000000000000 R14: 00007f51725b5fa0 R15: 00007fff7370f658 [ 350.669778][T11217] [ 350.705547][T11219] FAULT_INJECTION: forcing a failure. [ 350.705547][T11219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 350.737955][T11219] CPU: 0 PID: 11219 Comm: syz.0.2017 Not tainted 6.6.100-syzkaller #0 [ 350.746204][T11219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 350.756318][T11219] Call Trace: [ 350.759654][T11219] [ 350.762642][T11219] dump_stack_lvl+0x16c/0x230 [ 350.767405][T11219] ? show_regs_print_info+0x20/0x20 [ 350.772677][T11219] ? load_image+0x3b0/0x3b0 [ 350.777267][T11219] ? __might_fault+0xaa/0x120 [ 350.782003][T11219] ? __lock_acquire+0x7c80/0x7c80 [ 350.787092][T11219] should_fail_ex+0x39d/0x4d0 [ 350.791832][T11219] _copy_to_user+0x2f/0xa0 [ 350.796284][T11219] bpf_obj_get_info_by_fd+0x2843/0x2d90 [ 350.801887][T11219] ? bpf_map_get_fd_by_id+0x310/0x310 [ 350.807303][T11219] ? perf_trace_lock+0x2ed/0x380 [ 350.812298][T11219] ? trace_event_raw_event_lock+0x230/0x230 [ 350.818275][T11219] ? file_end_write+0x159/0x250 [ 350.823220][T11219] ? __might_fault+0xaa/0x120 [ 350.827952][T11219] ? __might_fault+0xc6/0x120 [ 350.832662][T11219] ? __might_fault+0xaa/0x120 [ 350.837494][T11219] ? bpf_lsm_bpf+0x9/0x10 [ 350.841890][T11219] ? security_bpf+0x7e/0xa0 [ 350.846441][T11219] __sys_bpf+0x781/0x800 [ 350.850722][T11219] ? bpf_link_show_fdinfo+0x350/0x350 [ 350.856147][T11219] ? lock_chain_count+0x20/0x20 [ 350.861043][T11219] __x64_sys_bpf+0x7c/0x90 [ 350.865492][T11219] do_syscall_64+0x55/0xb0 [ 350.869939][T11219] ? clear_bhb_loop+0x40/0x90 [ 350.874669][T11219] ? clear_bhb_loop+0x40/0x90 [ 350.879375][T11219] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 350.885306][T11219] RIP: 0033:0x7f26bd18e9a9 [ 350.889751][T11219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.909393][T11219] RSP: 002b:00007f26bdfec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 350.917852][T11219] RAX: ffffffffffffffda RBX: 00007f26bd3b5fa0 RCX: 00007f26bd18e9a9 [ 350.925852][T11219] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000f [ 350.933849][T11219] RBP: 00007f26bdfec090 R08: 0000000000000000 R09: 0000000000000000 [ 350.941858][T11219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.949857][T11219] R13: 0000000000000000 R14: 00007f26bd3b5fa0 R15: 00007ffc78b61368 [ 350.957883][T11219] [ 351.004746][T11221] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2018'. [ 351.206641][T11235] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2023'. [ 351.237744][T11235] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2023'. [ 351.248535][T11235] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2023'. [ 351.378737][T11241] netlink: 'syz.1.2026': attribute type 10 has an invalid length. [ 351.479750][T11244] netlink: 'syz.1.2027': attribute type 7 has an invalid length. [ 351.530766][T11246] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2028'. [ 351.741065][T11252] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2031'. [ 351.990739][T11258] netlink: 'syz.2.2034': attribute type 10 has an invalid length. [ 352.041352][T11260] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2035'. [ 352.058794][T11258] team0: Port device geneve1 added [ 352.114917][T11263] netlink: 'syz.3.2036': attribute type 10 has an invalid length. [ 352.241978][T11267] syzkaller0: tun_chr_ioctl cmd 2147767507 [ 352.301662][T11271] FAULT_INJECTION: forcing a failure. [ 352.301662][T11271] name failslab, interval 1, probability 0, space 0, times 0 [ 352.333059][T11271] CPU: 1 PID: 11271 Comm: syz.0.2040 Not tainted 6.6.100-syzkaller #0 [ 352.341312][T11271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 352.351410][T11271] Call Trace: [ 352.354724][T11271] [ 352.357689][T11271] dump_stack_lvl+0x16c/0x230 [ 352.362429][T11271] ? show_regs_print_info+0x20/0x20 [ 352.367675][T11271] ? load_image+0x3b0/0x3b0 [ 352.372251][T11271] ? __might_sleep+0xe0/0xe0 [ 352.376907][T11271] ? __lock_acquire+0x7c80/0x7c80 [ 352.381987][T11271] should_fail_ex+0x39d/0x4d0 [ 352.386726][T11271] should_failslab+0x9/0x20 [ 352.391277][T11271] slab_pre_alloc_hook+0x59/0x310 [ 352.396358][T11271] ? lockdep_hardirqs_on+0x98/0x150 [ 352.401624][T11271] kmem_cache_alloc_node+0x60/0x330 [ 352.406880][T11271] ? __alloc_skb+0x108/0x2c0 [ 352.411524][T11271] __alloc_skb+0x108/0x2c0 [ 352.415987][T11271] netlink_ack+0x376/0x1110 [ 352.420548][T11271] ? __dev_queue_xmit+0x245/0x35a0 [ 352.425711][T11271] ? netlink_dump+0xde0/0xde0 [ 352.430439][T11271] ? ref_tracker_free+0x634/0x7d0 [ 352.435512][T11271] ? __copy_skb_header+0xa7/0x550 [ 352.440601][T11271] netlink_rcv_skb+0x29a/0x480 [ 352.445416][T11271] ? rtnetlink_bind+0x80/0x80 [ 352.450129][T11271] ? netlink_ack+0x1110/0x1110 [ 352.454926][T11271] ? __lock_acquire+0x7c80/0x7c80 [ 352.459992][T11271] ? netlink_deliver_tap+0x2e/0x1b0 [ 352.465223][T11271] netlink_unicast+0x751/0x8d0 [ 352.470019][T11271] netlink_sendmsg+0x8c1/0xbe0 [ 352.474817][T11271] ? netlink_getsockopt+0x580/0x580 [ 352.480043][T11271] ? aa_sock_msg_perm+0x94/0x150 [ 352.485004][T11271] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 352.490332][T11271] ? security_socket_sendmsg+0x80/0xa0 [ 352.495811][T11271] ? netlink_getsockopt+0x580/0x580 [ 352.501028][T11271] ____sys_sendmsg+0x5bf/0x950 [ 352.505825][T11271] ? __asan_memset+0x22/0x40 [ 352.510438][T11271] ? __sys_sendmsg_sock+0x30/0x30 [ 352.515478][T11271] ? __import_iovec+0x5f2/0x860 [ 352.520381][T11271] ? import_iovec+0x73/0xa0 [ 352.524913][T11271] ___sys_sendmsg+0x220/0x290 [ 352.529618][T11271] ? __sys_sendmsg+0x270/0x270 [ 352.534442][T11271] ? __lock_acquire+0x7c80/0x7c80 [ 352.539508][T11271] __se_sys_sendmsg+0x1a5/0x270 [ 352.544392][T11271] ? __x64_sys_sendmsg+0x80/0x80 [ 352.549364][T11271] ? lockdep_hardirqs_on+0x98/0x150 [ 352.554586][T11271] do_syscall_64+0x55/0xb0 [ 352.559019][T11271] ? clear_bhb_loop+0x40/0x90 [ 352.563711][T11271] ? clear_bhb_loop+0x40/0x90 [ 352.568407][T11271] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 352.574323][T11271] RIP: 0033:0x7f26bd18e9a9 [ 352.578757][T11271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.598383][T11271] RSP: 002b:00007f26bdfec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.606827][T11271] RAX: ffffffffffffffda RBX: 00007f26bd3b5fa0 RCX: 00007f26bd18e9a9 [ 352.614840][T11271] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 352.622827][T11271] RBP: 00007f26bdfec090 R08: 0000000000000000 R09: 0000000000000000 [ 352.630900][T11271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.638886][T11271] R13: 0000000000000000 R14: 00007f26bd3b5fa0 R15: 00007ffc78b61368 [ 352.646888][T11271] [ 353.069909][T11289] sit0: entered allmulticast mode [ 353.096557][T11290] sit0: entered promiscuous mode [ 353.627791][T11311] validate_nla: 5 callbacks suppressed [ 353.627813][T11311] netlink: 'syz.0.2054': attribute type 10 has an invalid length. [ 353.870313][T11321] netlink: 'syz.1.2059': attribute type 10 has an invalid length. [ 354.294204][T11338] __nla_validate_parse: 19 callbacks suppressed [ 354.294227][T11338] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2065'. [ 354.413095][T11343] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2069'. [ 354.432605][T11343] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2069'. [ 354.444888][ T5100] Bluetooth: hci3: ISO packet for unknown connection handle 3646 [ 354.460382][T11341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2068'. [ 354.489531][T11343] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2069'. [ 354.510776][T11343] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2069'. [ 354.708781][T11353] sock: sock_timestamping_bind_phc: sock not bind to device [ 354.734108][T11352] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2072'. [ 354.760916][T11352] netlink: 'syz.2.2072': attribute type 10 has an invalid length. [ 354.971167][T11365] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2075'. [ 355.058350][T11365] netlink: 'syz.0.2075': attribute type 10 has an invalid length. [ 355.066273][T11365] team0: Device bridge0 is already an upper device of the team interface [ 355.519238][T11372] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2081'. [ 355.547936][T11372] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2081'. [ 356.167954][T11382] netlink: 'syz.3.2085': attribute type 25 has an invalid length. [ 356.175884][T11382] netlink: 'syz.3.2085': attribute type 1 has an invalid length. [ 356.246409][T11382] bridge0: port 1(bridge_slave_0) entered learning state [ 356.320051][T11388] netlink: 'syz.2.2089': attribute type 10 has an invalid length. [ 356.426762][T11391] netlink: 'syz.1.2090': attribute type 10 has an invalid length. [ 356.493797][T11393] netlink: 'syz.0.2091': attribute type 10 has an invalid length. [ 356.555369][T11395] netlink: set zone limit has 8 unknown bytes [ 357.006462][T11411] GPL: port 1(erspan0) entered blocking state [ 357.023319][T11411] GPL: port 1(erspan0) entered disabled state [ 357.039989][T11411] erspan0: entered allmulticast mode [ 357.061156][T11417] syz.0.2103[11417] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 357.061412][T11417] syz.0.2103[11417] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 357.075167][T11411] erspan0: entered promiscuous mode [ 357.175431][T11413] netlink: 'syz.1.2102': attribute type 10 has an invalid length. [ 357.192456][T11418] GPL: port 1(erspan0) entered blocking state [ 357.198776][T11418] GPL: port 1(erspan0) entered forwarding state [ 357.610023][T11433] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 359.035331][T11470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.073624][T11470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.099373][T11470] batadv_slave_1: entered promiscuous mode [ 359.160780][T11470] validate_nla: 1 callbacks suppressed [ 359.160803][T11470] netlink: 'syz.1.2124': attribute type 10 has an invalid length. [ 359.162692][T11475] netlink: 'syz.2.2127': attribute type 3 has an invalid length. [ 359.246589][T11470] bond0: (slave bridge0): Releasing backup interface [ 359.474267][T11470] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.481966][T11470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.490785][T11470] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.498823][T11470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.618259][T11470] team0: Port device bridge0 added [ 359.645560][T11477] netlink: 'syz.2.2127': attribute type 25 has an invalid length. [ 359.688200][T11477] netlink: 'syz.2.2127': attribute type 1 has an invalid length. [ 359.711664][T11477] bridge0: port 1(bridge_slave_0) entered learning state [ 360.421812][T11495] __nla_validate_parse: 10 callbacks suppressed [ 360.421834][T11495] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2133'. [ 360.500758][T11497] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 360.882519][T11505] netlink: 'syz.0.2137': attribute type 10 has an invalid length. [ 360.977664][T11509] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2139'. [ 360.997090][T11509] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2139'. [ 361.018535][T11509] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2139'. [ 361.055270][T11511] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2140'. [ 361.104157][T11513] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2139'. [ 361.183077][T11515] netlink: 'syz.0.2141': attribute type 10 has an invalid length. [ 361.492429][T11525] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2146'. [ 362.133039][T11544] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2152'. [ 