last executing test programs: 8m54.699141306s ago: executing program 2 (id=749): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800114004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x4000000) unlink(&(0x7f00000006c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 8m54.51000224s ago: executing program 2 (id=752): r0 = socket$kcm(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="18ff0000000000000000181100002c9b"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x3}, 0xc00, 0xc8, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0xda2}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x6, 0x6, &(0x7f0000000740), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000500)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x9}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c"], 0x280) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'dummy0\x00', 0x200}) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="10000000000000000000008fac056afa767ee4c8810007000000"], 0x10}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000080)='--:/\x00') ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f00000000c0)={'pim6reg\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}) 8m52.057476431s ago: executing program 2 (id=763): socketpair(0x1, 0x1, 0x87c, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) socket$kcm(0x2, 0x200000000000001, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1210a, 0xfffffffffffffffc, 0x8, 0x0, 0xe, 0xfffffffe}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r1, 0x4004743b, 0xf0ff1f00000000) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x22, 0x2, 0x21) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90324fc60", 0x38}], 0x1}, 0x0) r3 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="222c6b1331e6da96963297650000000000007661a1c7d91500"], 0xa) 8m51.979465573s ago: executing program 1 (id=764): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e00000016400000000000005c00000000002816"], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="1f00"}) (fail_nth: 1) 8m51.486090521s ago: executing program 1 (id=767): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xff0f}], 0x1}, 0x0) close(r0) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETLINK(r0, 0x400454cd, 0xffff030c) 8m51.430104602s ago: executing program 2 (id=769): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="e1", 0x1}], 0x1, &(0x7f0000000300)}, 0x4000081) close(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) write$cgroup_subtree(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="33fe0000660091"], 0xfe33) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r3, &(0x7f00000024c0)={&(0x7f00000000c0)={0x2, 0x4e23, @private=0xa014101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x7c, &(0x7f0000000000), 0xc) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x1}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 8m51.307387304s ago: executing program 1 (id=771): r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x18, &(0x7f00000008c0)=[{&(0x7f0000000dc0)=""/255, 0xff}], 0x1, &(0x7f0000000480)=""/9, 0x9}, 0x40000010) 8m51.221258465s ago: executing program 1 (id=772): socket$kcm(0xa, 0x2, 0x88) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f0000000140)='ns/mnt\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40, 0x1d}, 0x1}}, 0x80, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(r5) socket$kcm(0x23, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="a18b5ecac78f3ac5", 0x8}], 0x1}, 0x8008) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 8m50.984125519s ago: executing program 1 (id=775): r0 = socket$kcm(0x1e, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, r2, 0x4}, 0x38) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r2}, 0x8) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800114004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x4000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40002002) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000dc0)=""/252, 0xfc}], 0x1, &(0x7f0000000000)=""/9, 0x9}, 0x0) 8m50.894815941s ago: executing program 0 (id=777): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x84104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x4554, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x18404, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x80009, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) close(r0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fcffffff000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000005000085000000860000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000000c0)="48000000140081fb7059ae08060c040002ff0f03f1cd823010a7ce9000000000000ec000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a0200000046", 0x48}], 0x1}, 0x4000000) write$cgroup_pressure(r2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r1}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x4}]}, &(0x7f0000000d40)='syzkaller\x00', 0x9}, 0x94) 8m50.825877322s ago: executing program 3 (id=778): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="ff000000000000000708400009"], 0x50) perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0100, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x6}, 0x10, 0x0, 0x80000003, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x40000002) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r11) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES32=r0], &(0x7f00000002c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r12}, 0x10) 8m50.738597084s ago: executing program 3 (id=779): socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000100), 0x120) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000040000000300"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c01250000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00'}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)='%pi6 \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0xc4, &(0x7f00000002c0)=""/196}, 0x80) 8m50.678452814s ago: executing program 0 (id=780): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071127c000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x5, 0x0, 0x0, 0x100, 0x2a, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) close(r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) close(r1) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000040) setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r11, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x93c6}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r12) setsockopt$sock_attach_bpf(r13, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r14 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r14, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r14, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x4, 0x4}}, 0x80, 0x0}, 0x20008044) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa119, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x828, 0x8, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 8m50.617993075s ago: executing program 3 (id=781): socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000100), 0x120) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000040000000300"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c01250000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00'}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)='%pi6 \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0xc4, &(0x7f00000002c0)=""/196}, 0x80) (fail_nth: 1) 8m50.35605908s ago: executing program 0 (id=782): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800005a9a002900000000000000f7d15ee205d73500a8069373c4942961cb1d63bbb600"/46], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r1, &(0x7f0000000280), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = gettid() sendmsg$unix(r5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYBLOB="1c"], 0xa0}, 0x4004881) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xb, 0x3, 0xf, 0x0, 0x0, 0x7, 0x8, 0x1e, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x7, @perf_bp={&(0x7f0000000100), 0x4}, 0x2004, 0x4, 0x80, 0x4, 0xb, 0x1, 0x0, 0x0, 0x10000, 0x0, 0x9}, r6, 0xb, r2, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 8m50.34724512s ago: executing program 2 (id=783): socket$kcm(0x11, 0xa, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000700000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6f94f90524fc6010000200d7070000053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) 8m50.213326082s ago: executing program 3 (id=784): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x21, &(0x7f0000000100), 0x120) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) close(0x3) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x93, &(0x7f0000000300)=""/147, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000240)=[r2, r2, r2, r2, r2, r2], &(0x7f00000003c0)=[{0x1, 0x1, 0xe, 0x2}, {0x2, 0x4, 0xb, 0xb}, {0x2, 0x2, 0x8, 0x2}]}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000880)=r3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000040000000300"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c01250000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00'}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)='%pi6 \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0xc5, &(0x7f0000000540)=""/197}, 0x94) 8m50.212598372s ago: executing program 0 (id=785): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r2, 0x10000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r4, &(0x7f0000000080), &(0x7f00000002c0)=""/218}, 0x20) 8m50.104634664s ago: executing program 2 (id=786): socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14905, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x2, 0x922000000001, 0x106) r0 = socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000840)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00043a00005b686158bbcfe8875a060300000022000000000000000000000000ac1414aa"], 0xfdef) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x5}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000540)="85f0e8f9285819ccbfabdc0a28ea", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000100000020000000ffffffff"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000003c0)="b9e403c6631eb9d84a29394d5aa0", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8m50.033852845s ago: executing program 3 (id=787): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}) socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000038000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xca}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = getpid() setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000180), 0x43) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000880)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x0) perf_event_open(0x0, r3, 0x2, r2, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x5e, 0xfc, 0xe, 0x9, 0x0, 0xf90, 0x0, 0xf, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x76, 0x90}, 0x11404, 0x0, 0x6, 0x5, 0x1, 0x5f, 0xc7ee, 0x0, 0x6fe7}, r3, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000002c00000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000023c0)={r4, 0x58, &(0x7f00000014c0)}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=0x1, 0x11, 0x1, 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x21, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x8000}, [@map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffc844}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @generic={0xe8, 0x7, 0x4, 0x7, 0xf31}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x3}, @map_fd={0x18, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x4}]}, &(0x7f0000000540)='syzkaller\x00', 0x10000, 0x1000, &(0x7f0000000940)=""/4096, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0xe, 0x0, 0x4}, 0x10, 0x115d3, 0xffffffffffffffff, 0x8, &(0x7f0000000600)=[0x1], &(0x7f0000000640)=[{0x0, 0x2, 0x0, 0x5}, {0x2, 0x1, 0x9, 0x3}, {0x5, 0x4, 0xb, 0xa}, {0x4, 0x3, 0x0, 0x2}, {0x1, 0x2, 0x0, 0x6}, {0x5, 0x4, 0x10, 0x3}, {0x2, 0x4, 0xd, 0x8}, {0x5, 0x3, 0xe, 0x5}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="4c55b00683111f54", @ANYRES32=r1, @ANYBLOB, @ANYRES32=r7, @ANYBLOB, @ANYRES64=r6], 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=r8, @ANYRES64=r8], 0x20) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r9) recvmsg(r9, 0x0, 0x102) ioctl$SIOCSIFHWADDR(r9, 0x89f0, &(0x7f0000000900)={'ip6tnl0\x00'}) 8m50.029970655s ago: executing program 0 (id=788): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90324fc600b0002400a000a00053582c137153e3719ac0180fe", 0x29}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030023000b02d25a806f8c6394f91d24fc60040f03", 0x17}], 0x1}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000180091c8b14a0778a8123d181d"], 0xfe33) 8m49.939761207s ago: executing program 3 (id=789): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="ff000000000000000708400009"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) (fail_nth: 4) 8m49.858092748s ago: executing program 1 (id=790): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x10000}, 0x28) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r2, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1c00000000000000003a50bb59a15b34", @ANYRES32=0x0, @ANYBLOB="7f00000100000000000000001c00000000000000100100000d000000440c0211"], 0x40}, 0x80c0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20505) socket$kcm(0x10, 0x2, 0x0) 8m49.563582354s ago: executing program 0 (id=791): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x28, 0x9, 0xaa, 0xfffff004}, {0x6}]}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)="a836", 0x2}], 0x1}, 0x4040001) recvmsg$unix(r0, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x1) recvmsg$unix(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/83, 0x53}], 0x1}, 0xa002) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000580)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828b", 0x25}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000080)="088d85d1f4f8220aee8de7932b326f8a3164ae439862807a1589836c736d2341f7", 0x21}, {&(0x7f0000000040)="df3b46a1330000000000000000000000000000f1", 0x14}, {&(0x7f00000005c0)="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", 0xe8f}, {&(0x7f00000033c0)="d6d038091fcf458c47fa6bd5", 0xc}], 0x6}, 0x40000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'veth0_virt_wifi\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 8m34.550030487s ago: executing program 32 (id=790): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x10000}, 0x28) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r2, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1c00000000000000003a50bb59a15b34", @ANYRES32=0x0, @ANYBLOB="7f00000100000000000000001c00000000000000100100000d000000440c0211"], 0x40}, 0x80c0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20505) socket$kcm(0x10, 0x2, 0x0) 8m34.495929817s ago: executing program 33 (id=786): socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14905, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x2, 0x922000000001, 0x106) r0 = socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000840)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00043a00005b686158bbcfe8875a060300000022000000000000000000000000ac1414aa"], 0xfdef) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x5}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000540)="85f0e8f9285819ccbfabdc0a28ea", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000100000020000000ffffffff"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000003c0)="b9e403c6631eb9d84a29394d5aa0", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8m34.400229329s ago: executing program 34 (id=789): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="ff000000000000000708400009"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) (fail_nth: 4) 8m34.31050998s ago: executing program 35 (id=791): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x28, 0x9, 0xaa, 0xfffff004}, {0x6}]}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)="a836", 0x2}], 0x1}, 0x4040001) recvmsg$unix(r0, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x1) recvmsg$unix(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/83, 0x53}], 0x1}, 0xa002) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000580)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828b", 0x25}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000080)="088d85d1f4f8220aee8de7932b326f8a3164ae439862807a1589836c736d2341f7", 0x21}, {&(0x7f0000000040)="df3b46a1330000000000000000000000000000f1", 0x14}, {&(0x7f00000005c0)="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", 0xe8f}, {&(0x7f00000033c0)="d6d038091fcf458c47fa6bd5", 0xc}], 0x6}, 0x40000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'veth0_virt_wifi\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 5.102350121s ago: executing program 4 (id=4093): syz_clone(0x8240080, &(0x7f00000000c0)="38f31b878157e1393b4a01278875303cebc89d62d9b2a63ed14abb837b6bd8ceef4ae2c9bc5f1aa56bb7eddc136aa2e420a90feab7860c2760a2ef99e855803df266ea895123866978d020785077213c94a9609a3f98151a5493debe0ceed815180d7ccb9aa6f5ac9ba29a65a62d05618c8099231015d490dc59ed2558eef6c21e81ec7cb3c34eacf9a089f1d865afbed78b1994b5ff4cc61278d3305b44fcede6931e19444b34e4c383012512bce43c28bf6802e3f5476db78dc997f6b46000db9e70f52e7e2f02bd984e6b7748e3bec8990dbf69acd4f8e1675c8cf44bc4034692061c6d94fa846006a0bcc99835c253958b", 0xf3, &(0x7f0000000000), &(0x7f00000001c0), &(0x7f0000000480)="2afa3449871436562e5f8169ed57d7f5d11a2f31ab6d236d5ac5d6ef248e2a203c00a401b8744f433d618f50eb98dba5ff9ad6daf7f4476965f399b70b243b63946b8daf3d9397c8077201c502f28e1208db42dc9e8985110ed1c7a07bdf8571588261cebebf458333c8a72bf7ea97f4405adb6c062ee66fcbc59322a7ab66c3d9e8322bfe0a2cf206d97dc95a177934e7a8789c577d41b3f90448987ae9a887eb1fc2621f346dc3b1e9d064d734f14d49959ddf4bdb43ede91449a5f7b12b03c70cea85add7af281c4f358014542b6136b1f755f2ead1b05c0557f61eff33874ac52511487f10f84f7bd811b4c340430bb764584f3d7c477093c2f304bd47c4c24f72ce9ed366c026b67995122d55cd5b98de9072f125b9d4045491fd032208562e24e15546ebc93260631ff47176de6915efc1613f4476c9c335650000008000000000804dad6e6cb0dc7589febf845e2df444068995f37481cf5902aa0a46e169") socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.850387245s ago: executing program 7 (id=4096): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000cc0000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\v\x00'/28], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r4}, &(0x7f0000000200), &(0x7f0000000640)=r3}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r4}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r2, r4}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_process_wait\x00', r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000202020db1af80801000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000400)='GPL\x00', 0x1}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)={@cgroup, r6, 0x11}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x94) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000009e00000000180000000000009500000000000000a1a0d3c92488559b124292c7610c957df3a91ea896a6d96194c6b2f5590a0d94fb9fc19e65efae0cb6f9f0256a2e2c6f45094db9032b6662f9288eaee299134b271ba20f525b8afd25a986b5e3c614372cd0e090c4e6891badac4b5625ffa4d76ab50d762ad90403e627"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x100b, &(0x7f0000001e40)=""/4107, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) r10 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r10, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xa9}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2004888c) setsockopt$sock_attach_bpf(r10, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r10) setsockopt$sock_attach_bpf(r7, 0x1, 0x14, &(0x7f0000000040)=r9, 0x3b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0xfc, 0x44, &(0x7f00000006c0)="89f16ad93213da795ee3ae2eea47da7b1603c05e46401677e25edae5c43958b7c130527afa1dfef0c2b43554cc186acbc0b7d53d0a7046dd108c71d1273aee2c69cecbed8e9c41af80b45e2bfdc6a327d8882cbb743858e252c19414436859ac9b6fd0f82ac3eba502b9c3651d487f25a9377c1011aba19661ab79bf83073ea324813711ee485344e62809f2d47c28a073b52879cdfb28c63b131e28669184826dc1e838b9cd8c644d6eb66d852fb615c07bb7d13f27eb6652b578f182703574dad69cd7726949f10a243413052e5f9f753feb50aff644668117c14e83c6d60b5da2c859933046ce13649b360fa47dd18ae604e8b8cd9bf3f9f20503", &(0x7f0000000540)=""/68, 0x0, 0x0, 0xc7, 0x75, &(0x7f0000000a40)="9ecb93485d24e75a3c916df8ad987bcca3c49aa09236503484b9e577f5ab4bb273bbaa06d573e97619518e968f651133c10438c524609fd15c1bc199d69263b6e8d6d85a4e8c3d272b5e0ab7f2dd52693e7a8ee08d68bd42a360a777d6e17c1b171b63c7cce96ce6025af41d2bbb6d0b6f597437c245bedef56447390f2d2916f7eada351da053a0f05d76e985d2c80a49533a5ab6c8328da2a04e7cbb905d508df3aca4efca2234bf87bffbd59bfbbafccc0116b733067bf5d97d5607e1859ca2d584a6c6ddfe", &(0x7f0000000840)="5c31235d65d76aabbb06ea2a7d783615df9fe6b4f03817447727939fe281e76be878881457b8334826ed98f9bc8b063179a6d850ae10aa5d74f1c964f599258741667e578be0371292af40687f1bb1d22bb7dbe4c563ccd6f15ce0e419f0334f9fafb0e68738dc8f9855a6a90b80f39fff2e167ffa", 0x1, 0x0, 0xff5}, 0x50) 4.740139588s ago: executing program 5 (id=4098): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90224fc602f1a99000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000007000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1005c, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x31, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1b}, 