last executing test programs: 2.826784066s ago: executing program 3 (id=1717): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x7, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000059000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18023374b3227eb8216b5fad98c58a0000fcffffff000000000000002eba58b4f28380ae111db000aee80095000000"], 0x0}, 0x90) socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2}]}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(r1) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620afd67053d000171101900000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000), 0x10) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2000003}]}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffa8b702000008000000b7030000000000008500000006000000950000000000000073e33a3387d015df8a49a2c285b574e2c0553177"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0xd, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r9}, 0x69) 2.780480614s ago: executing program 0 (id=1718): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7fffffff}, 0x0, 0x3, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) socket$kcm(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000002d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a07, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x4}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb1}}]}, &(0x7f00000005c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000081001000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 2.515419217s ago: executing program 0 (id=1722): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x4, 0x16, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x48) r0 = socket$kcm(0x2, 0x5, 0x73) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000000c0)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x14, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x0, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="18"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) socket$kcm(0x2a, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_type(r1, &(0x7f00000000c0), 0x2, 0x0) r2 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000640)={&(0x7f0000000000)={0x2a, 0x0, @broadcast}, 0x10, 0x0}, 0x0) close(r2) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x18, 0xb1, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018120000", @ANYRES32=r3, @ANYBLOB="00000000000000006608ffffffff0000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b1af8ff00000000bfa10000000000000701000000feffffb70200009f000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x90) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000001140)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}], 0x20}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000940)=[{0x0}], 0x1}, 0x8400) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="06010200000000000000016f8c6390f90424fc600d00030009200100ff3582c137153e370248018000f01700d1bd", 0x2e}, {&(0x7f0000000340)="279638e31ef7482b18ca10042bc2b1e95abfc131c8eee40ae701412906c75818d3eeab87b0bf3a0a8fbb34fa74dbc94f0b7017c763ea33608d20529e6d0ad28eacdea41c13ba4e555acd84de768711878b01b13f9676afb59ed5739bc2596bb72c41121cd912ad8e4370e928e259d3c9ca45e03677e522f380c83ee2bee7b8bf03de8c2718040d2659fefe9fda641fa1c267280b2734c6f9146ff0e34adee7ee867cf48bf8f03d5375b9ceedad48df21c59c644bb0253a405b1033c9002343ba5d64d1d2958336a4e6f5dc1165245c0bb6b03855182ea7872c0469", 0xdb}, {&(0x7f0000000100)}, {&(0x7f0000000100)="5fb41b9a73579538648c27e5c12c65c7c895e80e62a99d1347f07752c81dbf26e113c170d8ca0f1add24717b3679cda0da", 0x31}, {&(0x7f0000000500)="8100c62553d68f2e1ea78910b0e98856213762482402278eb5567c89fa074133b5e489c277b1c0cfff36385b268b2d04e7bef876af5ffb4a43173cdcd17577080af543b9aeb35c0ad66548e6cc682e52b8d6398b53401a5a5d348d", 0x5b}], 0x10000052}, 0x44) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181003f000000000100000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @private=0xa010100}, 0x10, &(0x7f0000001080), 0x0, &(0x7f0000000280)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8d7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x38}, 0x8000) 2.124979795s ago: executing program 4 (id=1727): openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='memory.pressure\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x40f00}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0xfffff010}, {0x6}]}) close(r0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNGETVNETBE(r1, 0x800454df, &(0x7f0000000180)=0x1) 2.067549326s ago: executing program 2 (id=1728): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001380)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x90) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000a00)=@in={0x2, 0x4e20, @empty}, 0x80, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x4000000, 0x2000, 0xdc0, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b71119246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003d80)={0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f00000019c0)="9257ef7814f0894f2b296cfd717bdb15b985ad41b78d6f84016e7f0d72ce3e5cca0ac618532d2f36345c8028e6045e736d834605386dd44d8d42b9f1683043a504fc72ceea3c88812f0df2aacb6c85f323584dc65af3959b10e904746449a87d517805de5d14c8f1bd3c1f939c73047c2d85cf0f324903ee6a6291e705e8bced91760b6be097ed260f556538da30373c472dee51fdcaf89589034c26f29d9ee05584b8dfa2dec4369ca751d1c11b96ba56d2e3cee4f874fbd216e8dba45cf10298be39671e9c01", 0xc7}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c2d94f90724fc602f1a04000a740100073582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x8848, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e120900190000000401a80016000a00044044000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 2.023959002s ago: executing program 0 (id=1730): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xca}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000000000000000000000000008500000087000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x90) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x104008}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x11, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r6}, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r4], 0x12) 1.838320401s ago: executing program 3 (id=1731): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xca}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000c8"], 0x0}, 0x90) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000a40)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f00000005c0)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000010100)={0xf, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) 1.801476592s ago: executing program 4 (id=1733): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x541b, 0x0) 1.766530371s ago: executing program 2 (id=1734): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000740)='blkio.bfq.io_serviced_recursive\x00', 0x26e1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000b80)='GPL\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="901615cb9da51e7f21ceff00", @ANYRES32, @ANYBLOB="2000000000000000950000000000000045"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 1.689494178s ago: executing program 4 (id=1735): socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x8, 0x8, 0xb}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) (fail_nth: 6) 1.675104443s ago: executing program 0 (id=1736): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r0]}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r0}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r1}, 0x90) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) openat$cgroup_ro(r4, &(0x7f00000002c0)='memory.events.local\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x17, &(0x7f0000000000)=r4, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000040000f9030000000000000202000000002e0000"], &(0x7f0000000580), 0x28, 0x0, 0x1, 0x3ff}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x20000, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x10000, r1}, 0x38) 1.58674447s ago: executing program 1 (id=1737): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="85ff000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000e7ff007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000d000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.585971316s ago: executing program 3 (id=1738): socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x75, 0x7, 0x528, 0x0, r0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xa, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe48}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x27, 0x0, 0x0, 0x0, 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001c40)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/62, 0x3e}], 0x1}, 0x160) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x10, 0x2, 0x10) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000018c0)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/uts\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) 1.47379834s ago: executing program 0 (id=1739): r0 = socket$kcm(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r2, @ANYRES16=r2], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x90) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="1400000028000b05d25a806f8c6394f90524fc60", 0x14}], 0x1}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r5, r6, 0x2}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup, r6, 0x2, 0x0, 0x4000, @prog_id}, 0x20) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socket$kcm(0x28, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x30004010) r12 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f91524fc602f000e0009040000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) 1.472477672s ago: executing program 2 (id=1740): write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x8848, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e120900270000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xb4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004cc0)=[@cred={{0x1c}}], 0x20}, 0x0) close(r4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xea, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x5c3d, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="5c0000005a006bcd9e3fe3dc6e48aa31086b856c1d0000007ea60264160af3653c000a000f0000008bc3a0e69ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f6", 0x5a}, {&(0x7f0000000200)="0f0d", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 1.130387621s ago: executing program 1 (id=1741): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) 1.081225651s ago: executing program 4 (id=1742): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x17, &(0x7f0000000b00)=ANY=[@ANYBLOB="182600", @ANYRES32, @ANYBLOB="00b7080000000000007b8af8ff00000000bfa200070000000007020000f8ffffffb703000008000000b70400000100000085000000820073e7876bce873d1e8c000018470000feffffff0000000000000000186000000a0000000000000002000000cd000100040000001840000005000000", @ANYRES32, @ANYBLOB="00000000000000001811", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x75b3, 0x76, &(0x7f00000003c0)=""/118, 0x41100, 0x0, '\x00', 0x0, 0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000500)=[{0x0, 0x2, 0x0, 0x2}]}, 0x90) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x5}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000440)="3353fa1fd16e9de6a8929d157a9029620d7bf0ada96c446df29720b6be83689e013eac8486db5bc8da59b609d57eae8c93366b0ef9b405eef250fb33ea3204a5831ae1c3f96a10339cadf52c7a1c73f0c5b37c6bb2b401c84bdb18a18ca3ef11d04019cf2fd7fce652e45b4b12d24a4088c4629bbbb0561da5856773c570d6365c4751a31b37581d29d3a541898fa2a3cd40d4b076a2fae391aa4dc6243e036cff154451", 0xa4}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x7cb5, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x5, r4}, 0x38) 1.037115895s ago: executing program 1 (id=1743): openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='memory.pressure\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x40f00}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0xfffff010}, {0x6}]}) close(r0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNGETVNETBE(r1, 0x800454df, &(0x7f0000000180)=0x1) 902.26261ms ago: executing program 3 (id=1744): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001380)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x90) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000a00)=@in={0x2, 0x4e20, @empty}, 0x80, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x4000000, 0x2000, 