362.177744][T11544] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2152'. [ 362.218585][T11544] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2152'. [ 362.331916][T11546] netlink: 'syz.1.2153': attribute type 3 has an invalid length. [ 362.494838][T11548] netlink: 'syz.0.2154': attribute type 10 has an invalid length. [ 362.847795][T11546] netlink: 'syz.1.2153': attribute type 25 has an invalid length. [ 362.898608][T11546] netlink: 'syz.1.2153': attribute type 1 has an invalid length. [ 362.957799][T11546] bridge0: port 1(bridge_slave_0) entered learning state [ 363.921991][T11566] €Â0: renamed from pim6reg1 [ 363.927176][T11566] FAULT_INJECTION: forcing a failure. [ 363.927176][T11566] name failslab, interval 1, probability 0, space 0, times 0 [ 363.987918][T11566] CPU: 1 PID: 11566 Comm: syz.0.2162 Not tainted 6.6.100-syzkaller #0 [ 363.996207][T11566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 364.006345][T11566] Call Trace: [ 364.009686][T11566] [ 364.012660][T11566] dump_stack_lvl+0x16c/0x230 [ 364.017399][T11566] ? show_regs_print_info+0x20/0x20 [ 364.022662][T11566] ? load_image+0x3b0/0x3b0 [ 364.027242][T11566] ? __lock_acquire+0x7c80/0x7c80 [ 364.032330][T11566] should_fail_ex+0x39d/0x4d0 [ 364.037075][T11566] should_failslab+0x9/0x20 [ 364.041625][T11566] slab_pre_alloc_hook+0x59/0x310 [ 364.046718][T11566] kmem_cache_alloc_node+0x60/0x330 [ 364.051976][T11566] ? __alloc_skb+0x108/0x2c0 [ 364.056656][T11566] __alloc_skb+0x108/0x2c0 [ 364.061155][T11566] alloc_uevent_skb+0x7d/0x230 [ 364.065999][T11566] kobject_uevent_net_broadcast+0x17e/0x530 [ 364.071967][T11566] kobject_uevent_env+0x550/0x8c0 [ 364.077074][T11566] kobject_rename+0x408/0x500 [ 364.081812][T11566] ? kobject_init_and_add+0x190/0x190 [ 364.087255][T11566] ? sysfs_rename_link_ns+0x17f/0x1b0 [ 364.092685][T11566] device_rename+0x15d/0x1e0 [ 364.097336][T11566] dev_change_name+0x2ee/0x8a0 [ 364.102189][T11566] ? dev_alloc_name+0x1c0/0x1c0 [ 364.107092][T11566] ? trace_contention_end+0x39/0xe0 [ 364.112338][T11566] ? __mutex_lock+0x304/0xcc0 [ 364.117061][T11566] ? end_current_label_crit_section+0x170/0x170 [ 364.123382][T11566] dev_ifsioc+0x8c7/0xe20 [ 364.127770][T11566] ? dev_ioctl+0x1170/0x1170 [ 364.132429][T11566] ? bpf_lsm_capable+0x9/0x10 [ 364.137164][T11566] ? security_capable+0x89/0xb0 [ 364.142101][T11566] dev_ioctl+0x705/0x1170 [ 364.146496][T11566] sock_do_ioctl+0x226/0x2f0 [ 364.151156][T11566] ? sock_show_fdinfo+0xb0/0xb0 [ 364.156112][T11566] sock_ioctl+0x623/0x7a0 [ 364.160505][T11566] ? sock_poll+0x3d0/0x3d0 [ 364.165006][T11566] ? bpf_lsm_file_ioctl+0x9/0x10 [ 364.169979][T11566] ? security_file_ioctl+0x80/0xa0 [ 364.175138][T11566] ? sock_poll+0x3d0/0x3d0 [ 364.179624][T11566] __se_sys_ioctl+0xfd/0x170 [ 364.184280][T11566] do_syscall_64+0x55/0xb0 [ 364.188736][T11566] ? clear_bhb_loop+0x40/0x90 [ 364.193446][T11566] ? clear_bhb_loop+0x40/0x90 [ 364.198173][T11566] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 364.204119][T11566] RIP: 0033:0x7f26bd18e9a9 [ 364.208581][T11566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.228239][T11566] RSP: 002b:00007f26bdfec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 364.236703][T11566] RAX: ffffffffffffffda RBX: 00007f26bd3b5fa0 RCX: 00007f26bd18e9a9 [ 364.244715][T11566] RDX: 0000200000000140 RSI: 0000000000008923 RDI: 0000000000000008 [ 364.252961][T11566] RBP: 00007f26bdfec090 R08: 0000000000000000 R09: 0000000000000000 [ 364.260984][T11566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 364.269026][T11566] R13: 0000000000000000 R14: 00007f26bd3b5fa0 R15: 00007ffc78b61368 [ 364.277117][T11566] [ 365.650682][T11583] netlink: 'syz.0.2167': attribute type 10 has an invalid length. [ 365.861678][T11585] __nla_validate_parse: 6 callbacks suppressed [ 365.861702][T11585] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2168'. [ 366.176908][T11590] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2170'. [ 367.609288][T11605] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2176'. [ 368.040034][T11609] netlink: 'syz.3.2179': attribute type 10 has an invalid length. [ 369.510787][T11622] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2183'. [ 369.791774][T11626] FAULT_INJECTION: forcing a failure. [ 369.791774][T11626] name failslab, interval 1, probability 0, space 0, times 0 [ 369.877830][T11626] CPU: 1 PID: 11626 Comm: syz.2.2184 Not tainted 6.6.100-syzkaller #0 [ 369.886096][T11626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 369.896230][T11626] Call Trace: [ 369.899582][T11626] [ 369.902579][T11626] dump_stack_lvl+0x16c/0x230 [ 369.907346][T11626] ? show_regs_print_info+0x20/0x20 [ 369.912626][T11626] ? load_image+0x3b0/0x3b0 [ 369.917228][T11626] ? __might_sleep+0xe0/0xe0 [ 369.921900][T11626] ? __lock_acquire+0x7c80/0x7c80 [ 369.927011][T11626] ? __asan_memset+0x22/0x40 [ 369.931692][T11626] should_fail_ex+0x39d/0x4d0 [ 369.936468][T11626] should_failslab+0x9/0x20 [ 369.941043][T11626] slab_pre_alloc_hook+0x59/0x310 [ 369.946131][T11626] kmem_cache_alloc+0x5a/0x2e0 [ 369.950942][T11626] ? security_inode_alloc+0x34/0x110 [ 369.956290][T11626] security_inode_alloc+0x34/0x110 [ 369.961453][T11626] inode_init_always+0x8fc/0xc90 [ 369.966427][T11626] ? new_inode_pseudo+0x82/0x1d0 [ 369.971418][T11626] new_inode_pseudo+0x95/0x1d0 [ 369.976220][T11626] ? __ns_get_path+0x2c/0x640 [ 369.980941][T11626] __ns_get_path+0x24d/0x640 [ 369.985603][T11626] ? _raw_spin_unlock+0x28/0x40 [ 369.990511][T11626] ns_get_path+0x54/0x90 [ 369.994807][T11626] proc_ns_get_link+0xf0/0x230 [ 369.999612][T11626] ? proc_ns_instantiate+0xf0/0xf0 [ 370.004778][T11626] ? bpf_lsm_inode_follow_link+0x9/0x10 [ 370.010366][T11626] ? security_inode_follow_link+0xb7/0x100 [ 370.016220][T11626] ? proc_ns_instantiate+0xf0/0xf0 [ 370.021374][T11626] pick_link+0x666/0xdd0 [ 370.025781][T11626] step_into+0xc3d/0xf10 [ 370.030080][T11626] ? rcu_read_lock_any_held+0xb4/0x120 [ 370.035583][T11626] ? rcu_read_lock_bh_held+0xe0/0xe0 [ 370.040911][T11626] ? set_root+0x3a0/0x3a0 [ 370.045288][T11626] ? d_splice_alias+0x114/0x330 [ 370.050210][T11626] path_openat+0x16bb/0x3190 [ 370.054931][T11626] ? do_filp_open+0x3d0/0x3d0 [ 370.059685][T11626] ? trace_event_raw_event_lock+0x230/0x230 [ 370.065658][T11626] do_filp_open+0x1c5/0x3d0 [ 370.070266][T11626] ? vfs_tmpfile+0x490/0x490 [ 370.075005][T11626] ? _raw_spin_unlock+0x28/0x40 [ 370.080011][T11626] ? alloc_fd+0x58f/0x630 [ 370.084437][T11626] do_sys_openat2+0x12c/0x1c0 [ 370.089176][T11626] ? atomic_notifier_call_chain+0x16e/0x180 [ 370.095134][T11626] ? do_sys_open+0xe0/0xe0 [ 370.099603][T11626] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 370.105640][T11626] ? lock_chain_count+0x20/0x20 [ 370.110551][T11626] __x64_sys_openat+0x139/0x160 [ 370.115465][T11626] do_syscall_64+0x55/0xb0 [ 370.119927][T11626] ? clear_bhb_loop+0x40/0x90 [ 370.124640][T11626] ? clear_bhb_loop+0x40/0x90 [ 370.129365][T11626] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 370.135306][T11626] RIP: 0033:0x7f7fd138d310 [ 370.139770][T11626] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 370.159421][T11626] RSP: 002b:00007f7fd216ef10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 370.167881][T11626] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f7fd138d310 [ 370.175908][T11626] RDX: 0000000000000002 RSI: 00007f7fd216efa0 RDI: 00000000ffffff9c [ 370.183926][T11626] RBP: 00007f7fd216efa0 R08: 0000000000000000 R09: 0000000000000000 [ 370.191943][T11626] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 370.199950][T11626] R13: 0000000000000000 R14: 00007f7fd15b5fa0 R15: 00007ffcdacc03f8 [ 370.208002][T11626] [ 370.501048][T11629] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2186'. [ 371.549180][T11641] netlink: 'syz.3.2191': attribute type 10 has an invalid length. [ 372.382206][T11656] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2197'. [ 372.594868][T11658] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2195'. [ 372.911853][T11663] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2199'. [ 373.571677][T11674] netlink: 'syz.0.2203': attribute type 10 has an invalid length. [ 374.233425][T11678] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2204'. [ 374.339852][T11678] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2204'. [ 374.438702][T11683] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2204'. [ 374.518206][T11678] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2204'. [ 375.090226][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.167952][T11690] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2210'. [ 376.247291][T11695] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2211'. [ 376.284429][ T5796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 376.294408][ T5796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 376.304025][ T5796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 376.326202][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.341101][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 376.355355][ T5796] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 376.364284][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 376.469504][T11693] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2209'. [ 376.691833][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.152730][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.320504][ T12] bond0: (slave netdevsim0): Releasing backup interface [ 377.342203][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.183500][T11711] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2216'. [ 378.220096][T11696] chnl_net:caif_netlink_parms(): no params data found [ 378.340295][T11711] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2216'. [ 378.368213][T11714] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2216'. [ 378.447975][ T5796] Bluetooth: hci0: command tx timeout [ 378.622785][T11717] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2216'. [ 378.936699][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.943233][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.157894][T11696] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.165603][T11696] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.196728][T11696] bridge_slave_0: entered allmulticast mode [ 379.220389][T11696] bridge_slave_0: entered promiscuous mode [ 379.247107][T11696] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.283244][T11696] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.298020][T11696] bridge_slave_1: entered allmulticast mode [ 379.303540][T11731] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2222'. [ 379.317577][T11696] bridge_slave_1: entered promiscuous mode [ 379.329400][T11726] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2219'. [ 379.417493][T11729] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2221'. [ 379.599184][T11696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.612325][T11696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.785506][T11696] team0: Port device team_slave_0 added [ 379.809093][ T12] GPL: port 1(erspan0) entered disabled state [ 379.849681][ T12] erspan0 (unregistering): left allmulticast mode [ 379.856291][ T12] erspan0 (unregistering): left promiscuous mode [ 379.865710][ T12] GPL: port 1(erspan0) entered disabled state [ 379.911138][T11696] team0: Port device team_slave_1 added [ 