0xa1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) socket$kcm(0x2, 0x3, 0x84) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x18, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) r6 = socket$kcm(0x23, 0x5, 0x0) close(r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001480)={0x11, 0x8, &(0x7f0000000240)=@raw=[@alu={0x4, 0x0, 0x0, 0xb, 0x7, 0xfffffffffffffff0, 0x4}, @ldst={0x1, 0x3, 0x2, 0x8, 0xa, 0xffffffffffffffe0, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @alu={0x7, 0x0, 0x1, 0x3, 0x8, 0x40, 0x1}], &(0x7f0000000280)='GPL\x00', 0x27, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r5], 0x0, 0x10, 0x4abe}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r7, &(0x7f0000000900)={0x0, 0x18, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x5b}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faffffff0000000000000000850000002c000000850000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x27, 0xdc0, 0x0, &(0x7f0000000180)="f9ad48cc429d29fc", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r10, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x7ffff000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x25, 0x29, 0x32}}, @ip_tos_u8={{0x11, 0x4410, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x64}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff49, &(0x7f0000000380)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000001580)={0x4, 0x80, 0x5, 0x0, 0x5f, 0x7, 0x0, 0x101, 0x2800, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000001540), 0x3}, 0x0, 0x0, 0x6, 0x6, 0x7fff, 0x1, 0x0, 0x0, 0xff, 0x0, 0x7}, 0x0, 0xc, 0xffffffffffffffff, 0x2) 4.717293078s ago: executing program 4 (id=4099): r0 = syz_clone(0x20000800, &(0x7f0000000340), 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000780)) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ff, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2, 0x0, 0x0, 0xf6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x19, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18070000000000000000006ff1edc50018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020702500000000002020207b1af8ff00000000bda1000000000000a7010000f8ffffffb702000008000000b7030000000000007209000006000000bf91000000000000b5020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, &(0x7f00000005c0)=""/155}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0600000004000000990500000a"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r6, 0x0, 0x1ba8847c99}, 0x38) 4.57539924s ago: executing program 7 (id=4100): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x5}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={0x1, &(0x7f0000000440)="3a6107ce05dc35c982bb75d4635674d3ff033048eb0194337b1693f770806ca7f9a6831ea80c501011c0850332bfabfb1b26f27b5f26bd91da76523cd1088335efe5a6d426dc2d159c300517071d5b7d2dfc2c356238eea3c6a89e21ae587c02a5ae427f7dad3b0113d70403e0705f590fcaf38f352bff31679396efcd672f8596998aa92606d907fed83b90f2a6418fd9ac99988a3123eccb9305a7b76d8c1647"}, 0x20) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0), 0x8) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="06000000040000009c0000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1488}, 0x0, 0xffffffffffffffff, r4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), 0x0, 0xfffffffb}, 0x38) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006", 0x15}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) 4.079238649s ago: executing program 5 (id=4102): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="8e16cb239da51e7f218eff00", @ANYRES32, @ANYBLOB="2000000000000000950000000000000045"], 0x0}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$inet(r4, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000340)="5c00000012006bab9a3fe3d86edabf0a046b876c1d0048007ea60864160af36504001d0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509debbfbffa8499c69ac76dd752d00", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.877860042s ago: executing program 6 (id=4103): socket$kcm(0xa, 0x1, 0x0) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) 1.223410658s ago: executing program 6 (id=4104): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2}]}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) 1.026917952s ago: executing program 6 (id=4105): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={0x0, 0xffffffffffffffff, 0x0, 0x4d, &(0x7f0000000780)='%\x00\xbd\xe8\xc3W\xac\xcf\xa9\x1b\xb1[\x01\xb9\xb2\x98i\xb2\xb8\xc2w\xedf\x90@O\x9a\xe5\xcf\x10kW\xa5\xf4|\x19\xcc\xf5hNn\x8b\xec{\a\xbc\x03m$\xf5ZTH\xa9\xdf%\r\xa4|=\x87\x06\xed\x1d\xed\x03\x9e\xac\xc6BK\x00\x00\x01\x00\x00\x00'}, 0x30) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000c2f00e00"], 0x48) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f917a3c92b", 0x14}], 0x1}, 0x0) r1 = socket$kcm(0x15, 0x5, 0x0) close(r1) 951.312073ms ago: executing program 4 (id=4106): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x80040001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x1, 0x8}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x40000, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0), 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b108b4ab502", @ANYRES32, @ANYRES8=r3], 0x4394) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r6, &(0x7f0000000600)={&(0x7f00000002c0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000740)=[{0x0, 0x11}, {&(0x7f00000006c0)='-', 0x1}], 0x2}, 0xfd) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000700)="a6a3d2af86ca", 0x6}], 0x1, &(0x7f0000002a80)=ANY=[], 0x11d8}, 0x20000000) 905.156624ms ago: executing program 5 (id=4107): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000cc0000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\v\x00'/28], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{}, &(0x7f0000000200), &(0x7f0000000640)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r2}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_process_wait\x00', r4}, 0x18) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000202020db1af80801000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000400)='GPL\x00', 0x1}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)={@cgroup=r6, r7, 0x11, 0x0, 0x0, @void, @value=r6}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19}, 0x94) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000009e00000000180000000000009500000000000000a1a0d3c92488559b124292c7610c957df3a91ea896a6d96194c6b2f5590a0d94fb9fc19e65efae0cb6f9f0256a2e2c6f45094db9032b6662f9288eaee299134b271ba20f525b8afd25a986b5e3c614372cd0e090c4e6891badac4b5625ffa4d76ab50d762ad90403e627"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x100b, &(0x7f0000001e40)=""/4107, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xa9}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2004888c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), 0x24) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(r8, 0x1, 0x14, &(0x7f0000000040)=r9, 0x3b) 904.566664ms ago: executing program 6 (id=4108): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000cc0000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\v\x00'/28], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r4}, &(0x7f0000000200), &(0x7f0000000640)=r3}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r2, r4}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_process_wait\x00', r5}, 0x18) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000202020db1af80801000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000400)='GPL\x00', 0x1}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)={@cgroup=r7, r8, 0x11, 0x0, 0x0, @void, @value=r7}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r9}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000009e00000000180000000000009500000000000000a1a0d3c92488559b124292c7610c957df3a91ea896a6d96194c6b2f5590a0d94fb9fc19e65efae0cb6f9f0256a2e2c6f45094db9032b6662f9288eaee299134b271ba20f525b8afd25a986b5e3c614372cd0e090c4e6891badac4b5625ffa4d76ab50d762ad90403e627"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x100b, &(0x7f0000001e40)=""/4107, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) r10 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r10, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xa9}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2004888c) setsockopt$sock_attach_bpf(r10, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r10) 774.202096ms ago: executing program 7 (id=4109): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[], 0x0}, 0x94) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x2}], 0x1}, 0x480c0) 720.003437ms ago: executing program 7 (id=4110): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={0x0, 0xffffffffffffffff, 0x0, 0x4d, &(0x7f0000000780)='%\x00\xbd\xe8\xc3W\xac\xcf\xa9\x1b\xb1[\x01\xb9\xb2\x98i\xb2\xb8\xc2w\xedf\x90@O\x9a\xe5\xcf\x10kW\xa5\xf4|\x19\xcc\xf5hNn\x8b\xec{\a\xbc\x03m$\xf5ZTH\xa9\xdf%\r\xa4|=\x87\x06\xed\x1d\xed\x03\x9e\xac\xc6BK\x00\x00\x01\x00\x00\x00'}, 0x30) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000c2f00e00"], 0x48) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f917a3c92b", 0x14}], 0x1}, 0x0) r1 = socket$kcm(0x15, 0x5, 0x0) close(r1) 714.353627ms ago: executing program 5 (id=4111): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000cc0000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\v\x00'/28], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r4}, &(0x7f0000000200), &(0x7f0000000640)=r3}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r4}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r2, r4}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000202020db1af80801000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000400)='GPL\x00', 0x1}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)={@cgroup=r5, r6, 0x11, 0x0, 0x0, @void, @value=r5}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x94) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000009e00000000180000000000009500000000000000a1a0d3c92488559b124292c7610c957df3a91ea896a6d96194c6b2f5590a0d94fb9fc19e65efae0cb6f9f0256a2e2c6f45094db9032b6662f9288eaee299134b271ba20f525b8afd25a986b5e3c614372cd0e090c4e6891badac4b5625ffa4d76ab50d762ad90403e627"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x100b, &(0x7f0000001e40)=""/4107, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) r10 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r10, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xa9}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2004888c) setsockopt$sock_attach_bpf(r10, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r10) setsockopt$sock_attach_bpf(r7, 0x1, 0x14, &(0x7f0000000040)=r9, 0x3b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0xfc, 0x44, &(0x7f00000006c0)="89f16ad93213da795ee3ae2eea47da7b1603c05e46401677e25edae5c43958b7c130527afa1dfef0c2b43554cc186acbc0b7d53d0a7046dd108c71d1273aee2c69cecbed8e9c41af80b45e2bfdc6a327d8882cbb743858e252c19414436859ac9b6fd0f82ac3eba502b9c3651d487f25a9377c1011aba19661ab79bf83073ea324813711ee485344e62809f2d47c28a073b52879cdfb28c63b131e28669184826dc1e838b9cd8c644d6eb66d852fb615c07bb7d13f27eb6652b578f182703574dad69cd7726949f10a243413052e5f9f753feb50aff644668117c14e83c6d60b5da2c859933046ce13649b360fa47dd18ae604e8b8cd9bf3f9f20503", &(0x7f0000000540)=""/68, 0x0, 0x0, 0xc7, 0x75, &(0x7f0000000a40)="9ecb93485d24e75a3c916df8ad987bcca3c49aa09236503484b9e577f5ab4bb273bbaa06d573e97619518e968f651133c10438c524609fd15c1bc199d69263b6e8d6d85a4e8c3d272b5e0ab7f2dd52693e7a8ee08d68bd42a360a777d6e17c1b171b63c7cce96ce6025af41d2bbb6d0b6f597437c245bedef56447390f2d2916f7eada351da053a0f05d76e985d2c80a49533a5ab6c8328da2a04e7cbb905d508df3aca4efca2234bf87bffbd59bfbbafccc0116b733067bf5d97d5607e1859ca2d584a6c6ddfe", &(0x7f0000000840)="5c31235d65d76aabbb06ea2a7d783615df9fe6b4f03817447727939fe281e76be878881457b8334826ed98f9bc8b063179a6d850ae10aa5d74f1c964f599258741667e578be0371292af40687f1bb1d22bb7dbe4c563ccd6f15ce0e419f0334f9fafb0e68738dc8f9855a6a90b80f39fff2e167ffa", 0x1, 0x0, 0xff5}, 0x50) 605.036669ms ago: executing program 7 (id=4112): socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0}, 0x0, 0x1000000000000, 0x0, 0x1, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x80000081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2}]}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e00000007000000000000000500000031100400", @ANYRES32=0x1, @ANYBLOB="f9ffffff00000000002000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000002000000020000000d00"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)=r2}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r5}, 0x18) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) r8 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x8916, &(0x7f0000000000)={r7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000018c0)={r2, 0xe0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380), 0x0, 0x10005b, &(0x7f00000016c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001700), &(0x7f0000001740), 0x8, 0x40000010, 0x8, 0x8, &(0x7f0000001780)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0xe0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001980)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xfb, &(0x7f0000001a40)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000001a80), &(0x7f0000001ac0), 0x8, 0x55, 0x8, 0x8, &(0x7f0000001b00)}}, 0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002080)={0x18, 0x1b, &(0x7f0000001d00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe57}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x7, 0x0, 0x7, 0x8, 0x0, 0xffffffffffffffe0, 0xfffffffffffffff0}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001e00)='GPL\x00', 0x0, 0xfc, &(0x7f0000002280)=""/252, 0x41000, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001f40)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000001f80)={0x5, 0x10, 0x9, 0xffff0000}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001fc0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002000)=[{0x0, 0x3, 0x8, 0xc}, {0x1, 0x4, 0x0, 0x8}, {0x3, 0x4, 0x6, 0x4}, {0x5, 0x3, 0x2, 0xc}, {0x2, 0x5, 0x4, 0xc}, {0x2, 0x1, 0x7, 0xa}]}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000021c0)={0x18, 0x31, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000010000000800000000000000e3cd7816", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a50000000f490200020000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000009e6010005000000f942fcff00000000f01c350800000040186b0000100000000000000003000000d45b180008000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x1ff, 0x1000, &(0x7f00000006c0)=""/4096, 0x1e00, 0x0, '\x00', r9, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000001900)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000001940)={0x5, 0xf, 0x8, 0x80}, 0x10, r10, r11, 0x7, 0x0, &(0x7f0000002140)=[{0x4, 0x5, 0xf, 0x4}, {0x1, 0x3, 0xa, 0xa}, {0x0, 0x5, 0x4, 0x7}, {0x2, 0x1, 0x4, 0x9}, {0x2, 0x4, 0x1, 0x9}, {0x5, 0x2, 0xa, 0x2}, {0x2, 0x2, 0xc, 0x6}], 0x10, 0x4}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x11, 0x2, 0x0) close(r12) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) socketpair(0x3, 0x1, 0x0, &(0x7f0000000000)) 540.13149ms ago: executing program 4 (id=4113): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x7, 0x8}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000040000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000a1000000bf090000000000005509010000000000950000000000000018570000100000000000000000000000bf7f000000000000b7020000000000008500000084000000b700"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x72, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200), &(0x7f0000000240)=[{0x3, 0x5, 0xc}], 0x10, 0x10000}, 0x94) 525.896561ms ago: executing program 6 (id=4114): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90224fc602f1a99000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000007000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1005c, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x31, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1b}, 0xa1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) socket$kcm(0x2, 0x3, 0x84) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) socket$kcm(0x18, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) r6 = socket$kcm(0x23, 0x5, 0x0) close(r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001480)={0x11, 0x8, &(0x7f0000000240)=@raw=[@alu={0x4, 0x0, 0x0, 0xb, 0x7, 0xfffffffffffffff0, 0x4}, @ldst={0x1, 0x3, 0x2, 0x8, 0xa, 0xffffffffffffffe0, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @alu={0x7, 0x0, 0x1, 0x3, 0x8, 0x40, 0x1}], &(0x7f0000000280)='GPL\x00', 0x27, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r5], 0x0, 0x10, 0x4abe}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r7, &(0x7f0000000900)={0x0, 0x18, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x5b}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faffffff0000000000000000850000002c000000850000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x27, 0xdc0, 0x0, &(0x7f0000000180)="f9ad48cc429d29fc", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r10, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x7ffff000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x25, 0x29, 0x32}}, @ip_tos_u8={{0x11, 0x4410, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x64}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff49, &(0x7f0000000380)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000001580)={0x4, 0x80, 0x5, 0x0, 0x5f, 0x7, 0x0, 0x101, 0x2800, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000001540), 0x3}, 0x0, 0x0, 0x6, 0x6, 0x7fff, 0x1, 0x0, 0x0, 0xff, 0x0, 0x7}, 0x0, 0xc, 0xffffffffffffffff, 0x2) 486.117161ms ago: executing program 5 (id=4115): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 250.108626ms ago: executing program 5 (id=4116): r0 = syz_clone(0x20000800, &(0x7f0000000340), 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000780)) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ff, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2, 0x0, 0x0, 0xf6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x19, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18070000000000000000006ff1edc50018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020702500000000002020207b1af8ff00000000bda1000000000000a7010000f8ffffffb702000008000000b7030000000000007209000006000000bf91000000000000b5020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, &(0x7f00000005c0)=""/155}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0600000004000000990500000a"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r6, 0x0, 0x1ba8847c99}, 0x38) 249.165366ms ago: executing program 4 (id=4124): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={0x0, 0xffffffffffffffff, 0x0, 0x4d, &(0x7f0000000780)='%\x00\xbd\xe8\xc3W\xac\xcf\xa9\x1b\xb1[\x01\xb9\xb2\x98i\xb2\xb8\xc2w\xedf\x90@O\x9a\xe5\xcf\x10kW\xa5\xf4|\x19\xcc\xf5hNn\x8b\xec{\a\xbc\x03m$\xf5ZTH\xa9\xdf%\r\xa4|=\x87\x06\xed\x1d\xed\x03\x9e\xac\xc6BK\x00\x00\x01\x00\x00\x00'}, 0x30) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000c2f00e00"], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x15, 0x5, 0x0) close(r0) 184.947867ms ago: executing program 7 (id=4117): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104102, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r1, &(0x7f00000000c0), 0x2, 0x0) ioctl$TUNSETTXFILTER(r0, 0x401054d5, &(0x7f0000000380)=ANY=[@ANYBLOB]) r2 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) 65.885119ms ago: executing program 6 (id=4118): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[], 0x0}, 0x94) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, 0x0}, 0x480c0) 0s ago: executing program 4 (id=4119): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000cc0000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\v\x00'/28], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{}, &(0x7f0000000200), &(0x7f0000000640)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r2}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_process_wait\x00', r4}, 0x18) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000202020db1af80801000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000400)='GPL\x00', 0x1}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)={@cgroup=r6, r7, 0x11, 0x0, 0x0, @void, @value=r6}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19}, 0x94) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000009e00000000180000000000009500000000000000a1a0d3c92488559b124292c7610c957df3a91ea896a6d96194c6b2f5590a0d94fb9fc19e65efae0cb6f9f0256a2e2c6f45094db9032b6662f9288eaee299134b271ba20f525b8afd25a986b5e3c614372cd0e090c4e6891badac4b5625ffa4d76ab50d762ad90403e627"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x100b, &(0x7f0000001e40)=""/4107, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xa9}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2004888c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), 0x24) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(r8, 0x1, 0x14, &(0x7f0000000040)=r9, 0x3b) kernel console output (not intermixed with test programs): vsim0: entered promiscuous mode [ 