0xdc0, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b71119246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003d80)={0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f00000019c0)="9257ef7814f0894f2b296cfd717bdb15b985ad41b78d6f84016e7f0d72ce3e5cca0ac618532d2f36345c8028e6045e736d834605386dd44d8d42b9f1683043a504fc72ceea3c88812f0df2aacb6c85f323584dc65af3959b10e904746449a87d517805de5d14c8f1bd3c1f939c73047c2d85cf0f324903ee6a6291e705e8bced91760b6be097ed260f556538da30373c472dee51fdcaf89589034c26f29d9ee05584b8dfa2dec4369ca751d1c11b96ba56d2e3cee4f874fbd216e8dba45cf10298be39671e9c01", 0xc7}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c2d94f90724fc602f1a04000a740100073582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x8848, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e120900190000000401a80016000a00044044000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 835.40408ms ago: executing program 4 (id=1745): socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000003, 0x8000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x4}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb1}}]}, &(0x7f00000005c0)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b0fd25a806c8c6f94f90824fc60", 0x14}], 0x1}, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000200000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="2d736c696d6974202d667265657a6572202b696f202b667265657a6572202b726c696d6974202d626c6b696f201aeb6774fdb0549b14cbee49323666aa1301756aeaf86b979772a79de0497126733f077f476f63cc5ceafceb7394559b663b8444aa830218dcb6c610f607486c3f64755e67a16dfba750c741b4c43cb5539dd08836ab98fa4448361b6e036c39f9325ba68f15aa7680a4cb572956a047a8901837f5fa8ebab0737eeeab08b1457df86892857aeb3586008c13378acac4c68b74a214eb79c31b3b7c17c27b3578e4746b1fdb7ddeac3764c616a928e2584ba2908424fb9e7440f0511724b49ae0945fb20fbddf6a8e18ff229b1bc9d49e5a2dc03ad1ed94e0029126201e3cf81c69585b97614f058362945b231a4fb3372a4d662a57ab8b289ce907984a9c31c964eccce75983c9406a185ef3c0cf5404a15fc3b028e92f68e715e8fcebacc9a914e0963f6a2e6067cdc0cf771d28cfc6c0b42c313c4520a35434820850e2a04733ff059e50bff5999f82beb327a07d776eacddaa70e5fd6e0a0107d20647bfacccb3f6c4a728255b5926497b0b39810f732e6ed3a67b163a1acf2f41fd345a54df2d63d40079c17bd90674e8c8e4bb344214de50"], 0x2d) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x3, [{}, {}]}, @restrict, @enum]}}, 0x0, 0x4e}, 0x20) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0xa8f}], 0x3}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x88) socket$kcm(0xa, 0x0, 0x73) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000007f030010000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 773.031032ms ago: executing program 2 (id=1746): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xca}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000000000000000000000000008500000087000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x90) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x104008}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x11, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r6}, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r4], 0x12) 690.475598ms ago: executing program 3 (id=1747): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x1201}, 0x48) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x2}, 0x1a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0xfffffffffffffffd, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0xa4b4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x1, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x17, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000056cf080034b0463928f900000000000000001811", @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000bb000000bf09000000000000550901000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='io.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b80)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000100), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f00000000c0)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000050000008500000039000000a700000000000000180000000000000000000000000000009500000000"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r2, 0x58, &(0x7f0000000700)}, 0x10) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) r4 = socket$kcm(0xf, 0x3, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xf, 0x8, &(0x7f0000000300)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 640.736853ms ago: executing program 1 (id=1748): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xca}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000c8"], 0x0}, 0x90) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000a40)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b10000"], &(0x7f00000005c0)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000010100)={0xf, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) 596.632365ms ago: executing program 2 (id=1749): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r0]}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r0}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r1}, 0x90) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) openat$cgroup_ro(r4, &(0x7f00000002c0)='memory.events.local\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x17, &(0x7f0000000000)=r4, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000040000f9030000000000000202000000002e0000"], &(0x7f0000000580), 0x28, 0x0, 0x1, 0x3ff}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x20000, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x10000, r1}, 0x38) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x9, 0x400, 0x40}, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup=r9, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x1001, r8, 0x0, 0xd88d02a0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r8, &(0x7f0000000100), &(0x7f0000002240)=""/99}, 0x20) socket$kcm(0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 487.472346ms ago: executing program 3 (id=1750): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='ext4_writepages\x00'}, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x34}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xf}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x21, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd65e0ffff00120600631177fbac141416e00003", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x3}, 0x8}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f00000001c0), &(0x7f0000000080)=""/52}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='scsi_dispatch_cmd_start\x00', r4}, 0x10) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00'}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r5, &(0x7f0000000980), 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 422.168731ms ago: executing program 1 (id=1751): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r3}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000740)={0x2, 0x0, @rand_addr=0x64010101}, 0x10, 0x0, 0x31}, 0x480c4) sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)="1de6805d02000000dbde72170adbc485", 0x10}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x6, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x90101, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}, 0xb01, 0x6, 0x1, 0x4, 0x0, 0x0, 0x200, 0x0, 0x4, 0x0, 0xfffffffffffffffd}, 0x0, 0x6, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000, 0x3d76}, 0x4001, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000000000000000000009500000040000000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000004a0000004a00000004000000070000000000000a040000000d0000000400000f0200000005000000d041000000000000050040000000000031000000960a0000050000000000000001fffffff7fc0000002e2e00704b87d69cc771a80ee7af7e197f6d97b0c3c079aa35f7d2817e782d49b13b420b05fda5f309c53c6a61a4f31befa6bbbe7149847dce"], &(0x7f0000000080)=""/151, 0x68, 0x97, 0x0, 0x2}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@ifindex, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, @prog_id}, 0x20) r5 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x5452, &(0x7f00000006c0)) sendmsg$kcm(r5, &(0x7f0000007140)={&(0x7f0000002ac0)=@in6={0xa, 0x4e23, 0x0, @empty}, 0x80, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="364000004800913a745c7388641f9c"], 0xfe33) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 285.079996ms ago: executing program 0 (id=1752): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f00000021c0)={0x0, 0x80, 0x40, 0x12, 0x2, 0x6b, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext, 0x104421, 0x3ff, 0x0, 0x6}, 0xffffffffffffffff, 0x2, r0, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0xb816, 0x6, 0x0, 0x6}, {0x10, 0x40, 0x3, 0x40}, {0x0, 0x7, 0x9, 0x3}]}) r1 = socket$kcm(0xa, 0x3, 0x73) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000140)=@un=@abs, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x891d, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x14, &(0x7f0000000000)=r3, 0x8) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=1755): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x17, &(0x7f0000000b00)=ANY=[@ANYBLOB="182600", @ANYRES32, @ANYBLOB="00b7080000000000007b8af8ff00000000bfa200070000000007020000f8ffffffb703000008000000b70400000100000085000000820073e7876bce873d1e8c000018470000feffffff0000000000000000186000000a0000000000000002000000cd000100040000001840000005000000", @ANYRES32, @ANYBLOB="00000000000000001811", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x75b3, 0x76, &(0x7f00000003c0)=""/118, 0x41100, 0x0, '\x00', 0x0, 0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000500)=[{0x0, 0x2, 0x0, 0x2}]}, 0x90) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x5}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000440)="3353fa1fd16e9de6a8929d157a9029620d7bf0ada96c446df29720b6be83689e013eac8486db5bc8da59b609d57eae8c93366b0ef9b405eef250fb33ea3204a5831ae1c3f96a10339cadf52c7a1c73f0c5b37c6bb2b401c84bdb18a18ca3ef11d04019cf2fd7fce652e45b4b12d24a4088c4629bbbb0561da5856773c570d6365c4751a31b37581d29d3a541898fa2a3cd40d4b076a2fae391aa4dc6243e036cff154451", 0xa4}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x7cb5, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x5, r4}, 0x38) kernel console output (not intermixed with test programs): 1: renamed from eth1 [ 205.722928][ T6653] netlink: 60 bytes leftover after parsing attributes in process `syz.3.413'. [ 205.763080][ T6405] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 205.827044][ T6405] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 205.899511][ T6650] netlink: 'syz.4.412': attribute type 39 has an invalid length. [ 205.963146][ T6650] veth0_macvtap: left promiscuous mode [ 206.420451][ T6667] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.653704][ T6405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.787928][ T6405] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.835696][ T5151] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.842995][ T5151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.906202][ T6685] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.421'. [ 206.933764][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.941049][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.173098][ T6687] netlink: 'syz.2.423': attribute type 1 has an invalid length. [ 207.212551][ T6687] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.423'. [ 207.717145][ T6405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.872321][ T6405] veth0_vlan: entered promiscuous mode [ 207.913097][ T6405] veth1_vlan: entered promiscuous mode [ 208.005645][ T6405] veth0_macvtap: entered promiscuous mode [ 208.027714][ T6405] veth1_macvtap: entered promiscuous mode [ 208.160645][ T6405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.188495][ T6405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.211540][ T6405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.232337][ T6405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.261855][ T6405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.291698][ T6405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.317350][ T6405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.329573][ T6405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.381314][ T6405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.456877][ T6405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.517281][ T6405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.541958][ T6405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.569995][ T6405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.621458][ T6405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.640551][ T6405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.652790][ T6405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.663974][ T6405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.696377][ T6405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.729904][ T6738] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.431'. [ 208.759496][ T6744] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.857987][ T6728] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.431'. [ 208.900286][ T6405] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.950057][ T6405] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.991567][ T6405] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.015813][ T6405] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.193632][ T6755] netlink: 'syz.3.435': attribute type 1 has an invalid length. [ 209.217564][ T6755] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.435'. [ 209.240419][ T6758] netlink: 'syz.1.436': attribute type 1 has an invalid length. [ 209.240587][ T6758] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.436'. [ 209.543774][ T955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.575581][ T955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.744654][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.770223][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.629721][ T6800] netlink: 'syz.3.445': attribute type 10 has an invalid length. [ 210.675140][ T6800] netlink: 2 bytes leftover after parsing attributes in process `syz.3.445'. [ 210.719481][ T6800] team0: entered promiscuous mode [ 210.768386][ T6800] team_slave_0: entered promiscuous mode [ 210.804378][ T6800] team_slave_1: entered promiscuous mode [ 210.842199][ T6800] bridge0: port 3(team0) entered blocking state [ 210.848735][ T6800] bridge0: port 3(team0) entered disabled state [ 210.942179][ T6800] team0: entered allmulticast mode [ 210.965427][ T6800] team_slave_0: entered allmulticast mode [ 211.009969][ T6800] team_slave_1: entered allmulticast mode [ 211.079744][ T6800] bridge0: port 3(team0) entered blocking state [ 211.086402][ T6800] bridge0: port 3(team0) entered forwarding state [ 211.359422][ T6808] netlink: 'syz.4.447': attribute type 1 has an invalid length. [ 211.392132][ T6808] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.447'. [ 211.420904][ T6809] netlink: 'syz.2.446': attribute type 1 has an invalid length. [ 211.452377][ T6809] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.446'. [ 211.997129][ T6826] netlink: 'syz.2.452': attribute type 4 has an invalid length. [ 212.065754][ T6826] netlink: 152 bytes leftover after parsing attributes in process `syz.2.452'. [ 212.080679][ T6820] netlink: 'syz.3.450': attribute type 1 has an invalid length. [ 212.148395][ T6826] netlink: 5 bytes leftover after parsing attributes in process `syz.2.452'. [ 212.157717][ T6820] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.450'. [ 212.304622][ T6826] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 213.552819][ T6856] netlink: 'syz.3.461': attribute type 1 has an invalid length. [ 213.564438][ T6856] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.461'. [ 213.949357][ T6875] netlink: 'syz.2.465': attribute type 1 has an invalid length. [ 214.014606][ T6874] netlink: 'syz.3.467': attribute type 39 has an invalid length. [ 214.030497][ T6875] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.465'. [ 215.158999][ T6904] netlink: 'syz.1.476': attribute type 10 has an invalid length. [ 215.210673][ T6901] netlink: 'syz.2.477': attribute type 1 has an invalid length. [ 215.239910][ T6904] netlink: 2 bytes leftover after parsing attributes in process `syz.1.476'. [ 215.250436][ T6901] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.477'. [ 215.388741][ T6904] team0: entered promiscuous mode [ 215.426946][ T6904] team_slave_0: entered promiscuous mode [ 215.435923][ T6904] team_slave_1: entered promiscuous mode [ 215.444694][ T6904] bridge0: port 3(team0) entered blocking state [ 215.451289][ T6904] bridge0: port 3(team0) entered disabled state [ 215.464564][ T6904] team0: entered allmulticast mode [ 215.478622][ T6904] team_slave_0: entered allmulticast mode [ 215.500431][ T6904] team_slave_1: entered allmulticast mode [ 215.524541][ T6904] bridge0: port 3(team0) entered blocking state [ 215.531001][ T6904] bridge0: port 3(team0) entered forwarding state [ 215.567401][ T6908] veth0_macvtap: left promiscuous mode [ 215.665307][ T6919] validate_nla: 1 callbacks suppressed [ 215.665348][ T6919] netlink: 'syz.2.481': attribute type 1 has an invalid length. [ 215.709229][ T6919] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.481'. [ 216.063537][ T6927] netlink: 'syz.1.484': attribute type 4 has an invalid length. [ 216.071274][ T6927] netlink: 152 bytes leftover after parsing attributes in process `syz.1.484'. [ 216.151799][ T6927] netlink: 5 bytes leftover after parsing attributes in process `syz.1.484'. [ 216.161195][ T6927] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 216.279666][ T5100] Bluetooth: hci7: ISO packet for unknown connection handle 0 [ 216.969296][ T6947] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.491'. [ 217.176194][ T6958] netlink: 'syz.1.495': attribute type 1 has an invalid length. [ 217.237507][ T6958] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.495'. [ 217.422816][ T6962] netlink: 'syz.3.497': attribute type 39 has an invalid length. [ 217.630429][ T6973] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.499'. [ 217.647676][ T5100] Bluetooth: hci6: ISO packet for unknown connection handle 0 [ 217.676980][ T6970] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.499'. [ 218.270720][ T6987] netlink: 'syz.4.505': attribute type 10 has an invalid length. [ 218.296510][ T6987] netlink: 2 bytes leftover after parsing attributes in process `syz.4.505'. [ 218.502876][ T6991] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.504'. [ 218.592917][ T6994] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.507'. [ 219.782790][ T7000] netlink: 'syz.4.510': attribute type 1 has an invalid length. [ 221.075685][ T7006] netlink: 'syz.1.511': attribute type 4 has an invalid length. [ 221.110360][ T7006] __nla_validate_parse: 1 callbacks suppressed [ 221.110384][ T7006] netlink: 152 bytes leftover after parsing attributes in process `syz.1.511'. [ 221.195583][ T7006] netlink: 5 bytes leftover after parsing attributes in process `syz.1.511'. [ 221.221993][ T7006] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 221.269288][ T5100] Bluetooth: hci9: ISO packet for unknown connection handle 0 [ 221.318533][ T7008] netlink: 'syz.2.513': attribute type 29 has an invalid length. [ 221.351028][ T7008] netlink: 'syz.2.513': attribute type 29 has an invalid length. [ 221.369202][ T7008] netlink: 'syz.2.513': attribute type 29 has an invalid length. [ 221.722736][ T7029] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.517'. [ 221.744839][ T7026] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.517'. [ 221.820857][ T7034] netlink: 'syz.0.520': attribute type 10 has an invalid length. [ 221.846668][ T7034] netlink: 2 bytes leftover after parsing attributes in process `syz.0.520'. [ 221.892786][ T7034] team0: entered promiscuous mode [ 221.897899][ T7034] team_slave_0: entered promiscuous mode [ 222.086740][ T7042] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.523'. [ 222.096754][ T7034] team_slave_1: entered promiscuous mode [ 222.152262][ T7034] bridge0: port 3(team0) entered blocking state [ 222.175400][ T7034] bridge0: port 3(team0) entered disabled state [ 222.205330][ T7034] team0: entered allmulticast mode [ 222.226860][ T7034] team_slave_0: entered allmulticast mode [ 222.258884][ T7034] team_slave_1: entered allmulticast mode [ 222.322305][ T7034] bridge0: port 3(team0) entered blocking state [ 222.328840][ T7034] bridge0: port 3(team0) entered forwarding state [ 222.887525][ T7046] netlink: 'syz.1.524': attribute type 1 has an invalid length. [ 222.922485][ T7046] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.524'. [ 223.113699][ T7048] netlink: 'syz.0.525': attribute type 10 has an invalid length. [ 223.130794][ T7048] netlink: 2 bytes leftover after parsing attributes in process `syz.0.525'. [ 223.581044][ T7061] netlink: 'syz.0.530': attribute type 39 has an invalid length. [ 223.680079][ T7065] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.750968][ T7070] netlink: 'syz.1.534': attribute type 4 has an invalid length. [ 223.771969][ T7070] netlink: 152 bytes leftover after parsing attributes in process `syz.1.534'. [ 223.800502][ T7070] netlink: 5 bytes leftover after parsing attributes in process `syz.1.534'. [ 223.832652][ T7070] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 224.207228][ T7081] netlink: 'syz.2.537': attribute type 1 has an invalid length. [ 225.077130][ T7095] veth0_macvtap: left promiscuous mode [ 225.795651][ T7113] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 226.167370][ T7128] validate_nla: 7 callbacks suppressed [ 226.167391][ T7128] netlink: 'syz.2.554': attribute type 21 has an invalid length. [ 226.187017][ T5100] Bluetooth: hci6: ISO packet for unknown connection handle 0 [ 226.189089][ T7128] netlink: 'syz.2.554': attribute type 1 has an invalid length. [ 226.543129][ T7138] netlink: 'syz.3.558': attribute type 10 has an invalid length. [ 226.572534][ T7138] __nla_validate_parse: 6 callbacks suppressed [ 226.572558][ T7138] netlink: 2 bytes leftover after parsing attributes in process `syz.3.558'. [ 227.080023][ T7159] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.564'. [ 227.124922][ T7155] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.564'. [ 227.258942][ T7161] netlink: 'syz.2.565': attribute type 4 has an invalid length. [ 227.282237][ T7161] netlink: 152 bytes leftover after parsing attributes in process `syz.2.565'. [ 227.313185][ T7161] netlink: 5 bytes leftover after parsing attributes in process `syz.2.565'. [ 227.339084][ T7161] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 227.519659][ T7167] netlink: 'syz.0.569': attribute type 21 has an invalid length. [ 227.540334][ T7167] netlink: 'syz.0.569': attribute type 1 has an invalid length. [ 227.559678][ T5100] Bluetooth: hci8: ISO packet for unknown connection handle 0 [ 227.765459][ T7180] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 227.923316][ T7185] netlink: 'syz.1.574': attribute type 10 has an invalid length. [ 227.931134][ T7185] netlink: 2 bytes leftover after parsing attributes in process `syz.1.574'. [ 228.076804][ T7181] netlink: 'syz.2.573': attribute type 39 has an invalid length. [ 228.525384][ T7206] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.581'. [ 228.560281][ T7203] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.581'. [ 228.763497][ T7210] netlink: 'syz.4.584': attribute type 4 has an invalid length. [ 228.773126][ T5100] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 228.786884][ T7210] netlink: 152 bytes leftover after parsing attributes in process `syz.4.584'. [ 228.823189][ T7210] netlink: 5 bytes leftover after parsing attributes in process `syz.4.584'. [ 228.871787][ T7210] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 229.080377][ T5100] Bluetooth: hci7: unexpected event 0x05 length: 15 > 4 [ 229.545982][ T7231] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.750311][ T5100] Bluetooth: hci7: ISO packet for unknown connection handle 0 [ 230.041148][ T7254] netlink: 'syz.2.601': attribute type 4 has an invalid length. [ 230.053370][ T7254] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 230.824212][ T5100] Bluetooth: hci6: unexpected event 0x08 length: 15 > 4 [ 231.065672][ T5110] Bluetooth: hci8: ISO packet for unknown connection handle 0 [ 231.691008][ T7293] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 231.852094][ T7297] validate_nla: 3 callbacks suppressed [ 231.852136][ T7297] netlink: 'syz.0.617': attribute type 39 has an invalid length. [ 232.831711][ T5110] Bluetooth: hci6: command 0x0406 tx timeout [ 233.402693][ T7313] netlink: 'syz.2.623': attribute type 1 has an invalid length. [ 233.457658][ T7313] __nla_validate_parse: 10 callbacks suppressed [ 233.457683][ T7313] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.623'. [ 233.582511][ T7329] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.624'. [ 233.656661][ T7318] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.624'. [ 233.984356][ T7337] netlink: 'syz.0.629': attribute type 39 has an invalid length. [ 234.015439][ T7335] netlink: 'syz.2.630': attribute type 1 has an invalid length. [ 234.040506][ T7335] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.630'. [ 234.127351][ T7343] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 234.189960][ T7342] netlink: 'syz.1.632': attribute type 29 has an invalid length. [ 234.232934][ T7342] netlink: 'syz.1.632': attribute type 29 has an invalid length. [ 234.252487][ T7342] netlink: 'syz.1.632': attribute type 29 has an invalid length. [ 234.305793][ T5100] Bluetooth: hci7: unexpected event 0x08 length: 15 > 4 [ 234.678226][ T7363] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.639'. [ 234.760063][ T7360] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.639'. [ 234.943432][ T7367] netlink: 'syz.1.640': attribute type 1 has an invalid length. [ 234.996997][ T7367] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.640'. [ 235.363656][ T7380] netlink: 'syz.4.647': attribute type 29 has an invalid length. [ 235.410434][ T7376] netlink: 'syz.2.645': attribute type 1 has an invalid length. [ 235.423514][ T7376] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.645'. [ 235.939206][ T7401] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 236.323115][ T7405] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.656'. [ 236.351745][ T5110] Bluetooth: hci7: command 0x0406 tx timeout [ 236.722449][ T7415] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.660'. [ 237.947508][ T5100] Bluetooth: hci6: ISO packet for unknown connection handle 3152 [ 238.167284][ T7448] validate_nla: 3 callbacks suppressed [ 238.167309][ T7448] netlink: 'syz.3.671': attribute type 1 has an invalid length. [ 238.462298][ T7457] netlink: 'syz.4.673': attribute type 4 has an invalid length. [ 238.473866][ T7457] __nla_validate_parse: 1 callbacks suppressed [ 238.473888][ T7457] netlink: 152 bytes leftover after parsing attributes in process `syz.4.673'. [ 238.568339][ T7457] netlink: 5 bytes leftover after parsing attributes in process `syz.4.673'. [ 238.621834][ T7457] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 238.723332][ T7454] netlink: 'syz.3.674': attribute type 1 has an invalid length. [ 238.756017][ T7454] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.674'. [ 238.877712][ T7463] netlink: 'syz.0.676': attribute type 1 has an invalid length. [ 238.928901][ T7463] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.676'. [ 239.187880][ T5100] Bluetooth: hci8: unexpected event 0x07 length: 15 < 255 [ 239.202539][ T5100] Bluetooth: hci9: unexpected event 0x07 length: 15 < 255 [ 239.561602][ T7486] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 239.783030][ T7490] netlink: 'syz.2.684': attribute type 1 has an invalid length. [ 239.791243][ T7490] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.684'. [ 240.102683][ T7503] netlink: 'syz.3.690': attribute type 1 has an invalid length. [ 240.111078][ T7503] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.690'. [ 240.239553][ T7501] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.689'. [ 240.339780][ T7507] netlink: 'syz.2.692': attribute type 1 has an invalid length. [ 240.356932][ T7507] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.692'. [ 240.562387][ T5100] Bluetooth: hci9: unexpected event 0x08 length: 15 > 4 [ 241.995919][ T7544] netlink: 'syz.2.706': attribute type 1 has an invalid length. [ 242.013509][ T7544] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.706'. [ 242.620043][ T5100] Bluetooth: hci6: unexpected event 0x08 length: 15 > 4 [ 243.391093][ T7574] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.711'. [ 243.419198][ T7573] netlink: 'syz.0.715': attribute type 1 has an invalid length. [ 244.448275][ T7581] netlink: 'syz.4.719': attribute type 1 has an invalid length. [ 244.479435][ T7581] __nla_validate_parse: 1 callbacks suppressed [ 244.479474][ T7581] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.719'. [ 244.800031][ T5100] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 245.030821][ T7600] netlink: 'syz.2.726': attribute type 39 has an invalid length. [ 245.706200][ T7620] netlink: 'syz.1.735': attribute type 1 has an invalid length. [ 245.735376][ T7620] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.735'. [ 245.828259][ T5100] Bluetooth: hci7: unexpected event 0x08 length: 15 > 4 [ 246.174564][ T7633] netlink: 'syz.0.741': attribute type 39 has an invalid length. [ 246.294674][ T7641] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.743'. [ 246.342456][ T7638] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.743'. [ 246.376597][ T7643] netlink: 'syz.3.744': attribute type 4 has an invalid length. [ 246.390242][ T7643] netlink: 152 bytes leftover after parsing attributes in process `syz.3.744'. [ 246.401826][ T7643] netlink: 5 bytes leftover after parsing attributes in process `syz.3.744'. [ 246.410742][ T7643] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 246.758735][ T7657] netlink: 'syz.3.750': attribute type 1 has an invalid length. [ 246.777875][ T7657] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.750'. [ 246.946958][ T5100] Bluetooth: hci6: unexpected event 0x08 length: 15 > 4 [ 247.232608][ T7675] netlink: 'syz.1.759': attribute type 39 has an invalid length. [ 247.370081][ T7677] netlink: 'syz.3.760': attribute type 4 has an invalid length. [ 247.381910][ T7677] netlink: 152 bytes leftover after parsing attributes in process `syz.3.760'. [ 247.402375][ T7677] netlink: 5 bytes leftover after parsing attributes in process `syz.3.760'. [ 247.411326][ T7677] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 247.704340][ T7685] netlink: 'syz.4.765': attribute type 1 has an invalid length. [ 247.736341][ T7685] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.765'. [ 248.283275][ T5100] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 248.566553][ T7723] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 248.707301][ T7725] validate_nla: 3 callbacks suppressed [ 248.707360][ T7725] netlink: 'syz.1.780': attribute type 1 has an invalid length. [ 248.747456][ T7730] netlink: 'syz.4.781': attribute type 10 has an invalid length. [ 249.220364][ T7741] netlink: 'syz.1.786': attribute type 39 has an invalid length. [ 250.222273][ T7763] netlink: 'syz.2.791': attribute type 4 has an invalid length. [ 250.255003][ T7762] netlink: 'syz.0.793': attribute type 1 has an invalid length. [ 250.267016][ T7762] __nla_validate_parse: 3 callbacks suppressed [ 250.267034][ T7762] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.793'. [ 250.273727][ T7763] netlink: 152 bytes leftover after parsing attributes in process `syz.2.791'. [ 250.273777][ T7763] netlink: 5 bytes leftover after parsing attributes in process `syz.2.791'. [ 250.273811][ T7763] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 250.390616][ T7770] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 250.631614][ T7778] netlink: 'syz.2.796': attribute type 10 has an invalid length. [ 250.639422][ T7778] netlink: 2 bytes leftover after parsing attributes in process `syz.2.796'. [ 250.661798][ T7778] team0: entered promiscuous mode [ 250.682294][ T7778] team_slave_0: entered promiscuous mode [ 250.688302][ T7778] team_slave_1: entered promiscuous mode [ 250.717609][ T7778] bridge0: port 3(team0) entered blocking state [ 250.724537][ T7778] bridge0: port 3(team0) entered disabled state [ 250.737449][ T7778] team0: entered allmulticast mode [ 250.747519][ T7778] team_slave_0: entered allmulticast mode [ 250.757760][ T7778] team_slave_1: entered allmulticast mode [ 250.783413][ T7778] bridge0: port 3(team0) entered blocking state [ 250.790041][ T7778] bridge0: port 3(team0) entered forwarding state [ 250.929856][ T7782] netlink: 'syz.4.799': attribute type 29 has an invalid length. [ 250.953684][ T7782] netlink: 'syz.4.799': attribute type 29 has an invalid length. [ 251.216692][ T7795] netlink: 'syz.2.804': attribute type 29 has an invalid length. [ 251.239828][ T7795] netlink: 'syz.2.804': attribute type 29 has an invalid length. [ 251.997094][ T7814] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.811'. [ 252.074074][ T7822] netlink: 2 bytes leftover after parsing attributes in process `syz.2.812'. [ 252.385897][ T7834] netlink: 2 bytes leftover after parsing attributes in process `syz.4.816'. [ 252.715468][ T7840] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.817'. [ 253.775071][ T7839] validate_nla: 6 callbacks suppressed [ 253.775095][ T7839] netlink: 'syz.3.818': attribute type 39 has an invalid length. [ 254.250319][ T7866] netlink: 'syz.2.828': attribute type 1 has an invalid length. [ 254.263150][ T7871] netlink: 'syz.3.829': attribute type 10 has an invalid length. [ 254.291689][ T7866] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.828'. [ 254.300720][ T7871] netlink: 2 bytes leftover after parsing attributes in process `syz.3.829'. [ 254.497224][ T7882] netlink: 'syz.0.831': attribute type 10 has an invalid length. [ 254.738175][ T7888] netlink: 'syz.0.836': attribute type 29 has an invalid length. [ 254.762716][ T7888] netlink: 'syz.0.836': attribute type 29 has an invalid length. [ 254.784886][ T7888] netlink: 'syz.0.836': attribute type 29 has an invalid length. [ 254.935654][ T7893] netlink: 'syz.1.834': attribute type 39 has an invalid length. [ 255.071044][ T7896] netlink: 'syz.3.835': attribute type 29 has an invalid length. [ 255.092472][ T7891] netlink: 'syz.3.835': attribute type 29 has an invalid length. [ 255.458317][ T5100] Bluetooth: hci9: ISO packet for unknown connection handle 0 [ 255.470925][ T7911] __nla_validate_parse: 1 callbacks suppressed [ 255.470946][ T7911] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.840'. [ 255.756002][ T7916] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.843'. [ 255.956275][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.962835][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.216319][ T7932] netlink: 2 bytes leftover after parsing attributes in process `syz.3.846'. [ 256.515323][ T7944] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.852'. [ 256.666169][ T5100] Bluetooth: hci8: unexpected event 0x07 length: 15 < 255 [ 257.166460][ T5100] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 258.089531][ T7979] netlink: 2 bytes leftover after parsing attributes in process `syz.2.863'. [ 258.385624][ T7982] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.865'. [ 258.669738][ T7995] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.820452][ T7998] validate_nla: 22 callbacks suppressed [ 258.820480][ T7998] netlink: 'syz.1.871': attribute type 29 has an invalid length. [ 258.843300][ T7998] netlink: 'syz.1.871': attribute type 29 has an invalid length. [ 258.855923][ T7998] netlink: 'syz.1.871': attribute type 29 has an invalid length. [ 259.415764][ T8006] netlink: 'syz.1.874': attribute type 1 has an invalid length. [ 259.433076][ T8006] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.874'. [ 260.306344][ T8020] netlink: 'syz.2.878': attribute type 1 has an invalid length. [ 260.329159][ T8020] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.878'. [ 260.364326][ T8026] netlink: 'syz.1.879': attribute type 10 has an invalid length. [ 260.381571][ T8026] netlink: 2 bytes leftover after parsing attributes in process `syz.1.879'. [ 260.544761][ T8032] netlink: 'syz.3.881': attribute type 1 has an invalid length. [ 260.562072][ T8032] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.881'. [ 260.777824][ T8037] netlink: 'syz.2.882': attribute type 29 has an invalid length. [ 260.788098][ T8037] netlink: 'syz.2.882': attribute type 29 has an invalid length. [ 260.797694][ T8037] netlink: 'syz.2.882': attribute type 29 has an invalid length. [ 261.109882][ T8043] IPv6: NLM_F_CREATE should be specified when creating new route [ 261.463739][ T8057] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.889'. [ 261.905559][ T8060] FAULT_INJECTION: forcing a failure. [ 261.905559][ T8060] name failslab, interval 1, probability 0, space 0, times 0 [ 261.958519][ T8060] CPU: 1 PID: 8060 Comm: syz.3.890 Not tainted 6.10.0-syzkaller-04485-gfa5ef655615a #0 [ 261.968220][ T8060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 261.978334][ T8060] Call Trace: [ 261.981653][ T8060] [ 261.984617][ T8060] dump_stack_lvl+0x241/0x360 [ 261.989354][ T8060] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.994595][ T8060] ? __pfx__printk+0x10/0x10 [ 261.999251][ T8060] should_fail_ex+0x3b0/0x4e0 [ 262.003987][ T8060] ? security_file_alloc+0x28/0x130 [ 262.009233][ T8060] should_failslab+0x9/0x20 [ 262.013809][ T8060] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 262.019237][ T8060] security_file_alloc+0x28/0x130 [ 262.024310][ T8060] init_file+0x99/0x200 [ 262.028607][ T8060] alloc_empty_file+0xb8/0x1d0 [ 262.033428][ T8060] path_openat+0x105/0x3470 [ 262.038020][ T8060] ? mark_lock+0x9a/0x350 [ 262.042401][ T8060] ? __lock_acquire+0x1346/0x1fd0 [ 262.047477][ T8060] ? perf_trace_lock+0x136/0x490 [ 262.052476][ T8060] ? __lock_acquire+0x1346/0x1fd0 [ 262.057698][ T8060] ? __pfx_path_openat+0x10/0x10 [ 262.062675][ T8060] ? __pfx_perf_trace_lock+0x10/0x10 [ 262.068008][ T8060] do_filp_open+0x235/0x490 [ 262.072544][ T8060] ? __pfx_do_filp_open+0x10/0x10 [ 262.077617][ T8060] ? _raw_spin_unlock+0x28/0x50 [ 262.082484][ T8060] ? alloc_fd+0x5a1/0x640 [ 262.086846][ T8060] do_sys_openat2+0x13e/0x1d0 [ 262.091542][ T8060] ? __pfx_do_sys_openat2+0x10/0x10 [ 262.096757][ T8060] ? perf_trace_run_bpf_submit+0x112/0x180 [ 262.102589][ T8060] __x64_sys_openat+0x247/0x2a0 [ 262.107458][ T8060] ? __pfx___x64_sys_openat+0x10/0x10 [ 262.112935][ T8060] ? do_syscall_64+0x100/0x230 [ 262.117724][ T8060] ? do_syscall_64+0xb6/0x230 [ 262.122431][ T8060] do_syscall_64+0xf3/0x230 [ 262.126960][ T8060] ? clear_bhb_loop+0x35/0x90 [ 262.131665][ T8060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.137597][ T8060] RIP: 0033:0x7f3b22575f19 [ 262.142028][ T8060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.161646][ T8060] RSP: 002b:00007f3b23330048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 262.170094][ T8060] RAX: ffffffffffffffda RBX: 00007f3b22705f60 RCX: 00007f3b22575f19 [ 262.178085][ T8060] RDX: 0000000000080040 RSI: 0000000020000100 RDI: 0000000000000007 [ 262.186067][ T8060] RBP: 00007f3b233300a0 R08: 0000000000000000 R09: 0000000000000000 [ 262.194048][ T8060] R10: 0000000000000408 R11: 0000000000000246 R12: 0000000000000001 [ 262.202028][ T8060] R13: 000000000000000b R14: 00007f3b22705f60 R15: 00007fff336a8da8 [ 262.210046][ T8060] [ 262.469628][ T8067] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.893'. [ 263.048820][ T8084] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.898'. [ 263.439503][ T8093] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.902'. [ 264.327170][ T8104] FAULT_INJECTION: forcing a failure. [ 264.327170][ T8104] name failslab, interval 1, probability 0, space 0, times 0 [ 264.354911][ T8104] CPU: 0 PID: 8104 Comm: syz.1.905 Not tainted 6.10.0-syzkaller-04485-gfa5ef655615a #0 [ 264.364612][ T8104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 264.374695][ T8104] Call Trace: [ 264.378011][ T8104] [ 264.380984][ T8104] dump_stack_lvl+0x241/0x360 [ 264.385701][ T8104] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.390931][ T8104] ? __pfx__printk+0x10/0x10 [ 264.395556][ T8104] should_fail_ex+0x3b0/0x4e0 [ 264.400245][ T8104] ? xfrm_policy_alloc+0x77/0x2b0 [ 264.405285][ T8104] should_failslab+0x9/0x20 [ 264.409838][ T8104] kmalloc_trace_noprof+0x6c/0x2c0 [ 264.414983][ T8104] ? validate_tmpl+0x3c9/0x4f0 [ 264.419801][ T8104] xfrm_policy_alloc+0x77/0x2b0 [ 264.424705][ T8104] xfrm_compile_policy+0x262/0x6b0 [ 264.429859][ T8104] ? __pfx_xfrm_compile_policy+0x10/0x10 [ 264.435548][ T8104] xfrm_user_policy+0x6ba/0xbd0 [ 264.440410][ T8104] ? xfrm_user_policy+0x5a2/0xbd0 [ 264.445532][ T8104] ? __pfx_xfrm_user_policy+0x10/0x10 [ 264.450915][ T8104] ? bpf_lsm_capable+0x9/0x10 [ 264.455604][ T8104] ? security_capable+0x90/0xb0 [ 264.460491][ T8104] do_ipv6_setsockopt+0x17d5/0x3630 [ 264.465724][ T8104] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 264.471328][ T8104] ? __pfx___might_resched+0x10/0x10 [ 264.476812][ T8104] ? __lock_acquire+0x1346/0x1fd0 [ 264.481897][ T8104] ? aa_sk_perm+0x967/0xab0 [ 264.486452][ T8104] ? __pfx_aa_sk_perm+0x10/0x10 [ 264.491356][ T8104] ? __pfx_lock_acquire+0x10/0x10 [ 264.496433][ T8104] ipv6_setsockopt+0x5c/0x1a0 [ 264.501177][ T8104] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 264.507125][ T8104] do_sock_setsockopt+0x3af/0x720 [ 264.512212][ T8104] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 264.517826][ T8104] ? __fget_files+0x29/0x470 [ 264.522468][ T8104] ? __fget_files+0x3f6/0x470 [ 264.527197][ T8104] __sys_setsockopt+0x1ae/0x250 [ 264.532176][ T8104] __x64_sys_setsockopt+0xb5/0xd0 [ 264.537290][ T8104] do_syscall_64+0xf3/0x230 [ 264.541834][ T8104] ? clear_bhb_loop+0x35/0x90 [ 264.546570][ T8104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.552505][ T8104] RIP: 0033:0x7f1db2375f19 [ 264.556959][ T8104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.576607][ T8104] RSP: 002b:00007f1db30a3048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 264.585072][ T8104] RAX: ffffffffffffffda RBX: 00007f1db2505f60 RCX: 00007f1db2375f19 [ 264.593074][ T8104] RDX: 0000000000000023 RSI: 0000000000000029 RDI: 0000000000000003 [ 264.601053][ T8104] RBP: 00007f1db30a30a0 R08: 00000000000000cf R09: 0000000000000000 [ 264.609032][ T8104] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 264.617038][ T8104] R13: 000000000000000b R14: 00007f1db2505f60 R15: 00007ffd4d5cf6a8 [ 264.625066][ T8104] [ 264.656518][ T8100] validate_nla: 8 callbacks suppressed [ 264.656533][ T8100] netlink: 'syz.0.903': attribute type 1 has an invalid length. [ 264.733003][ T8100] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.903'. [ 264.911176][ T8113] netlink: 'syz.3.909': attribute type 1 has an invalid length. [ 264.948628][ T8113] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.909'. [ 265.496747][ T5100] Bluetooth: hci8: ISO packet for unknown connection handle 0 [ 265.957904][ T8137] netlink: 'syz.2.916': attribute type 1 has an invalid length. [ 265.975539][ T8137] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.916'. [ 266.512371][ T8141] netlink: 'syz.4.917': attribute type 29 has an invalid length. [ 266.529057][ T8141] netlink: 'syz.4.917': attribute type 29 has an invalid length. [ 266.539059][ T8141] netlink: 'syz.4.917': attribute type 29 has an invalid length. [ 267.972648][ T5104] Bluetooth: hci9: ISO packet for unknown connection handle 0 [ 268.282257][ T5104] Bluetooth: hci9: command 0x0406 tx timeout [ 268.282280][ T5100] Bluetooth: hci8: command 0x0406 tx timeout [ 268.290557][ T8171] netlink: 'syz.0.928': attribute type 1 has an invalid length. [ 268.353490][ T8171] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.928'. [ 268.610694][ T8174] netlink: 'syz.3.929': attribute type 1 has an invalid length. [ 268.691684][ T8174] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.929'. [ 268.693838][ T8176] netlink: 'syz.4.930': attribute type 1 has an invalid length. [ 268.744500][ T8176] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.930'. [ 268.801601][ T8182] netlink: 'syz.0.933': attribute type 4 has an invalid length. [ 268.834961][ T8182] netlink: 152 bytes leftover after parsing attributes in process `syz.0.933'. [ 268.933614][ T8182] netlink: 5 bytes leftover after parsing attributes in process `syz.0.933'. [ 268.967848][ T8182] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 269.317126][ T8190] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 270.692326][ T8213] validate_nla: 1 callbacks suppressed [ 270.692347][ T8213] netlink: 'syz.1.943': attribute type 10 has an invalid length. [ 270.730281][ T8213] netlink: 2 bytes leftover after parsing attributes in process `syz.1.943'. [ 271.403446][ T8226] netlink: 144 bytes leftover after parsing attributes in process `syz.1.948'. [ 271.529584][ T8227] netlink: 'syz.1.948': attribute type 6 has an invalid length. [ 271.813335][ T8231] netlink: 'syz.4.949': attribute type 4 has an invalid length. [ 271.821118][ T8231] netlink: 152 bytes leftover after parsing attributes in process `syz.4.949'. [ 271.830408][ T8231] netlink: 5 bytes leftover after parsing attributes in process `syz.4.949'. [ 271.841911][ T8231] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 272.146407][ T8240] netlink: 'syz.2.953': attribute type 29 has an invalid length. [ 272.182911][ T8240] netlink: 'syz.2.953': attribute type 29 has an invalid length. [ 272.205919][ T8240] netlink: 'syz.2.953': attribute type 29 has an invalid length. [ 272.386000][ T8248] netlink: 'syz.4.955': attribute type 29 has an invalid length. [ 272.402465][ T8249] netlink: 'syz.4.955': attribute type 29 has an invalid length. [ 272.443468][ T8248] netlink: 'syz.4.955': attribute type 29 has an invalid length. [ 272.485174][ T8253] netlink: 'syz.3.958': attribute type 4 has an invalid length. [ 272.517211][ T8253] netlink: 152 bytes leftover after parsing attributes in process `syz.3.958'. [ 272.561825][ T8253] netlink: 5 bytes leftover after parsing attributes in process `syz.3.958'. [ 272.592757][ T8253] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 273.063088][ T4494] Bluetooth: hci6: unexpected event 0x08 length: 15 > 4 [ 273.401126][ T8268] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.962'. [ 273.673760][ T8277] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.964'. [ 273.805524][ T8276] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.965'. [ 274.235685][ T8289] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.967'. [ 274.902164][ T4494] Bluetooth: hci9: ISO packet for unknown connection handle 0 [ 275.000227][ T8308] netlink: 152 bytes leftover after parsing attributes in process `syz.1.973'. [ 275.021817][ T8308] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 275.401641][ T4494] Bluetooth: hci6: unexpected event 0x08 length: 15 > 4 [ 275.706948][ T8321] validate_nla: 6 callbacks suppressed [ 275.706971][ T8321] netlink: 'syz.4.977': attribute type 29 has an invalid length. [ 275.762178][ T8331] netlink: 'syz.4.977': attribute type 29 has an invalid length. [ 275.786666][ T8329] netlink: 'syz.0.980': attribute type 39 has an invalid length. [ 276.027413][ T8337] netlink: 'syz.0.983': attribute type 4 has an invalid length. [ 276.041913][ T8337] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 276.140755][ T4494] Bluetooth: hci9: ISO packet for unknown connection handle 0 [ 276.248700][ T8344] netlink: 'syz.0.986': attribute type 4 has an invalid length. [ 276.279336][ T8344] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 277.042921][ T4494] Bluetooth: hci6: unexpected event 0x09 length: 15 > 3 [ 277.438504][ T8369] netlink: 'syz.4.996': attribute type 10 has an invalid length. [ 277.543862][ T4494] Bluetooth: hci6: ISO packet for unknown connection handle 0 [ 277.565320][ T8377] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 277.939736][ T8392] __nla_validate_parse: 5 callbacks suppressed [ 277.939758][ T8392] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1000'. [ 278.087811][ T8395] netlink: 'syz.3.1004': attribute type 29 has an invalid length. [ 278.102234][ T8395] netlink: 'syz.3.1004': attribute type 29 has an invalid length. [ 278.116941][ T4494] Bluetooth: hci9: unexpected event 0x09 length: 15 > 3 [ 278.665714][ T4494] Bluetooth: hci8: ISO packet for unknown connection handle 0 [ 278.744087][ T8417] netlink: 'syz.2.1012': attribute type 10 has an invalid length. [ 278.801271][ T8417] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1012'. [ 279.850961][ T4494] Bluetooth: hci7: unexpected event 0x09 length: 15 > 3 [ 280.022562][ T8440] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1016'. [ 281.099518][ T8441] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 281.148915][ T8456] netlink: 'syz.2.1024': attribute type 29 has an invalid length. [ 281.179258][ T8457] netlink: 'syz.2.1024': attribute type 29 has an invalid length. [ 281.208894][ T8458] netlink: 'syz.2.1024': attribute type 29 has an invalid length. [ 281.318448][ T4494] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 281.442944][ T8472] netlink: 'syz.1.1027': attribute type 10 has an invalid length. [ 281.475624][ T8472] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1027'. [ 281.526232][ T8466] netlink: 'syz.4.1028': attribute type 10 has an invalid length. [ 282.002930][ T8492] netlink: 'syz.4.1036': attribute type 1 has an invalid length. [ 282.012045][ T8492] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.1036'. [ 282.051330][ T8495] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 282.164331][ T8497] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1038'. [ 282.246763][ T4494] Bluetooth: hci8: unexpected event 0x09 length: 15 > 3 [ 282.324949][ T4494] Bluetooth: hci9: ISO packet for unknown connection handle 0 [ 282.418529][ T8506] netlink: 'syz.3.1041': attribute type 39 has an invalid length. [ 282.663548][ T8517] netlink: 'syz.3.1043': attribute type 10 has an invalid length. [ 282.685066][ T8517] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1043'. [ 282.807284][ T8521] netlink: 'syz.0.1046': attribute type 29 has an invalid length. [ 282.837806][ T8521] netlink: 'syz.0.1046': attribute type 29 has an invalid length. [ 282.907107][ T8523] FAULT_INJECTION: forcing a failure. [ 282.907107][ T8523] name failslab, interval 1, probability 0, space 0, times 0 [ 282.941603][ T8523] CPU: 1 PID: 8523 Comm: syz.4.1047 Not tainted 6.10.0-syzkaller-04485-gfa5ef655615a #0 [ 282.951486][ T8523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 282.961575][ T8523] Call Trace: [ 282.964907][ T8523] [ 282.967877][ T8523] dump_stack_lvl+0x241/0x360 [ 282.972605][ T8523] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.977844][ T8523] ? __pfx__printk+0x10/0x10 [ 282.982475][ T8523] ? __rt6_find_exception_rcu+0x128/0x4c0 [ 282.988254][ T8523] should_fail_ex+0x3b0/0x4e0 [ 282.992985][ T8523] ? dst_alloc+0x12b/0x190 [ 