380.054952][T11696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.062321][T11696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.107542][T11696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.175296][T11696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.197706][T11696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.260484][T11696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.308486][T11748] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2228'. [ 380.334826][T11748] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2228'. [ 380.440979][T11750] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2231'. [ 380.527698][ T5796] Bluetooth: hci0: command tx timeout [ 380.640144][T11696] hsr_slave_0: entered promiscuous mode [ 380.664315][T11696] hsr_slave_1: entered promiscuous mode [ 380.678664][T11696] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.686556][T11696] Cannot create hsr debugfs directory [ 381.398309][ T12] vlan0: left allmulticast mode [ 381.419315][ T12] veth0_vlan: left allmulticast mode [ 381.430383][ T12] vlan0: left promiscuous mode [ 381.447937][ T12] À: port 1(vlan0) entered disabled state [ 381.553729][ T12] hsr_slave_0: left promiscuous mode [ 381.568745][ T12] hsr_slave_1: left promiscuous mode [ 381.578438][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.598560][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.610350][ T12] bridge0: port 4(team0) entered disabled state [ 381.626157][ T12] batadv_slave_1: left allmulticast mode [ 381.641143][ T12] bridge0: port 5(batadv_slave_1) entered disabled state [ 381.654634][ T12] bridge0: port 3(batadv0) entered disabled state [ 381.664500][ T12] bridge_slave_1: left allmulticast mode [ 381.670386][ T12] bridge_slave_1: left promiscuous mode [ 381.676341][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.686677][ T12] bridge_slave_0: left allmulticast mode [ 381.693986][ T12] bridge_slave_0: left promiscuous mode [ 381.700030][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.744533][ T12] veth1_macvtap: left allmulticast mode [ 381.752455][ T12] veth1_macvtap: left promiscuous mode [ 381.758306][ T12] veth1_vlan: left promiscuous mode [ 381.764180][ T12] veth0_vlan: left promiscuous mode [ 382.161126][ T12] geneve1 (unregistering): left promiscuous mode [ 382.168074][ T12] geneve1 (unregistering): left allmulticast mode [ 382.178099][ T12] team0 (unregistering): Port device geneve1 removed [ 382.597985][ T12] team_slave_1 (unregistering): left promiscuous mode [ 382.604877][ T12] team_slave_1 (unregistering): left allmulticast mode [ 382.612500][ T5796] Bluetooth: hci0: command tx timeout [ 382.622304][ T12] team0 (unregistering): Port device team_slave_1 removed [ 382.708709][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.749475][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.173206][ T12] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 383.182336][ T12] bond0 (unregistering): Released all slaves [ 383.271088][T11777] __nla_validate_parse: 4 callbacks suppressed [ 383.271105][T11777] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2243'. [ 383.292681][T11781] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2245'. [ 383.930279][T11805] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2254'. [ 383.944476][T11805] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2254'. [ 383.964181][T11805] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2254'. [ 383.975615][T11696] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 383.994377][T11808] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2255'. [ 384.004204][T11805] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2254'. [ 384.014277][T11696] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 384.033693][T11696] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 384.054071][T11696] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 384.135061][T11816] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2256'. [ 384.253835][T11696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.299915][T11696] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.322440][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.329704][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.365595][ T131] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.372869][ T131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.425835][T11824] IPv6: NLM_F_CREATE should be specified when creating new route [ 384.435052][T11824] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2260'. [ 384.687755][ T5796] Bluetooth: hci0: command tx timeout [ 384.763718][T11835] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2264'. [ 384.891261][T11696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.012200][T11696] veth0_vlan: entered promiscuous mode [ 385.070606][T11696] veth1_vlan: entered promiscuous mode [ 385.166206][T11696] veth0_macvtap: entered promiscuous mode [ 385.218002][T11696] veth1_macvtap: entered promiscuous mode [ 385.271652][T11696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.297369][T11696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.311494][T11696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.323217][T11696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.335411][T11696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.351601][T11696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.379520][T11696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.395120][T11696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.406605][T11696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.418132][T11696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.428867][T11696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.442905][T11696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.465752][T11696] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.474984][T11696] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.488223][T11696] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.497195][T11696] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.646394][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.674904][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.736198][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.754646][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.664548][T11907] FAULT_INJECTION: forcing a failure. [ 386.664548][T11907] name failslab, interval 1, probability 0, space 0, times 0 [ 386.684074][T11907] CPU: 0 PID: 11907 Comm: syz.3.2294 Not tainted 6.6.100-syzkaller #0 [ 386.692312][T11907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 386.702387][T11907] Call Trace: [ 386.705677][T11907] [ 386.708618][T11907] dump_stack_lvl+0x16c/0x230 [ 386.713314][T11907] ? show_regs_print_info+0x20/0x20 [ 386.718527][T11907] ? load_image+0x3b0/0x3b0 [ 386.723058][T11907] ? __might_sleep+0xe0/0xe0 [ 386.727686][T11907] ? __lock_acquire+0x7c80/0x7c80 [ 386.732759][T11907] ? mark_lock+0x94/0x320 [ 386.737137][T11907] should_fail_ex+0x39d/0x4d0 [ 386.741876][T11907] should_failslab+0x9/0x20 [ 386.746436][T11907] slab_pre_alloc_hook+0x59/0x310 [ 386.751510][T11907] ? __get_vm_area_node+0x125/0x370 [ 386.756744][T11907] __kmem_cache_alloc_node+0x53/0x260 [ 386.762165][T11907] ? __get_vm_area_node+0x125/0x370 [ 386.767381][T11907] kmalloc_node_trace+0x26/0xe0 [ 386.772269][T11907] __get_vm_area_node+0x125/0x370 [ 386.777321][T11907] __vmalloc_node_range+0x36e/0x1320 [ 386.782642][T11907] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 386.788240][T11907] ? mark_lock+0x94/0x320 [ 386.792622][T11907] ? __lock_acquire+0x1334/0x7c80 [ 386.797700][T11907] ? verify_lock_unused+0x140/0x140 [ 386.802965][T11907] ? free_vm_area+0x50/0x50 [ 386.807517][T11907] ? end_current_label_crit_section+0x170/0x170 [ 386.813811][T11907] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 386.819400][T11907] __vmalloc+0x7a/0x90 [ 386.823528][T11907] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 386.829118][T11907] bpf_prog_alloc_no_stats+0x47/0x440 [ 386.834540][T11907] ? bpf_prog_alloc+0x2b/0x1b0 [ 386.839324][T11907] bpf_prog_alloc+0x3d/0x1b0 [ 386.843934][T11907] bpf_prog_load+0x6b8/0x16d0 [ 386.848666][T11907] ? map_freeze+0x420/0x420 [ 386.853216][T11907] ? __might_fault+0xaa/0x120 [ 386.857906][T11907] ? __lock_acquire+0x7c80/0x7c80 [ 386.862964][T11907] ? file_end_write+0x159/0x250 [ 386.867836][T11907] ? __might_fault+0xaa/0x120 [ 386.872520][T11907] ? __might_fault+0xc6/0x120 [ 386.877213][T11907] ? __might_fault+0xaa/0x120 [ 386.881917][T11907] ? bpf_lsm_bpf+0x9/0x10 [ 386.887077][T11907] ? security_bpf+0x7e/0xa0 [ 386.891633][T11907] __sys_bpf+0x55a/0x800 [ 386.895903][T11907] ? bpf_link_show_fdinfo+0x350/0x350 [ 386.901309][T11907] ? lock_chain_count+0x20/0x20 [ 386.906201][T11907] __x64_sys_bpf+0x7c/0x90 [ 386.910652][T11907] do_syscall_64+0x55/0xb0 [ 386.915085][T11907] ? clear_bhb_loop+0x40/0x90 [ 386.919774][T11907] ? clear_bhb_loop+0x40/0x90 [ 386.924466][T11907] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 386.930395][T11907] RIP: 0033:0x7ff36098e9a9 [ 386.934857][T11907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.954516][T11907] RSP: 002b:00007ff361791038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 386.962966][T11907] RAX: ffffffffffffffda RBX: 00007ff360bb5fa0 RCX: 00007ff36098e9a9 [ 386.970954][T11907] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 386.978962][T11907] RBP: 00007ff361791090 R08: 0000000000000000 R09: 0000000000000000 [ 386.986990][T11907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.994973][T11907] R13: 0000000000000001 R14: 00007ff360bb5fa0 R15: 00007ffcacb1f2e8 [ 387.002973][T11907] [ 387.039688][T11907] warn_alloc: 1 callbacks suppressed [ 387.039709][T11907] syz.3.2294: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 387.063216][T11907] CPU: 0 PID: 11907 Comm: syz.3.2294 Not tainted 6.6.100-syzkaller #0 [ 387.071444][T11907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 387.081547][T11907] Call Trace: [ 387.084874][T11907] [ 387.087848][T11907] dump_stack_lvl+0x16c/0x230 [ 387.092580][T11907] ? show_regs_print_info+0x20/0x20 [ 387.097831][T11907] ? load_image+0x3b0/0x3b0 [ 387.102406][T11907] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 387.108872][T11907] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 387.115435][T11907] warn_alloc+0x210/0x300 [ 387.119830][T11907] ? __get_vm_area_node+0x125/0x370 [ 387.125084][T11907] ? zone_watermark_ok_safe+0x230/0x230 [ 387.130695][T11907] ? rcu_is_watching+0x15/0xb0 [ 387.135527][T11907] ? __get_vm_area_node+0x356/0x370 [ 387.140881][T11907] __vmalloc_node_range+0x393/0x1320 [ 387.146218][T11907] ? mark_lock+0x94/0x320 [ 387.150596][T11907] ? __lock_acquire+0x1334/0x7c80 [ 387.155668][T11907] ? verify_lock_unused+0x140/0x140 [ 387.160929][T11907] ? free_vm_area+0x50/0x50 [ 387.165484][T11907] ? end_current_label_crit_section+0x170/0x170 [ 387.171785][T11907] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 387.177393][T11907] __vmalloc+0x7a/0x90 [ 387.181519][T11907] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 387.187110][T11907] bpf_prog_alloc_no_stats+0x47/0x440 [ 387.192513][T11907] ? bpf_prog_alloc+0x2b/0x1b0 [ 387.197302][T11907] bpf_prog_alloc+0x3d/0x1b0 [ 387.201929][T11907] bpf_prog_load+0x6b8/0x16d0 [ 387.206638][T11907] ? map_freeze+0x420/0x420 [ 387.211172][T11907] ? __might_fault+0xaa/0x120 [ 387.215955][T11907] ? __lock_acquire+0x7c80/0x7c80 [ 387.221023][T11907] ? file_end_write+0x159/0x250 [ 387.225935][T11907] ? __might_fault+0xaa/0x120 [ 387.230642][T11907] ? __might_fault+0xc6/0x120 [ 387.235346][T11907] ? __might_fault+0xaa/0x120 [ 387.240045][T11907] ? bpf_lsm_bpf+0x9/0x10 [ 387.244400][T11907] ? security_bpf+0x7e/0xa0 [ 387.248928][T11907] __sys_bpf+0x55a/0x800 [ 387.253194][T11907] ? bpf_link_show_fdinfo+0x350/0x350 [ 387.258602][T11907] ? lock_chain_count+0x20/0x20 [ 387.263483][T11907] __x64_sys_bpf+0x7c/0x90 [ 387.267933][T11907] do_syscall_64+0x55/0xb0 [ 387.272385][T11907] ? clear_bhb_loop+0x40/0x90 [ 387.277082][T11907] ? clear_bhb_loop+0x40/0x90 [ 387.281775][T11907] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 387.287699][T11907] RIP: 0033:0x7ff36098e9a9 [ 387.292136][T11907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.311761][T11907] RSP: 002b:00007ff361791038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 387.320196][T11907] RAX: ffffffffffffffda RBX: 00007ff360bb5fa0 RCX: 00007ff36098e9a9 [ 387.328187][T11907] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 387.336175][T11907] RBP: 00007ff361791090 R08: 0000000000000000 R09: 0000000000000000 [ 387.344167][T11907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.352154][T11907] R13: 0000000000000001 R14: 00007ff360bb5fa0 R15: 00007ffcacb1f2e8 [ 387.360159][T11907] [ 387.390739][T11907] Mem-Info: [ 387.394079][T11907] active_anon:4721 inactive_anon:0 isolated_anon:0 [ 387.394079][T11907] active_file:18370 inactive_file:39945 isolated_file:0 [ 387.394079][T11907] unevictable:768 dirty:176 writeback:0 [ 387.394079][T11907] slab_reclaimable:10871 slab_unreclaimable:93652 [ 387.394079][T11907] mapped:24411 shmem:1361 pagetables:368 [ 387.394079][T11907] sec_pagetables:0 bounce:0 [ 387.394079][T11907] kernel_misc_reclaimable:0 [ 387.394079][T11907] free:1351273 free_pcp:5464 free_cma:0 [ 387.447645][T11907] Node 0 active_anon:18984kB inactive_anon:0kB active_file:73480kB inactive_file:159580kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97644kB dirty:704kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10484kB pagetables:1572kB sec_pagetables:0kB all_unreclaimable? no [ 387.492190][T11907] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 387.586095][T11907] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 387.624403][T11907] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 387.631701][T11907] Node 0 DMA32 free:1492184kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:19036kB inactive_anon:0kB active_file:73480kB inactive_file:158264kB unevictable:1536kB writepending:700kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:4676kB local_pcp:2028kB free_cma:0kB [ 387.692807][T11907] lowmem_reserve[]: 0 0 1 1 1 [ 387.701818][T11907] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:4kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 387.736923][T11907] lowmem_reserve[]: 0 0 0 0 0 [ 387.743411][T11907] Node 1 Normal free:3897528kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17604kB local_pcp:7552kB free_cma:0kB [ 387.780481][T11907] lowmem_reserve[]: 0 0 0 0 0 [ 387.786732][T11907] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 387.800084][T11907] Node 0 DMA32: 1334*4kB (ME) 1234*8kB (ME) 1197*16kB (UME) 955*32kB (UME) 461*64kB (UME) 308*128kB (UME) 88*256kB (UME) 59*512kB (UME) 23*1024kB (UME) 12*2048kB (UME) 307*4096kB (UM) = 1492184kB [ 387.821626][T11907] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 387.841505][T11907] Node 1 Normal: 222*4kB (UME) 56*8kB (UME) 40*16kB (UME) 78*32kB (UME) 23*64kB (UME) 7*128kB (UME) 2*256kB (UM) 0*512kB 1*1024kB (E) 1*2048kB (E) 949*4096kB (M) = 3897528kB [ 387.888551][T11907] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 387.898733][T11907] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 387.918610][T11907] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 387.930411][T11907] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 387.940321][T11907] 59676 total pagecache pages [ 387.962387][T11907] 0 pages in swap cache [ 387.966590][T11907] Free swap = 124996kB [ 387.979511][T11907] Total swap = 124996kB [ 387.984152][T11907] 2097051 pages RAM [ 387.988712][T11907] 0 pages HighMem/MovableOnly [ 387.993510][T11907] 416137 pages reserved [ 387.998498][T11907] 0 pages cma reserved [ 388.297073][T11947] __nla_validate_parse: 28 callbacks suppressed [ 388.297093][T11947] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2309'. [ 388.627518][T11959] FAULT_INJECTION: forcing a failure. [ 388.627518][T11959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.658609][T11957] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2314'. [ 388.664268][T11959] CPU: 0 PID: 11959 Comm: syz.0.2315 Not tainted 6.6.100-syzkaller #0 [ 388.676163][T11959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 388.686279][T11959] Call Trace: [ 388.689598][T11959] [ 388.692573][T11959] dump_stack_lvl+0x16c/0x230 [ 388.697306][T11959] ? show_regs_print_info+0x20/0x20 [ 388.702557][T11959] ? load_image+0x3b0/0x3b0 [ 388.707099][T11959] ? __lock_acquire+0x7c80/0x7c80 [ 388.712155][T11959] ? snprintf+0xdb/0x120 [ 388.716432][T11959] should_fail_ex+0x39d/0x4d0 [ 388.721147][T11959] _copy_to_user+0x2f/0xa0 [ 388.725593][T11959] simple_read_from_buffer+0xe7/0x150 [ 388.731002][T11959] proc_fail_nth_read+0x1e3/0x250 [ 388.736061][T11959] ? proc_fault_inject_write+0x340/0x340 [ 388.741747][T11959] ? fsnotify_perm+0x271/0x5e0 [ 388.746542][T11959] ? proc_fault_inject_write+0x340/0x340 [ 388.752203][T11959] vfs_read+0x27e/0x920 [ 388.756399][T11959] ? kernel_read+0x1e0/0x1e0 [ 388.761018][T11959] ? __fget_files+0x28/0x4d0 [ 388.765638][T11959] ? __fget_files+0x44a/0x4d0 [ 388.770354][T11959] ? __fdget_pos+0x2a3/0x330 [ 388.774965][T11959] ? ksys_read+0x75/0x250 [ 388.779327][T11959] ksys_read+0x147/0x250 [ 388.783597][T11959] ? vfs_write+0x940/0x940 [ 388.788045][T11959] ? lockdep_hardirqs_on+0x98/0x150 [ 388.793276][T11959] do_syscall_64+0x55/0xb0 [ 388.797719][T11959] ? clear_bhb_loop+0x40/0x90 [ 388.802422][T11959] ? clear_bhb_loop+0x40/0x90 [ 388.807124][T11959] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 388.813065][T11959] RIP: 0033:0x7f26bd18d3bc [ 388.817500][T11959] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 388.837139][T11959] RSP: 002b:00007f26bdfec030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 388.845575][T11959] RAX: ffffffffffffffda RBX: 00007f26bd3b5fa0 RCX: 00007f26bd18d3bc [ 388.853565][T11959] RDX: 000000000000000f RSI: 00007f26bdfec0a0 RDI: 0000000000000004 [ 388.861572][T11959] RBP: 00007f26bdfec090 R08: 0000000000000000 R09: 0000000000000000 [ 388.869561][T11959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 388.877554][T11959] R13: 0000000000000000 R14: 00007f26bd3b5fa0 R15: 00007ffc78b61368 [ 388.885565][T11959] [ 388.968417][T11964] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2317'. [ 389.009895][T11964] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2317'. [ 389.030361][T11965] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2317'. [ 389.041309][T11964] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2317'. [ 389.174427][T11973] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2321'. [ 389.522732][T11987] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2327'. [ 390.009778][T12000] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2329'. [ 390.042447][T12000] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2329'. [ 390.439250][T12022] netlink: 'syz.1.2337': attribute type 10 has an invalid length. [ 390.503628][T12022] team0: Port device netdevsim0 added [ 390.548277][T12027] netlink: 'syz.0.2341': attribute type 10 has an invalid length. [ 390.585664][T12027] team0: Port device netdevsim0 added [ 391.247102][T12060] FAULT_INJECTION: forcing a failure. [ 391.247102][T12060] name failslab, interval 1, probability 0, space 0, times 0 [ 391.269481][ T5100] Bluetooth: hci1: command 0x0406 tx timeout [ 391.295926][T12060] CPU: 1 PID: 12060 Comm: syz.2.2355 Not tainted 6.6.100-syzkaller #0 [ 391.304180][T12060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 391.314297][T12060] Call Trace: [ 391.317616][T12060] [ 391.320681][T12060] dump_stack_lvl+0x16c/0x230 [ 391.325419][T12060] ? show_regs_print_info+0x20/0x20 [ 391.330668][T12060] ? load_image+0x3b0/0x3b0 [ 391.335228][T12060] ? __might_sleep+0xe0/0xe0 [ 391.339870][T12060] ? __lock_acquire+0x7c80/0x7c80 [ 391.344939][T12060] ? trace_contention_end+0x39/0xe0 [ 391.350194][T12060] should_fail_ex+0x39d/0x4d0 [ 391.354923][T12060] should_failslab+0x9/0x20 [ 391.359499][T12060] slab_pre_alloc_hook+0x59/0x310 [ 391.364571][T12060] ? mutex_lock_nested+0x20/0x20 [ 391.369560][T12060] ? __ipv6_dev_mc_inc+0x413/0xac0 [ 391.374727][T12060] __kmem_cache_alloc_node+0x53/0x260 [ 391.380162][T12060] ? __ipv6_dev_mc_inc+0x413/0xac0 [ 391.385328][T12060] kmalloc_trace+0x2a/0xe0 [ 391.389806][T12060] __ipv6_dev_mc_inc+0x413/0xac0 [ 391.394809][T12060] __ipv6_sock_mc_join+0x53f/0x7b0 [ 391.399979][T12060] ipv6_mc_config+0x64/0xc0 [ 391.404522][T12060] inet6_addr_add+0x37f/0xb60 [ 391.409244][T12060] ? ipv6_mc_up+0x244/0x2f0 [ 391.413792][T12060] inet6_rtm_newaddr+0x68d/0x940 [ 391.418770][T12060] ? inet6_dump_ifinfo+0x940/0x940 [ 391.423913][T12060] ? mutex_lock_nested+0x20/0x20 [ 391.428886][T12060] ? inet6_dump_ifinfo+0x940/0x940 [ 391.434029][T12060] rtnetlink_rcv_msg+0x7c7/0xf10 [ 391.439008][T12060] ? rtnetlink_rcv_msg+0x1eb/0xf10 [ 391.444146][T12060] ? lockdep_hardirqs_on+0x98/0x150 [ 391.449407][T12060] ? rtnetlink_bind+0x80/0x80 [ 391.454115][T12060] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 391.460116][T12060] ? __dev_queue_xmit+0x245/0x35a0 [ 391.465245][T12060] ? lock_chain_count+0x20/0x20 [ 391.470119][T12060] ? __local_bh_enable_ip+0x12e/0x1c0 [ 391.475507][T12060] ? lockdep_hardirqs_on+0x98/0x150 [ 391.480739][T12060] ? __local_bh_enable_ip+0x12e/0x1c0 [ 391.486151][T12060] ? _local_bh_enable+0xa0/0xa0 [ 391.491028][T12060] ? __dev_queue_xmit+0x245/0x35a0 [ 391.496161][T12060] ? __dev_queue_xmit+0x1449/0x35a0 [ 391.501387][T12060] ? __dev_queue_xmit+0x245/0x35a0 [ 391.506523][T12060] ? ref_tracker_free+0x634/0x7d0 [ 391.511568][T12060] ? __copy_skb_header+0xa7/0x550 [ 391.516626][T12060] netlink_rcv_skb+0x216/0x480 [ 391.521412][T12060] ? rtnetlink_bind+0x80/0x80 [ 391.526112][T12060] ? netlink_ack+0x1110/0x1110 [ 391.530906][T12060] ? __lock_acquire+0x7c80/0x7c80 [ 391.535959][T12060] ? netlink_deliver_tap+0x2e/0x1b0 [ 391.541194][T12060] netlink_unicast+0x751/0x8d0 [ 391.545997][T12060] netlink_sendmsg+0x8c1/0xbe0 [ 391.550801][T12060] ? netlink_getsockopt+0x580/0x580 [ 391.556024][T12060] ? aa_sock_msg_perm+0x94/0x150 [ 391.560986][T12060] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 391.566289][T12060] ? security_socket_sendmsg+0x80/0xa0 [ 391.571800][T12060] ? netlink_getsockopt+0x580/0x580 [ 391.577024][T12060] ____sys_sendmsg+0x5bf/0x950 [ 391.581819][T12060] ? __asan_memset+0x22/0x40 [ 391.586435][T12060] ? __sys_sendmsg_sock+0x30/0x30 [ 391.591476][T12060] ? __import_iovec+0x5f2/0x860 [ 391.596359][T12060] ? import_iovec+0x73/0xa0 [ 391.600894][T12060] ___sys_sendmsg+0x220/0x290 [ 391.605599][T12060] ? __sys_sendmsg+0x270/0x270 [ 391.610405][T12060] ? __lock_acquire+0x7c80/0x7c80 [ 391.615476][T12060] __se_sys_sendmsg+0x1a5/0x270 [ 391.620351][T12060] ? __x64_sys_sendmsg+0x80/0x80 [ 391.625326][T12060] ? lockdep_hardirqs_on+0x98/0x150 [ 391.630550][T12060] do_syscall_64+0x55/0xb0 [ 391.634989][T12060] ? clear_bhb_loop+0x40/0x90 [ 391.639680][T12060] ? clear_bhb_loop+0x40/0x90 [ 391.644390][T12060] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 391.650310][T12060] RIP: 0033:0x7f7fd138e9a9 [ 391.654749][T12060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.674377][T12060] RSP: 002b:00007f7fd216f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.682818][T12060] RAX: ffffffffffffffda RBX: 00007f7fd15b5fa0 RCX: 00007f7fd138e9a9 [ 391.690805][T12060] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 