711.911706][T15549] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 711.938513][T15549] team0: Port device netdevsim0 added [ 711.970664][T15554] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 711.978243][T15554] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 712.085866][T15554] team0: Port device netdevsim0 removed [ 712.124932][T15554] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 712.174531][T15556] veth1_macvtap: left promiscuous mode [ 712.536395][T15568] validate_nla: 2 callbacks suppressed [ 712.536420][T15568] netlink: 'syz.4.3167': attribute type 10 has an invalid length. [ 712.685826][T15575] netlink: 129384 bytes leftover after parsing attributes in process `syz.5.3169'. [ 712.828343][T15581] FAULT_INJECTION: forcing a failure. [ 712.828343][T15581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 712.851236][T15581] CPU: 1 PID: 15581 Comm: syz.7.3172 Not tainted 6.6.97-syzkaller #0 [ 712.859438][T15581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 712.869532][T15581] Call Trace: [ 712.872880][T15581] [ 712.875829][T15581] dump_stack_lvl+0x16c/0x230 [ 712.880544][T15581] ? show_regs_print_info+0x20/0x20 [ 712.885774][T15581] ? load_image+0x3b0/0x3b0 [ 712.890412][T15581] ? __might_fault+0xaa/0x120 [ 712.895153][T15581] ? __lock_acquire+0x7c80/0x7c80 [ 712.900226][T15581] should_fail_ex+0x39d/0x4d0 [ 712.904959][T15581] _copy_to_iter+0x1c8/0x10d0 [ 712.909673][T15581] ? tomoyo_check_open_permission+0x16e/0x3c0 [ 712.915780][T15581] ? iov_iter_init+0x1e0/0x1e0 [ 712.920569][T15581] ? __virt_addr_valid+0x18c/0x540 [ 712.925716][T15581] ? __virt_addr_valid+0x469/0x540 [ 712.930858][T15581] ? __phys_addr_symbol+0x2f/0x70 [ 712.935904][T15581] ? __check_object_size+0x506/0xa30 [ 712.941241][T15581] __skb_datagram_iter+0xdb/0x780 [ 712.946301][T15581] ? sctp_put_port+0x360/0x360 [ 712.951088][T15581] ? skb_copy_datagram_iter+0x200/0x200 [ 712.956690][T15581] skb_copy_datagram_iter+0xb1/0x200 [ 712.962019][T15581] sctp_recvmsg+0x250/0xdc0 [ 712.966560][T15581] inet_recvmsg+0x130/0x1e0 [ 712.971093][T15581] ? inet_splice_eof+0x2e0/0x2e0 [ 712.976059][T15581] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 712.981373][T15581] ? security_socket_recvmsg+0x89/0xb0 [ 712.986870][T15581] ? inet_splice_eof+0x2e0/0x2e0 [ 712.991830][T15581] ____sys_recvmsg+0x29e/0x5b0 [ 712.996624][T15581] ? __sys_recvmsg_sock+0x50/0x50 [ 713.001678][T15581] ? import_iovec+0x73/0xa0 [ 713.006202][T15581] ___sys_recvmsg+0x1b6/0x510 [ 713.010902][T15581] ? __sys_recvmsg+0x270/0x270 [ 713.015720][T15581] ? ksys_write+0x1c1/0x250 [ 713.020272][T15581] ? __fget_files+0x44a/0x4d0 [ 713.025005][T15581] __x64_sys_recvmsg+0x1f2/0x2c0 [ 713.029973][T15581] ? ___sys_recvmsg+0x510/0x510 [ 713.034855][T15581] ? lockdep_hardirqs_on+0x98/0x150 [ 713.040073][T15581] do_syscall_64+0x55/0xb0 [ 713.044511][T15581] ? clear_bhb_loop+0x40/0x90 [ 713.049226][T15581] ? clear_bhb_loop+0x40/0x90 [ 713.053925][T15581] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 713.059837][T15581] RIP: 0033:0x7f40b1b8e929 [ 713.064272][T15581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 713.083905][T15581] RSP: 002b:00007f40b2ae0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 713.092347][T15581] RAX: ffffffffffffffda RBX: 00007f40b1db5fa0 RCX: 00007f40b1b8e929 [ 713.100511][T15581] RDX: 0000000040000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 713.108517][T15581] RBP: 00007f40b2ae0090 R08: 0000000000000000 R09: 0000000000000000 [ 713.116509][T15581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 713.124610][T15581] R13: 0000000000000000 R14: 00007f40b1db5fa0 R15: 00007ffe22ed2598 [ 713.132629][T15581] [ 713.354474][T15593] netlink: 'syz.6.3176': attribute type 10 has an invalid length. [ 713.394381][T15593] batman_adv: batadv0: Removing interface: netdevsim0 [ 713.418475][T15593] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 713.437399][T15593] team0: Port device netdevsim0 added [ 713.687692][T15603] netlink: 'syz.5.3180': attribute type 10 has an invalid length. [ 714.443867][T15619] FAULT_INJECTION: forcing a failure. [ 714.443867][T15619] name failslab, interval 1, probability 0, space 0, times 0 [ 714.462376][T15619] CPU: 0 PID: 15619 Comm: syz.4.3187 Not tainted 6.6.97-syzkaller #0 [ 714.470532][T15619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 714.480719][T15619] Call Trace: [ 714.484032][T15619] [ 714.486995][T15619] dump_stack_lvl+0x16c/0x230 [ 714.491730][T15619] ? show_regs_print_info+0x20/0x20 [ 714.496971][T15619] ? load_image+0x3b0/0x3b0 [ 714.501536][T15619] ? __might_sleep+0xe0/0xe0 [ 714.506179][T15619] ? __lock_acquire+0x7c80/0x7c80 [ 714.511358][T15619] ? mark_lock+0x94/0x320 [ 714.515769][T15619] should_fail_ex+0x39d/0x4d0 [ 714.520011][ T5812] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 714.520492][T15619] should_failslab+0x9/0x20 [ 714.520526][T15619] slab_pre_alloc_hook+0x59/0x310 [ 714.520551][T15619] ? __get_vm_area_node+0x125/0x370 [ 714.520584][T15619] __kmem_cache_alloc_node+0x53/0x260 [ 714.520608][T15619] ? __get_vm_area_node+0x125/0x370 [ 714.520640][T15619] kmalloc_node_trace+0x26/0xe0 [ 714.520664][T15619] __get_vm_area_node+0x125/0x370 [ 714.520702][T15619] __vmalloc_node_range+0x36e/0x1320 [ 714.520735][T15619] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 714.520761][T15619] ? mark_lock+0x94/0x320 [ 714.520789][T15619] ? __lock_acquire+0x1334/0x7c80 [ 714.520817][T15619] ? verify_lock_unused+0x140/0x140 [ 714.520853][T15619] ? free_vm_area+0x50/0x50 [ 714.534486][ T5812] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 714.537472][T15619] ? end_current_label_crit_section+0x170/0x170 [ 714.544347][ T5812] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 714.548052][T15619] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 714.556466][ T5812] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 714.558108][T15619] __vmalloc+0x7a/0x90 [ 714.564413][ T5812] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 714.568445][T15619] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 714.568478][T15619] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 714.577329][ T5812] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 714.578374][T15619] bpf_prog_alloc+0x3d/0x1b0 [ 714.659408][T15619] bpf_prog_load+0x6b8/0x16d0 [ 714.664146][T15619] ? map_freeze+0x420/0x420 [ 714.668757][T15619] ? __might_fault+0xaa/0x120 [ 714.673544][T15619] ? __lock_acquire+0x7c80/0x7c80 [ 714.678591][T15619] ? file_end_write+0x159/0x250 [ 714.683487][T15619] ? __might_fault+0xaa/0x120 [ 714.688207][T15619] ? __might_fault+0xc6/0x120 [ 714.692915][T15619] ? __might_fault+0xaa/0x120 [ 714.697614][T15619] ? bpf_lsm_bpf+0x9/0x10 [ 714.701953][T15619] ? security_bpf+0x7e/0xa0 [ 714.706479][T15619] __sys_bpf+0x55a/0x800 [ 714.710739][T15619] ? bpf_link_show_fdinfo+0x350/0x350 [ 714.716136][T15619] ? lock_chain_count+0x20/0x20 [ 714.721009][T15619] __x64_sys_bpf+0x7c/0x90 [ 714.725446][T15619] do_syscall_64+0x55/0xb0 [ 714.729884][T15619] ? clear_bhb_loop+0x40/0x90 [ 714.734592][T15619] ? clear_bhb_loop+0x40/0x90 [ 714.739285][T15619] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 714.745237][T15619] RIP: 0033:0x7ff719f8e929 [ 714.749700][T15619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 714.769323][T15619] RSP: 002b:00007ff71aded038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 714.777753][T15619] RAX: ffffffffffffffda RBX: 00007ff71a1b5fa0 RCX: 00007ff719f8e929 [ 714.785828][T15619] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 714.793812][T15619] RBP: 00007ff71aded090 R08: 0000000000000000 R09: 0000000000000000 [ 714.801793][T15619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 714.809967][T15619] R13: 0000000000000000 R14: 00007ff71a1b5fa0 R15: 00007ffd1f8c64f8 [ 714.818003][T15619] [ 714.852943][T15613] tun0: tun_chr_ioctl cmd 1074025675 [ 714.858461][T15613] tun0: persist enabled [ 714.865747][T15614] tun0: tun_chr_ioctl cmd 1074025675 [ 714.872711][T15614] tun0: persist enabled [ 715.056840][T15629] FAULT_INJECTION: forcing a failure. [ 715.056840][T15629] name failslab, interval 1, probability 0, space 0, times 0 [ 715.076665][T15629] CPU: 0 PID: 15629 Comm: syz.7.3190 Not tainted 6.6.97-syzkaller #0 [ 715.084812][T15629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 715.094888][T15629] Call Trace: [ 715.098278][T15629] [ 715.101228][T15629] dump_stack_lvl+0x16c/0x230 [ 715.106203][T15629] ? show_regs_print_info+0x20/0x20 [ 715.111428][T15629] ? load_image+0x3b0/0x3b0 [ 715.115951][T15629] ? __might_sleep+0xe0/0xe0 [ 715.120564][T15629] ? __lock_acquire+0x7c80/0x7c80 [ 715.125613][T15629] should_fail_ex+0x39d/0x4d0 [ 715.130324][T15629] should_failslab+0x9/0x20 [ 715.134847][T15629] slab_pre_alloc_hook+0x59/0x310 [ 715.139893][T15629] ? __lock_acquire+0x1334/0x7c80 [ 715.144944][T15629] kmem_cache_alloc_node+0x60/0x330 [ 715.150159][T15629] ? __alloc_skb+0x108/0x2c0 [ 715.154781][T15629] __alloc_skb+0x108/0x2c0 [ 715.159226][T15629] tcp_stream_alloc_skb+0x3d/0x330 [ 715.164364][T15629] tcp_sendmsg_locked+0xcd1/0x4c30 [ 715.169513][T15629] ? perf_trace_lock+0xf7/0x380 [ 715.174407][T15629] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 715.180430][T15629] ? tcp_set_state+0x7d0/0x7d0 [ 715.185245][T15629] tcp_sendmsg+0x2f/0x50 [ 715.189517][T15629] ? inet_send_prepare+0x260/0x260 [ 715.194651][T15629] ____sys_sendmsg+0x5bf/0x950 [ 715.199484][T15629] ? __asan_memset+0x22/0x40 [ 715.204108][T15629] ? __sys_sendmsg_sock+0x30/0x30 [ 715.209142][T15629] ? __import_iovec+0x5f2/0x860 [ 715.214015][T15629] ? import_iovec+0x73/0xa0 [ 715.218567][T15629] ___sys_sendmsg+0x220/0x290 [ 715.223280][T15629] ? __sys_sendmsg+0x270/0x270 [ 715.228085][T15629] ? __lock_acquire+0x7c80/0x7c80 [ 715.233168][T15629] __se_sys_sendmsg+0x1a5/0x270 [ 715.238063][T15629] ? __x64_sys_sendmsg+0x80/0x80 [ 715.243042][T15629] ? lockdep_hardirqs_on+0x98/0x150 [ 715.248275][T15629] do_syscall_64+0x55/0xb0 [ 715.252717][T15629] ? clear_bhb_loop+0x40/0x90 [ 715.257416][T15629] ? clear_bhb_loop+0x40/0x90 [ 715.262119][T15629] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 715.268030][T15629] RIP: 0033:0x7f40b1b8e929 [ 715.272470][T15629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 715.292112][T15629] RSP: 002b:00007f40b2ae0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 715.300547][T15629] RAX: ffffffffffffffda RBX: 00007f40b1db5fa0 RCX: 00007f40b1b8e929 [ 715.308536][T15629] RDX: 0000000000000040 RSI: 0000200000000b80 RDI: 0000000000000003 [ 715.316540][T15629] RBP: 00007f40b2ae0090 R08: 0000000000000000 R09: 0000000000000000 [ 715.324536][T15629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 715.332606][T15629] R13: 0000000000000000 R14: 00007f40b1db5fa0 R15: 00007ffe22ed2598 [ 715.340618][T15629] [ 715.777692][T15621] chnl_net:caif_netlink_parms(): no params data found [ 716.002794][T15642] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3195'. [ 716.022021][T15621] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.029526][T15621] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.037247][T15621] bridge_slave_0: entered allmulticast mode [ 716.045145][T15621] bridge_slave_0: entered promiscuous mode [ 716.054100][T15621] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.061629][T15621] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.068833][T15621] bridge_slave_1: entered allmulticast mode [ 716.076624][T15621] bridge_slave_1: entered promiscuous mode [ 716.175385][T15621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 716.203915][T15621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 716.215602][T15650] netlink: 'syz.4.3197': attribute type 153 has an invalid length. [ 716.229836][T15650] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.3197'. [ 716.404247][T15650] netlink: 'syz.4.3197': attribute type 4 has an invalid length. [ 716.438143][T15650] netlink: 173820 bytes leftover after parsing attributes in process `syz.4.3197'. [ 716.445325][T15621] team0: Port device team_slave_0 added [ 716.474130][T15621] team0: Port device team_slave_1 added [ 716.552080][T15621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 716.559138][T15621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 716.609438][T15621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 716.630839][ T5823] Bluetooth: hci1: command tx timeout [ 716.636152][T15621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 716.646436][T15621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 716.683496][T15621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 716.797494][T15662] netlink: 'syz.4.3202': attribute type 10 has an invalid length. [ 716.871385][T15662] bond0: (slave netdevsim0): Releasing backup interface [ 716.896012][T15662] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 716.929785][T15662] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 716.939793][T15662] team0: Port device netdevsim0 added [ 717.028019][T15666] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3203'. [ 717.097939][T15621] hsr_slave_0: entered promiscuous mode [ 717.122619][T15621] hsr_slave_1: entered promiscuous mode [ 717.133589][T15621] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 717.143387][T15621] Cannot create hsr debugfs directory [ 717.511538][T15621] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.545842][T15678] netlink: 129384 bytes leftover after parsing attributes in process `syz.7.3207'. [ 717.683534][T15621] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.878446][T15621] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.056613][T15693] FAULT_INJECTION: forcing a failure. [ 718.056613][T15693] name failslab, interval 1, probability 0, space 0, times 0 [ 718.091901][T15621] netdevsim netdevsim6 netdevsim0 (unregistering): left promiscuous mode [ 718.108248][T15693] CPU: 1 PID: 15693 Comm: syz.7.3214 Not tainted 6.6.97-syzkaller #0 [ 718.116410][T15693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 718.126495][T15693] Call Trace: [ 718.129787][T15693] [ 718.132749][T15693] dump_stack_lvl+0x16c/0x230 [ 718.137469][T15693] ? show_regs_print_info+0x20/0x20 [ 718.142699][T15693] ? load_image+0x3b0/0x3b0 [ 718.147236][T15693] ? __might_sleep+0xe0/0xe0 [ 718.151852][T15693] ? __lock_acquire+0x7c80/0x7c80 [ 718.156912][T15693] should_fail_ex+0x39d/0x4d0 [ 718.161628][T15693] should_failslab+0x9/0x20 [ 718.166186][T15693] slab_pre_alloc_hook+0x59/0x310 [ 718.171259][T15693] ? tomoyo_encode+0x28b/0x540 [ 718.176067][T15693] ? tomoyo_encode+0x28b/0x540 [ 718.180865][T15693] __kmem_cache_alloc_node+0x53/0x260 [ 718.186270][T15693] ? tomoyo_encode+0x28b/0x540 [ 718.191056][T15693] __kmalloc+0xa4/0x240 [ 718.195248][T15693] tomoyo_encode+0x28b/0x540 [ 718.199992][T15693] tomoyo_realpath_from_path+0x592/0x5d0 [ 718.205668][T15693] tomoyo_path_number_perm+0x1ea/0x590 [ 718.211152][T15693] ? tomoyo_path_number_perm+0x1ba/0x590 [ 718.216824][T15693] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 718.222337][T15693] ? ksys_write+0x1c1/0x250 [ 718.226884][T15693] ? __fget_files+0x28/0x4d0 [ 718.231514][T15693] security_file_ioctl+0x70/0xa0 [ 718.236506][T15693] __se_sys_ioctl+0x48/0x170 [ 718.241124][T15693] do_syscall_64+0x55/0xb0 [ 718.245561][T15693] ? clear_bhb_loop+0x40/0x90 [ 718.250254][T15693] ? clear_bhb_loop+0x40/0x90 [ 718.254957][T15693] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 718.260880][T15693] RIP: 0033:0x7f40b1b8e929 [ 718.266099][T15693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 718.285751][T15693] RSP: 002b:00007f40b2abf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 718.294206][T15693] RAX: ffffffffffffffda RBX: 00007f40b1db6080 RCX: 00007f40b1b8e929 [ 718.302199][T15693] RDX: 0000200000000000 RSI: 0000000000008936 RDI: 0000000000000004 [ 718.310380][T15693] RBP: 00007f40b2abf090 R08: 0000000000000000 R09: 0000000000000000 [ 718.318372][T15693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 718.326362][T15693] R13: 0000000000000000 R14: 00007f40b1db6080 R15: 00007ffe22ed2598 [ 718.334366][T15693] [ 718.343440][T15621] team0: Port device netdevsim0 removed [ 718.362126][T15621] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.380599][T15693] ERROR: Out of memory at tomoyo_realpath_from_path. [ 718.686015][T15707] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.3219'. [ 718.710835][ T5823] Bluetooth: hci1: command tx timeout [ 718.732900][T15621] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 718.745453][T15621] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 718.762653][T15621] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 718.776858][T15621] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 719.010326][T15719] netlink: 'syz.7.3222': attribute type 153 has an invalid length. [ 719.039090][T15719] netlink: 128124 bytes leftover after parsing attributes in process `syz.7.3222'. [ 719.041047][T15621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 719.067518][T15723] netlink: 'syz.5.3224': attribute type 153 has an invalid length. [ 719.085556][T15723] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.3224'. [ 719.114702][T15621] 8021q: adding VLAN 0 to HW filter on device team0 [ 719.145402][T15723] netlink: 'syz.5.3224': attribute type 4 has an invalid length. [ 719.159891][T15723] netlink: 173820 bytes leftover after parsing attributes in process `syz.5.3224'. [ 719.176629][ T7393] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.183996][ T7393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 719.208580][T15719] netlink: 'syz.7.3222': attribute type 4 has an invalid length. [ 719.243807][T15719] netlink: 173820 bytes leftover after parsing attributes in process `syz.7.3222'. [ 719.258356][ T7298] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.265609][ T7298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.278877][T15727] FAULT_INJECTION: forcing a failure. [ 719.278877][T15727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 719.295962][T15727] CPU: 1 PID: 15727 Comm: syz.4.3225 Not tainted 6.6.97-syzkaller #0 [ 719.304125][T15727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 719.314213][T15727] Call Trace: [ 719.317508][T15727] [ 719.320462][T15727] dump_stack_lvl+0x16c/0x230 [ 719.325190][T15727] ? show_regs_print_info+0x20/0x20 [ 719.330420][T15727] ? load_image+0x3b0/0x3b0 [ 719.334971][T15727] ? __might_fault+0xaa/0x120 [ 719.339687][T15727] ? __lock_acquire+0x7c80/0x7c80 [ 719.344739][T15727] should_fail_ex+0x39d/0x4d0 [ 719.349452][T15727] _copy_from_user+0x2f/0xe0 [ 719.354077][T15727] ___sys_sendmsg+0x159/0x290 [ 719.358776][T15727] ? __sys_sendmsg+0x270/0x270 [ 719.363591][T15727] ? __lock_acquire+0x7c80/0x7c80 [ 719.368671][T15727] __se_sys_sendmsg+0x1a5/0x270 [ 719.373547][T15727] ? __x64_sys_sendmsg+0x80/0x80 [ 719.378523][T15727] ? lockdep_hardirqs_on+0x98/0x150 [ 719.383746][T15727] do_syscall_64+0x55/0xb0 [ 719.388189][T15727] ? clear_bhb_loop+0x40/0x90 [ 719.392888][T15727] ? clear_bhb_loop+0x40/0x90 [ 719.397592][T15727] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 719.404291][T15727] RIP: 0033:0x7ff719f8e929 [ 719.408736][T15727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 719.428374][T15727] RSP: 002b:00007ff71aded038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 719.436820][T15727] RAX: ffffffffffffffda RBX: 00007ff71a1b5fa0 RCX: 00007ff719f8e929 [ 719.444814][T15727] RDX: 0000000000000000 RSI: 0000200000001000 RDI: 0000000000000003 [ 719.452804][T15727] RBP: 00007ff71aded090 R08: 0000000000000000 R09: 0000000000000000 [ 719.460796][T15727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 719.468782][T15727] R13: 0000000000000000 R14: 00007ff71a1b5fa0 R15: 00007ffd1f8c64f8 [ 719.476794][T15727] [ 719.597359][T15731] FAULT_INJECTION: forcing a failure. [ 719.597359][T15731] name failslab, interval 1, probability 0, space 0, times 0 [ 719.641223][T15731] CPU: 0 PID: 15731 Comm: syz.5.3226 Not tainted 6.6.97-syzkaller #0 [ 719.649433][T15731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 719.659571][T15731] Call Trace: [ 719.662946][T15731] [ 719.665946][T15731] dump_stack_lvl+0x16c/0x230 [ 719.670734][T15731] ? show_regs_print_info+0x20/0x20 [ 719.676047][T15731] ? load_image+0x3b0/0x3b0 [ 719.680654][T15731] ? __might_sleep+0xe0/0xe0 [ 719.685331][T15731] ? __lock_acquire+0x7c80/0x7c80 [ 719.690460][T15731] should_fail_ex+0x39d/0x4d0 [ 719.695256][T15731] should_failslab+0x9/0x20 [ 719.699828][T15731] slab_pre_alloc_hook+0x59/0x310 [ 719.704930][T15731] ? __lock_acquire+0x7c80/0x7c80 [ 719.710057][T15731] kmem_cache_alloc_node+0x60/0x330 [ 719.715328][T15731] ? __alloc_skb+0x108/0x2c0 [ 719.720020][T15731] __alloc_skb+0x108/0x2c0 [ 719.724537][T15731] netlink_sendmsg+0x65b/0xbe0 [ 719.729419][T15731] ? netlink_getsockopt+0x580/0x580 [ 719.734712][T15731] ? aa_sock_msg_perm+0x94/0x150 [ 719.739755][T15731] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 719.745223][T15731] ? security_socket_sendmsg+0x80/0xa0 [ 719.750773][T15731] ? netlink_getsockopt+0x580/0x580 [ 719.756066][T15731] ____sys_sendmsg+0x5bf/0x950 [ 719.760955][T15731] ? __asan_memset+0x22/0x40 [ 719.765629][T15731] ? __sys_sendmsg_sock+0x30/0x30 [ 719.770725][T15731] ? __import_iovec+0x5f2/0x860 [ 719.775707][T15731] ? import_iovec+0x73/0xa0 [ 719.780307][T15731] ___sys_sendmsg+0x220/0x290 [ 719.785078][T15731] ? __sys_sendmsg+0x270/0x270 [ 719.790006][T15731] ? __lock_acquire+0x7c80/0x7c80 [ 719.795221][T15731] __se_sys_sendmsg+0x1a5/0x270 [ 719.800167][T15731] ? __x64_sys_sendmsg+0x80/0x80 [ 719.805277][T15731] ? lockdep_hardirqs_on+0x98/0x150 [ 719.810578][T15731] do_syscall_64+0x55/0xb0 [ 719.815078][T15731] ? clear_bhb_loop+0x40/0x90 [ 719.819833][T15731] ? clear_bhb_loop+0x40/0x90 [ 719.824589][T15731] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 719.830558][T15731] RIP: 0033:0x7fdbc718e929 [ 719.835163][T15731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 719.854851][T15731] RSP: 002b:00007fdbc7f29038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 719.863362][T15731] RAX: ffffffffffffffda RBX: 00007fdbc73b5fa0 RCX: 00007fdbc718e929 [ 719.871421][T15731] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 719.879479][T15731] RBP: 00007fdbc7f29090 R08: 0000000000000000 R09: 0000000000000000 [ 719.887535][T15731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 719.895585][T15731] R13: 0000000000000000 R14: 00007fdbc73b5fa0 R15: 00007ffe5a036d38 [ 719.903705][T15731] [ 719.964688][T15734] FAULT_INJECTION: forcing a failure. [ 719.964688][T15734] name failslab, interval 1, probability 0, space 0, times 0 [ 719.978419][T15734] CPU: 0 PID: 15734 Comm: syz.4.3227 Not tainted 6.6.97-syzkaller #0 [ 719.986559][T15734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 719.996665][T15734] Call Trace: [ 719.999994][T15734] [ 720.002966][T15734] dump_stack_lvl+0x16c/0x230 [ 720.007702][T15734] ? show_regs_print_info+0x20/0x20 [ 720.013061][T15734] ? load_image+0x3b0/0x3b0 [ 720.017638][T15734] ? __might_sleep+0xe0/0xe0 [ 720.022292][T15734] ? __lock_acquire+0x7c80/0x7c80 [ 720.027373][T15734] should_fail_ex+0x39d/0x4d0 [ 720.032113][T15734] should_failslab+0x9/0x20 [ 720.036669][T15734] slab_pre_alloc_hook+0x59/0x310 [ 720.041747][T15734] ? __get_vm_area_node+0x125/0x370 [ 720.047008][T15734] __kmem_cache_alloc_node+0x53/0x260 [ 720.052433][T15734] ? __get_vm_area_node+0x125/0x370 [ 720.057686][T15734] kmalloc_node_trace+0x26/0xe0 [ 720.062580][T15734] __get_vm_area_node+0x125/0x370 [ 720.067672][T15734] __vmalloc_node_range+0x36e/0x1320 [ 720.073015][T15734] ? netlink_sendmsg+0x5f3/0xbe0 [ 720.078014][T15734] ? netlink_insert+0x106a/0x1370 [ 720.083110][T15734] ? netlink_insert+0x2b3/0x1370 [ 720.088122][T15734] ? netlink_data_ready+0x10/0x10 [ 720.093216][T15734] ? free_vm_area+0x50/0x50 [ 720.097791][T15734] ? netlink_sendmsg+0x5f3/0xbe0 [ 720.102779][T15734] vmalloc+0x79/0x90 [ 720.106751][T15734] ? netlink_sendmsg+0x5f3/0xbe0 [ 720.111731][T15734] netlink_sendmsg+0x5f3/0xbe0 [ 720.116531][T15734] ? netlink_getsockopt+0x580/0x580 [ 720.121760][T15734] ? aa_sock_msg_perm+0x94/0x150 [ 720.126720][T15734] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 720.132030][T15734] ? security_socket_sendmsg+0x80/0xa0 [ 720.137513][T15734] sock_write_iter+0x2bb/0x3f0 [ 720.142296][T15734] ? sock_read_iter+0x3b0/0x3b0 [ 720.147176][T15734] ? common_file_perm+0x198/0x1f0 [ 720.152318][T15734] vfs_write+0x43b/0x940 [ 720.156590][T15734] ? file_end_write+0x250/0x250 [ 720.161476][T15734] ? __fget_files+0x44a/0x4d0 [ 720.166187][T15734] ? __fdget_pos+0x1d8/0x330 [ 720.170800][T15734] ? ksys_write+0x75/0x250 [ 720.175235][T15734] ksys_write+0x147/0x250 [ 720.179582][T15734] ? __ia32_sys_read+0x90/0x90 [ 720.184371][T15734] ? lockdep_hardirqs_on+0x98/0x150 [ 720.189590][T15734] do_syscall_64+0x55/0xb0 [ 720.194026][T15734] ? clear_bhb_loop+0x40/0x90 [ 720.198720][T15734] ? clear_bhb_loop+0x40/0x90 [ 720.203418][T15734] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 720.209330][T15734] RIP: 0033:0x7ff719f8e929 [ 720.213760][T15734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 720.233818][T15734] RSP: 002b:00007ff71aded038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 720.242250][T15734] RAX: ffffffffffffffda RBX: 00007ff71a1b5fa0 RCX: 00007ff719f8e929 [ 720.250241][T15734] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000003 [ 720.258225][T15734] RBP: 00007ff71aded090 R08: 0000000000000000 R09: 0000000000000000 [ 720.266209][T15734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 720.274193][T15734] R13: 0000000000000000 R14: 00007ff71a1b5fa0 R15: 00007ffd1f8c64f8 [ 720.282213][T15734] [ 720.320577][T15734] warn_alloc: 3 callbacks suppressed [ 720.320593][T15734] syz.4.3227: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 720.379614][T15734] CPU: 0 PID: 15734 Comm: syz.4.3227 Not tainted 6.6.97-syzkaller #0 [ 720.387788][T15734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 720.397888][T15734] Call Trace: [ 720.401295][T15734] [ 720.404266][T15734] dump_stack_lvl+0x16c/0x230 [ 720.409006][T15734] ? show_regs_print_info+0x20/0x20 [ 720.414261][T15734] ? load_image+0x3b0/0x3b0 [ 720.418823][T15734] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 720.425293][T15734] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 720.431855][T15734] warn_alloc+0x210/0x300 [ 720.436235][T15734] ? __get_vm_area_node+0x125/0x370 [ 720.441503][T15734] ? zone_watermark_ok_safe+0x230/0x230 [ 720.447102][T15734] ? rcu_is_watching+0x15/0xb0 [ 720.451934][T15734] ? __get_vm_area_node+0x356/0x370 [ 720.457210][T15734] __vmalloc_node_range+0x393/0x1320 [ 720.462557][T15734] ? netlink_insert+0x106a/0x1370 [ 720.467643][T15734] ? netlink_insert+0x2b3/0x1370 [ 720.472635][T15734] ? netlink_data_ready+0x10/0x10 [ 720.477719][T15734] ? free_vm_area+0x50/0x50 [ 720.482288][T15734] ? netlink_sendmsg+0x5f3/0xbe0 [ 720.487280][T15734] vmalloc+0x79/0x90 [ 720.491235][T15734] ? netlink_sendmsg+0x5f3/0xbe0 [ 720.492712][T15621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.496207][T15734] netlink_sendmsg+0x5f3/0xbe0 [ 720.496254][T15734] ? netlink_getsockopt+0x580/0x580 [ 720.513047][T15734] ? aa_sock_msg_perm+0x94/0x150 [ 720.518059][T15734] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 720.523421][T15734] ? security_socket_sendmsg+0x80/0xa0 [ 720.528943][T15734] sock_write_iter+0x2bb/0x3f0 [ 720.533767][T15734] ? sock_read_iter+0x3b0/0x3b0 [ 720.538687][T15734] ? common_file_perm+0x198/0x1f0 [ 720.543781][T15734] vfs_write+0x43b/0x940 [ 720.548099][T15734] ? file_end_write+0x250/0x250 [ 720.553033][T15734] ? __fget_files+0x44a/0x4d0 [ 720.557792][T15734] ? __fdget_pos+0x1d8/0x330 [ 720.562440][T15734] ? ksys_write+0x75/0x250 [ 720.566908][T15734] ksys_write+0x147/0x250 [ 720.571382][T15734] ? __ia32_sys_read+0x90/0x90 [ 720.576196][T15734] ? lockdep_hardirqs_on+0x98/0x150 [ 720.581449][T15734] do_syscall_64+0x55/0xb0 [ 720.585927][T15734] ? clear_bhb_loop+0x40/0x90 [ 720.590661][T15734] ? clear_bhb_loop+0x40/0x90 [ 720.595392][T15734] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 720.601346][T15734] RIP: 0033:0x7ff719f8e929 [ 720.605808][T15734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 720.625465][T15734] RSP: 002b:00007ff71aded038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 720.633927][T15734] RAX: ffffffffffffffda RBX: 00007ff71a1b5fa0 RCX: 00007ff719f8e929 [ 720.641925][T15734] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000003 [ 720.649934][T15734] RBP: 00007ff71aded090 R08: 0000000000000000 R09: 0000000000000000 [ 720.657919][T15734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 720.665916][T15734] R13: 0000000000000000 R14: 00007ff71a1b5fa0 R15: 00007ffd1f8c64f8 [ 720.673918][T15734] [ 720.736827][T15734] Mem-Info: [ 720.740241][T15734] active_anon:8273 inactive_anon:0 isolated_anon:0 [ 720.740241][T15734] active_file:19196 inactive_file:40047 isolated_file:0 [ 720.740241][T15734] unevictable:768 dirty:430 writeback:0 [ 720.740241][T15734] slab_reclaimable:11072 slab_unreclaimable:97732 [ 720.740241][T15734] mapped:24721 shmem:1409 pagetables:844 [ 720.740241][T15734] sec_pagetables:0 bounce:0 [ 720.740241][T15734] kernel_misc_reclaimable:0 [ 720.740241][T15734] free:1338391 free_pcp:7859 free_cma:0 [ 720.792815][ T5823] Bluetooth: hci1: command tx timeout [ 720.812403][T15734] Node 0 active_anon:32992kB inactive_anon:0kB active_file:76784kB inactive_file:159988kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98884kB dirty:1716kB writeback:0kB shmem:4100kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12020kB pagetables:3376kB sec_pagetables:0kB all_unreclaimable? no [ 720.845549][T15734] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 720.876890][T15734] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 720.906756][T15734] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 720.916644][T15734] Node 0 DMA32 free:1440352kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:33040kB inactive_anon:0kB active_file:76784kB inactive_file:158672kB unevictable:1536kB writepending:1712kB present:3129332kB managed:2589592kB mlocked:0kB bounce:0kB free_pcp:17572kB local_pcp:7372kB free_cma:0kB [ 720.958192][T15734] lowmem_reserve[]: 0 0 1 1 1 [ 720.963489][T15734] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:4kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 720.993953][T15734] lowmem_reserve[]: 0 0 0 0 0 [ 721.007351][T15734] Node 1 Normal free:3897420kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:13696kB local_pcp:10464kB free_cma:0kB [ 721.049987][T15734] lowmem_reserve[]: 0 0 0 0 0 [ 721.055401][T15734] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 721.068759][T15734] Node 0 DMA32: 1460*4kB (UME) 1645*8kB (UME) 1697*16kB (UME) 1345*32kB (UME) 1376*64kB (UME) 786*128kB (UME) 358*256kB (UME) 165*512kB (UM) 67*1024kB (UME) 26*2048kB (UME) 211*4096kB (M) = 1440104kB [ 721.089444][T15734] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 721.106761][T15734] Node 1 Normal: 251*4kB (UME) 58*8kB (UME) 47*16kB (UME) 185*32kB (UME) 58*64kB (UME) 14*128kB (UME) 5*256kB (UME) 1*512kB (U) 1*1024kB (U) 1*2048kB (E) 947*4096kB (M) = 3897420kB [ 721.171904][T15754] netlink: 'syz.7.3231': attribute type 10 has an invalid length. [ 721.171916][T15734] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 721.171940][T15734] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 721.220703][T15734] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 721.230380][T15734] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 721.233251][T15754] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 721.258774][T15734] 60652 total pagecache pages [ 721.273895][T15754] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 721.274388][T15734] 0 pages in swap cache [ 721.289893][T15734] Free swap = 124996kB [ 721.295453][T15754] team0: Port device netdevsim0 added [ 721.297430][T15734] Total swap = 124996kB [ 721.321027][T15734] 2097051 pages RAM [ 721.340630][T15734] 0 pages HighMem/MovableOnly [ 721.362366][T15734] 416139 pages reserved [ 721.378148][T15734] 0 pages cma reserved [ 721.427165][T15621] veth0_vlan: entered promiscuous mode [ 721.471491][T15621] veth1_vlan: entered promiscuous mode [ 721.549241][T15621] veth0_macvtap: entered promiscuous mode [ 721.569104][T15621] veth1_macvtap: entered promiscuous mode [ 721.626205][T15621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.643841][T15621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.656259][T15621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.670257][T15621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.684013][T15621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.708774][T15621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.722276][T15621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.733863][T15621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.746689][T15621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 721.780807][T15770] __nla_validate_parse: 1 callbacks suppressed [ 721.780836][T15770] netlink: 15487 bytes leftover after parsing attributes in process `syz.5.3236'. [ 721.848531][T15775] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3237'. [ 721.863530][T15621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 721.882975][T15621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.896853][T15621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 721.908329][T15621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.918729][T15621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 721.929624][T15621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.939697][T15621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 721.950497][T15621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.963454][T15621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 722.002468][T15621] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.014881][T15778] netlink: 129384 bytes leftover after parsing attributes in process `syz.7.3238'. [ 722.027341][T15621] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.038445][T15621] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.047376][T15621] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.241283][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.279168][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.368685][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.387433][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.880941][ T5823] Bluetooth: hci1: command tx timeout [ 723.082983][T15806] netlink: 15487 bytes leftover after parsing attributes in process `syz.7.3246'. [ 723.184048][T15810] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3248'. [ 723.982697][ T5812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 724.001407][T15824] netlink: 'syz.5.3256': attribute type 153 has an invalid length. [ 724.009422][T15824] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.3256'. [ 724.020764][ T5812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 724.031966][ T5812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 724.053170][ T5812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 724.063219][ T5812] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 724.080664][ T5812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 724.158164][T15824] netlink: 'syz.5.3256': attribute type 4 has an invalid length. [ 724.180556][T15824] netlink: 173820 bytes leftover after parsing attributes in process `syz.5.3256'. [ 724.423845][T15836] netlink: 129384 bytes leftover after parsing attributes in process `syz.7.3260'. [ 724.454188][ T7295] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.617067][ T7295] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.717375][ T7295] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.846707][ T7295] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 724.860857][ T7295] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 724.886739][ T7295] team0: Port device netdevsim0 removed [ 724.903780][ T7295] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.446668][T15825] chnl_net:caif_netlink_parms(): no params data found [ 725.947197][T15866] bridge0: port 3(team0) entered blocking state [ 725.971438][T15866] bridge0: port 3(team0) entered disabled state [ 725.978100][T15866] team0: entered allmulticast mode [ 726.010693][T15866] team_slave_0: entered allmulticast mode [ 726.016554][T15866] team_slave_1: entered allmulticast mode [ 726.076283][T15866] team0: entered promiscuous mode [ 726.103162][T15866] team_slave_0: entered promiscuous mode [ 726.119579][T15866] team_slave_1: entered promiscuous mode [ 726.144797][T15866] bridge0: port 3(team0) entered blocking state [ 726.151419][T15866] bridge0: port 3(team0) entered forwarding state [ 726.160811][ T5823] Bluetooth: hci2: command tx timeout [ 726.310107][ T7295] ip6gretap0 (unregistering): left allmulticast mode [ 726.328260][ T7295] ip6gretap0 (unregistering): left promiscuous mode [ 726.348828][ T7295] …: port 1(ip6gretap0) entered disabled state [ 726.452422][T15863] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3267'. [ 726.665715][T15825] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.686452][T15825] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.710805][T15825] bridge_slave_0: entered allmulticast mode [ 726.727217][T15825] bridge_slave_0: entered promiscuous mode [ 726.750118][T15825] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.766110][T15825] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.782839][T15825] bridge_slave_1: entered allmulticast mode [ 726.792886][T15825] bridge_slave_1: entered promiscuous mode [ 727.048730][T15825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 727.065665][T15885] netlink: 'syz.7.3274': attribute type 153 has an invalid length. [ 727.082960][T15885] netlink: 128124 bytes leftover after parsing attributes in process `syz.7.3274'. [ 727.095133][T15825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 727.197934][T15890] netlink: 'syz.7.3274': attribute type 4 has an invalid length. [ 727.221662][T15890] netlink: 173820 bytes leftover after parsing attributes in process `syz.7.3274'. [ 727.330152][T15825] team0: Port device team_slave_0 added [ 727.372006][T15825] team0: Port device team_slave_1 added [ 727.435929][T15894] netlink: 'syz.6.3276': attribute type 153 has an invalid length. [ 727.471640][T15894] netlink: 128124 bytes leftover after parsing attributes in process `syz.6.3276'. [ 727.655032][T15894] netlink: 'syz.6.3276': attribute type 4 has an invalid length. [ 727.675477][T15894] netlink: 173820 bytes leftover after parsing attributes in process `syz.6.3276'. [ 727.725179][T15825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 727.751641][T15825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 727.816164][T15825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 728.041726][T15825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 728.071495][T15825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 728.147850][T15825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 728.242594][ T5823] Bluetooth: hci2: command tx timeout [ 728.513066][T15912] netlink: 'syz.6.3280': attribute type 3 has an invalid length. [ 728.542735][T15912] netlink: 201372 bytes leftover after parsing attributes in process `syz.6.3280'. [ 728.639829][T15825] hsr_slave_0: entered promiscuous mode [ 728.685096][T15825] hsr_slave_1: entered promiscuous mode [ 728.695705][T15825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 728.718678][T15825] Cannot create hsr debugfs directory [ 728.774985][ T7295] bond0: (slave wlan1): Releasing backup interface [ 728.990150][T15926] netlink: 'syz.7.3285': attribute type 153 has an invalid length. [ 729.016138][T15926] netlink: 128124 bytes leftover after parsing attributes in process `syz.7.3285'. [ 729.074980][T15928] netlink: 'syz.7.3285': attribute type 4 has an invalid length. [ 729.090095][T15928] netlink: 173820 bytes leftover after parsing attributes in process `syz.7.3285'. [ 729.142864][ T7295] veth0_to_bridge: left allmulticast mode [ 729.148694][ T7295] veth0_to_bridge: left promiscuous mode [ 729.184249][ T7295] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 729.234700][ T7295] hsr_slave_0: left promiscuous mode [ 729.296917][ T7295] hsr_slave_1: left promiscuous mode [ 729.303448][ T7295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 729.330796][ T7295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 729.356084][ T7295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 729.384565][ T7295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 729.416350][ T7295] team0: left allmulticast mode [ 729.431011][ T7295] team_slave_0: left allmulticast mode [ 729.442449][ T7295] team_slave_1: left allmulticast mode [ 729.458543][ T7295] batadv0: left allmulticast mode [ 729.469019][ T7295] team0: left promiscuous mode [ 729.479029][ T7295] team_slave_0: left promiscuous mode [ 729.499719][ T7295] team_slave_1: left promiscuous mode [ 729.518236][ T7295] batadv0: left promiscuous mode [ 729.541563][ T7295] bridge0: port 3(team0) entered disabled state [ 729.618263][ T7295] bridge_slave_1: left allmulticast mode [ 729.632156][ T7295] bridge_slave_1: left promiscuous mode [ 729.648584][ T7295] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.668241][ T7295] bridge_slave_0: left allmulticast mode [ 729.681846][ T7295] bridge_slave_0: left promiscuous mode [ 729.695620][ T7295] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.766988][ T7295] veth0_macvtap: left promiscuous mode [ 729.782100][ T7295] veth1_vlan: left promiscuous mode [ 730.321550][ T5823] Bluetooth: hci2: command tx timeout [ 730.950177][ T7295] team0 (unregistering): Port device team_slave_1 removed [ 730.998977][ T7295] team0 (unregistering): Port device team_slave_0 removed [ 731.055994][ T7295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 731.116705][ T7295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 731.325839][ T7295] team0 (unregistering): Port device batadv0 removed [ 731.594007][ T7295] bond0 (unregistering): Released all slaves [ 731.687725][T15933] netlink: 15487 bytes leftover after parsing attributes in process `syz.6.3287'. [ 731.704887][T15944] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3289'. [ 732.392002][ T5823] Bluetooth: hci2: command tx timeout [ 732.641204][T15989] netlink: 'syz.5.3299': attribute type 3 has an invalid length. [ 732.658635][T15989] netlink: 201372 bytes leftover after parsing attributes in process `syz.5.3299'. [ 732.796343][T15987] netlink: 15487 bytes leftover after parsing attributes in process `syz.6.3301'. [ 732.877566][T15991] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3302'. [ 733.148330][T15825] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 