282.997442][ T8523] should_failslab+0x9/0x20 [ 283.001997][ T8523] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 283.007414][ T8523] ? __pfx_ip6_dst_gc+0x10/0x10 [ 283.012313][ T8523] dst_alloc+0x12b/0x190 [ 283.016601][ T8523] ip6_create_rt_rcu+0x2b8/0x5e0 [ 283.021570][ T8523] ? __pfx_ip6_create_rt_rcu+0x10/0x10 [ 283.027071][ T8523] ip6_pol_route_lookup+0xefd/0x1120 [ 283.032393][ T8523] ? ip6_pol_route_lookup+0x10b/0x1120 [ 283.037895][ T8523] ? __pfx_ip6_pol_route_lookup+0x10/0x10 [ 283.043640][ T8523] ? stack_depot_save_flags+0x29/0x830 [ 283.049117][ T8523] ? kasan_save_track+0x51/0x80 [ 283.053998][ T8523] ? __kasan_kmalloc+0x98/0xb0 [ 283.058794][ T8523] ? __kmalloc_noprof+0x1f9/0x400 [ 283.063882][ T8523] ? sock_kmalloc+0xd7/0x160 [ 283.068490][ T8523] ? __ipv6_sock_mc_join+0x445/0x7e0 [ 283.073795][ T8523] fib6_rule_lookup+0x692/0x790 [ 283.078667][ T8523] ? __pfx_ip6_pol_route_lookup+0x10/0x10 [ 283.084428][ T8523] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 283.089826][ T8523] ? rt6_lookup+0xd3/0x220 [ 283.094270][ T8523] rt6_lookup+0x144/0x220 [ 283.098628][ T8523] ? __pfx_rt6_lookup+0x10/0x10 [ 283.103504][ T8523] ? __kmalloc_noprof+0x217/0x400 [ 283.108542][ T8523] ? __ipv6_sock_mc_join+0x490/0x7e0 [ 283.113849][ T8523] __ipv6_sock_mc_join+0x5bb/0x7e0 [ 283.118987][ T8523] do_ipv6_setsockopt+0x239c/0x3630 [ 283.124207][ T8523] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 283.129879][ T8523] ? __pfx_perf_tp_event+0x10/0x10 [ 283.135003][ T8523] ? __pfx___might_resched+0x10/0x10 [ 283.140300][ T8523] ? perf_trace_lock+0x136/0x490 [ 283.145250][ T8523] ? __lock_acquire+0x1346/0x1fd0 [ 283.150303][ T8523] ? aa_sk_perm+0x967/0xab0 [ 283.154842][ T8523] ? __pfx_aa_sk_perm+0x10/0x10 [ 283.159727][ T8523] ? __pfx_lock_acquire+0x10/0x10 [ 283.164775][ T8523] ipv6_setsockopt+0x5c/0x1a0 [ 283.169504][ T8523] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 283.175430][ T8523] do_sock_setsockopt+0x3af/0x720 [ 283.180505][ T8523] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 283.186062][ T8523] ? __fget_files+0x29/0x470 [ 283.190661][ T8523] ? __fget_files+0x3f6/0x470 [ 283.195360][ T8523] __sys_setsockopt+0x1ae/0x250 [ 283.200233][ T8523] __x64_sys_setsockopt+0xb5/0xd0 [ 283.205275][ T8523] do_syscall_64+0xf3/0x230 [ 283.209787][ T8523] ? clear_bhb_loop+0x35/0x90 [ 283.214482][ T8523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.220388][ T8523] RIP: 0033:0x7f9a03175f19 [ 283.224818][ T8523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.244443][ T8523] RSP: 002b:00007f9a03f10048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 283.252971][ T8523] RAX: ffffffffffffffda RBX: 00007f9a03305f60 RCX: 00007f9a03175f19 [ 283.260971][ T8523] RDX: 0000000000000014 RSI: 0000000000000029 RDI: 0000000000000004 [ 283.268957][ T8523] RBP: 00007f9a03f100a0 R08: 0000000000000120 R09: 0000000000000000 [ 283.276944][ T8523] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 283.284967][ T8523] R13: 000000000000004d R14: 00007f9a03305f60 R15: 00007ffdf7b5a708 [ 283.292985][ T8523] [ 283.502949][ T8525] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.1048'. [ 284.184749][ T8551] FAULT_INJECTION: forcing a failure. [ 284.184749][ T8551] name failslab, interval 1, probability 0, space 0, times 0 [ 284.207114][ T8551] CPU: 0 PID: 8551 Comm: syz.3.1059 Not tainted 6.10.0-syzkaller-04485-gfa5ef655615a #0 [ 284.216994][ T8551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 284.227089][ T8551] Call Trace: [ 284.230419][ T8551] [ 284.233370][ T8551] dump_stack_lvl+0x241/0x360 [ 284.238062][ T8551] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.243286][ T8551] ? __pfx__printk+0x10/0x10 [ 284.247904][ T8551] should_fail_ex+0x3b0/0x4e0 [ 284.252595][ T8551] ? ___neigh_create+0x691/0x2470 [ 284.257633][ T8551] should_failslab+0x9/0x20 [ 284.262161][ T8551] __kmalloc_noprof+0xd8/0x400 [ 284.266978][ T8551] ___neigh_create+0x691/0x2470 [ 284.271882][ T8551] ? __ipv6_neigh_lookup_noref+0x533/0x730 [ 284.277715][ T8551] ip6_finish_output2+0x1631/0x1680 [ 284.282940][ T8551] ? ip6_finish_output2+0x712/0x1680 [ 284.288269][ T8551] ? nf_hook+0x9e/0x450 [ 284.292878][ T8551] ? __pfx_ip6_finish_output2+0x10/0x10 [ 284.298445][ T8551] ? ip6_mtu+0x81/0x3f0 [ 284.302619][ T8551] ip6_finish_output+0x41e/0x810 [ 284.307604][ T8551] ? rawv6_send_hdrinc+0xb7a/0x1890 [ 284.312831][ T8551] rawv6_send_hdrinc+0xcfc/0x1890 [ 284.317906][ T8551] ? __pfx_rawv6_send_hdrinc+0x10/0x10 [ 284.323394][ T8551] ? ip6_dst_lookup_flow+0x13e/0x180 [ 284.328705][ T8551] ? __pfx_dst_output+0x10/0x10 [ 284.333574][ T8551] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 284.339219][ T8551] ? aa_label_sk_perm+0x4f0/0x6d0 [ 284.344258][ T8551] ? rawv6_sendmsg+0xef9/0x23c0 [ 284.349122][ T8551] rawv6_sendmsg+0x1962/0x23c0 [ 284.353921][ T8551] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 284.359053][ T8551] ? aa_sk_perm+0x967/0xab0 [ 284.363586][ T8551] ? inet_sendmsg+0x330/0x390 [ 284.368270][ T8551] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 284.373563][ T8551] ? security_socket_sendmsg+0x87/0xb0 [ 284.379043][ T8551] __sock_sendmsg+0x1a6/0x270 [ 284.383734][ T8551] ____sys_sendmsg+0x525/0x7d0 [ 284.388543][ T8551] ? __pfx_____sys_sendmsg+0x10/0x10 [ 284.393866][ T8551] __sys_sendmsg+0x2b0/0x3a0 [ 284.398478][ T8551] ? __pfx___sys_sendmsg+0x10/0x10 [ 284.403608][ T8551] ? trace_call_bpf+0x613/0x8a0 [ 284.408499][ T8551] ? perf_trace_preemptirq_template+0x2d2/0x3f0 [ 284.414761][ T8551] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 284.421192][ T8551] ? do_syscall_64+0x100/0x230 [ 284.425972][ T8551] ? do_syscall_64+0xb6/0x230 [ 284.430665][ T8551] do_syscall_64+0xf3/0x230 [ 284.435178][ T8551] ? clear_bhb_loop+0x35/0x90 [ 284.439868][ T8551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.445822][ T8551] RIP: 0033:0x7f3b22575f19 [ 284.450268][ T8551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.470064][ T8551] RSP: 002b:00007f3b23330048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 284.478493][ T8551] RAX: ffffffffffffffda RBX: 00007f3b22705f60 RCX: 00007f3b22575f19 [ 284.486474][ T8551] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 284.494460][ T8551] RBP: 00007f3b233300a0 R08: 0000000000000000 R09: 0000000000000000 [ 284.502460][ T8551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.510446][ T8551] R13: 000000000000000b R14: 00007f3b22705f60 R15: 00007fff336a8da8 [ 284.518449][ T8551] [ 284.636529][ T8549] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.1058'. [ 284.824835][ T8561] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1062'. [ 284.863365][ T8567] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1061'. [ 284.904129][ T8562] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1063'. [ 285.006392][ T8562] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 285.152621][ T8561] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1062'. [ 286.165482][ T8597] validate_nla: 13 callbacks suppressed [ 286.165547][ T8597] netlink: 'syz.4.1073': attribute type 29 has an invalid length. [ 286.207547][ T8601] netlink: 'syz.4.1073': attribute type 29 has an invalid length. [ 286.275036][ T8597] netlink: 'syz.4.1073': attribute type 29 has an invalid length. [ 286.631559][ T8600] netlink: 'syz.0.1074': attribute type 1 has an invalid length. [ 286.972467][ T8600] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.1074'. [ 287.293187][ T8620] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.539956][ T8624] netlink: 'syz.4.1079': attribute type 10 has an invalid length. [ 287.581051][ T8624] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1079'. [ 287.930541][ T8632] netlink: 'syz.1.1083': attribute type 9 has an invalid length. [ 287.939748][ T8632] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1083'. [ 288.216710][ T8631] netlink: 'syz.1.1083': attribute type 9 has an invalid length. [ 288.231831][ T8631] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1083'. [ 288.258538][ T8639] netlink: 'syz.2.1085': attribute type 39 has an invalid length. [ 288.544211][ T8649] netlink: 'syz.3.1088': attribute type 1 has an invalid length. [ 288.556805][ T8650] netlink: 'syz.2.1089': attribute type 29 has an invalid length. [ 288.581622][ T8649] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.1088'. [ 289.556527][ T8665] syz.3.1091 uses obsolete (PF_INET,SOCK_PACKET) [ 289.904068][ T8675] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.043152][ T8679] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1097'. [ 290.299524][ T8689] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1101'. [ 290.314204][ T8689] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1101'. [ 290.329072][ T8689] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 290.425621][ T8691] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.1102'. [ 291.711549][ T8726] validate_nla: 9 callbacks suppressed [ 291.711572][ T8726] netlink: 'syz.4.1112': attribute type 10 has an invalid length. [ 291.755411][ T8726] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1112'. [ 291.839090][ T8731] netlink: 'syz.0.1113': attribute type 39 has an invalid length. [ 292.029953][ T8736] netlink: 'syz.1.1116': attribute type 1 has an invalid length. [ 292.044647][ T8738] netlink: 'syz.3.1117': attribute type 3 has an invalid length. [ 292.063982][ T8738] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1117'. [ 292.064224][ T8736] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.1116'. [ 295.112930][ T8772] FAULT_INJECTION: forcing a failure. [ 295.112930][ T8772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.132135][ T8772] CPU: 1 PID: 8772 Comm: syz.1.1128 Not tainted 6.10.0-syzkaller-04485-gfa5ef655615a #0 [ 295.141942][ T8772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 295.152060][ T8772] Call Trace: [ 295.155372][ T8772] [ 295.158424][ T8772] dump_stack_lvl+0x241/0x360 [ 295.163151][ T8772] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.168387][ T8772] ? __pfx__printk+0x10/0x10 [ 295.173021][ T8772] ? __pfx_lock_release+0x10/0x10 [ 295.178109][ T8772] should_fail_ex+0x3b0/0x4e0 [ 295.182832][ T8772] _copy_from_user+0x2f/0xe0 [ 295.187461][ T8772] ip_tunnel_parm_from_user+0xa5/0x400 [ 295.193147][ T8772] ? __pfx_ip_tunnel_parm_from_user+0x10/0x10 [ 295.199273][ T8772] ? __mutex_trylock_common+0x183/0x2e0 [ 295.204867][ T8772] ? __pfx___might_resched+0x10/0x10 [ 295.210207][ T8772] ip_tunnel_siocdevprivate+0x9a/0x180 [ 295.215723][ T8772] ? rcu_is_watching+0x15/0xb0 [ 295.220529][ T8772] ? __pfx_ip_tunnel_siocdevprivate+0x10/0x10 [ 295.226657][ T8772] ? trace_contention_end+0x3c/0x120 [ 295.232001][ T8772] ? full_name_hash+0x93/0xe0 [ 295.236736][ T8772] dev_ifsioc+0xaec/0xe70 [ 295.241129][ T8772] ? __pfx_dev_ifsioc+0x10/0x10 [ 295.246069][ T8772] ? dev_load+0x21/0x1f0 [ 295.250371][ T8772] dev_ioctl+0x881/0x1340 [ 295.254759][ T8772] sock_ioctl+0x7f2/0x8e0 [ 295.259134][ T8772] ? __pfx_sock_ioctl+0x10/0x10 [ 295.264026][ T8772] ? __fget_files+0x3f6/0x470 [ 295.268740][ T8772] ? __fget_files+0x29/0x470 [ 295.273375][ T8772] ? bpf_lsm_file_ioctl+0x9/0x10 [ 295.278359][ T8772] ? security_file_ioctl+0x87/0xb0 [ 295.283511][ T8772] ? __pfx_sock_ioctl+0x10/0x10 [ 295.288412][ T8772] __se_sys_ioctl+0xfc/0x170 [ 295.293056][ T8772] do_syscall_64+0xf3/0x230 [ 295.297606][ T8772] ? clear_bhb_loop+0x35/0x90 [ 295.302332][ T8772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.308273][ T8772] RIP: 0033:0x7f1db2375f19 [ 295.312732][ T8772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.332386][ T8772] RSP: 002b:00007f1db30a3048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 295.340840][ T8772] RAX: ffffffffffffffda RBX: 00007f1db2505f60 RCX: 00007f1db2375f19 [ 295.348831][ T8772] RDX: 0000000020000080 RSI: 00000000000089f2 RDI: 0000000000000005 [ 295.356829][ T8772] RBP: 00007f1db30a30a0 R08: 0000000000000000 R09: 0000000000000000 [ 295.364825][ T8772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.372816][ T8772] R13: 000000000000000b R14: 00007f1db2505f60 R15: 00007ffd4d5cf6a8 [ 295.380924][ T8772] [ 295.394652][ T8779] netlink: 'syz.4.1130': attribute type 39 has an invalid length. [ 295.427894][ T4494] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3 [ 295.436093][ T8778] netlink: 'syz.3.1129': attribute type 3 has an invalid length. [ 295.471828][ T8778] netlink: 'syz.3.1129': attribute type 1 has an invalid length. [ 295.480537][ T8778] netlink: 70644 bytes leftover after parsing attributes in process `syz.3.1129'. [ 295.534250][ T8778] netlink: 'syz.3.1129': attribute type 13 has an invalid length. [ 295.581532][ T8778] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.1129'. [ 295.842421][ T8789] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1134'. [ 