391.698794][T12060] RBP: 00007f7fd216f090 R08: 0000000000000000 R09: 0000000000000000 [ 391.706805][T12060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.714791][T12060] R13: 0000000000000000 R14: 00007f7fd15b5fa0 R15: 00007ffcdacc03f8 [ 391.722794][T12060] [ 391.873684][T12069] FAULT_INJECTION: forcing a failure. [ 391.873684][T12069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.907683][T12069] CPU: 1 PID: 12069 Comm: syz.3.2359 Not tainted 6.6.100-syzkaller #0 [ 391.915913][T12069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 391.926004][T12069] Call Trace: [ 391.929318][T12069] [ 391.932276][T12069] dump_stack_lvl+0x16c/0x230 [ 391.936980][T12069] ? show_regs_print_info+0x20/0x20 [ 391.942210][T12069] ? load_image+0x3b0/0x3b0 [ 391.946780][T12069] ? __might_fault+0xaa/0x120 [ 391.951508][T12069] ? __lock_acquire+0x7c80/0x7c80 [ 391.956576][T12069] should_fail_ex+0x39d/0x4d0 [ 391.961294][T12069] _copy_to_user+0x2f/0xa0 [ 391.965763][T12069] bpf_test_finish+0x24b/0x620 [ 391.970592][T12069] ? convert_skb_to___skb+0x420/0x420 [ 391.976026][T12069] ? _copy_from_user+0xa5/0xe0 [ 391.980850][T12069] ? bpf_test_init+0x134/0x150 [ 391.985671][T12069] bpf_prog_test_run_xdp+0x7fa/0xfa0 [ 391.991023][T12069] ? dev_put+0x80/0x80 [ 391.995167][T12069] ? dev_put+0x80/0x80 [ 391.999291][T12069] bpf_prog_test_run+0x321/0x390 [ 392.004285][T12069] __sys_bpf+0x440/0x800 [ 392.008577][T12069] ? bpf_link_show_fdinfo+0x350/0x350 [ 392.014006][T12069] ? lock_chain_count+0x20/0x20 [ 392.018911][T12069] __x64_sys_bpf+0x7c/0x90 [ 392.023385][T12069] do_syscall_64+0x55/0xb0 [ 392.027843][T12069] ? clear_bhb_loop+0x40/0x90 [ 392.032544][T12069] ? clear_bhb_loop+0x40/0x90 [ 392.037248][T12069] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 392.043174][T12069] RIP: 0033:0x7ff36098e9a9 [ 392.047612][T12069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.067251][T12069] RSP: 002b:00007ff361791038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 392.075691][T12069] RAX: ffffffffffffffda RBX: 00007ff360bb5fa0 RCX: 00007ff36098e9a9 [ 392.083769][T12069] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 392.091769][T12069] RBP: 00007ff361791090 R08: 0000000000000000 R09: 0000000000000000 [ 392.099765][T12069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 392.107751][T12069] R13: 0000000000000000 R14: 00007ff360bb5fa0 R15: 00007ffcacb1f2e8 [ 392.115798][T12069] [ 392.475545][ T5100] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 392.852066][T12099] syzkaller0: entered promiscuous mode [ 392.866415][T12099] syzkaller0: entered allmulticast mode [ 393.635462][T12120] __nla_validate_parse: 25 callbacks suppressed [ 393.635485][T12120] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2378'. [ 393.874745][T12126] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2380'. [ 394.019998][T12129] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.2381'. [ 394.034755][T12129] openvswitch: netlink: Duplicate key (type 0). [ 394.527609][ T5796] Bluetooth: hci1: command 0x0406 tx timeout [ 396.082073][T12120] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2378'. [ 396.139390][T12127] team0: Port device C removed [ 396.154742][T12127] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 396.171747][T12134] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2383'. [ 396.719842][T12151] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2391'. [ 397.695887][T12161] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2395'. [ 397.894284][T12173] netlink: 4071 bytes leftover after parsing attributes in process `syz.1.2407'. [ 398.239452][T12183] netlink: 'syz.3.2404': attribute type 6 has an invalid length. [ 398.249407][T12183] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2404'. [ 399.292269][T12200] netlink: 4071 bytes leftover after parsing attributes in process `syz.0.2412'. [ 400.277596][T12221] netlink: 'syz.2.2419': attribute type 2 has an invalid length. [ 400.325022][T12221] netlink: 51 bytes leftover after parsing attributes in process `syz.2.2419'. [ 400.621524][ T5796] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 400.631256][ T5796] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 400.643086][ T5796] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 400.652026][ T5796] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 400.660467][ T5796] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 400.668137][ T5796] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 400.920717][ T131] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.046314][ T131] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.220256][ T131] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.372476][ T131] team0: Port device netdevsim0 removed [ 401.877905][T12224] chnl_net:caif_netlink_parms(): no params data found [ 402.021322][T12264] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2434'. [ 402.302916][T12224] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.316648][T12224] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.324907][T12224] bridge_slave_0: entered allmulticast mode [ 402.332547][T12224] bridge_slave_0: entered promiscuous mode [ 402.341547][T12224] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.349200][T12224] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.356489][T12224] bridge_slave_1: entered allmulticast mode [ 402.364080][T12224] bridge_slave_1: entered promiscuous mode [ 402.427986][T12224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.468640][T12224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.525954][T12224] team0: Port device team_slave_0 added [ 402.535520][T12224] team0: Port device team_slave_1 added [ 402.586962][T12224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.594543][T12224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.623373][T12224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.653265][T12224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.660593][T12224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.686859][T12224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.747280][T12224] hsr_slave_0: entered promiscuous mode [ 402.754555][T12224] hsr_slave_1: entered promiscuous mode [ 402.760841][T12224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 402.768678][ T5100] Bluetooth: hci3: command tx timeout [ 402.774979][T12224] Cannot create hsr debugfs directory [ 403.256353][ T131] hsr_slave_0: left promiscuous mode [ 403.267241][ T131] hsr_slave_1: left promiscuous mode [ 403.275213][ T131] batman_adv: batadv0: Removing interface: team0 [ 403.284889][ T131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.292498][ T131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.303322][ T131] batadv_slave_1: left allmulticast mode [ 403.309226][ T131] bridge0: port 4(batadv_slave_1) entered disabled state [ 403.318574][ T131] bridge0: port 3(batadv0) entered disabled state [ 403.326693][ T131] bridge_slave_1: left allmulticast mode [ 403.332453][ T131] bridge_slave_1: left promiscuous mode [ 403.338300][ T131] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.346936][ T131] bridge_slave_0: left allmulticast mode [ 403.352964][ T131] bridge_slave_0: left promiscuous mode [ 403.358722][ T131] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.379318][ T131] veth1_macvtap: left allmulticast mode [ 403.385180][ T131] veth1_macvtap: left promiscuous mode [ 403.390852][ T131] veth0_macvtap: left promiscuous mode [ 403.396465][ T131] veth1_vlan: left promiscuous mode [ 403.925687][ T131] team0 (unregistering): Port device 7ÿ removed [ 403.971181][ T131] team0 (unregistering): Port device C removed [ 404.497744][T12224] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 404.508388][T12224] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 404.519188][T12224] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 404.539417][T12224] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 404.691895][T12224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.714191][T12224] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.743537][ T2928] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.750813][ T2928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.769755][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.776934][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.849296][ T5100] Bluetooth: hci3: command tx timeout [ 404.995285][T12224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.051177][T12224] veth0_vlan: entered promiscuous mode [ 405.067056][T12224] veth1_vlan: entered promiscuous mode [ 405.102893][T12224] veth0_macvtap: entered promiscuous mode [ 405.113632][T12224] veth1_macvtap: entered promiscuous mode [ 405.133245][T12224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.144492][T12224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.154804][T12224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.165706][T12224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.175634][T12224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.186524][T12224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.199338][T12224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.214144][T12224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.224882][T12224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.234940][T12224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.245429][T12224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.255905][T12224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.266394][T12224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.278358][T12224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.295674][T12224] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.304610][T12224] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.313965][T12224] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.322767][T12224] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.390267][ T2928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.405808][ T2928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.432100][ T131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.440704][ T131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.712603][T12303] FAULT_INJECTION: forcing a failure. [ 405.712603][T12303] name failslab, interval 1, probability 0, space 0, times 0 [ 405.744805][T12303] CPU: 1 PID: 12303 Comm: syz.3.2442 Not tainted 6.6.100-syzkaller #0 [ 405.753069][T12303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 405.763190][T12303] Call Trace: [ 405.766525][T12303] [ 405.769513][T12303] dump_stack_lvl+0x16c/0x230 [ 405.774266][T12303] ? show_regs_print_info+0x20/0x20 [ 405.779535][T12303] ? load_image+0x3b0/0x3b0 [ 405.784092][T12303] ? __might_sleep+0xe0/0xe0 [ 405.788730][T12303] ? __lock_acquire+0x7c80/0x7c80 [ 405.793799][T12303] should_fail_ex+0x39d/0x4d0 [ 405.798528][T12303] should_failslab+0x9/0x20 [ 405.803073][T12303] slab_pre_alloc_hook+0x59/0x310 [ 405.808150][T12303] kmem_cache_alloc_node+0x60/0x330 [ 405.813391][T12303] ? __alloc_skb+0x108/0x2c0 [ 405.818031][T12303] __alloc_skb+0x108/0x2c0 [ 405.822494][T12303] rtmsg_ifinfo_build_skb+0x8c/0x260 [ 405.827829][T12303] rtmsg_ifinfo+0x8c/0x1a0 [ 405.832289][T12303] netdev_state_change+0xf0/0x150 [ 405.837355][T12303] ? netdev_features_change+0xc0/0xc0 [ 405.842781][T12303] ? br_set_forward_delay+0x134/0x160 [ 405.848190][T12303] ? br_set_forward_delay+0x134/0x160 [ 405.853687][T12303] br_dev_siocdevprivate+0xdc2/0x1550 [ 405.859107][T12303] ? br_handle_local_finish+0x20/0x20 [ 405.864515][T12303] ? __mutex_trylock_common+0x153/0x250 [ 