733.175509][T15825] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 733.211415][T15825] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 733.239605][T15825] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 733.568515][T15825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.581068][T16017] ref_ctr_offset mismatch. inode: 0x6b offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 733.636570][T15825] 8021q: adding VLAN 0 to HW filter on device team0 [ 733.670466][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.677763][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 733.732763][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.739985][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 734.214421][T16038] netlink: 'syz.7.3311': attribute type 3 has an invalid length. [ 734.249530][T16038] netlink: 201372 bytes leftover after parsing attributes in process `syz.7.3311'. [ 734.549588][T15825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 735.521476][T16081] netlink: 144 bytes leftover after parsing attributes in process `syz.6.3325'. [ 735.607752][T16081] netlink: 65055 bytes leftover after parsing attributes in process `syz.6.3325'. [ 735.625727][T15825] veth0_vlan: entered promiscuous mode [ 735.669534][T15825] veth1_vlan: entered promiscuous mode [ 735.808088][T16086] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3327'. [ 735.863881][T15825] veth0_macvtap: entered promiscuous mode [ 735.895166][T15825] veth1_macvtap: entered promiscuous mode [ 735.968248][T15825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 735.994384][T15825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.010601][T15825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.051704][T15825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.080666][T15825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.112440][T15825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.136781][T15825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.169934][T15825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.189979][T15825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 736.242875][T15825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.271754][T15825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.282036][T15825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.310732][T15825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.333859][T15825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.364599][T15825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.377738][T15825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.388440][T15825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.413992][T15825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 736.455625][T15825] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.475414][T15825] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.498066][T15825] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.525122][T15825] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.780670][T16113] netlink: 'syz.5.3335': attribute type 153 has an invalid length. [ 736.789285][T16113] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.3335'. [ 736.803942][ T7298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.843569][ T7298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.926356][T16118] netlink: 'syz.5.3335': attribute type 4 has an invalid length. [ 736.949975][T16118] netlink: 173820 bytes leftover after parsing attributes in process `syz.5.3335'. [ 736.980908][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.989282][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 737.236474][T16128] netlink: 'syz.4.3249': attribute type 10 has an invalid length. [ 737.367168][T16128] team0: Port device netdevsim0 added [ 737.414010][T16133] netlink: 15487 bytes leftover after parsing attributes in process `syz.6.3340'. [ 738.453813][T16158] netlink: 'syz.6.3346': attribute type 153 has an invalid length. [ 738.493466][T16158] netlink: 128124 bytes leftover after parsing attributes in process `syz.6.3346'. [ 738.651813][T16163] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 738.663362][T16163] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 738.681192][T16163] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 738.692745][T16163] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 738.705298][T16163] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 738.715314][T16163] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 738.761975][T16158] netlink: 'syz.6.3346': attribute type 4 has an invalid length. [ 738.791716][T16158] netlink: 173820 bytes leftover after parsing attributes in process `syz.6.3346'. [ 738.894908][ T7395] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.957500][T16167] FAULT_INJECTION: forcing a failure. [ 738.957500][T16167] name failslab, interval 1, probability 0, space 0, times 0 [ 739.003310][T16167] CPU: 1 PID: 16167 Comm: syz.7.3348 Not tainted 6.6.97-syzkaller #0 [ 739.011472][T16167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 739.021579][T16167] Call Trace: [ 739.024907][T16167] [ 739.027886][T16167] dump_stack_lvl+0x16c/0x230 [ 739.032631][T16167] ? show_regs_print_info+0x20/0x20 [ 739.037899][T16167] ? load_image+0x3b0/0x3b0 [ 739.042461][T16167] ? __might_sleep+0xe0/0xe0 [ 739.047111][T16167] ? __lock_acquire+0x7c80/0x7c80 [ 739.052198][T16167] ? prepend_path+0x4b/0x960 [ 739.056859][T16167] should_fail_ex+0x39d/0x4d0 [ 739.061624][T16167] should_failslab+0x9/0x20 [ 739.066186][T16167] slab_pre_alloc_hook+0x59/0x310 [ 739.071783][T16167] ? __asan_memcpy+0x40/0x70 [ 739.076434][T16167] ? tomoyo_encode+0x28b/0x540 [ 739.081268][T16167] ? tomoyo_encode+0x28b/0x540 [ 739.086086][T16167] __kmem_cache_alloc_node+0x53/0x260 [ 739.091512][T16167] ? prepend_path+0x4b/0x960 [ 739.096165][T16167] ? tomoyo_encode+0x28b/0x540 [ 739.101160][T16167] __kmalloc+0xa4/0x240 [ 739.105372][T16167] tomoyo_encode+0x28b/0x540 [ 739.110017][T16167] tomoyo_realpath_from_path+0x592/0x5d0 [ 739.115717][T16167] tomoyo_path_number_perm+0x1ea/0x590 [ 739.121233][T16167] ? tomoyo_path_number_perm+0x1ba/0x590 [ 739.127037][T16167] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 739.132555][T16167] ? ksys_write+0x1c1/0x250 [ 739.137152][T16167] ? __fget_files+0x28/0x4d0 [ 739.141839][T16167] security_file_ioctl+0x70/0xa0 [ 739.146848][T16167] __se_sys_ioctl+0x48/0x170 [ 739.151521][T16167] do_syscall_64+0x55/0xb0 [ 739.155997][T16167] ? clear_bhb_loop+0x40/0x90 [ 739.160723][T16167] ? clear_bhb_loop+0x40/0x90 [ 739.165454][T16167] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 739.171402][T16167] RIP: 0033:0x7f40b1b8e929 [ 739.175882][T16167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 739.195629][T16167] RSP: 002b:00007f40b2ae0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 739.204081][T16167] RAX: ffffffffffffffda RBX: 00007f40b1db5fa0 RCX: 00007f40b1b8e929 [ 739.212086][T16167] RDX: 0000200000000100 RSI: 00000000400454ca RDI: 0000000000000007 [ 739.220085][T16167] RBP: 00007f40b2ae0090 R08: 0000000000000000 R09: 0000000000000000 [ 739.228091][T16167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 739.236098][T16167] R13: 0000000000000000 R14: 00007f40b1db5fa0 R15: 00007ffe22ed2598 [ 739.244204][T16167] [ 739.282221][ T7395] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.282385][T16167] ERROR: Out of memory at tomoyo_realpath_from_path. [ 739.499643][ T7395] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.648424][ T7395] bond0: (slave netdevsim0): Releasing backup interface [ 739.696339][ T7395] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.827566][T16191] netlink: 'syz.7.3361': attribute type 153 has an invalid length. [ 739.857370][T16191] netlink: 128124 bytes leftover after parsing attributes in process `syz.7.3361'. [ 739.978753][T16197] netlink: 'syz.7.3361': attribute type 4 has an invalid length. [ 740.002496][T16197] netlink: 173820 bytes leftover after parsing attributes in process `syz.7.3361'. [ 740.099449][T16198] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3356'. [ 740.243376][T16205] netlink: 'syz.4.3357': attribute type 10 has an invalid length. [ 740.359147][T16162] chnl_net:caif_netlink_parms(): no params data found [ 740.378893][ T5823] Bluetooth: hci0: ISO packet for unknown connection handle 2366 [ 740.520118][T16212] FAULT_INJECTION: forcing a failure. [ 740.520118][T16212] name failslab, interval 1, probability 0, space 0, times 0 [ 740.566681][T16212] CPU: 1 PID: 16212 Comm: syz.6.3359 Not tainted 6.6.97-syzkaller #0 [ 740.574861][T16212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 740.584983][T16212] Call Trace: [ 740.588322][T16212] [ 740.591314][T16212] dump_stack_lvl+0x16c/0x230 [ 740.596066][T16212] ? show_regs_print_info+0x20/0x20 [ 740.601338][T16212] ? load_image+0x3b0/0x3b0 [ 740.605945][T16212] ? __might_sleep+0xe0/0xe0 [ 740.610614][T16212] ? __lock_acquire+0x7c80/0x7c80 [ 740.615710][T16212] should_fail_ex+0x39d/0x4d0 [ 740.620469][T16212] should_failslab+0x9/0x20 [ 740.625038][T16212] slab_pre_alloc_hook+0x59/0x310 [ 740.630144][T16212] ? tomoyo_encode+0x28b/0x540 [ 740.634985][T16212] ? tomoyo_encode+0x28b/0x540 [ 740.639813][T16212] __kmem_cache_alloc_node+0x53/0x260 [ 740.645269][T16212] ? tomoyo_encode+0x28b/0x540 [ 740.650115][T16212] __kmalloc+0xa4/0x240 [ 740.654348][T16212] tomoyo_encode+0x28b/0x540 [ 740.659022][T16212] tomoyo_realpath_from_path+0x592/0x5d0 [ 740.664772][T16212] tomoyo_path_number_perm+0x1ea/0x590 [ 740.670299][T16212] ? tomoyo_path_number_perm+0x1ba/0x590 [ 740.676018][T16212] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 740.681551][T16212] ? ksys_write+0x1c1/0x250 [ 740.686271][T16212] ? __fget_files+0x28/0x4d0 [ 740.690977][T16212] security_file_ioctl+0x70/0xa0 [ 740.696090][T16212] __se_sys_ioctl+0x48/0x170 [ 740.700752][T16212] do_syscall_64+0x55/0xb0 [ 740.705211][T16212] ? clear_bhb_loop+0x40/0x90 [ 740.709982][T16212] ? clear_bhb_loop+0x40/0x90 [ 740.714753][T16212] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 740.720712][T16212] RIP: 0033:0x7f197398e929 [ 740.725174][T16212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 740.744839][T16212] RSP: 002b:00007f1974772038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 740.753290][T16212] RAX: ffffffffffffffda RBX: 00007f1973bb5fa0 RCX: 00007f197398e929 [ 740.761286][T16212] RDX: 0000200000000080 RSI: 0000000000008b06 RDI: 0000000000000005 [ 740.769310][T16212] RBP: 00007f1974772090 R08: 0000000000000000 R09: 0000000000000000 [ 740.777327][T16212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 740.785331][T16212] R13: 0000000000000000 R14: 00007f1973bb5fa0 R15: 00007ffe0a7bc318 [ 740.793363][T16212] [ 740.820755][ T5823] Bluetooth: hci3: command tx timeout [ 740.851161][T16212] ERROR: Out of memory at tomoyo_realpath_from_path. [ 741.101585][T16162] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.108940][T16162] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.129317][T16162] bridge_slave_0: entered allmulticast mode [ 741.138546][T16162] bridge_slave_0: entered promiscuous mode [ 741.161299][T16162] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.168533][T16162] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.176987][T16162] bridge_slave_1: entered allmulticast mode [ 741.185857][T16162] bridge_slave_1: entered promiscuous mode [ 741.443662][T16162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 741.504964][T16162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 741.558105][T16236] netlink: 15487 bytes leftover after parsing attributes in process `syz.6.3365'. [ 741.722562][T16162] team0: Port device team_slave_0 added [ 741.793655][T16162] team0: Port device team_slave_1 added [ 741.794101][T16245] netlink: 'syz.4.3367': attribute type 153 has an invalid length. [ 741.861879][T16245] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.3367'. [ 741.953617][T16251] netlink: 'syz.4.3367': attribute type 4 has an invalid length. [ 741.971205][T16251] netlink: 173820 bytes leftover after parsing attributes in process `syz.4.3367'. [ 742.051851][T16252] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3368'. [ 742.080657][T16162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 742.111137][T16162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 742.164079][T16162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 742.296337][T16162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 742.322093][T16162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 742.377714][T16162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 742.574800][T16162] hsr_slave_0: entered promiscuous mode [ 742.594514][T16162] hsr_slave_1: entered promiscuous mode [ 742.617261][T16162] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 742.630643][T16162] Cannot create hsr debugfs directory [ 742.675130][ T7395] bond0: (slave wlan1): Releasing backup interface [ 742.877026][ T5823] Bluetooth: hci3: command tx timeout [ 743.118508][T16281] netlink: 'syz.6.3379': attribute type 153 has an invalid length. [ 743.128053][T16281] netlink: 128124 bytes leftover after parsing attributes in process `syz.6.3379'. [ 743.263603][ T7395] veth0_to_bridge: left allmulticast mode [ 743.269442][ T7395] veth0_to_bridge: left promiscuous mode [ 743.290882][ T7395] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 743.327311][T16281] netlink: 'syz.6.3379': attribute type 4 has an invalid length. [ 743.355601][ T7395] hsr_slave_0: left promiscuous mode [ 743.377184][ T7395] hsr_slave_1: left promiscuous mode [ 743.392474][ T7395] batman_adv: batadv0: Removing interface: team0 [ 743.402182][ T7395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 743.403225][T16290] FAULT_INJECTION: forcing a failure. [ 743.403225][T16290] name failslab, interval 1, probability 0, space 0, times 0 [ 743.409829][ T7395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 743.434640][T16290] CPU: 1 PID: 16290 Comm: syz.4.3381 Not tainted 6.6.97-syzkaller #0 [ 743.442793][T16290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 743.452894][T16290] Call Trace: [ 743.456218][T16290] [ 743.459182][T16290] dump_stack_lvl+0x16c/0x230 [ 743.463914][T16290] ? show_regs_print_info+0x20/0x20 [ 743.469164][T16290] ? load_image+0x3b0/0x3b0 [ 743.473729][T16290] ? __might_sleep+0xe0/0xe0 [ 743.478380][T16290] ? __lock_acquire+0x7c80/0x7c80 [ 743.483472][T16290] should_fail_ex+0x39d/0x4d0 [ 743.488226][T16290] should_failslab+0x9/0x20 [ 743.492798][T16290] slab_pre_alloc_hook+0x59/0x310 [ 743.497884][T16290] ? memcg_alloc_slab_cgroups+0x87/0x130 [ 743.503585][T16290] ? memcg_alloc_slab_cgroups+0x87/0x130 [ 743.509286][T16290] __kmem_cache_alloc_node+0x53/0x260 [ 743.514719][T16290] ? memcg_alloc_slab_cgroups+0x87/0x130 [ 743.520411][T16290] __kmalloc_node+0xa4/0x230 [ 743.525067][T16290] memcg_alloc_slab_cgroups+0x87/0x130 [ 743.530594][T16290] slab_post_alloc_hook+0xfc/0x4d0 [ 743.535764][T16290] kmem_cache_alloc_node+0x150/0x330 [ 743.541104][T16290] ? mark_lock+0x94/0x320 [ 743.545579][T16290] ? __alloc_skb+0x108/0x2c0 [ 743.550235][T16290] __alloc_skb+0x108/0x2c0 [ 743.554718][T16290] alloc_skb_with_frags+0xca/0x7c0 [ 743.559900][T16290] sock_alloc_send_pskb+0x857/0x990 [ 743.565177][T16290] ? sock_kzfree_s+0x50/0x50 [ 743.569824][T16290] ? do_raw_spin_lock+0x121/0x2c0 [ 743.574920][T16290] ? __rwlock_init+0x150/0x150 [ 743.579740][T16290] ? do_raw_spin_unlock+0x121/0x230 [ 743.584999][T16290] unix_dgram_sendmsg+0x5a1/0x1720 [ 743.590273][T16290] ? __lock_acquire+0x7c80/0x7c80 [ 743.595375][T16290] ? aa_sk_perm+0x7fc/0x930 [ 743.599936][T16290] ? unix_dgram_poll+0x670/0x670 [ 743.604937][T16290] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 743.611417][T16290] ? aa_sock_msg_perm+0x94/0x150 [ 743.616422][T16290] ? unix_seqpacket_sendmsg+0x10c/0x1e0 [ 743.622075][T16290] sock_write_iter+0x2bb/0x3f0 [ 743.626897][T16290] ? sock_read_iter+0x3b0/0x3b0 [ 743.631821][T16290] ? common_file_perm+0x198/0x1f0 [ 743.636917][T16290] vfs_write+0x43b/0x940 [ 743.641236][T16290] ? file_end_write+0x250/0x250 [ 743.646158][T16290] ? __fget_files+0x44a/0x4d0 [ 743.650911][T16290] ? __fdget_pos+0x1d8/0x330 [ 743.655577][T16290] ? ksys_write+0x75/0x250 [ 743.660039][T16290] ksys_write+0x147/0x250 [ 743.664423][T16290] ? __ia32_sys_read+0x90/0x90 [ 743.669241][T16290] ? lockdep_hardirqs_on+0x98/0x150 [ 743.674511][T16290] do_syscall_64+0x55/0xb0 [ 743.679000][T16290] ? clear_bhb_loop+0x40/0x90 [ 743.683733][T16290] ? clear_bhb_loop+0x40/0x90 [ 743.688466][T16290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 743.694413][T16290] RIP: 0033:0x7f0a3698e929 [ 743.698876][T16290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 743.718574][T16290] RSP: 002b:00007f0a37785038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 743.727060][T16290] RAX: ffffffffffffffda RBX: 00007f0a36bb5fa0 RCX: 00007f0a3698e929 [ 743.735098][T16290] RDX: 0000000000000009 RSI: 0000200000000180 RDI: 0000000000000004 [ 743.743204][T16290] RBP: 00007f0a37785090 R08: 0000000000000000 R09: 0000000000000000 [ 743.751221][T16290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 743.759212][T16290] R13: 0000000000000000 R14: 00007f0a36bb5fa0 R15: 00007ffd9bc3ff68 [ 743.767308][T16290] [ 743.775909][ T7395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 743.784416][ T7395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 743.842278][ T7395] bridge0: port 3(batadv0) entered disabled state [ 743.855256][ T7395] bridge_slave_1: left allmulticast mode [ 743.874570][ T7395] bridge_slave_1: left promiscuous mode [ 743.880405][ T7395] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.900219][ T7395] bridge_slave_0: left allmulticast mode [ 743.916720][ T7395] bridge_slave_0: left promiscuous mode [ 743.925793][ T7395] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.067593][ T7395] veth0_macvtap: left promiscuous mode [ 744.086132][ T7395] veth1_vlan: left promiscuous mode [ 744.772576][ T7395] team0 (unregistering): Port device team_slave_1 removed [ 744.823671][ T7395] team0 (unregistering): Port device team_slave_0 removed [ 744.887207][ T7395] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 744.952118][ T5823] Bluetooth: hci3: command tx timeout [ 745.410164][ T7395] bond0 (unregistering): Released all slaves [ 745.584714][T16314] __nla_validate_parse: 1 callbacks suppressed [ 745.584733][T16314] netlink: 15487 bytes leftover after parsing attributes in process `syz.7.3388'. [ 745.762000][T16321] FAULT_INJECTION: forcing a failure. [ 745.762000][T16321] name failslab, interval 1, probability 0, space 0, times 0 [ 745.781217][T16321] CPU: 1 PID: 16321 Comm: syz.4.3391 Not tainted 6.6.97-syzkaller #0 [ 745.789372][T16321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 745.799475][T16321] Call Trace: [ 745.802797][T16321] [ 745.805786][T16321] dump_stack_lvl+0x16c/0x230 [ 745.810535][T16321] ? show_regs_print_info+0x20/0x20 [ 745.815788][T16321] ? load_image+0x3b0/0x3b0 [ 745.820332][T16321] ? __lock_acquire+0x7c80/0x7c80 [ 745.825380][T16321] should_fail_ex+0x39d/0x4d0 [ 745.830172][T16321] should_failslab+0x9/0x20 [ 745.834689][T16321] slab_pre_alloc_hook+0x59/0x310 [ 745.839734][T16321] ? bpf_test_init+0xc0/0x150 [ 745.844426][T16321] ? bpf_test_init+0xc0/0x150 [ 745.849121][T16321] __kmem_cache_alloc_node+0x53/0x260 [ 745.854554][T16321] ? bpf_test_init+0xc0/0x150 [ 745.859246][T16321] __kmalloc+0xa4/0x240 [ 745.863417][T16321] bpf_test_init+0xc0/0x150 [ 745.867941][T16321] bpf_prog_test_run_xdp+0x382/0xfa0 [ 745.873256][T16321] ? dev_put+0x80/0x80 [ 745.877347][T16321] ? dev_put+0x80/0x80 [ 745.881431][T16321] bpf_prog_test_run+0x321/0x390 [ 745.886401][T16321] __sys_bpf+0x440/0x800 [ 745.890923][T16321] ? bpf_link_show_fdinfo+0x350/0x350 [ 745.896340][T16321] ? lock_chain_count+0x20/0x20 [ 745.901222][T16321] __x64_sys_bpf+0x7c/0x90 [ 745.905660][T16321] do_syscall_64+0x55/0xb0 [ 745.910103][T16321] ? clear_bhb_loop+0x40/0x90 [ 745.914816][T16321] ? clear_bhb_loop+0x40/0x90 [ 745.919540][T16321] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 745.925465][T16321] RIP: 0033:0x7f0a3698e929 [ 745.929909][T16321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 745.949537][T16321] RSP: 002b:00007f0a37785038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 745.958140][T16321] RAX: ffffffffffffffda RBX: 00007f0a36bb5fa0 RCX: 00007f0a3698e929 [ 745.966139][T16321] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 000000000000000a [ 745.974121][T16321] RBP: 00007f0a37785090 R08: 0000000000000000 R09: 0000000000000000 [ 745.982104][T16321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 745.990089][T16321] R13: 0000000000000000 R14: 00007f0a36bb5fa0 R15: 00007ffd9bc3ff68 [ 745.998086][T16321] [ 746.113947][T16326] netlink: 'syz.6.3392': attribute type 153 has an invalid length. [ 746.130992][T16326] netlink: 128124 bytes leftover after parsing attributes in process `syz.6.3392'. [ 746.228934][T16326] netlink: 'syz.6.3392': attribute type 4 has an invalid length. [ 746.275084][T16326] netlink: 173820 bytes leftover after parsing attributes in process `syz.6.3392'. [ 746.764253][T16343] netlink: 'syz.7.3397': attribute type 10 has an invalid length. [ 746.816377][T16162] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 746.836755][T16162] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 