295.870745][ T8789] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1134'. [ 295.910850][ T8789] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1134'. [ 295.912640][ T8802] FAULT_INJECTION: forcing a failure. [ 295.912640][ T8802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.986163][ T8802] CPU: 0 PID: 8802 Comm: syz.2.1137 Not tainted 6.10.0-syzkaller-04485-gfa5ef655615a #0 [ 295.996047][ T8802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 296.006134][ T8802] Call Trace: [ 296.009448][ T8802] [ 296.012410][ T8802] dump_stack_lvl+0x241/0x360 [ 296.017135][ T8802] ? __pfx_dump_stack_lvl+0x10/0x10 [ 296.022372][ T8802] ? __pfx__printk+0x10/0x10 [ 296.027005][ T8802] ? __pfx_lock_release+0x10/0x10 [ 296.027260][ T8805] netlink: 'syz.1.1138': attribute type 1 has an invalid length. [ 296.032055][ T8802] should_fail_ex+0x3b0/0x4e0 [ 296.032093][ T8802] _copy_from_user+0x2f/0xe0 [ 296.032128][ T8802] ____sys_sendmsg+0x2e4/0x7d0 [ 296.032172][ T8802] ? __pfx_____sys_sendmsg+0x10/0x10 [ 296.032224][ T8802] __sys_sendmsg+0x2b0/0x3a0 [ 296.040395][ T8805] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.1138'. [ 296.044629][ T8802] ? __pfx___sys_sendmsg+0x10/0x10 [ 296.044664][ T8802] ? vfs_write+0x7c4/0xc90 [ 296.044750][ T8802] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 296.044782][ T8802] ? do_syscall_64+0x100/0x230 [ 296.044810][ T8802] ? do_syscall_64+0xb6/0x230 [ 296.044838][ T8802] do_syscall_64+0xf3/0x230 [ 296.044864][ T8802] ? clear_bhb_loop+0x35/0x90 [ 296.044896][ T8802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.044923][ T8802] RIP: 0033:0x7f4545575f19 [ 296.044945][ T8802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.044964][ T8802] RSP: 002b:00007f4546339048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.044990][ T8802] RAX: ffffffffffffffda RBX: 00007f4545705f60 RCX: 00007f4545575f19 [ 296.045009][ T8802] RDX: 0000000000000000 RSI: 0000000020000a40 RDI: 0000000000000003 [ 296.045024][ T8802] RBP: 00007f45463390a0 R08: 0000000000000000 R09: 0000000000000000 [ 296.045039][ T8802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.045054][ T8802] R13: 000000000000000b R14: 00007f4545705f60 R15: 00007ffc315cf7f8 [ 296.045090][ T8802] [ 296.454203][ T8789] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1134'. [ 296.975315][ T8820] netlink: 'syz.2.1143': attribute type 21 has an invalid length. [ 296.990315][ T8820] netlink: 'syz.2.1143': attribute type 1 has an invalid length. [ 297.286831][ T8829] netlink: 'syz.2.1147': attribute type 21 has an invalid length. [ 297.297047][ T8829] netlink: 'syz.2.1147': attribute type 1 has an invalid length. [ 297.544636][ T8838] FAULT_INJECTION: forcing a failure. [ 297.544636][ T8838] name failslab, interval 1, probability 0, space 0, times 0 [ 297.656649][ T8838] CPU: 0 PID: 8838 Comm: syz.2.1150 Not tainted 6.10.0-syzkaller-04485-gfa5ef655615a #0 [ 297.666473][ T8838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 297.676580][ T8838] Call Trace: [ 297.679900][ T8838] [ 297.682875][ T8838] dump_stack_lvl+0x241/0x360 [ 297.687609][ T8838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.692862][ T8838] ? __pfx__printk+0x10/0x10 [ 297.697515][ T8838] ? __pfx___might_resched+0x10/0x10 [ 297.702871][ T8838] should_fail_ex+0x3b0/0x4e0 [ 297.707616][ T8838] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 297.713927][ T8838] should_failslab+0x9/0x20 [ 297.718487][ T8838] __kmalloc_noprof+0xd8/0x400 [ 297.723331][ T8838] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 297.729477][ T8838] genl_rcv_msg+0x802/0xec0 [ 297.734041][ T8838] ? mark_lock+0x9a/0x350 [ 297.738450][ T8838] ? __pfx_genl_rcv_msg+0x10/0x10 [ 297.743592][ T8838] ? __pfx_lock_acquire+0x10/0x10 [ 297.748685][ T8838] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 297.754125][ T8838] ? __pfx_nl80211_start_radar_detection+0x10/0x10 [ 297.760680][ T8838] ? __pfx_nl80211_post_doit+0x10/0x10 [ 297.766206][ T8838] ? __pfx___might_resched+0x10/0x10 [ 297.771533][ T8838] netlink_rcv_skb+0x1e3/0x430 [ 297.776322][ T8838] ? __pfx_genl_rcv_msg+0x10/0x10 [ 297.781380][ T8838] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 297.786706][ T8838] ? __netlink_deliver_tap+0x77e/0x7c0 [ 297.792203][ T8838] genl_rcv+0x28/0x40 [ 297.796206][ T8838] netlink_unicast+0x7f0/0x990 [ 297.801008][ T8838] ? __pfx_netlink_unicast+0x10/0x10 [ 297.806321][ T8838] ? __virt_addr_valid+0x183/0x530 [ 297.811476][ T8838] ? __check_object_size+0x49c/0x900 [ 297.816792][ T8838] ? bpf_lsm_netlink_send+0x9/0x10 [ 297.821939][ T8838] netlink_sendmsg+0x8e4/0xcb0 [ 297.826741][ T8838] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.832050][ T8838] ? __import_iovec+0x536/0x820 [ 297.836922][ T8838] ? aa_sock_msg_perm+0x91/0x160 [ 297.841880][ T8838] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 297.847180][ T8838] ? security_socket_sendmsg+0x87/0xb0 [ 297.852686][ T8838] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.858009][ T8838] __sock_sendmsg+0x221/0x270 [ 297.862729][ T8838] ____sys_sendmsg+0x525/0x7d0 [ 297.867547][ T8838] ? __pfx_____sys_sendmsg+0x10/0x10 [ 297.872885][ T8838] __sys_sendmsg+0x2b0/0x3a0 [ 297.877500][ T8838] ? __pfx___sys_sendmsg+0x10/0x10 [ 297.882637][ T8838] ? vfs_write+0x7c4/0xc90 [ 297.887128][ T8838] ? perf_trace_preemptirq_template+0xf8/0x3f0 [ 297.893314][ T8838] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 297.899660][ T8838] ? do_syscall_64+0x100/0x230 [ 297.904449][ T8838] ? do_syscall_64+0xb6/0x230 [ 297.909152][ T8838] do_syscall_64+0xf3/0x230 [ 297.913682][ T8838] ? clear_bhb_loop+0x35/0x90 [ 297.918388][ T8838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.924297][ T8838] RIP: 0033:0x7f4545575f19 [ 297.928734][ T8838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.948354][ T8838] RSP: 002b:00007f4546339048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 297.956797][ T8838] RAX: ffffffffffffffda RBX: 00007f4545705f60 RCX: 00007f4545575f19 [ 297.964784][ T8838] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 297.972765][ T8838] RBP: 00007f45463390a0 R08: 0000000000000000 R09: 0000000000000000 [ 297.980751][ T8838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.988733][ T8838] R13: 000000000000000b R14: 00007f4545705f60 R15: 00007ffc315cf7f8 [ 297.996743][ T8838] [ 298.072051][ T8847] netlink: 'syz.4.1151': attribute type 1 has an invalid length. [ 298.147421][ T8847] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.1151'. [ 298.464241][ T8862] netlink: 'syz.1.1157': attribute type 21 has an invalid length. [ 298.506455][ T8862] netlink: 'syz.1.1157': attribute type 1 has an invalid length. [ 299.011311][ T8877] tun0: tun_chr_ioctl cmd 1074025672 [ 299.032204][ T8877] tun0: ignored: set checksum enabled [ 300.017940][ T8895] netlink: 'syz.0.1166': attribute type 1 has an invalid length. [ 300.067472][ T8895] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.1166'. [ 300.395115][ T8904] netlink: 'syz.1.1170': attribute type 4 has an invalid length. [ 300.434644][ T8904] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1170'. [ 300.475740][ T8904] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 300.987211][ T8917] netlink: 'syz.1.1173': attribute type 29 has an invalid length. [ 301.099048][ T8910] __nla_validate_parse: 1 callbacks suppressed [ 301.099073][ T8910] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1172'. [ 301.178112][ T8910] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1172'. [ 301.220129][ T8910] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1172'. [ 301.327578][ T8910] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1172'. [ 301.802061][ T8929] FAULT_INJECTION: forcing a failure. [ 301.802061][ T8929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.887408][ T8929] CPU: 0 PID: 8929 Comm: syz.1.1178 Not tainted 6.10.0-syzkaller-04485-gfa5ef655615a #0 [ 301.897209][ T8929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 301.907300][ T8929] Call Trace: [ 301.910605][ T8929] [ 301.913562][ T8929] dump_stack_lvl+0x241/0x360 [ 301.918367][ T8929] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.923598][ T8929] ? __pfx__printk+0x10/0x10 [ 301.928221][ T8929] ? __pfx_lock_release+0x10/0x10 [ 301.933298][ T8929] should_fail_ex+0x3b0/0x4e0 [ 301.938014][ T8929] _copy_from_user+0x2f/0xe0 [ 301.942643][ T8929] packet_setsockopt+0x87b/0x1970 [ 301.947706][ T8929] ? __pfx___might_resched+0x10/0x10 [ 301.953027][ T8929] ? __pfx_packet_setsockopt+0x10/0x10 [ 301.958541][ T8929] ? aa_sk_perm+0x967/0xab0 [ 301.963169][ T8929] ? __pfx_aa_sk_perm+0x10/0x10 [ 301.968055][ T8929] ? __pfx_lock_acquire+0x10/0x10 [ 301.973111][ T8929] ? aa_sock_opt_perm+0x79/0x120 [ 301.978087][ T8929] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 301.983667][ T8929] ? security_socket_setsockopt+0x87/0xb0 [ 301.989425][ T8929] ? __pfx_packet_setsockopt+0x10/0x10 [ 301.994923][ T8929] do_sock_setsockopt+0x3af/0x720 [ 301.999991][ T8929] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 302.005573][ T8929] ? __fget_files+0x29/0x470 [ 302.010192][ T8929] ? __fget_files+0x3f6/0x470 [ 302.014911][ T8929] __sys_setsockopt+0x1ae/0x250 [ 302.019805][ T8929] __x64_sys_setsockopt+0xb5/0xd0 [ 302.024864][ T8929] do_syscall_64+0xf3/0x230 [ 302.029400][ T8929] ? clear_bhb_loop+0x35/0x90 [ 302.034115][ T8929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.040042][ T8929] RIP: 0033:0x7f1db2375f19 [ 302.044478][ T8929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.064112][ T8929] RSP: 002b:00007f1db30a3048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 302.072562][ T8929] RAX: ffffffffffffffda RBX: 00007f1db2505f60 RCX: 00007f1db2375f19 [ 302.080556][ T8929] RDX: 0000000000000002 RSI: 0000000000000107 RDI: 0000000000000003 [ 302.088551][ T8929] RBP: 00007f1db30a30a0 R08: 0000000000000010 R09: 0000000000000000 [ 302.096548][ T8929] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000001 [ 302.104540][ T8929] R13: 000000000000000b R14: 00007f1db2505f60 R15: 00007ffd4d5cf6a8 [ 302.112551][ T8929] [ 302.398403][ T8933] validate_nla: 1 callbacks suppressed [ 302.398427][ T8933] netlink: 'syz.4.1179': attribute type 21 has an invalid length. [ 302.637204][ T8933] netlink: 'syz.4.1179': attribute type 1 has an invalid length. [ 302.808706][ T8935] netlink: 'syz.3.1181': attribute type 1 has an invalid length. [ 302.908055][ T8941] netlink: 'syz.0.1183': attribute type 4 has an invalid length. [ 302.957537][ T8935] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.1181'. [ 302.967978][ T8941] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1183'. [ 302.991815][ T8941] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1183'. [ 303.014705][ T8941] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 304.158015][ T8960] netlink: 'syz.3.1188': attribute type 29 has an invalid length. [ 304.222210][ T8960] netlink: 'syz.3.1188': attribute type 29 has an invalid length. [ 304.325332][ T4494] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 305.086915][ T8984] netlink: 'syz.4.1196': attribute type 4 has an invalid length. [ 305.123473][ T8984] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1196'. [ 305.156388][ T8984] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1196'. [ 305.238745][ T8984] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 305.515338][ T8997] netlink: 105108 bytes leftover after parsing attributes in process `syz.0.1201'. [ 305.533084][ T8997] netlink: 'syz.0.1201': attribute type 1 has an invalid length. [ 305.763629][ T9010] netlink: 'syz.1.1204': attribute type 10 has an invalid length. [ 306.441731][ T9018] netlink: 'syz.1.1206': attribute type 39 has an invalid length. [ 307.901448][ T9030] validate_nla: 2 callbacks suppressed [ 307.901470][ T9030] netlink: 'syz.0.1208': attribute type 29 has an invalid length. [ 308.088987][ T9042] netlink: 'syz.1.1213': attribute type 4 has an invalid length. [ 308.111207][ T9042] __nla_validate_parse: 2 callbacks suppressed [ 308.111227][ T9042] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1213'. [ 308.156194][ T9042] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1213'. [ 308.172228][ T9050] netlink: 'syz.2.1215': attribute type 1 has an invalid length. [ 308.190371][ T9042] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 308.208322][ T9050] netlink: 166052 bytes leftover after parsing attributes in process `syz.2.1215'. [ 308.411767][ T9052] netlink: 'syz.0.1216': attribute type 10 has an invalid length. [ 308.429829][ T9052] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1216'. [ 308.850591][ T9060] netlink: 'syz.2.1218': attribute type 29 has an invalid length. [ 308.903975][ T9061] netlink: 'syz.2.1218': attribute type 29 has an invalid length. [ 308.914026][ T9064] netlink: 'syz.2.1218': attribute