405.870096][T12303] ? trace_raw_output_contention_end+0xd0/0xd0 [ 405.876294][T12303] ? rcu_is_watching+0x15/0xb0 [ 405.881125][T12303] ? trace_contention_end+0x39/0xe0 [ 405.886355][T12303] ? __mutex_lock+0x304/0xcc0 [ 405.891077][T12303] ? full_name_hash+0x92/0xe0 [ 405.895805][T12303] dev_ifsioc+0xae6/0xe20 [ 405.900173][T12303] ? dev_ioctl+0x1170/0x1170 [ 405.904980][T12303] ? dev_load+0x21/0x1f0 [ 405.909264][T12303] ? dev_load+0x21/0x1f0 [ 405.913545][T12303] dev_ioctl+0x87a/0x1170 [ 405.918001][T12303] sock_ioctl+0x726/0x7a0 [ 405.922369][T12303] ? sock_poll+0x3d0/0x3d0 [ 405.926839][T12303] ? bpf_lsm_file_ioctl+0x9/0x10 [ 405.931800][T12303] ? security_file_ioctl+0x80/0xa0 [ 405.936949][T12303] ? sock_poll+0x3d0/0x3d0 [ 405.941406][T12303] __se_sys_ioctl+0xfd/0x170 [ 405.946036][T12303] do_syscall_64+0x55/0xb0 [ 405.950486][T12303] ? clear_bhb_loop+0x40/0x90 [ 405.955191][T12303] ? clear_bhb_loop+0x40/0x90 [ 405.959899][T12303] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 405.965830][T12303] RIP: 0033:0x7ff36098e9a9 [ 405.970275][T12303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.989921][T12303] RSP: 002b:00007ff361791038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 405.998372][T12303] RAX: ffffffffffffffda RBX: 00007ff360bb5fa0 RCX: 00007ff36098e9a9 [ 406.006376][T12303] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000005 [ 406.014377][T12303] RBP: 00007ff361791090 R08: 0000000000000000 R09: 0000000000000000 [ 406.022382][T12303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.030376][T12303] R13: 0000000000000000 R14: 00007ff360bb5fa0 R15: 00007ffcacb1f2e8 [ 406.038458][T12303] [ 406.095348][T12305] netlink: 'syz.1.2441': attribute type 10 has an invalid length. [ 406.509828][T12316] netlink: 'syz.1.2445': attribute type 10 has an invalid length. [ 406.534164][T12316] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2445'. [ 406.555819][T12316] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 406.576440][T12316] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 406.927637][ T5100] Bluetooth: hci3: command tx timeout [ 406.954586][T12328] netlink: 'syz.2.2451': attribute type 39 has an invalid length. [ 407.848125][T12355] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2464'. [ 407.888327][T12355] FAULT_INJECTION: forcing a failure. [ 407.888327][T12355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.926914][T12355] CPU: 1 PID: 12355 Comm: syz.0.2464 Not tainted 6.6.100-syzkaller #0 [ 407.935168][T12355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 407.945281][T12355] Call Trace: [ 407.948617][T12355] [ 407.951595][T12355] dump_stack_lvl+0x16c/0x230 [ 407.956338][T12355] ? show_regs_print_info+0x20/0x20 [ 407.961600][T12355] ? load_image+0x3b0/0x3b0 [ 407.966177][T12355] ? __lock_acquire+0x7c80/0x7c80 [ 407.971267][T12355] ? snprintf+0xdb/0x120 [ 407.975590][T12355] should_fail_ex+0x39d/0x4d0 [ 407.980345][T12355] _copy_to_user+0x2f/0xa0 [ 407.984816][T12355] simple_read_from_buffer+0xe7/0x150 [ 407.990237][T12355] proc_fail_nth_read+0x1e3/0x250 [ 407.995311][T12355] ? proc_fault_inject_write+0x340/0x340 [ 408.000999][T12355] ? fsnotify_perm+0x271/0x5e0 [ 408.005808][T12355] ? proc_fault_inject_write+0x340/0x340 [ 408.011471][T12355] vfs_read+0x27e/0x920 [ 408.015675][T12355] ? kernel_read+0x1e0/0x1e0 [ 408.020303][T12355] ? __fget_files+0x28/0x4d0 [ 408.024922][T12355] ? __fget_files+0x44a/0x4d0 [ 408.029646][T12355] ? __fdget_pos+0x2a3/0x330 [ 408.034270][T12355] ? ksys_read+0x75/0x250 [ 408.038635][T12355] ksys_read+0x147/0x250 [ 408.042915][T12355] ? vfs_write+0x940/0x940 [ 408.047370][T12355] ? lockdep_hardirqs_on+0x98/0x150 [ 408.052618][T12355] do_syscall_64+0x55/0xb0 [ 408.057058][T12355] ? clear_bhb_loop+0x40/0x90 [ 408.061756][T12355] ? clear_bhb_loop+0x40/0x90 [ 408.066462][T12355] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 408.072392][T12355] RIP: 0033:0x7f3a3998d3bc [ 408.076846][T12355] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 408.096490][T12355] RSP: 002b:00007f3a3a73c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 408.104934][T12355] RAX: ffffffffffffffda RBX: 00007f3a39bb5fa0 RCX: 00007f3a3998d3bc [ 408.112933][T12355] RDX: 000000000000000f RSI: 00007f3a3a73c0a0 RDI: 0000000000000005 [ 408.120932][T12355] RBP: 00007f3a3a73c090 R08: 0000000000000000 R09: 0000000000000000 [ 408.128926][T12355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 408.136921][T12355] R13: 0000000000000000 R14: 00007f3a39bb5fa0 R15: 00007ffc93f9f7e8 [ 408.144950][T12355] [ 408.434853][T12357] syzkaller0: entered promiscuous mode [ 408.455837][T12357] syzkaller0: entered allmulticast mode [ 408.584968][ T5796] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 408.608079][ T5796] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 408.616751][ T5796] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 408.637488][ T5796] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 408.641876][T12360] FAULT_INJECTION: forcing a failure. [ 408.641876][T12360] name failslab, interval 1, probability 0, space 0, times 0 [ 408.667237][ T5796] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 408.675365][ T5796] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 408.680105][T12360] CPU: 1 PID: 12360 Comm: syz.1.2466 Not tainted 6.6.100-syzkaller #0 [ 408.690629][T12360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 408.700806][T12360] Call Trace: [ 408.704187][T12360] [ 408.707220][T12360] dump_stack_lvl+0x16c/0x230 [ 408.712044][T12360] ? show_regs_print_info+0x20/0x20 [ 408.717376][T12360] ? load_image+0x3b0/0x3b0 [ 408.722042][T12360] ? __might_sleep+0xe0/0xe0 [ 408.726760][T12360] ? __lock_acquire+0x7c80/0x7c80 [ 408.731925][T12360] should_fail_ex+0x39d/0x4d0 [ 408.736748][T12360] should_failslab+0x9/0x20 [ 408.741348][T12360] slab_pre_alloc_hook+0x59/0x310 [ 408.746519][T12360] ? sctp_association_new+0x89/0x25c0 [ 408.752029][T12360] __kmem_cache_alloc_node+0x53/0x260 [ 408.757563][T12360] ? sctp_association_new+0x89/0x25c0 [ 408.763064][T12360] kmalloc_trace+0x2a/0xe0 [ 408.767579][T12360] sctp_association_new+0x89/0x25c0 [ 408.772855][T12360] ? sctp_has_association+0x1cd/0x1e0 [ 408.778306][T12360] ? sctp_has_association+0x2f/0x1e0 [ 408.783753][T12360] sctp_connect_new_asoc+0x2bf/0x690 [ 408.789132][T12360] ? __sctp_connect+0xd20/0xd20 [ 408.794047][T12360] ? __local_bh_enable_ip+0x12e/0x1c0 [ 408.799483][T12360] ? _local_bh_enable+0xa0/0xa0 [ 408.804405][T12360] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 408.810270][T12360] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 408.816138][T12360] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 408.821734][T12360] ? security_sctp_bind_connect+0x89/0xb0 [ 408.827548][T12360] sctp_sendmsg+0x155c/0x27e0 [ 408.832373][T12360] ? sctp_getsockopt+0xb60/0xb60 [ 408.837428][T12360] ? aa_sk_perm+0x7fc/0x930 [ 408.842033][T12360] ? aa_af_perm+0x2b0/0x2b0 [ 408.846601][T12360] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 408.853161][T12360] ? sock_rps_record_flow+0x19/0x400 [ 408.858547][T12360] ? inet_send_prepare+0x260/0x260 [ 408.863769][T12360] ? inet_sendmsg+0x7c/0x2f0 [ 408.868435][T12360] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 408.873787][T12360] ? security_socket_sendmsg+0x80/0xa0 [ 408.879327][T12360] ? inet_send_prepare+0x260/0x260 [ 408.884510][T12360] ____sys_sendmsg+0x5bf/0x950 [ 408.889381][T12360] ? __asan_memset+0x22/0x40 [ 408.894054][T12360] ? __sys_sendmsg_sock+0x30/0x30 [ 408.899160][T12360] ? __import_iovec+0x5f2/0x860 [ 408.904133][T12360] ? import_iovec+0x73/0xa0 [ 408.908728][T12360] ___sys_sendmsg+0x220/0x290 [ 408.913520][T12360] ? __sys_sendmsg+0x270/0x270 [ 408.918468][T12360] ? __lock_acquire+0x7c80/0x7c80 [ 408.923701][T12360] __se_sys_sendmsg+0x1a5/0x270 [ 408.928641][T12360] ? __x64_sys_sendmsg+0x80/0x80 [ 408.933735][T12360] ? lockdep_hardirqs_on+0x98/0x150 [ 408.939028][T12360] do_syscall_64+0x55/0xb0 [ 408.943505][T12360] ? clear_bhb_loop+0x40/0x90 [ 408.948279][T12360] ? clear_bhb_loop+0x40/0x90 [ 408.953080][T12360] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 408.959061][T12360] RIP: 0033:0x7f517238e9a9 [ 408.963557][T12360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.983240][T12360] RSP: 002b:00007f5173246038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 408.991729][T12360] RAX: ffffffffffffffda RBX: 00007f51725b5fa0 RCX: 00007f517238e9a9 [ 408.999760][T12360] RDX: 0000000004000080 RSI: 0000200000000680 RDI: 0000000000000004 [ 409.007789][T12360] RBP: 00007f5173246090 R08: 0000000000000000 R09: 0000000000000000 [ 409.015823][T12360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.023855][T12360] R13: 0000000000000000 R14: 00007f51725b5fa0 R15: 00007fff7370f658 [ 409.031970][T12360] [ 409.035433][ T5796] Bluetooth: hci3: command tx timeout [ 411.168230][ T5796] Bluetooth: hci4: command tx timeout [ 411.236851][ T131] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.358767][T12394] netlink: 'syz.1.2477': attribute type 4 has an invalid length. [ 411.366584][T12394] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2477'. [ 411.393443][ T131] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.419477][T12366] chnl_net:caif_netlink_parms(): no params data found [ 411.419991][T12396] netlink: 149476 bytes leftover after parsing attributes in process `syz.3.2478'. [ 411.583947][ T131] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.784695][ T131] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.814566][T12366] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.822068][T12366] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.847676][T12366] bridge_slave_0: entered allmulticast mode [ 411.856842][T12366] bridge_slave_0: entered promiscuous mode [ 411.877216][T12366] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.889882][T12366] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.897354][T12366] bridge_slave_1: entered allmulticast mode [ 411.905432][T12366] bridge_slave_1: entered promiscuous mode [ 411.993817][T12413] netlink: 'syz.3.2483': attribute type 4 has an invalid length. [ 412.032179][T12413] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2483'. [ 412.112164][T12413] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 412.170873][T12366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.199187][T12366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.317157][T12366] team0: Port device team_slave_0 added [ 412.336061][T12366] team0: Port device team_slave_1 added [ 412.480355][T12366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.495341][T12366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.538643][T12366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.581686][T12426] FAULT_INJECTION: forcing a failure. [ 412.581686][T12426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.604307][T12366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.611780][T12366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.647743][T12426] CPU: 0 PID: 12426 Comm: syz.3.2488 Not tainted 6.6.100-syzkaller #0 [ 412.655985][T12426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 412.666083][T12426] Call Trace: [ 412.669383][T12426] [ 412.672329][T12426] dump_stack_lvl+0x16c/0x230 [ 412.677029][T12426] ? show_regs_print_info+0x20/0x20 [ 412.682251][T12426] ? load_image+0x3b0/0x3b0 [ 412.686780][T12426] ? __might_fault+0xaa/0x120 [ 412.691484][T12426] ? __lock_acquire+0x7c80/0x7c80 [ 412.696529][T12426] should_fail_ex+0x39d/0x4d0 [ 412.701236][T12426] _copy_from_user+0x2f/0xe0 [ 412.705846][T12426] restore_altstack+0x9e/0x4a0 [ 