746.874980][T16345] netlink: 15487 bytes leftover after parsing attributes in process `syz.4.3398'. [ 746.909178][T16162] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 746.936814][T16162] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 747.031266][ T5823] Bluetooth: hci3: command tx timeout [ 747.176395][T16162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 747.223793][T16162] 8021q: adding VLAN 0 to HW filter on device team0 [ 747.276205][ T7395] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.283539][ T7395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 747.404071][ T7393] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.411412][ T7393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 747.438900][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.456547][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.081653][T16392] netlink: 'syz.4.3409': attribute type 10 has an invalid length. [ 748.109869][T16162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 749.004653][T16162] veth0_vlan: entered promiscuous mode [ 749.050210][T16162] veth1_vlan: entered promiscuous mode [ 749.126513][T16162] veth0_macvtap: entered promiscuous mode [ 749.166848][T16427] bridge0: port 3(team0) entered blocking state [ 749.200783][T16427] bridge0: port 3(team0) entered disabled state [ 749.229896][T16427] team0: entered allmulticast mode [ 749.260928][T16427] team_slave_0: entered allmulticast mode [ 749.266785][T16427] team_slave_1: entered allmulticast mode [ 749.281259][T16427] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 749.326262][T16427] team0: entered promiscuous mode [ 749.350777][T16427] team_slave_0: entered promiscuous mode [ 749.377683][T16427] team_slave_1: entered promiscuous mode [ 749.416188][T16427] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 749.456906][T16427] bridge0: port 3(team0) entered blocking state [ 749.463548][T16427] bridge0: port 3(team0) entered forwarding state [ 749.566790][T16162] veth1_macvtap: entered promiscuous mode [ 749.620120][T16162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 749.640907][T16162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.661262][T16162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 749.683357][T16162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.717873][T16162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 749.768888][T16162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.793067][T16162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 749.832804][T16162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.847016][T16162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 749.879850][T16162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 749.910614][T16162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.922843][T16162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 749.940541][T16162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.958010][T16162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 749.969088][T16162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.982323][T16162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 750.007030][T16162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.028812][T16162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 750.039013][T16440] netlink: 'syz.7.3421': attribute type 10 has an invalid length. [ 750.063379][T16162] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.090726][T16162] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.120893][T16162] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.150786][T16162] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.341671][ T7380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.382911][ T7380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.492373][ T7295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.500287][ T7295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.542362][T16463] netlink: 15487 bytes leftover after parsing attributes in process `syz.6.3427'. [ 750.835737][T16469] FAULT_INJECTION: forcing a failure. [ 750.835737][T16469] name failslab, interval 1, probability 0, space 0, times 0 [ 750.849580][T16469] CPU: 1 PID: 16469 Comm: syz.7.3429 Not tainted 6.6.97-syzkaller #0 [ 750.857774][T16469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 750.867918][T16469] Call Trace: [ 750.871303][T16469] [ 750.874331][T16469] dump_stack_lvl+0x16c/0x230 [ 750.879161][T16469] ? show_regs_print_info+0x20/0x20 [ 750.884481][T16469] ? load_image+0x3b0/0x3b0 [ 750.889111][T16469] ? __might_sleep+0xe0/0xe0 [ 750.893841][T16469] ? __lock_acquire+0x7c80/0x7c80 [ 750.899031][T16469] should_fail_ex+0x39d/0x4d0 [ 750.904484][T16469] should_failslab+0x9/0x20 [ 750.909074][T16469] slab_pre_alloc_hook+0x59/0x310 [ 750.914217][T16469] ? alloc_fd+0x58f/0x630 [ 750.918691][T16469] kmem_cache_alloc_node+0x60/0x330 [ 750.924007][T16469] ? perf_event_alloc+0x15a/0x21b0 [ 750.929395][T16469] perf_event_alloc+0x15a/0x21b0 [ 750.934603][T16469] ? _raw_spin_unlock+0x28/0x40 [ 750.939565][T16469] ? alloc_fd+0x58f/0x630 [ 750.944093][T16469] __se_sys_perf_event_open+0x5ed/0x1c20 [ 750.949917][T16469] ? mutex_unlock+0x10/0x10 [ 750.954588][T16469] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 750.960527][T16469] ? lock_chain_count+0x20/0x20 [ 750.965544][T16469] ? lockdep_hardirqs_on+0x98/0x150 [ 750.970877][T16469] ? __x64_sys_perf_event_open+0x20/0xc0 [ 750.976798][T16469] do_syscall_64+0x55/0xb0 [ 750.981785][T16469] ? clear_bhb_loop+0x40/0x90 [ 750.986570][T16469] ? clear_bhb_loop+0x40/0x90 [ 750.991398][T16469] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 750.997403][T16469] RIP: 0033:0x7f40b1b8e929 [ 751.001938][T16469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 751.021670][T16469] RSP: 002b:00007f40b2ae0038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 751.030218][T16469] RAX: ffffffffffffffda RBX: 00007f40b1db5fa0 RCX: 00007f40b1b8e929 [ 751.038321][T16469] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 00002000000003c0 [ 751.046420][T16469] RBP: 00007f40b2ae0090 R08: 0000000000000000 R09: 0000000000000000 [ 751.054496][T16469] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 751.062586][T16469] R13: 0000000000000000 R14: 00007f40b1db5fa0 R15: 00007ffe22ed2598 [ 751.070804][T16469] [ 751.327928][T16480] netlink: 'syz.5.3433': attribute type 153 has an invalid length. [ 751.338543][T16478] netlink: 'syz.7.3432': attribute type 10 has an invalid length. [ 751.359000][T16480] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.3433'. [ 751.438352][T16480] netlink: 'syz.5.3433': attribute type 4 has an invalid length. [ 751.459182][T16480] netlink: 173820 bytes leftover after parsing attributes in process `syz.5.3433'. [ 751.733177][T16492] netlink: 15487 bytes leftover after parsing attributes in process `syz.5.3438'. [ 752.099147][T16506] netlink: 'syz.5.3444': attribute type 10 has an invalid length. [ 752.178536][T16506] team0: Port device netdevsim0 added [ 752.319898][T16512] netlink: 'syz.5.3447': attribute type 153 has an invalid length. [ 752.338833][T16512] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.3447'. [ 752.383555][T16512] netlink: 'syz.5.3447': attribute type 4 has an invalid length. [ 752.404802][T16512] netlink: 173820 bytes leftover after parsing attributes in process `syz.5.3447'. [ 752.609273][T16520] netlink: 15487 bytes leftover after parsing attributes in process `syz.5.3451'. [ 753.012277][T16533] netlink: 'syz.4.3456': attribute type 10 has an invalid length. [ 753.134799][T16537] netlink: 'syz.7.3459': attribute type 153 has an invalid length. [ 753.177233][T16537] netlink: 128124 bytes leftover after parsing attributes in process `syz.7.3459'. [ 753.292617][T16537] netlink: 'syz.7.3459': attribute type 4 has an invalid length. [ 753.329803][T16537] netlink: 173820 bytes leftover after parsing attributes in process `syz.7.3459'. [ 753.447514][T16546] netlink: 15487 bytes leftover after parsing attributes in process `syz.5.3463'. [ 753.731021][T16558] netlink: 'syz.4.3469': attribute type 10 has an invalid length. [ 754.033973][T16571] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.3475'. [ 754.043670][T16571] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 756.421973][T16679] validate_nla: 4 callbacks suppressed [ 756.421991][T16679] netlink: 'syz.6.3498': attribute type 4 has an invalid length. [ 756.456756][T16679] __nla_validate_parse: 4 callbacks suppressed [ 756.456778][T16679] netlink: 173820 bytes leftover after parsing attributes in process `syz.6.3498'. [ 756.581389][T16681] netlink: 'syz.4.3499': attribute type 10 has an invalid length. [ 756.830270][T16690] netlink: 'syz.4.3512': attribute type 10 has an invalid length. [ 757.302295][T16707] bridge0: port 3(team0) entered blocking state [ 757.316827][T16707] bridge0: port 3(team0) entered disabled state [ 757.333063][T16707] team0: entered allmulticast mode [ 757.348594][T16707] team_slave_0: entered allmulticast mode [ 757.369276][T16707] team_slave_1: entered allmulticast mode [ 757.399685][T16707] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 757.415935][T16707] team0: entered promiscuous mode [ 757.426710][T16707] team_slave_0: entered promiscuous mode [ 757.447092][T16707] team_slave_1: entered promiscuous mode [ 757.458929][T16707] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 757.485325][T16707] bridge0: port 3(team0) entered blocking state [ 757.491880][T16707] bridge0: port 3(team0) entered forwarding state [ 757.754692][T16721] netlink: 'syz.7.3514': attribute type 153 has an invalid length. [ 757.828046][T16721] netlink: 128124 bytes leftover after parsing attributes in process `syz.7.3514'. [ 757.986821][T16727] netlink: 'syz.6.3517': attribute type 10 has an invalid length. [ 758.004398][T16725] netlink: 'syz.7.3514': attribute type 4 has an invalid length. [ 758.087918][T16727] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 758.097460][T16725] netlink: 173820 bytes leftover after parsing attributes in process `syz.7.3514'. [ 758.130973][T16727] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 758.149950][T16727] team0: Port device netdevsim0 added [ 758.218007][T16730] netlink: 15487 bytes leftover after parsing attributes in process `syz.4.3518'. [ 758.419189][T16734] GPL: port 1(erspan0) entered blocking state [ 758.430957][T16734] GPL: port 1(erspan0) entered disabled state [ 758.460776][T16734] erspan0: entered allmulticast mode [ 758.480384][T16734] erspan0: entered promiscuous mode [ 758.513194][T16737] GPL: port 1(erspan0) entered blocking state [ 758.519686][T16737] GPL: port 1(erspan0) entered forwarding state [ 759.146928][T16753] netlink: 'syz.6.3530': attribute type 10 has an invalid length. [ 759.364594][T16758] netlink: 1010 bytes leftover after parsing attributes in process `syz.6.3532'. [ 759.392169][T16760] netlink: 'syz.7.3531': attribute type 153 has an invalid length. [ 759.400185][T16760] netlink: 128124 bytes leftover after parsing attributes in process `syz.7.3531'. [ 759.410048][T16758] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 759.660242][T16771] netlink: 'syz.7.3531': attribute type 4 has an invalid length. [ 759.687021][T16771] netlink: 173820 bytes leftover after parsing attributes in process `syz.7.3531'. [ 761.024624][T16805] netlink: 'syz.6.3541': attribute type 10 has an invalid length. [ 761.261684][T16811] netlink: 128124 bytes leftover after parsing attributes in process `syz.6.3545'. [ 761.505322][T16816] validate_nla: 1 callbacks suppressed [ 761.505341][T16816] netlink: 'syz.6.3545': attribute type 4 has an invalid length. [ 761.557404][T16816] netlink: 173820 bytes leftover after parsing attributes in process `syz.6.3545'. [ 762.211129][T16831] netlink: 'syz.6.3553': attribute type 10 has an invalid length. [ 762.884245][T16847] netlink: 'syz.6.3559': attribute type 153 has an invalid length. [ 762.907517][T16847] netlink: 128124 bytes leftover after parsing attributes in process `syz.6.3559'. [ 763.112120][T16852] netlink: 15487 bytes leftover after parsing attributes in process `syz.7.3563'. [ 763.350860][T16856] netlink: 'syz.5.3564': attribute type 10 has an invalid length. [ 763.747734][T16870] netlink: 'syz.4.3570': attribute type 4 has an invalid length. [ 763.780785][T16870] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3570'. [ 763.985382][T16878] netlink: 'syz.6.3574': attribute type 153 has an invalid length. [ 764.020621][T16878] netlink: 128124 bytes leftover after parsing attributes in process `syz.6.3574'. [ 764.204363][T16884] netlink: 15487 bytes leftover after parsing attributes in process `syz.7.3584'. [ 764.378540][T16890] netlink: 15487 bytes leftover after parsing attributes in process `syz.5.3576'. [ 764.517766][T16896] netlink: 'syz.7.3580': attribute type 10 has an invalid length. [ 764.661879][T16894] GPL: port 1(erspan0) entered blocking state [ 764.692909][T16894] GPL: port 1(erspan0) entered disabled state [ 764.716528][T16894] erspan0: entered allmulticast mode [ 764.733823][T16894] erspan0: entered promiscuous mode [ 764.789285][T16894] GPL: port 1(erspan0) entered blocking state [ 764.795710][T16894] GPL: port 1(erspan0) entered forwarding state [ 765.283104][T16910] netlink: 'syz.6.3587': attribute type 10 has an invalid length. [ 765.506576][T16918] netlink: 'syz.7.3591': attribute type 153 has an invalid length. [ 765.524894][T16918] netlink: 128124 bytes leftover after parsing attributes in process `syz.7.3591'. [ 765.662061][T16921] netlink: 'syz.7.3591': attribute type 4 has an invalid length. [ 765.689296][T16921] netlink: 173820 bytes leftover after parsing attributes in process `syz.7.3591'. [ 766.824732][T16939] netlink: 'syz.4.3601': attribute type 4 has an invalid length. [ 766.836231][T16939] netlink: 173820 bytes leftover after parsing attributes in process `syz.4.3601'. [ 767.139598][T16954] netlink: 'syz.7.3607': attribute type 153 has an invalid length. [ 767.174112][T16954] netlink: 128124 bytes leftover after parsing attributes in process `syz.7.3607'. [ 767.867606][T16978] netlink: 15743 bytes leftover after parsing attributes in process `syz.6.3619'. [ 767.901471][T16980] netlink: 'syz.7.3620': attribute type 153 has an invalid length. [ 767.909904][T16980] netlink: 128124 bytes leftover after parsing attributes in process `syz.7.3620'. [ 767.936057][T16982] FAULT_INJECTION: forcing a failure. [ 767.936057][T16982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 767.952778][T16982] CPU: 0 PID: 16982 Comm: syz.4.3621 Not tainted 6.6.97-syzkaller #0 [ 767.960925][T16982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 767.971025][T16982] Call Trace: [ 767.974327][T16982] [ 767.977280][T16982] dump_stack_lvl+0x16c/0x230 [ 767.981996][T16982] ? show_regs_print_info+0x20/0x20 [ 767.987242][T16982] ? load_image+0x3b0/0x3b0 [ 767.991781][T16982] ? __might_fault+0xaa/0x120 [ 767.996486][T16982] ? __lock_acquire+0x7c80/0x7c80 [ 768.001540][T16982] should_fail_ex+0x39d/0x4d0 [ 768.006256][T16982] _copy_from_user+0x2f/0xe0 [ 768.010897][T16982] ___sys_sendmsg+0x159/0x290 [ 768.015771][T16982] ? __sys_sendmsg+0x270/0x270 [ 768.020574][T16982] ? __lock_acquire+0x7c80/0x7c80 [ 768.025668][T16982] __se_sys_sendmsg+0x1a5/0x270 [ 768.030536][T16982] ? __x64_sys_sendmsg+0x80/0x80 [ 768.035501][T16982] ? lockdep_hardirqs_on+0x98/0x150 [ 768.040719][T16982] do_syscall_64+0x55/0xb0 [ 768.045163][T16982] ? clear_bhb_loop+0x40/0x90 [ 768.049875][T16982] ? clear_bhb_loop+0x40/0x90 [ 768.054572][T16982] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 768.060488][T16982] RIP: 0033:0x7f0a3698e929 [ 768.064925][T16982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 768.084563][T16982] RSP: 002b:00007f0a37785038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 768.093005][T16982] RAX: ffffffffffffffda RBX: 00007f0a36bb5fa0 RCX: 00007f0a3698e929 [ 768.100996][T16982] RDX: 0000000000000000 RSI: 0000200000001000 RDI: 0000000000000003 [ 768.108982][T16982] RBP: 00007f0a37785090 R08: 0000000000000000 R09: 0000000000000000 [ 768.116967][T16982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 768.124952][T16982] R13: 0000000000000000 R14: 00007f0a36bb5fa0 R15: 00007ffd9bc3ff68 [ 768.132958][T16982] [ 768.223537][T16980] netlink: 'syz.7.3620': attribute type 4 has an invalid length. [ 768.232015][T16980] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.3620'. [ 768.721823][T16997] netlink: 'syz.4.3627': attribute type 4 has an invalid length. [ 768.729675][T16997] netlink: 173820 bytes leftover after parsing attributes in process `syz.4.3627'. [ 768.781995][T17003] netlink: 15743 bytes leftover after parsing attributes in process `syz.7.3630'. [ 769.055790][T17011] netlink: 'syz.7.3634': attribute type 153 has an invalid length. [ 769.084907][T17011] netlink: 128124 bytes leftover after parsing attributes in process `syz.7.3634'. [ 769.196461][T17011] netlink: 'syz.7.3634': attribute type 4 has an invalid length. [ 769.217214][T17011] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.3634'. [ 769.306244][T17021] netlink: 'syz.5.3638': attribute type 10 has an invalid length. [ 769.633204][T17029] netlink: 'syz.5.3642': attribute type 4 has an invalid length. [ 769.650784][T17029] netlink: 173820 bytes leftover after parsing attributes in process `syz.5.3642'. [ 769.770609][T17033] netlink: 'syz.7.3651': attribute type 153 has an invalid length. [ 771.898432][T17116] validate_nla: 12 callbacks suppressed [ 771.898456][T17116] netlink: 'syz.5.3681': attribute type 153 has an invalid length. [ 771.900863][T17117] netlink: 'syz.4.3682': attribute type 10 has an invalid length. [ 771.906669][T17116] __nla_validate_parse: 12 callbacks suppressed [ 771.906689][T17116] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.3681'. [ 772.161539][T17120] netlink: 'syz.5.3681': attribute type 4 has an invalid length. [ 772.169600][T17120] netlink: 173820 bytes leftover after parsing attributes in process `syz.5.3681'. [ 772.361859][T17123] netlink: 'syz.4.3684': attribute type 153 has an invalid length. [ 772.370847][T17123] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.3684'. [ 772.528853][T17125] netlink: 'syz.4.3684': attribute type 4 has an invalid length. [ 772.540550][T17125] netlink: 173820 bytes leftover after parsing attributes in process `syz.4.3684'. [ 772.966626][T17140] netlink: 'syz.5.3692': attribute type 10 has an invalid length. [ 773.187164][T17147] netlink: 'syz.5.3695': attribute type 153 has an invalid length. [ 773.220591][T17147] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.3695'. [ 773.278240][T17147] netlink: 'syz.5.3695': attribute type 4 has an invalid length. [ 773.286648][T17147] netlink: 173820 bytes leftover after parsing attributes in process `syz.5.3695'. [ 773.300690][T17153] netlink: 'syz.7.3698': attribute type 10 has an invalid length. [ 773.315450][T17153] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3698'. [ 773.831804][T17167] netlink: 'syz.7.3704': attribute type 4 has an invalid length. [ 773.840155][T17167] netlink: 173820 bytes leftover after parsing attributes in process `syz.7.3704'. [ 775.782099][T17175] netlink: 128124 bytes leftover after parsing attributes in process `syz.7.3709'. [ 775.823454][T17175] netlink: 173820 bytes leftover after parsing attributes in process `syz.7.3709'. [ 776.313007][T17192] wg2: entered promiscuous mode [ 776.318510][T17192] wg2: entered allmulticast mode [ 776.917302][T17219] validate_nla: 8 callbacks suppressed [ 776.917322][T17219] netlink: 'syz.6.3727': attribute type 4 has an invalid length. [ 776.939327][T17221] netlink: 'syz.5.3728': attribute type 153 has an invalid length. [ 776.947898][T17219] __nla_validate_parse: 6 callbacks suppressed [ 776.947922][T17219] netlink: 173820 bytes leftover after parsing attributes in process `syz.6.3727'. [ 776.964621][T17221] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.3728'. [ 777.067165][T17221] netlink: 'syz.5.3728': attribute type 4 has an invalid length. [ 777.069103][T17226] netlink: 'syz.4.3730': attribute type 10 has an invalid length. [ 777.082911][T17221] netlink: 173820 bytes leftover after parsing attributes in process `syz.5.3728'. [ 777.352295][T17234] netlink: 'syz.6.3734': attribute type 153 has an invalid length. [ 777.373156][T17234] netlink: 128124 bytes leftover after parsing attributes in process `syz.6.3734'. [ 777.474682][T17234] netlink: 'syz.6.3734': attribute type 4 has an invalid length. [ 777.497000][T17234] netlink: 173820 bytes leftover after parsing attributes in process `syz.6.3734'. [ 777.692246][T17244] netlink: set zone limit has 8 unknown bytes [ 777.765595][T17247] netlink: 'syz.5.3740': attribute type 10 has an invalid length. [ 777.779018][T17249] netlink: 'syz.6.3741': attribute type 153 has an invalid length. [ 777.800918][T17249] netlink: 128124 bytes leftover after parsing attributes in process `syz.6.3741'. [ 777.858549][T17249] netlink: 'syz.6.3741': attribute type 4 has an invalid length. [ 777.881890][T17249] netlink: 173820 bytes leftover after parsing attributes in process `syz.6.3741'. [ 778.129909][T17263] netlink: 15231 bytes leftover after parsing attributes in process `syz.7.3745'. [ 778.189098][T17264] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3746'. [ 778.221572][T17264] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3746'. [ 