412.710632][T12426] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 412.716721][T12426] ? __ia32_sys_sigaltstack+0x270/0x270 [ 412.722288][T12426] ? _raw_spin_unlock_irq+0x23/0x50 [ 412.727512][T12426] ? lockdep_hardirqs_on+0x98/0x150 [ 412.732731][T12426] __ia32_sys_rt_sigreturn+0x1f6/0x7b0 [ 412.738222][T12426] ? lockdep_hardirqs_on+0x98/0x150 [ 412.743464][T12426] ? _raw_spin_unlock_irq+0x2e/0x50 [ 412.748685][T12426] ? x64_setup_rt_frame+0xcd0/0xcd0 [ 412.753909][T12426] ? arch_do_signal_or_restart+0x492/0x780 [ 412.759749][T12426] ? get_sigframe_size+0x20/0x20 [ 412.764720][T12426] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 412.770724][T12426] ? lock_chain_count+0x20/0x20 [ 412.775642][T12426] ? lockdep_hardirqs_on+0x98/0x150 [ 412.780866][T12426] do_syscall_64+0x55/0xb0 [ 412.785299][T12426] ? clear_bhb_loop+0x40/0x90 [ 412.789991][T12426] ? clear_bhb_loop+0x40/0x90 [ 412.794688][T12426] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 412.800604][T12426] RIP: 0033:0x7ff36092ab89 [ 412.805038][T12426] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 412.824863][T12426] RSP: 002b:00007ff361790a80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 412.833297][T12426] RAX: ffffffffffffffda RBX: 00007ff360bb5fa0 RCX: 00007ff36092ab89 [ 412.841283][T12426] RDX: 00007ff361790a80 RSI: 00007ff361790bb0 RDI: 0000000000000011 [ 412.849274][T12426] RBP: 00007ff361791090 R08: 0000000000000000 R09: 0000000000000000 [ 412.857265][T12426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.865267][T12426] R13: 0000000000000000 R14: 00007ff360bb5fa0 R15: 00007ffcacb1f2e8 [ 412.873275][T12426] [ 412.886750][T12366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.042152][T12366] hsr_slave_0: entered promiscuous mode [ 413.049667][T12366] hsr_slave_1: entered promiscuous mode [ 413.250059][ T5796] Bluetooth: hci4: command tx timeout [ 413.866570][T12462] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 414.337857][T12473] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2509'. [ 414.371499][T12366] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 414.411248][T12366] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 414.450778][T12366] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 414.540617][T12366] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 414.606154][T12487] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2513'. [ 414.625132][ T131] hsr_slave_0: left promiscuous mode [ 414.643138][ T131] hsr_slave_1: left promiscuous mode [ 414.679635][ T131] batman_adv: batadv0: Removing interface: team0 [ 414.692044][ T131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.706778][ T131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.728565][ T131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.741659][ T131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.763995][ T131] bridge0: port 3(batadv0) entered disabled state [ 414.787521][ T131] bridge_slave_1: left allmulticast mode [ 414.793555][ T131] bridge_slave_1: left promiscuous mode [ 414.799442][ T131] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.812191][ T131] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.983694][ T131] veth1_macvtap: left promiscuous mode [ 415.003130][ T131] veth0_macvtap: left promiscuous mode [ 415.035934][ T131] veth1_vlan: left promiscuous mode [ 415.327674][ T5796] Bluetooth: hci4: command tx timeout [ 415.462223][ T131] team0 (unregistering): Port device geneve1 removed [ 415.941337][ T131] team0 (unregistering): Port device team_slave_1 removed [ 416.025296][ T131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.082581][ T131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.310838][ T131] team0 (unregistering): Port device dummy0 removed [ 416.551412][ T131] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 416.560579][ T131] bond0 (unregistering): Released all slaves [ 416.653528][T12501] netlink: 'syz.3.2518': attribute type 2 has an invalid length. [ 416.661684][T12501] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.2518'. [ 416.682621][T12505] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2519'. [ 416.890334][T12513] FAULT_INJECTION: forcing a failure. [ 416.890334][T12513] name failslab, interval 1, probability 0, space 0, times 0 [ 416.930190][T12513] CPU: 1 PID: 12513 Comm: syz.1.2521 Not tainted 6.6.100-syzkaller #0 [ 416.938433][T12513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 416.948536][T12513] Call Trace: [ 416.951862][T12513] [ 416.954838][T12513] dump_stack_lvl+0x16c/0x230 [ 416.959575][T12513] ? show_regs_print_info+0x20/0x20 [ 416.964837][T12513] ? load_image+0x3b0/0x3b0 [ 416.969402][T12513] ? __might_sleep+0xe0/0xe0 [ 416.974046][T12513] ? __lock_acquire+0x7c80/0x7c80 [ 416.979133][T12513] should_fail_ex+0x39d/0x4d0 [ 416.983871][T12513] should_failslab+0x9/0x20 [ 416.988412][T12513] slab_pre_alloc_hook+0x59/0x310 [ 416.993472][T12513] ? lockdep_hardirqs_on+0x98/0x150 [ 416.998709][T12513] kmem_cache_alloc_node+0x60/0x330 [ 417.003956][T12513] ? __alloc_skb+0x108/0x2c0 [ 417.008588][T12513] __alloc_skb+0x108/0x2c0 [ 417.013049][T12513] netlink_ack+0x376/0x1110 [ 417.017589][T12513] ? __dev_queue_xmit+0x245/0x35a0 [ 417.022735][T12513] ? netlink_dump+0xde0/0xde0 [ 417.027439][T12513] ? ref_tracker_free+0x634/0x7d0 [ 417.032493][T12513] ? __copy_skb_header+0xa7/0x550 [ 417.037575][T12513] netlink_rcv_skb+0x29a/0x480 [ 417.042369][T12513] ? rtnetlink_bind+0x80/0x80 [ 417.047220][T12513] ? netlink_ack+0x1110/0x1110 [ 417.052026][T12513] ? __lock_acquire+0x7c80/0x7c80 [ 417.057099][T12513] ? netlink_deliver_tap+0x2e/0x1b0 [ 417.062332][T12513] netlink_unicast+0x751/0x8d0 [ 417.067133][T12513] netlink_sendmsg+0x8c1/0xbe0 [ 417.071945][T12513] ? netlink_getsockopt+0x580/0x580 [ 417.077192][T12513] ? aa_sock_msg_perm+0x94/0x150 [ 417.082169][T12513] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 417.087514][T12513] ? security_socket_sendmsg+0x80/0xa0 [ 417.092992][T12513] ? netlink_getsockopt+0x580/0x580 [ 417.098227][T12513] ____sys_sendmsg+0x5bf/0x950 [ 417.103023][T12513] ? __asan_memset+0x22/0x40 [ 417.107636][T12513] ? __sys_sendmsg_sock+0x30/0x30 [ 417.112685][T12513] ? __import_iovec+0x5f2/0x860 [ 417.117570][T12513] ? import_iovec+0x73/0xa0 [ 417.122099][T12513] ___sys_sendmsg+0x220/0x290 [ 417.126890][T12513] ? __sys_sendmsg+0x270/0x270 [ 417.131701][T12513] ? __lock_acquire+0x7c80/0x7c80 [ 417.136854][T12513] __se_sys_sendmsg+0x1a5/0x270 [ 417.141731][T12513] ? __x64_sys_sendmsg+0x80/0x80 [ 417.146706][T12513] ? lockdep_hardirqs_on+0x98/0x150 [ 417.151943][T12513] do_syscall_64+0x55/0xb0 [ 417.156374][T12513] ? clear_bhb_loop+0x40/0x90 [ 417.161065][T12513] ? clear_bhb_loop+0x40/0x90 [ 417.165758][T12513] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 417.171675][T12513] RIP: 0033:0x7f517238e9a9 [ 417.176105][T12513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.195753][T12513] RSP: 002b:00007f5173246038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 417.204279][T12513] RAX: ffffffffffffffda RBX: 00007f51725b5fa0 RCX: 00007f517238e9a9 [ 417.212270][T12513] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 417.220257][T12513] RBP: 00007f5173246090 R08: 0000000000000000 R09: 0000000000000000 [ 417.228243][T12513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.236243][T12513] R13: 0000000000000000 R14: 00007f51725b5fa0 R15: 00007fff7370f658 [ 417.244259][T12513] [ 417.255109][T12366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.318038][T12366] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.345135][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.352357][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.408103][ T5796] Bluetooth: hci4: command tx timeout [ 417.440539][ T2928] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.447947][ T2928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.058836][T12366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.161317][T12366] veth0_vlan: entered promiscuous mode [ 418.181263][T12366] veth1_vlan: entered promiscuous mode [ 418.219364][T12366] veth0_macvtap: entered promiscuous mode [ 418.230584][T12366] veth1_macvtap: entered promiscuous mode [ 418.260215][T12366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.280831][T12366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.297457][T12366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.317544][T12366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.327578][T12366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.342681][T12366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.356882][T12366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.381861][T12366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.414859][T12366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.439918][T12366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.477486][T12366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.507575][T12366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.526635][T12366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.543799][T12366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.555019][T12541] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2529'. [ 418.591742][T12366] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.616750][T12366] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.634189][T12366] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.643028][T12366] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.831311][ T3443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.834247][T12549] netlink: 'syz.1.2533': attribute type 10 has an invalid length. [ 418.849362][ T3443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.878794][T12549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.896301][T12551] sctp: [Deprecated]: syz.3.2534 (pid 12551) Use of struct sctp_assoc_value in delayed_ack socket option. [ 418.896301][T12551] Use struct sctp_sack_info instead [ 418.900122][T12549] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 419.005816][ T3443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.015737][ T3443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.404551][T12563] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2538'. [ 420.234543][T12585] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2548'. [ 421.744133][T12600] netlink: 'syz.1.2552': attribute type 10 has an invalid length. [ 421.779777][T12600] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2552'. [ 421.825766][T12600] team0: entered promiscuous mode [ 421.854566][T12600] team_slave_0: entered promiscuous mode [ 421.875452][T12600] team_slave_1: entered promiscuous mode [ 421.905941][T12600] bridge0: entered promiscuous mode [ 421.932873][T12600] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 421.988241][T12600] team0: entered allmulticast mode [ 422.016346][T12600] team_slave_0: entered allmulticast mode [ 422.047752][T12600] team_slave_1: entered allmulticast mode [ 422.082969][T12600] bridge0: entered allmulticast mode [ 422.108507][T12600] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 422.156191][T12600] bridge0: port 3(team0) entered blocking state [ 422.199356][T12600] bridge0: port 3(team0) entered disabled state [ 438.732710][ T5100] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 438.752326][ T5100] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 438.761323][ T5100] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 438.773148][ T5100] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 438.782999][ T5100] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 438.791538][ T5100] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 440.348633][ T5796] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 440.359870][ T5796] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 440.370306][ T5796] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 440.380484][ T5796] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 440.395893][ T5796] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 440.404983][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.413534][ T5796] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 440.450244][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.638834][ T5100] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 440.650134][ T5100] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 440.668494][ T5100] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 440.689702][ T5100] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 440.698837][ T5100] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 440.706669][ T5100] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 440.854503][ T5100] Bluetooth: hci2: command tx timeout [ 440.896119][ T5796] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 440.906544][ T5796] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 440.915388][ T5796] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 440.927211][ T5796] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 440.936407][ T5796] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 440.947868][ T5796] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 442.528162][ T5100] Bluetooth: hci5: command tx timeout [ 442.777605][ T5100] Bluetooth: hci6: command tx timeout [ 442.937627][ T5100] Bluetooth: hci2: command tx timeout [ 443.008244][ T5100] Bluetooth: hci7: command tx timeout [ 444.607827][ T5100] Bluetooth: hci5: command tx timeout [ 444.850139][ T5100] Bluetooth: hci6: command tx timeout [ 445.008034][ T5100] Bluetooth: hci2: command tx timeout [ 445.088744][ T5100] Bluetooth: hci7: command tx timeout [ 446.688826][ T5100] Bluetooth: hci5: command tx timeout [ 446.938070][ T5100] Bluetooth: hci6: command tx timeout [ 447.087906][ T5100] Bluetooth: hci2: command tx timeout [ 447.169558][ T5100] Bluetooth: hci7: command tx timeout [ 448.768366][ T5100] Bluetooth: hci5: command tx timeout [ 449.012326][ T5100] Bluetooth: hci6: command tx timeout [ 449.248868][ T5100] Bluetooth: hci7: command tx timeout [ 498.787889][ T5796] Bluetooth: hci0: command 0x0406 tx timeout [ 500.208660][ T5798] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 500.223979][ T5798] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 500.237871][ T5798] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 500.257996][ T5798] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 500.266902][ T5798] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 500.275605][ T5798] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 501.466143][ T5791] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 501.488316][ T5791] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 501.498234][ T5791] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 501.508180][ T5791] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 501.519012][ T5791] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 501.527081][ T5791] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 501.730494][ T5793] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 501.740917][ T5793] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 501.752349][ T5793] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 501.764300][ T5793] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 501.775204][ T5793] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 501.783850][ T5793] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 501.813283][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.820244][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.047768][ T50] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 502.067906][ T50] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 502.076875][ T50] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 502.087334][ T50] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 502.098922][ T50] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 502.107054][ T50] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 524.373928][ T5797] Bluetooth: hci3: command 0x0406 tx timeout [ 526.307397][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 526.314449][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P12597 [ 526.322456][ C1] rcu: (detected by 1, t=10502 jiffies, g=57221, q=1184 ncpus=2) [ 526.330315][ C1] task:syz.3.2551 state:R running task stack:25672 pid:12597 ppid:11696 flags:0x0000400e [ 526.342061][ C1] Call Trace: [ 526.345411][ C1] [ 526.348285][ C1] sched_show_task+0x481/0x5a0 [ 526.353101][ C1] ? __ia32_sys_sched_rr_get_interval_time32+0x110/0x110 [ 526.360186][ C1] ? wq_watchdog_touch+0xef/0x170 [ 526.365252][ C1] print_other_cpu_stall+0xfa7/0x1340 [ 526.370698][ C1] ? bpf_put_raw_tracepoint+0x60/0x60 [ 526.376190][ C1] ? print_cpu_stall+0x5a0/0x5a0 [ 526.381193][ C1] ? __bpf_trace_rcu_utilization+0xa2/0xe0 [ 526.387030][ C1] ? perf_trace_rcu_stall_warning+0x2d0/0x2d0 [ 526.393187][ C1] rcu_sched_clock_irq+0x87c/0x1220 [ 526.398437][ C1] ? rcu_gp_set_torture_wait+0x10/0x10 [ 526.403975][ C1] ? acct_account_cputime+0xd4/0x210 [ 526.409394][ C1] update_process_times+0x147/0x1b0 [ 526.414635][ C1] tick_sched_timer+0x3a2/0x580 [ 526.419539][ C1] __hrtimer_run_queues+0x4df/0xc40 [ 526.424806][ C1] ? tick_setup_sched_timer+0x2d0/0x2d0 [ 526.430504][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 526.435671][ C1] ? read_tsc+0x9/0x20 [ 526.439797][ C1] hrtimer_interrupt+0x3c9/0x9c0 [ 526.444825][ C1] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 526.450750][ C1] sysvec_apic_timer_interrupt+0x51/0xc0 [ 526.456416][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 526.462432][ C1] RIP: 0010:trace_clock_local+0x44/0x60 [ 526.468008][ C1] Code: 31 f6 65 ff 0d f5 5f 7c 7e 40 0f 94 c5 40 0f 94 c6 bf 02 00 00 00 e8 eb 3d fe ff 40 84 ed 75 0b e8 51 3b fe ff 48 89 d8 5b 5d e8 46 3b fe ff e8 e1 41 79 ff eb ee 66 2e 0f 1f 84 00 00 00 00 [ 526.487643][ C1] RSP: 0018:ffffc900001f04f8 EFLAGS: 00000246 [ 526.493741][ C1] RAX: 0000007a8a9a9359 RBX: ffff8880178704c8 RCX: ffff88805b605a00 [ 526.501739][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 526.509730][ C1] RBP: dffffc0000000000 R08: ffff88801a26893f R09: 1ffff1100344d127 [ 526.517726][ C1] R10: dffffc0000000000 R11: ffffed100344d128 R12: ffff88801a268940 [ 526.525722][ C1] R13: ffff88801a268800 R14: ffffc900001f0678 R15: ffff88801a268938 [ 526.533767][ C1] __rb_reserve_next+0x1bc/0xd50 [ 526.538743][ C1] ? perf_swevent_get_recursion_context+0xde/0x150 [ 526.545312][ C1] ring_buffer_lock_reserve+0xae1/0xed0 [ 526.550907][ C1] ? mark_lock+0x94/0x320 [ 526.555291][ C1] trace_event_buffer_lock_reserve+0x1d0/0x6e0 [ 526.561508][ C1] trace_event_buffer_reserve+0x29b/0x3c0 [ 526.567260][ C1] ? trace_event_ignore_this_pid+0x130/0x130 [ 526.573288][ C1] trace_event_raw_event_bpf_trace_printk+0x101/0x210 [ 526.580083][ C1] ? __probestub_bpf_trace_printk+0x10/0x10 [ 526.586026][ C1] ? __asan_memcpy+0x40/0x70 [ 526.590666][ C1] trace_bpf_trace_printk+0x142/0x1a0 [ 526.596068][ C1] bpf_trace_printk+0x11f/0x190 [ 526.600957][ C1] ? bpf_probe_write_user+0xe0/0xe0 [ 526.606192][ C1] ? trace_call_bpf+0xc3/0x690 [ 526.610988][ C1] ? trace_call_bpf+0x5ba/0x690 [ 526.615871][ C1] ? verify_lock_unused+0x140/0x140 [ 526.621116][ C1] bpf_prog_0605f9f479290f07+0x37/0x3b [ 526.626606][ C1] bpf_trace_run1+0x1c9/0x3b0 [ 526.631311][ C1] ? bpf_trace_run1+0xd6/0x3b0 [ 526.636101][ C1] ? bpf_put_raw_tracepoint+0x60/0x60 [ 526.641509][ C1] ? __bpf_trace_rcu_utilization+0x95/0xe0 [ 526.647355][ C1] __bpf_trace_rcu_utilization+0xa2/0xe0 [ 526.653014][ C1] ? perf_trace_rcu_stall_warning+0x2d0/0x2d0 [ 526.659114][ C1] ? trace_event_raw_event_lock+0x230/0x230 [ 526.665064][ C1] trace_rcu_utilization+0x179/0x1a0 [ 526.670384][ C1] rcu_core+0x12d/0x1720 [ 526.674670][ C1] ? try_to_wake_up+0x2d2/0x10b0 [ 526.679649][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 526.684704][ C1] ? __rwlock_init+0x150/0x150 [ 526.689502][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 526.694735][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 526.699962][ C1] ? sched_clock+0x3f/0x60 [ 526.704414][ C1] ? mark_lock+0x94/0x320 [ 526.708781][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 526.714797][ C1] ? lock_chain_count+0x20/0x20 [ 526.719670][ C1] ? try_to_wake_up+0x6f8/0x10b0 [ 526.724665][ C1] handle_softirqs+0x280/0x820 [ 526.729549][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 526.734350][ C1] ? do_softirq+0x180/0x180 [ 526.738872][ C1] ? irq_work_single+0x199/0x230 [ 526.743845][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 526.749077][ C1] __irq_exit_rcu+0xc7/0x190 [ 526.753781][ C1] ? irq_exit_rcu+0x20/0x20 [ 526.758319][ C1] ? rcu_is_watching+0x15/0xb0 [ 526.763117][ C1] irq_exit_rcu+0x9/0x20 [ 526.767378][ C1] sysvec_irq_work+0xa1/0xc0 [ 526.772001][ C1] [ 526.774955][ C1] [ 526.777913][ C1] asm_sysvec_irq_work+0x1a/0x20 [ 526.782877][ C1] RIP: 0010:rcu_read_unlock_special+0x88/0x4c0 [ 526.789067][ C1] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 b9 4e 93 7e 41 f7 c6 00 00 f0 00 74 45 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b [ 526.808703][ C1] RSP: 0018:ffffc90004f47c00 EFLAGS: 00000206 [ 526.814801][ C1] RAX: 77e0ef1c95678800 RBX: 1ffff920009e8f88 RCX: 77e0ef1c95678800 [ 526.822800][ C1] RDX: dffffc0000000000 RSI: ffffffff8aaaba40 RDI: ffffffff8afc6700 [ 526.830794][ C1] RBP: ffffc90004f47cf0 R08: ffffffff90da3537 R09: 1ffffffff21b46a6 [ 526.838791][ C1] R10: dffffc0000000000 R11: fffffbfff21b46a7 R12: 0000000000000000 [ 526.846790][ C1] R13: dffffc0000000000 R14: 0000000000000246 R15: ffffffff8cd354d8 [ 526.854859][ C1] ? do_raw_spin_lock+0x121/0x2c0 [ 526.859918][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 526.864889][ C1] ? __rwlock_init+0x150/0x150 [ 526.869683][ C1] ? read_lock_is_recursive+0x20/0x20 [ 526.875187][ C1] __rcu_read_unlock+0x7c/0xd0 [ 526.879990][ C1] rcu_read_unlock+0x85/0xa0 [ 526.884609][ C1] ? dput+0x3b/0x1e0 [ 526.888530][ C1] dput+0xe6/0x1e0 [ 526.892282][ C1] __fput+0x5e5/0x970 [ 526.896325][ C1] task_work_run+0x1ce/0x250 [ 526.900955][ C1] ? task_work_cancel+0x240/0x240 [ 526.906024][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 526.911524][ C1] exit_to_user_mode_loop+0xe6/0x110 [ 526.916846][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 526.922429][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 526.927926][ C1] do_syscall_64+0x61/0xb0 [ 526.932366][ C1] ? clear_bhb_loop+0x40/0x90 [ 526.937178][ C1] ? clear_bhb_loop+0x40/0x90 [ 526.941885][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 526.947806][ C1] RIP: 0033:0x7ff36098e9a9 [ 526.952249][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 526.971879][ C1] RSP: 002b:00007ffcacb1f448 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 526.980324][ C1] RAX: 0000000000000000 RBX: 00007ff360bb7ba0 RCX: 00007ff36098e9a9 [ 526.988335][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 526.996332][ C1] RBP: 00007ff360bb7ba0 R08: 000000000000022c R09: 0000001eacb1f73f [ 527.004328][ C1] R10: 00000000003ffbac R11: 0000000000000246 R12: 0000000000066fd6 [ 527.012320][ C1] R13: 00007ffcacb1f540 R14: ffffffffffffffff R15: 00007ffcacb1f560 [ 527.020370][ C1] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 534.697455][T12632] Bluetooth: hci4: command 0x0406 tx timeout