778.249109][T17266] netlink: 'syz.5.3748': attribute type 4 has an invalid length. [ 778.966301][T17292] bridge0: port 3(team0) entered disabled state [ 779.015600][T17292] team0: left allmulticast mode [ 779.038495][T17292] team_slave_0: left allmulticast mode [ 779.055661][T17292] team_slave_1: left allmulticast mode [ 779.068944][T17292] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 779.078142][T17292] team0: left promiscuous mode [ 779.089514][T17292] team_slave_0: left promiscuous mode [ 779.098168][T17292] team_slave_1: left promiscuous mode [ 779.114767][T17292] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 779.129625][T17292] bridge0: port 3(team0) entered disabled state [ 779.168794][T17292] batman_adv: batadv0: Adding interface: team0 [ 779.179342][T17292] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.211061][T17292] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 782.143563][T17390] validate_nla: 14 callbacks suppressed [ 782.143585][T17390] netlink: 'syz.4.3807': attribute type 10 has an invalid length. [ 782.206304][T17390] bridge0: port 3(team0) entered disabled state [ 782.282190][T17390] team0: left allmulticast mode [ 782.298109][T17390] team_slave_0: left allmulticast mode [ 782.309425][T17390] team_slave_1: left allmulticast mode [ 782.317162][T17390] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 782.325709][T17390] team0: left promiscuous mode [ 782.336176][T17390] team_slave_0: left promiscuous mode [ 782.348016][T17390] team_slave_1: left promiscuous mode [ 782.357447][T17390] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 782.374056][T17390] bridge0: port 3(team0) entered disabled state [ 782.387460][T17390] batman_adv: batadv0: Adding interface: team0 [ 782.397950][T17390] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 782.431193][T17390] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 782.443461][T17397] __nla_validate_parse: 28 callbacks suppressed [ 782.443479][T17397] netlink: 15743 bytes leftover after parsing attributes in process `syz.5.3809'. [ 782.855557][T17419] netlink: 'syz.6.3818': attribute type 10 has an invalid length. [ 782.866351][T17419] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3818'. [ 782.907900][T17421] netlink: 'syz.7.3819': attribute type 153 has an invalid length. [ 782.925237][T17421] netlink: 128124 bytes leftover after parsing attributes in process `syz.7.3819'. [ 783.008998][T17421] netlink: 'syz.7.3819': attribute type 4 has an invalid length. [ 783.025087][T17421] netlink: 173820 bytes leftover after parsing attributes in process `syz.7.3819'. [ 783.481441][T17438] netlink: 'syz.6.3827': attribute type 10 has an invalid length. [ 783.511911][T17438] bridge0: port 3(team0) entered disabled state [ 783.519734][T17438] team0: left allmulticast mode [ 783.528696][T17438] team_slave_0: left allmulticast mode [ 783.534819][T17438] team_slave_1: left allmulticast mode [ 783.542763][T17438] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 783.556040][T17438] team0: left promiscuous mode [ 783.568848][T17438] team_slave_0: left promiscuous mode [ 783.576024][T17438] team_slave_1: left promiscuous mode [ 783.582060][T17438] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 783.611710][T17438] bridge0: port 3(team0) entered disabled state [ 783.652293][T17438] batman_adv: batadv0: Adding interface: team0 [ 783.671111][T17438] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 783.704233][T17438] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 784.018251][T17456] syz.7.3830[17456] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 784.018424][T17456] syz.7.3830[17456] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 784.037421][T17455] netlink: 'syz.4.3832': attribute type 4 has an invalid length. [ 784.089236][T17455] netlink: 173820 bytes leftover after parsing attributes in process `syz.4.3832'. [ 784.133440][T17458] netlink: 'syz.6.3833': attribute type 153 has an invalid length. [ 784.153042][T17458] netlink: 128124 bytes leftover after parsing attributes in process `syz.6.3833'. [ 784.196956][T17453] netlink: 'syz.7.3830': attribute type 21 has an invalid length. [ 784.210642][T17453] netlink: 'syz.7.3830': attribute type 6 has an invalid length. [ 784.231667][T17453] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3830'. [ 784.257874][T17458] netlink: 'syz.6.3833': attribute type 4 has an invalid length. [ 784.281660][T17458] netlink: 173820 bytes leftover after parsing attributes in process `syz.6.3833'. [ 784.602921][T17474] netlink: 15487 bytes leftover after parsing attributes in process `syz.5.3841'. [ 784.684435][T17476] FAULT_INJECTION: forcing a failure. [ 784.684435][T17476] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 784.699700][T17476] CPU: 1 PID: 17476 Comm: syz.4.3842 Not tainted 6.6.97-syzkaller #0 [ 784.707833][T17476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 784.717939][T17476] Call Trace: [ 784.721264][T17476] [ 784.724242][T17476] dump_stack_lvl+0x16c/0x230 [ 784.728983][T17476] ? show_regs_print_info+0x20/0x20 [ 784.734245][T17476] ? load_image+0x3b0/0x3b0 [ 784.739071][T17476] ? __lock_acquire+0x7c80/0x7c80 [ 784.744173][T17476] ? verify_lock_unused+0x140/0x140 [ 784.749435][T17476] should_fail_ex+0x39d/0x4d0 [ 784.754190][T17476] prepare_alloc_pages+0x1e2/0x5f0 [ 784.759368][T17476] __alloc_pages+0x127/0x460 [ 784.764031][T17476] ? zone_statistics+0x170/0x170 [ 784.769021][T17476] ? mt_find+0x13e/0x5b0 [ 784.773404][T17476] ? handle_mm_fault+0xd1/0x4920 [ 784.778397][T17476] __folio_alloc+0x10/0x20 [ 784.782850][T17476] vma_alloc_folio+0x47a/0x8f0 [ 784.787641][T17476] handle_mm_fault+0x1a38/0x4920 [ 784.792603][T17476] ? handle_mm_fault+0xd1/0x4920 [ 784.797571][T17476] ? numa_migrate_prep+0x350/0x350 [ 784.802805][T17476] ? lock_mm_and_find_vma+0x9c/0x300 [ 784.808107][T17476] do_user_addr_fault+0x738/0x12e0 [ 784.813250][T17476] exc_page_fault+0x67/0x110 [ 784.817858][T17476] asm_exc_page_fault+0x26/0x30 [ 784.822724][T17476] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 784.828552][T17476] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 784.848179][T17476] RSP: 0018:ffffc9000cb9f630 EFLAGS: 00050206 [ 784.854265][T17476] RAX: ffffffff841d3901 RBX: 0000000000000d70 RCX: 0000000000000d70 [ 784.862252][T17476] RDX: 0000000000000000 RSI: ffff888060972000 RDI: 00002000000034c0 [ 784.870237][T17476] RBP: ffffc9000cb9f7c0 R08: ffff888060972d6f R09: 1ffff1100c12e5ad [ 784.878223][T17476] R10: dffffc0000000000 R11: ffffed100c12e5ae R12: 0000200000004230 [ 784.886213][T17476] R13: ffffc9000cb9fe40 R14: 00002000000034c0 R15: ffff888060972000 [ 784.894209][T17476] ? _copy_to_iter+0x1091/0x10d0 [ 784.899180][T17476] copyout+0x70/0x90 [ 784.903099][T17476] _copy_to_iter+0x432/0x10d0 [ 784.907811][T17476] ? iov_iter_init+0x1e0/0x1e0 [ 784.912601][T17476] ? __virt_addr_valid+0x18c/0x540 [ 784.917730][T17476] ? __virt_addr_valid+0x469/0x540 [ 784.922862][T17476] ? __phys_addr_symbol+0x2f/0x70 [ 784.927940][T17476] __skb_datagram_iter+0xdb/0x780 [ 784.933011][T17476] ? skb_copy_datagram_iter+0x200/0x200 [ 784.938613][T17476] skb_copy_datagram_iter+0xb1/0x200 [ 784.943953][T17476] netlink_recvmsg+0x2c5/0xdf0 [ 784.948783][T17476] ? netlink_sendmsg+0xbe0/0xbe0 [ 784.953759][T17476] ? aa_sk_perm+0x7fc/0x930 [ 784.958287][T17476] ? aa_af_perm+0x2b0/0x2b0 [ 784.962820][T17476] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 784.968141][T17476] ? security_socket_recvmsg+0x89/0xb0 [ 784.973624][T17476] ? netlink_sendmsg+0xbe0/0xbe0 [ 784.978583][T17476] ____sys_recvmsg+0x29e/0x5b0 [ 784.983370][T17476] ? __sys_recvmsg_sock+0x50/0x50 [ 784.988426][T17476] ? import_iovec+0x73/0xa0 [ 784.992947][T17476] ___sys_recvmsg+0x1b6/0x510 [ 784.997642][T17476] ? __sys_recvmsg+0x270/0x270 [ 785.002442][T17476] ? ksys_write+0x1c1/0x250 [ 785.006989][T17476] ? __fget_files+0x44a/0x4d0 [ 785.011717][T17476] __x64_sys_recvmsg+0x1f2/0x2c0 [ 785.016788][T17476] ? ___sys_recvmsg+0x510/0x510 [ 785.021685][T17476] ? lockdep_hardirqs_on+0x98/0x150 [ 785.026909][T17476] do_syscall_64+0x55/0xb0 [ 785.031359][T17476] ? clear_bhb_loop+0x40/0x90 [ 785.036054][T17476] ? clear_bhb_loop+0x40/0x90 [ 785.040761][T17476] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 785.046770][T17476] RIP: 0033:0x7f0a3698e929 [ 785.051211][T17476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 785.070846][T17476] RSP: 002b:00007f0a37785038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 785.079278][T17476] RAX: ffffffffffffffda RBX: 00007f0a36bb5fa0 RCX: 00007f0a3698e929 [ 785.087262][T17476] RDX: 0000000040016002 RSI: 0000200000000000 RDI: 0000000000000003 [ 785.095245][T17476] RBP: 00007f0a37785090 R08: 0000000000000000 R09: 0000000000000000 [ 785.103230][T17476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 785.111257][T17476] R13: 0000000000000000 R14: 00007f0a36bb5fa0 R15: 00007ffd9bc3ff68 [ 785.119269][T17476] [ 785.284970][T17482] bridge0: port 3(team0) entered disabled state [ 785.327365][T17482] team0: left allmulticast mode [ 785.346014][T17482] team_slave_0: left allmulticast mode [ 785.360948][T17482] team_slave_1: left allmulticast mode [ 785.369792][T17482] netdevsim netdevsim7 netdevsim0: left allmulticast mode [ 785.385380][T17482] team0: left promiscuous mode [ 785.392747][T17482] team_slave_0: left promiscuous mode [ 785.398431][T17482] team_slave_1: left promiscuous mode [ 785.411488][T17482] netdevsim netdevsim7 netdevsim0: left promiscuous mode [ 785.419438][T17482] bridge0: port 3(team0) entered disabled state [ 785.445795][T17482] batman_adv: batadv0: Adding interface: team0 [ 785.458581][T17482] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 785.486565][T17482] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 786.065807][T17515] FAULT_INJECTION: forcing a failure. [ 786.065807][T17515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 786.107024][T17515] CPU: 1 PID: 17515 Comm: syz.6.3857 Not tainted 6.6.97-syzkaller #0 [ 786.115196][T17515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 786.125295][T17515] Call Trace: [ 786.128596][T17515] [ 786.131559][T17515] dump_stack_lvl+0x16c/0x230 [ 786.136278][T17515] ? show_regs_print_info+0x20/0x20 [ 786.141518][T17515] ? load_image+0x3b0/0x3b0 [ 786.146043][T17515] ? __might_fault+0xaa/0x120 [ 786.150753][T17515] ? __lock_acquire+0x7c80/0x7c80 [ 786.155802][T17515] should_fail_ex+0x39d/0x4d0 [ 786.160516][T17515] _copy_from_user+0x2f/0xe0 [ 786.165141][T17515] generic_map_update_batch+0x53f/0x810 [ 786.170723][T17515] ? rcu_read_unlock+0xa0/0xa0 [ 786.175519][T17515] ? __fdget+0x180/0x210 [ 786.179790][T17515] ? rcu_read_unlock+0xa0/0xa0 [ 786.184579][T17515] bpf_map_do_batch+0x3d7/0x610 [ 786.189463][T17515] __sys_bpf+0x31b/0x800 [ 786.193726][T17515] ? bpf_link_show_fdinfo+0x350/0x350 [ 786.199142][T17515] ? lock_chain_count+0x20/0x20 [ 786.204033][T17515] __x64_sys_bpf+0x7c/0x90 [ 786.208474][T17515] do_syscall_64+0x55/0xb0 [ 786.212916][T17515] ? clear_bhb_loop+0x40/0x90 [ 786.217728][T17515] ? clear_bhb_loop+0x40/0x90 [ 786.222431][T17515] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 786.228343][T17515] RIP: 0033:0x7f197398e929 [ 786.232777][T17515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 786.252403][T17515] RSP: 002b:00007f1974772038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 786.260837][T17515] RAX: ffffffffffffffda RBX: 00007f1973bb5fa0 RCX: 00007f197398e929 [ 786.268822][T17515] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 786.276809][T17515] RBP: 00007f1974772090 R08: 0000000000000000 R09: 0000000000000000 [ 786.284795][T17515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 786.292782][T17515] R13: 0000000000000000 R14: 00007f1973bb5fa0 R15: 00007ffe0a7bc318 [ 786.300783][T17515] [ 786.436357][T17520] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3860'. [ 786.511539][T17518] syz.4.3859[17518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 786.511697][T17518] syz.4.3859[17518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 787.589138][T17553] validate_nla: 8 callbacks suppressed [ 787.589159][T17553] netlink: 'syz.5.3875': attribute type 4 has an invalid length. [ 787.619806][T17553] __nla_validate_parse: 4 callbacks suppressed [ 787.619826][T17553] netlink: 173820 bytes leftover after parsing attributes in process `syz.5.3875'. [ 787.644979][T17558] netlink: 'syz.7.3877': attribute type 153 has an invalid length. [ 787.654646][T17558] netlink: 128124 bytes leftover after parsing attributes in process `syz.7.3877'. [ 787.804139][T17558] netlink: 'syz.7.3877': attribute type 4 has an invalid length. [ 787.833426][T17558] netlink: 173820 bytes leftover after parsing attributes in process `syz.7.3877'. [ 787.922246][T17566] netlink: 'syz.5.3880': attribute type 10 has an invalid length. [ 787.930942][T17566] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3880'. [ 788.352807][T17577] netlink: 'syz.7.3884': attribute type 153 has an invalid length. [ 788.395924][T17577] netlink: 128124 bytes leftover after parsing attributes in process `syz.7.3884'. [ 788.554261][T17582] netlink: 'syz.7.3884': attribute type 4 has an invalid length. [ 788.567931][T17582] netlink: 173820 bytes leftover after parsing attributes in process `syz.7.3884'. [ 788.590333][T17587] syz.6.3887[17587] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 788.592223][T17587] syz.6.3887[17587] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 788.617269][T17586] netlink: 'syz.5.3888': attribute type 4 has an invalid length. [ 788.638620][T17586] netlink: 173820 bytes leftover after parsing attributes in process `syz.5.3888'. [ 788.831539][T17591] netlink: 'syz.4.3897': attribute type 39 has an invalid length. [ 789.154173][T17600] netlink: 15487 bytes leftover after parsing attributes in process `syz.6.3893'. [ 789.512556][T17610] netlink: 'syz.5.3898': attribute type 4 has an invalid length. [ 789.530577][T17610] netlink: 173820 bytes leftover after parsing attributes in process `syz.5.3898'. [ 789.574307][T17612] netlink: 'syz.6.3899': attribute type 4 has an invalid length. [ 789.586999][T17612] netlink: 173820 bytes leftover after parsing attributes in process `syz.6.3899'. [ 791.297256][T17679] FAULT_INJECTION: forcing a failure. [ 791.297256][T17679] name failslab, interval 1, probability 0, space 0, times 0 [ 791.329377][T17679] CPU: 1 PID: 17679 Comm: syz.4.3932 Not tainted 6.6.97-syzkaller #0 [ 791.337545][T17679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 791.347647][T17679] Call Trace: [ 791.350966][T17679] [ 791.353935][T17679] dump_stack_lvl+0x16c/0x230 [ 791.358658][T17679] ? show_regs_print_info+0x20/0x20 [ 791.363907][T17679] ? load_image+0x3b0/0x3b0 [ 791.368460][T17679] ? __lock_acquire+0x7c80/0x7c80 [ 791.373542][T17679] should_fail_ex+0x39d/0x4d0 [ 791.378289][T17679] should_failslab+0x9/0x20 [ 791.382931][T17679] slab_pre_alloc_hook+0x59/0x310 [ 791.388004][T17679] ? sk_prot_alloc+0xe7/0x210 [ 791.392732][T17679] ? sk_prot_alloc+0xe7/0x210 [ 791.397476][T17679] __kmem_cache_alloc_node+0x53/0x260 [ 791.402908][T17679] ? sk_prot_alloc+0xe7/0x210 [ 791.407638][T17679] __kmalloc+0xa4/0x240 [ 791.412273][T17679] sk_prot_alloc+0xe7/0x210 [ 791.416820][T17679] ? sk_alloc+0x24/0x360 [ 791.421109][T17679] sk_alloc+0x3a/0x360 [ 791.425223][T17679] ? bpf_ctx_init+0x163/0x1a0 [ 791.429938][T17679] ? bpf_prog_test_run_skb+0x268/0x11c0 [ 791.435530][T17679] bpf_prog_test_run_skb+0x39a/0x11c0 [ 791.440947][T17679] ? __fget_files+0x28/0x4d0 [ 791.445606][T17679] ? cpu_online+0x60/0x60 [ 791.449978][T17679] bpf_prog_test_run+0x321/0x390 [ 791.454964][T17679] __sys_bpf+0x440/0x800 [ 791.459252][T17679] ? bpf_link_show_fdinfo+0x350/0x350 [ 791.464687][T17679] ? lock_chain_count+0x20/0x20 [ 791.469604][T17679] __x64_sys_bpf+0x7c/0x90 [ 791.474067][T17679] do_syscall_64+0x55/0xb0 [ 791.478536][T17679] ? clear_bhb_loop+0x40/0x90 [ 791.483261][T17679] ? clear_bhb_loop+0x40/0x90 [ 791.487988][T17679] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 791.493929][T17679] RIP: 0033:0x7f0a3698e929 [ 791.498389][T17679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 791.518049][T17679] RSP: 002b:00007f0a37785038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 791.526600][T17679] RAX: ffffffffffffffda RBX: 00007f0a36bb5fa0 RCX: 00007f0a3698e929 [ 791.534620][T17679] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 791.542642][T17679] RBP: 00007f0a37785090 R08: 0000000000000000 R09: 0000000000000000 [ 791.550663][T17679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 791.558681][T17679] R13: 0000000000000000 R14: 00007f0a36bb5fa0 R15: 00007ffd9bc3ff68 [ 791.566742][T17679] [ 791.913605][T17694] syz.5.3938[17694] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 791.913775][T17694] syz.5.3938[17694] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 792.714498][T17720] validate_nla: 12 callbacks suppressed [ 792.714522][T17720] netlink: 'syz.4.3950': attribute type 153 has an invalid length. [ 792.769756][T17720] __nla_validate_parse: 15 callbacks suppressed [ 792.769774][T17720] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.3950'. [ 792.899347][T17720] netlink: 'syz.4.3950': attribute type 4 has an invalid length. [ 792.919474][T17720] netlink: 173820 bytes leftover after parsing attributes in process `syz.4.3950'. [ 793.227065][T17738] netlink: 15487 bytes leftover after parsing attributes in process `syz.5.3958'. [ 793.591441][T17750] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3962'. [ 793.623280][T17750] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3962'. [ 793.658497][T17747] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3962'. [ 793.688566][T17751] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3962'. [ 793.797564][T17755] netlink: 'syz.7.3965': attribute type 153 has an invalid length. [ 793.841581][T17755] netlink: 128124 bytes leftover after parsing attributes in process `syz.7.3965'. [ 793.894058][T17760] netlink: 'syz.6.3968': attribute type 153 has an invalid length. [ 793.921597][T17760] netlink: 128124 bytes leftover after parsing attributes in process `syz.6.3968'. [ 793.959193][T17755] netlink: 'syz.7.3965': attribute type 4 has an invalid length. [ 794.048354][T17755] netlink: 173820 bytes leftover after parsing attributes in process `syz.7.3965'. [ 794.111850][T17760] netlink: 'syz.6.3968': attribute type 4 has an invalid length. [ 794.220743][T17768] netlink: 'syz.4.3970': attribute type 153 has an invalid length. [ 794.366236][T17768] netlink: 'syz.4.3970': attribute type 4 has an invalid length. [ 794.672718][T17778] syz.5.3974[17778] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 794.672866][T17778] syz.5.3974[17778] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 794.907428][T17789] syz.6.3977[17789] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 794.910235][T17791] netlink: 'syz.5.3980': attribute type 153 has an invalid length. [ 794.949056][T17789] syz.6.3977[17789] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 795.153933][T17791] netlink: 'syz.5.3980': attribute type 4 has an invalid length. [ 797.192202][T17833] syz.7.3995[17833] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 797.192353][T17833] syz.7.3995[17833] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 797.732647][T17857] validate_nla: 9 callbacks suppressed [ 797.732668][T17857] netlink: 'syz.6.4007': attribute type 4 has an invalid length. [ 797.801946][T17857] __nla_validate_parse: 15 callbacks suppressed [ 797.801966][T17857] netlink: 173820 bytes leftover after parsing attributes in process `syz.6.4007'. [ 797.923700][T17866] netlink: 'syz.5.4011': attribute type 153 has an invalid length. [ 797.946951][T17866] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.4011'. [ 798.016428][T17870] syz.7.4012[17870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 798.016595][T17870] syz.7.4012[17870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 798.035587][T17866] netlink: 'syz.5.4011': attribute type 4 has an invalid length. [ 798.100832][T17866] netlink: 173820 bytes leftover after parsing attributes in process `syz.5.4011'. [ 798.631733][T17892] netlink: 'syz.6.4021': attribute type 153 has an invalid length. [ 798.640368][T17892] netlink: 128124 bytes leftover after parsing attributes in process `syz.6.4021'. [ 798.729125][T17892] netlink: 'syz.6.4021': attribute type 4 has an invalid length. [ 798.744672][T17892] netlink: 173820 bytes leftover after parsing attributes in process `syz.6.4021'. [ 798.921592][T17900] netlink: 'syz.6.4025': attribute type 153 has an invalid length. [ 798.930117][T17900] netlink: 128124 bytes leftover after parsing attributes in process `syz.6.4025'. [ 798.961935][T17902] netlink: 'syz.5.4026': attribute type 153 has an invalid length. [ 798.972969][T17902] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.4026'. [ 798.979335][T17900] netlink: 'syz.6.4025': attribute type 4 has an invalid length. [ 798.994310][T17900] netlink: 173820 bytes leftover after parsing attributes in process `syz.6.4025'. [ 799.056060][T17902] netlink: 'syz.5.4026': attribute type 4 has an invalid length. [ 799.075705][T17902] netlink: 173820 bytes leftover after parsing attributes in process `syz.5.4026'. [ 799.449228][T17919] syz.6.4034[17919] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 799.449397][T17919] syz.6.4034[17919] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 799.511067][T17921] netlink: 15487 bytes leftover after parsing attributes in process `syz.5.4036'. [ 799.631729][T17923] netlink: 'syz.4.4037': attribute type 153 has an invalid length. [ 799.890213][T17930] syz.5.4040[17930] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 799.895635][T17931] syz.7.4048[17931] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 799.917043][T17930] syz.5.4040[17930] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 799.928487][T17931] syz.7.4048[17931] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 800.483661][T17950] FAULT_INJECTION: forcing a failure. [ 800.483661][T17950] name failslab, interval 1, probability 0, space 0, times 0 [ 800.510243][T17950] CPU: 0 PID: 17950 Comm: syz.4.4050 Not tainted 6.6.97-syzkaller #0 [ 800.518579][T17950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 800.528778][T17950] Call Trace: [ 800.532196][T17950] [ 800.535181][T17950] dump_stack_lvl+0x16c/0x230 [ 800.539946][T17950] ? show_regs_print_info+0x20/0x20 [ 800.545211][T17950] ? load_image+0x3b0/0x3b0 [ 800.549766][T17950] ? __might_sleep+0xe0/0xe0 [ 800.554384][T17950] ? __lock_acquire+0x7c80/0x7c80 [ 800.559516][T17950] ? prepend_path+0x4b/0x960 [ 800.564154][T17950] should_fail_ex+0x39d/0x4d0 [ 800.568907][T17950] should_failslab+0x9/0x20 [ 800.573444][T17950] slab_pre_alloc_hook+0x59/0x310 [ 800.578512][T17950] ? __asan_memcpy+0x40/0x70 [ 800.583141][T17950] ? tomoyo_encode+0x28b/0x540 [ 800.587954][T17950] ? tomoyo_encode+0x28b/0x540 [ 800.592735][T17950] __kmem_cache_alloc_node+0x53/0x260 [ 800.598144][T17950] ? prepend_path+0x4b/0x960 [ 800.602785][T17950] ? tomoyo_encode+0x28b/0x540 [ 800.607572][T17950] __kmalloc+0xa4/0x240 [ 800.611768][T17950] tomoyo_encode+0x28b/0x540 [ 800.616415][T17950] tomoyo_realpath_from_path+0x592/0x5d0 [ 800.622126][T17950] tomoyo_path_number_perm+0x1ea/0x590 [ 800.627620][T17950] ? tomoyo_path_number_perm+0x1ba/0x590 [ 800.633269][T17950] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 800.638740][T17950] ? ksys_write+0x1c1/0x250 [ 800.643282][T17950] ? __fget_files+0x28/0x4d0 [ 800.647922][T17950] security_file_ioctl+0x70/0xa0 [ 800.652881][T17950] __se_sys_ioctl+0x48/0x170 [ 800.658023][T17950] do_syscall_64+0x55/0xb0 [ 800.662480][T17950] ? clear_bhb_loop+0x40/0x90 [ 800.667216][T17950] ? clear_bhb_loop+0x40/0x90 [ 800.671939][T17950] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 800.677852][T17950] RIP: 0033:0x7f0a3698e929 [ 800.682282][T17950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 800.701993][T17950] RSP: 002b:00007f0a37785038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 800.710437][T17950] RAX: ffffffffffffffda RBX: 00007f0a36bb5fa0 RCX: 00007f0a3698e929 [ 800.718565][T17950] RDX: 0000200000002280 RSI: 00000000400454ca RDI: 0000000000000004 [ 800.726660][T17950] RBP: 00007f0a37785090 R08: 0000000000000000 R09: 0000000000000000 [ 800.734650][T17950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 800.742726][T17950] R13: 0000000000000000 R14: 00007f0a36bb5fa0 R15: 00007ffd9bc3ff68 [ 800.750816][T17950] [ 800.776271][T17950] ERROR: Out of memory at tomoyo_realpath_from_path. [ 802.110658][T17994] vlan1: entered promiscuous mode [ 802.118723][T17994] vlan1: entered allmulticast mode [ 802.137184][T17994] veth0_vlan: entered allmulticast mode [ 802.153493][T17994] bridge0: port 3(vlan1) entered blocking state [ 802.198254][T17994] bridge0: port 3(vlan1) entered disabled state [ 802.502203][T17994] bridge0: port 3(vlan1) entered blocking state [ 802.510960][T17994] bridge0: port 3(vlan1) entered forwarding state [ 802.771299][T18010] bpf_get_probe_write_proto: 2 callbacks suppressed [ 802.771320][T18010] syz.5.4076[18010] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 802.792847][T18010] syz.5.4076[18010] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 802.918245][T18014] validate_nla: 14 callbacks suppressed [ 802.918265][T18014] netlink: 'syz.7.4086': attribute type 153 has an invalid length. [ 802.948789][T18016] netlink: 'syz.6.4078': attribute type 153 has an invalid length. [ 802.959863][T18014] __nla_validate_parse: 19 callbacks suppressed [ 802.959880][T18014] netlink: 128124 bytes leftover after parsing attributes in process `syz.7.4086'. [ 802.992076][T18016] netlink: 128124 bytes leftover after parsing attributes in process `syz.6.4078'. [ 803.065262][T18014] netlink: 'syz.7.4086': attribute type 4 has an invalid length. [ 803.081292][T18014] netlink: 173820 bytes leftover after parsing attributes in process `syz.7.4086'. [ 803.215760][T18016] netlink: 'syz.6.4078': attribute type 4 has an invalid length. [ 803.279475][T18016] netlink: 173820 bytes leftover after parsing attributes in process `syz.6.4078'. [ 803.499876][T18028] netlink: 'syz.7.4082': attribute type 153 has an invalid length. [ 803.520699][T18028] netlink: 128124 bytes leftover after parsing attributes in process `syz.7.4082'. [ 803.556277][T18032] netlink: 'syz.6.4084': attribute type 153 has an invalid length. [ 803.565194][T18032] netlink: 128124 bytes leftover after parsing attributes in process `syz.6.4084'. [ 803.578512][T18030] netlink: 15487 bytes leftover after parsing attributes in process `syz.5.4083'. [ 803.622735][T18028] netlink: 'syz.7.4082': attribute type 4 has an invalid length. [ 803.639172][T18028] netlink: 173820 bytes leftover after parsing attributes in process `syz.7.4082'. [ 803.657864][T18032] netlink: 'syz.6.4084': attribute type 4 has an invalid length. [ 803.676265][T18032] netlink: 173820 bytes leftover after parsing attributes in process `syz.6.4084'. [ 804.002065][T18044] syz.4.4088[18044] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 804.002224][T18044] syz.4.4088[18044] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 804.095056][T18047] netlink: 'syz.7.4091': attribute type 153 has an invalid length. [ 804.171153][T18047] netlink: 128124 bytes leftover after parsing attributes in process `syz.7.4091'. [ 804.231943][T18050] netlink: 'syz.7.4091': attribute type 4 has an invalid length. [ 804.420064][T18053] syz.4.4093[18053] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 804.420212][T18053] syz.4.4093[18053] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 808.158704][T18080] validate_nla: 4 callbacks suppressed [ 808.158723][T18080] netlink: 'syz.5.4102': attribute type 29 has an invalid length. [ 808.195470][T18069] netlink: 'syz.7.4100': attribute type 10 has an invalid length. [ 808.272383][T18069] bond0: (slave wlan1): Releasing backup interface [ 808.305441][T18069] team0: Port device wlan1 added [ 808.457467][T18091] __nla_validate_parse: 5 callbacks suppressed [ 808.457489][T18091] netlink: 15487 bytes leftover after parsing attributes in process `syz.4.4106'. [ 808.630963][T16649] bond0: (slave wlan1): Releasing backup interface [ 808.849458][T18104] netlink: 'syz.6.4114': attribute type 153 has an invalid length. [ 808.887077][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.894057][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.905486][T18104] netlink: 128124 bytes leftover after parsing attributes in process `syz.6.4114'. [ 808.966537][T18104] netlink: 'syz.6.4114': attribute type 4 has an invalid length. [ 808.989040][T16649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 809.000665][T18104] netlink: 173820 bytes leftover after parsing attributes in process `syz.6.4114'. [ 809.003861][T16649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 809.084802][T16649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 809.093432][T16649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 809.138643][T16649] bridge_slave_1: left allmulticast mode [ 809.178930][T16649] bridge_slave_1: left promiscuous mode [ 809.199851][T16649] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.314356][T16649] bridge_slave_0: left allmulticast mode [ 809.320135][T16649] bridge_slave_0: left promiscuous mode [ 809.341106][T16649] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.410416][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 914.417591][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P18112 [ 914.425499][ C1] rcu: (detected by 1, t=10503 jiffies, g=82749, q=287 ncpus=2) [ 914.433276][ C1] task:syz.5.4116 state:R running task stack:27016 pid:18112 ppid:16162 flags:0x0000400a [ 914.445082][ C1] Call Trace: [ 914.448513][ C1] [ 914.451416][ C1] sched_show_task+0x481/0x5a0 [ 914.456278][ C1] ? __ia32_sys_sched_rr_get_interval_time32+0x110/0x110 [ 914.463392][ C1] ? wq_watchdog_touch+0xef/0x170 [ 914.468495][ C1] print_other_cpu_stall+0xfa7/0x1340 [ 914.473947][ C1] ? bpf_put_raw_tracepoint+0x60/0x60 [ 914.479420][ C1] ? print_cpu_stall+0x5a0/0x5a0 [ 914.484421][ C1] ? __bpf_trace_rcu_utilization+0xa2/0xe0 [ 914.490287][ C1] ? perf_trace_rcu_stall_warning+0x2d0/0x2d0 [ 914.496482][ C1] rcu_sched_clock_irq+0x87c/0x1220 [ 914.501783][ C1] ? rcu_gp_set_torture_wait+0x10/0x10 [ 914.507336][ C1] ? acct_account_cputime+0xd4/0x210 [ 914.512711][ C1] update_process_times+0x147/0x1b0 [ 914.517996][ C1] tick_sched_timer+0x3a2/0x580 [ 914.522981][ C1] __hrtimer_run_queues+0x4df/0xc40 [ 914.528268][ C1] ? tick_setup_sched_timer+0x2d0/0x2d0 [ 914.534006][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 914.539177][ C1] ? read_tsc+0x9/0x20 [ 914.543302][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 914.549481][ C1] hrtimer_interrupt+0x3c9/0x9c0 [ 914.554642][ C1] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 914.560603][ C1] sysvec_apic_timer_interrupt+0x51/0xc0 [ 914.566290][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 914.572332][ C1] RIP: 0010:handle_softirqs+0x1b0/0x820 [ 914.577939][ C1] Code: 89 64 24 2c 0f b7 db 48 c7 c7 a0 b1 a9 8a e8 47 19 1d 09 65 66 c7 05 1d 35 b2 7e 00 00 e8 88 74 3a 00 fb 49 c7 c6 c0 a0 a0 8c <89> 5c 24 34 b8 ff ff ff ff 0f bc 44 24 34 41 89 c5 41 ff c5 0f 84 [ 914.597604][ C1] RSP: 0018:ffffc900001f0e40 EFLAGS: 00000286 [ 914.603827][ C1] RAX: de4f7b46fdcf2300 RBX: 0000000000000200 RCX: de4f7b46fdcf2300 [ 914.611863][ C1] RDX: dffffc0000000000 RSI: ffffffff8aaab940 RDI: ffffffff8afc7880 [ 914.619907][ C1] RBP: ffffc900001f0f50 R08: ffffffff90da6537 R09: 1ffffffff21b4ca6 [ 914.627956][ C1] R10: dffffc0000000000 R11: fffffbfff21b4ca7 R12: 000000000000000a [ 914.635982][ C1] R13: 0000000000000000 R14: ffffffff8ca0a0c0 R15: ffff88802330bc00 [ 914.644092][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 914.648949][ C1] ? do_softirq+0x180/0x180 [ 914.653511][ C1] ? irq_work_single+0x199/0x230 [ 914.658528][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 914.663811][ C1] __irq_exit_rcu+0xc7/0x190 [ 914.668466][ C1] ? irq_exit_rcu+0x20/0x20 [ 914.673142][ C1] ? rcu_is_watching+0x15/0xb0 [ 914.678119][ C1] irq_exit_rcu+0x9/0x20 [ 914.682419][ C1] sysvec_irq_work+0xa1/0xc0 [ 914.687084][ C1] [ 914.690067][ C1] [ 914.693053][ C1] asm_sysvec_irq_work+0x1a/0x20 [ 914.698050][ C1] RIP: 0010:rcu_read_unlock_special+0x88/0x4c0 [ 914.704277][ C1] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 19 5e 93 7e 41 f7 c6 00 00 f0 00 74 45 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b [ 914.723956][ C1] RSP: 0018:ffffc900034e7c00 EFLAGS: 00000206 [ 914.730085][ C1] RAX: de4f7b46fdcf2300 RBX: 1ffff9200069cf88 RCX: de4f7b46fdcf2300 [ 914.738115][ C1] RDX: dffffc0000000000 RSI: ffffffff8aaab940 RDI: ffffffff8afc7880 [ 914.746141][ C1] RBP: ffffc900034e7cf0 R08: ffffffff90da6537 R09: 1ffffffff21b4ca6 [ 914.754186][ C1] R10: dffffc0000000000 R11: fffffbfff21b4ca7 R12: 0000000000000000 [ 914.762212][ C1] R13: dffffc0000000000 R14: 0000000000000246 R15: ffffffff8cd35398 [ 914.770348][ C1] ? do_raw_spin_lock+0x121/0x2c0 [ 914.775446][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 914.780459][ C1] ? __rwlock_init+0x150/0x150 [ 914.785298][ C1] ? read_lock_is_recursive+0x20/0x20 [ 914.790761][ C1] __rcu_read_unlock+0x7c/0xd0 [ 914.795609][ C1] rcu_read_unlock+0x85/0xa0 [ 914.800270][ C1] ? dput+0x3b/0x1e0 [ 914.804229][ C1] dput+0xe6/0x1e0 [ 914.808022][ C1] __fput+0x5e5/0x970 [ 914.812116][ C1] task_work_run+0x1ce/0x250 [ 914.816800][ C1] ? task_work_cancel+0x240/0x240 [ 914.821926][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 914.827472][ C1] exit_to_user_mode_loop+0xe6/0x110 [ 914.832835][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 914.838452][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 914.843977][ C1] do_syscall_64+0x61/0xb0 [ 914.848457][ C1] ? clear_bhb_loop+0x40/0x90 [ 914.853194][ C1] ? clear_bhb_loop+0x40/0x90 [ 914.857945][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 914.863989][ C1] RIP: 0033:0x7f302c98e929 [ 914.868464][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 914.888128][ C1] RSP: 002b:00007ffd0b7e1c58 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 914.896611][ C1] RAX: 0000000000000000 RBX: 00000000000c5844 RCX: 00007f302c98e929 [ 914.904730][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 914.912759][ C1] RBP: 00007f302cbb7ba0 R08: 0000000000000001 R09: 0000001c0b7e1f4f [ 914.920790][ C1] R10: 00007f302c600000 R11: 0000000000000246 R12: 00007f302cbb5fac [ 914.928856][ C1] R13: 00007f302cbb5fa0 R14: ffffffffffffffff R15: 00007ffd0b7e1d70 [ 914.936960][ C1] [ 914.940121][ C1] rcu: rcu_preempt kthread starved for 10544 jiffies! g82749 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 914.951384][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 914.961498][ C1] rcu: RCU grace-period kthread stack dump: [ 914.967436][ C1] task:rcu_preempt state:R running task stack:27400 pid:17 ppid:2 flags:0x00004000 [ 914.978387][ C1] Call Trace: [ 914.981725][ C1] [ 914.984727][ C1] __schedule+0x14e2/0x4580 [ 914.989385][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 914.995372][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 915.000659][ C1] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 915.006624][ C1] ? asan.module_dtor+0x20/0x20 [ 915.011557][ C1] ? enqueue_timer+0x225/0x530 [ 915.016437][ C1] ? __mod_timer+0x984/0xdb0 [ 915.021150][ C1] schedule+0xbd/0x170 [ 915.025295][ C1] schedule_timeout+0x160/0x280 [ 915.030210][ C1] ? console_conditional_schedule+0x40/0x40 [ 915.036165][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 915.042125][ C1] ? update_process_times+0x1b0/0x1b0 [ 915.047595][ C1] ? prepare_to_swait_event+0x339/0x360 [ 915.053232][ C1] rcu_gp_fqs_loop+0x302/0x1560 [ 915.058241][ C1] ? rcu_gp_init+0x110e/0x1510 [ 915.063103][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 915.069407][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 915.074679][ C1] ? rcu_gp_init+0x1510/0x1510 [ 915.079495][ C1] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 915.085489][ C1] ? finish_swait+0xc7/0x1d0 [ 915.090160][ C1] rcu_gp_kthread+0x99/0x380 [ 915.094833][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 915.100029][ C1] ? __kthread_parkme+0x7a/0x1c0 [ 915.105041][ C1] ? __kthread_parkme+0x162/0x1c0 [ 915.110172][ C1] kthread+0x2fa/0x390 [ 915.114295][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 915.119482][ C1] ? kthread_blkcg+0xd0/0xd0 [ 915.124128][ C1] ret_from_fork+0x48/0x80 [ 915.128632][ C1] ? kthread_blkcg+0xd0/0xd0 [ 915.133373][ C1] ret_from_fork_asm+0x11/0x20 [ 915.138262][ C1] [ 915.141332][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 915.147713][ C1] Sending NMI from CPU 1 to CPUs 0: [ 915.152978][ C0] NMI backtrace for cpu 0 [ 915.152995][ C0] CPU: 0 PID: 18117 Comm: syz.4.4119 Not tainted 6.6.97-syzkaller #0 [ 915.153012][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 915.153022][ C0] RIP: 0010:ring_buffer_unlock_commit+0x5/0x5e0 [ 915.153045][ C0] Code: ff 84 db 75 0c e8 5b d7 fd ff 5b 41 5e 41 5f 5d c3 e8 4f d7 fd ff e8 fa dc 78 ff eb ed 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 <41> 57 41 56 41 55 41 54 53 48 83 ec 30 49 89 fd 49 bc 00 00 00 00 [ 915.153060][ C0] RSP: 0018:ffffc90000007720 EFLAGS: 00000246 [ 915.153075][ C0] RAX: ffffffff81893052 RBX: ffff888017870400 RCX: ffff8880237e9e00 [ 915.153088][ C0] RDX: 0000000000000100 RSI: ffffffff8aaee600 RDI: ffff888017870400 [ 915.153099][ C0] RBP: 0000000000340003 R08: 0000000000000000 R09: 0000000000000002 [ 915.153109][ C0] R10: fffffffffffffff5 R11: 0000000000000100 R12: ffff888018242678 [ 915.153121][ C0] R13: dffffc0000000000 R14: ffffffff8cd7ab20 R15: 0000000000000000 [ 915.153133][ C0] FS: 000055555a73f500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 915.153148][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 915.153159][ C0] CR2: 00007f1974771f98 CR3: 0000000066216000 CR4: 00000000003506f0 [ 915.153174][ C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 915.153184][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff1 DR7: 0000000000000600 [ 915.153195][ C0] Call Trace: [ 915.153202][ C0] [ 915.153211][ C0] trace_buffer_unlock_commit_regs+0x5a/0x600 [ 915.153247][ C0] trace_event_buffer_commit+0x22f/0x7e0 [ 915.153296][ C0] trace_event_raw_event_bpf_trace_printk+0x152/0x210 [ 915.153326][ C0] ? __probestub_bpf_trace_printk+0x10/0x10 [ 915.153364][ C0] ? __asan_memcpy+0x40/0x70 [ 915.153411][ C0] trace_bpf_trace_printk+0x142/0x1a0 [ 915.153436][ C0] bpf_trace_printk+0x11f/0x190 [ 915.153470][ C0] ? bpf_probe_write_user+0xe0/0xe0 [ 915.153503][ C0] ? bpf_trace_run1+0xd6/0x3b0 [ 915.153527][ C0] ? trace_call_bpf+0x5ba/0x690 [ 915.153553][ C0] ? verify_lock_unused+0x140/0x140 [ 915.153594][ C0] bpf_prog_9e1c00255e17e72e+0x38/0x3a [ 915.153623][ C0] bpf_trace_run1+0x1c9/0x3b0 [ 915.153642][ C0] ? bpf_trace_run1+0xd6/0x3b0 [ 915.153663][ C0] ? bpf_put_raw_tracepoint+0x60/0x60 [ 915.153688][ C0] ? __bpf_trace_rcu_utilization+0x95/0xe0 [ 915.153720][ C0] __bpf_trace_rcu_utilization+0xa2/0xe0 [ 915.153741][ C0] ? perf_trace_rcu_stall_warning+0x2d0/0x2d0 [ 915.153763][ C0] ? rcu_leak_callback+0x10/0x10 [ 915.153792][ C0] ? trace_event_raw_event_lock+0x230/0x230 [ 915.153836][ C0] trace_rcu_utilization+0x179/0x1a0 [ 915.153864][ C0] rcu_core+0x1341/0x1720 [ 915.153900][ C0] ? try_to_wake_up+0x2d2/0x10b0 [ 915.153932][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 915.153955][ C0] ? __rwlock_init+0x150/0x150 [ 915.153980][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 915.154008][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 915.154024][ C0] ? sched_clock+0x3f/0x60 [ 915.154050][ C0] ? mark_lock+0x94/0x320 [ 915.154078][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 915.154106][ C0] ? lock_chain_count+0x20/0x20 [ 915.154123][ C0] ? try_to_wake_up+0x6f8/0x10b0 [ 915.154171][ C0] handle_softirqs+0x280/0x820 [ 915.154198][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 915.154228][ C0] ? do_softirq+0x180/0x180 [ 915.154244][ C0] ? irq_work_single+0x199/0x230 [ 915.154273][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 915.154304][ C0] __irq_exit_rcu+0xc7/0x190 [ 915.154322][ C0] ? irq_exit_rcu+0x20/0x20 [ 915.154349][ C0] ? rcu_is_watching+0x15/0xb0 [ 915.154377][ C0] irq_exit_rcu+0x9/0x20 [ 915.154391][ C0] sysvec_irq_work+0xa1/0xc0 [ 915.154417][ C0] [ 915.154422][ C0] [ 915.154430][ C0] asm_sysvec_irq_work+0x1a/0x20 [ 915.154450][ C0] RIP: 0010:rcu_read_unlock_special+0x88/0x4c0 [ 915.154476][ C0] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 19 5e 93 7e 41 f7 c6 00 00 f0 00 74 45 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b [ 915.154489][ C0] RSP: 0018:ffffc900035afc00 EFLAGS: 00000206 [ 915.154503][ C0] RAX: 934b6cbdd4205f00 RBX: 1ffff920006b5f88 RCX: 934b6cbdd4205f00 [ 915.154515][ C0] RDX: dffffc0000000000 RSI: ffffffff8aaab940 RDI: ffffffff8afc7880 [ 915.154528][ C0] RBP: ffffc900035afcf0 R08: ffffffff90da6537 R09: 1ffffffff21b4ca6 [ 915.154540][ C0] R10: dffffc0000000000 R11: fffffbfff21b4ca7 R12: 0000000000000000 [ 915.154552][ C0] R13: dffffc0000000000 R14: 0000000000000246 R15: ffffffff8cd35398 [ 915.154607][ C0] ? do_raw_spin_lock+0x121/0x2c0 [ 915.154636][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 915.154665][ C0] ? __rwlock_init+0x150/0x150 [ 915.154689][ C0] ? read_lock_is_recursive+0x20/0x20 [ 915.154726][ C0] __rcu_read_unlock+0x7c/0xd0 [ 915.154757][ C0] rcu_read_unlock+0x85/0xa0 [ 915.154772][ C0] ? dput+0x3b/0x1e0 [ 915.154785][ C0] dput+0xe6/0x1e0 [ 915.154804][ C0] __fput+0x5e5/0x970 [ 915.154851][ C0] task_work_run+0x1ce/0x250 [ 915.154883][ C0] ? task_work_cancel+0x240/0x240 [ 915.154921][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 915.154954][ C0] exit_to_user_mode_loop+0xe6/0x110 [ 915.154982][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 915.155009][ C0] syscall_exit_to_user_mode+0x1a/0x50 [ 915.155029][ C0] do_syscall_64+0x61/0xb0 [ 915.155050][ C0] ? clear_bhb_loop+0x40/0x90 [ 915.155069][ C0] ? clear_bhb_loop+0x40/0x90 [ 915.155094][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 915.155113][ C0] RIP: 0033:0x7f0a3698e929 [ 915.155130][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 915.155144][ C0] RSP: 002b:00007ffd9bc400c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 915.155160][ C0] RAX: 0000000000000000 RBX: 00000000000c594b RCX: 00007f0a3698e929 [ 915.155171][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 915.155181][ C0] RBP: 00007f0a36bb7ba0 R08: 0000000000000001 R09: 000000189bc403bf [ 915.155192][ C0] R10: 00007f0a36600000 R11: 0000000000000246 R12: 00007f0a36bb5fac [ 915.155203][ C0] R13: 00007f0a36bb5fa0 R14: ffffffffffffffff R15: 00007ffd9bc401e0 [ 915.155248][ C0]