type 29 has an invalid length. [ 310.757569][ T9082] netlink: 'syz.3.1225': attribute type 39 has an invalid length. [ 310.800547][ T9097] netlink: 'syz.0.1230': attribute type 1 has an invalid length. [ 310.863284][ T9082] netlink: 'syz.3.1225': attribute type 4 has an invalid length. [ 310.872127][ T9097] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.1230'. [ 310.884181][ T9082] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1225'. [ 310.971745][ T9082] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 311.068263][ T9094] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1229'. [ 311.498326][ T9117] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1237'. [ 311.680742][ T9117] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 311.995745][ T9126] netlink: 105108 bytes leftover after parsing attributes in process `syz.1.1238'. [ 312.040716][ T9126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1238'. [ 313.214644][ T9162] validate_nla: 7 callbacks suppressed [ 313.228618][ T9162] netlink: 'syz.1.1254': attribute type 10 has an invalid length. [ 313.240320][ T9162] bridge0: port 4(netdevsim0) entered blocking state [ 313.344485][ T9162] bridge0: port 4(netdevsim0) entered disabled state [ 313.455104][ T9162] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 313.597421][ T9162] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 313.902546][ T9168] netlink: 105108 bytes leftover after parsing attributes in process `syz.3.1257'. [ 313.932742][ T9168] netlink: 'syz.3.1257': attribute type 1 has an invalid length. [ 313.948438][ T9168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1257'. [ 314.351624][ T5110] Bluetooth: hci0: command 0x0406 tx timeout [ 314.529268][ T9195] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1267'. [ 314.543463][ T9195] openvswitch: netlink: Duplicate key (type 0). [ 314.762749][ T9202] netlink: 'syz.4.1271': attribute type 10 has an invalid length. [ 314.779377][ T9202] bridge0: port 4(netdevsim0) entered blocking state [ 314.819240][ T9202] bridge0: port 4(netdevsim0) entered disabled state [ 314.830993][ T9202] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 314.869124][ T9202] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 315.195488][ T9205] netlink: 'syz.3.1272': attribute type 39 has an invalid length. [ 315.211056][ T9205] netlink: 'syz.3.1272': attribute type 4 has an invalid length. [ 315.222958][ T9205] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1272'. [ 315.262070][ T9205] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 315.691167][ T9221] netlink: 'syz.1.1277': attribute type 2 has an invalid length. [ 315.727577][ T9221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1277'. [ 315.769774][ T4494] Bluetooth: hci6: unexpected event 0x05 length: 15 > 4 [ 315.866804][ T9231] netlink: 'syz.4.1281': attribute type 13 has an invalid length. [ 315.912069][ T9229] netlink: 'syz.0.1280': attribute type 39 has an invalid length. [ 315.942516][ T9229] netlink: 'syz.0.1280': attribute type 4 has an invalid length. [ 315.959354][ T9229] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1280'. [ 316.127580][ T9229] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 316.455630][ T9245] netlink: 'syz.4.1285': attribute type 10 has an invalid length. [ 316.485219][ T9245] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1285'. [ 316.573583][ T4494] Bluetooth: hci8: unexpected event 0x06 length: 15 > 3 [ 316.689508][ T9255] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 316.764250][ T9257] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 316.788046][ T9254] netlink: 105108 bytes leftover after parsing attributes in process `syz.3.1288'. [ 316.798907][ T9254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1288'. [ 317.383038][ T9273] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1293'. [ 317.399502][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.406002][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.698050][ T9285] bridge0: port 4(netdevsim0) entered blocking state [ 317.718010][ T9285] bridge0: port 4(netdevsim0) entered disabled state [ 317.733044][ T9285] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 317.775303][ T9285] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 317.865006][ T4494] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 318.287802][ T9315] validate_nla: 6 callbacks suppressed [ 318.287824][ T9315] netlink: 'syz.1.1308': attribute type 1 has an invalid length. [ 318.319468][ T9315] FAULT_INJECTION: forcing a failure. [ 318.319468][ T9315] name failslab, interval 1, probability 0, space 0, times 0 [ 318.341003][ T9315] CPU: 0 PID: 9315 Comm: syz.1.1308 Not tainted 6.10.0-syzkaller-04485-gfa5ef655615a #0 [ 318.350780][ T9315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 318.360869][ T9315] Call Trace: [ 318.364175][ T9315] [ 318.367137][ T9315] dump_stack_lvl+0x241/0x360 [ 318.371859][ T9315] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.377099][ T9315] ? __pfx__printk+0x10/0x10 [ 318.381753][ T9315] should_fail_ex+0x3b0/0x4e0 [ 318.386477][ T9315] ? __alloc_skb+0x1c3/0x440 [ 318.391119][ T9315] should_failslab+0x9/0x20 [ 318.395658][ T9315] kmem_cache_alloc_node_noprof+0x71/0x320 [ 318.401509][ T9315] __alloc_skb+0x1c3/0x440 [ 318.405968][ T9315] ? __pfx___alloc_skb+0x10/0x10 [ 318.410954][ T9315] ovs_vport_cmd_del+0x5a/0x870 [ 318.415855][ T9315] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 318.422233][ T9315] ? genl_family_rcv_msg_attrs_parse+0x21b/0x290 [ 318.428623][ T9315] genl_rcv_msg+0xb14/0xec0 [ 318.433171][ T9315] ? mark_lock+0x9a/0x350 [ 318.437549][ T9315] ? __pfx_genl_rcv_msg+0x10/0x10 [ 318.442649][ T9315] ? __pfx_lock_acquire+0x10/0x10 [ 318.447714][ T9315] ? __pfx_ovs_vport_cmd_del+0x10/0x10 [ 318.453212][ T9315] ? __pfx___might_resched+0x10/0x10 [ 318.458555][ T9315] netlink_rcv_skb+0x1e3/0x430 [ 318.463370][ T9315] ? __pfx_genl_rcv_msg+0x10/0x10 [ 318.468443][ T9315] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 318.473791][ T9315] ? __netlink_deliver_tap+0x77e/0x7c0 [ 318.479326][ T9315] genl_rcv+0x28/0x40 [ 318.483370][ T9315] netlink_unicast+0x7f0/0x990 [ 318.488189][ T9315] ? __pfx_netlink_unicast+0x10/0x10 [ 318.493514][ T9315] ? __virt_addr_valid+0x183/0x530 [ 318.498681][ T9315] ? __check_object_size+0x49c/0x900 [ 318.504005][ T9315] ? bpf_lsm_netlink_send+0x9/0x10 [ 318.509157][ T9315] netlink_sendmsg+0x8e4/0xcb0 [ 318.513980][ T9315] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.519309][ T9315] ? __import_iovec+0x536/0x820 [ 318.524218][ T9315] ? aa_sock_msg_perm+0x91/0x160 [ 318.529202][ T9315] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 318.534532][ T9315] ? security_socket_sendmsg+0x87/0xb0 [ 318.540044][ T9315] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.545373][ T9315] __sock_sendmsg+0x221/0x270 [ 318.550084][ T9315] ____sys_sendmsg+0x525/0x7d0 [ 318.554915][ T9315] ? __pfx_____sys_sendmsg+0x10/0x10 [ 318.560261][ T9315] __sys_sendmsg+0x2b0/0x3a0 [ 318.564902][ T9315] ? __pfx___sys_sendmsg+0x10/0x10 [ 318.570051][ T9315] ? vfs_write+0x7c4/0xc90 [ 318.574564][ T9315] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 318.580941][ T9315] ? do_syscall_64+0x100/0x230 [ 318.585737][ T9315] ? do_syscall_64+0xb6/0x230 [ 318.590471][ T9315] do_syscall_64+0xf3/0x230 [ 318.595014][ T9315] ? clear_bhb_loop+0x35/0x90 [ 318.599728][ T9315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.605652][ T9315] RIP: 0033:0x7f1db2375f19 [ 318.610106][ T9315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.629756][ T9315] RSP: 002b:00007f1db30a3048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.638218][ T9315] RAX: ffffffffffffffda RBX: 00007f1db2505f60 RCX: 00007f1db2375f19 [ 318.646235][ T9315] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 318.654287][ T9315] RBP: 00007f1db30a30a0 R08: 0000000000000000 R09: 0000000000000000 [ 318.662279][ T9315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.670278][ T9315] R13: 000000000000000b R14: 00007f1db2505f60 R15: 00007ffd4d5cf6a8 [ 318.678322][ T9315] [ 318.905285][ T4494] Bluetooth: hci6: unexpected event 0x0b length: 15 > 11 [ 318.905309][ T9323] delete_channel: no stack [ 319.146556][ T9328] netlink: 'syz.0.1313': attribute type 1 has an invalid length. [ 319.183885][ T9328] __nla_validate_parse: 2 callbacks suppressed [ 319.183930][ T9328] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.1313'. [ 319.487619][ T9341] netlink: 'syz.0.1319': attribute type 29 has an invalid length. [ 319.564835][ T9346] FAULT_INJECTION: forcing a failure. [ 319.564835][ T9346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.586393][ T9346] CPU: 0 PID: 9346 Comm: syz.4.1320 Not tainted 6.10.0-syzkaller-04485-gfa5ef655615a #0 [ 319.596442][ T9346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 319.606542][ T9346] Call Trace: [ 319.609863][ T9346] [ 319.612835][ T9346] dump_stack_lvl+0x241/0x360 [ 319.617557][ T9346] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.622798][ T9346] ? __pfx__printk+0x10/0x10 [ 319.627442][ T9346] should_fail_ex+0x3b0/0x4e0 [ 319.632166][ T9346] _copy_from_user+0x2f/0xe0 [ 319.636795][ T9346] sctp_setsockopt+0xcc/0x11c0 [ 319.641592][ T9346] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 319.647703][ T9346] do_sock_setsockopt+0x3af/0x720 [ 319.652755][ T9346] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 319.658314][ T9346] ? __fget_files+0x29/0x470 [ 319.662912][ T9346] ? __fget_files+0x3f6/0x470 [ 319.667700][ T9346] __sys_setsockopt+0x1ae/0x250 [ 319.672580][ T9346] __x64_sys_setsockopt+0xb5/0xd0 [ 319.677625][ T9346] do_syscall_64+0xf3/0x230 [ 319.682140][ T9346] ? clear_bhb_loop+0x35/0x90 [ 319.686832][ T9346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.692748][ T9346] RIP: 0033:0x7f9a03175f19 [ 319.697170][ T9346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.716782][ T9346] RSP: 002b:00007f9a03eef048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 319.725210][ T9346] RAX: ffffffffffffffda RBX: 00007f9a03306038 RCX: 00007f9a03175f19 [ 319.733193][ T9346] RDX: 000000000000007b RSI: 0000000000000084 RDI: 0000000000000003 [ 319.741168][ T9346] RBP: 00007f9a03eef0a0 R08: 0000000000000008 R09: 0000000000000000 [ 319.749145][ T9346] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.757124][ T9346] R13: 000000000000006e R14: 00007f9a03306038 R15: 00007ffdf7b5a708 [ 319.765118][ T9346] [ 320.569782][ T4494] Bluetooth: hci8: unexpected event 0x0b length: 15 > 11 [ 320.582203][ T9359] delete_channel: no stack [ 320.906916][ T9370] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1329'. [ 320.916871][ T9370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1329'. [ 321.006060][ T9370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1329'. [ 321.054931][ T9376] Â: renamed from bond0 [ 321.284945][ T4494] Bluetooth: hci9: unexpected event 0x06 length: 15 > 3 [ 321.846395][ T4494] Bluetooth: hci7: unexpected event 0x0b length: 15 > 11 [ 322.098883][ T9397] delete_channel: no stack [ 322.671653][ T5100] Bluetooth: hci8: command 0x0406 tx timeout [ 322.845750][ T9420] warning: `syz.0.1347' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 322.935861][ T9420] netlink: 'syz.0.1347': attribute type 4 has an invalid length. [ 322.973391][ T9420] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1347'. [ 323.953424][ T5110] Bluetooth: hci0: command 0x0406 tx timeout [ 324.285247][ T9469] netlink: 'syz.1.1363': attribute type 4 has an invalid length. [ 324.312907][ T9469] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1363'. [ 324.324185][ T9469] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1363'. [ 324.335487][ T9469] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 325.043982][ T9492] FAULT_INJECTION: forcing a failure. [ 325.043982][ T9492] name failslab, interval 1, probability 0, space 0, times 0 [ 325.061761][ T9492] CPU: 0 PID: 9492 Comm: syz.4.1371 Not tainted 6.10.0-syzkaller-04485-gfa5ef655615a #0 [ 325.071551][ T9492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 325.081652][ T9492] Call Trace: [ 325.084940][ T9492] [ 325.087893][ T9492] dump_stack_lvl+0x241/0x360 [ 325.092591][ T9492] ? __pfx_dump_stack_lvl+0x10/0x10 [ 325.097803][ T9492] ? __pfx__printk+0x10/0x10 [ 325.102411][ T9492] ? netlink_insert+0x10b7/0x14b0 [ 325.107447][ T9492] should_fail_ex+0x3b0/0x4e0 [ 325.112173][ T9492] ? __alloc_skb+0x1c3/0x440 [ 325.116790][ T9492] should_failslab+0x9/0x20 [ 325.121299][ T9492] kmem_cache_alloc_node_noprof+0x71/0x320 [ 325.127128][ T9492] __alloc_skb+0x1c3/0x440 [ 325.131562][ T9492] ? __pfx___alloc_skb+0x10/0x10 [ 325.136513][ T9492] ? netlink_autobind+0xd6/0x2f0 [ 325.141476][ T9492] ? netlink_autobind+0x2b0/0x2f0 [ 325.146533][ T9492] netlink_sendmsg+0x638/0xcb0 [ 325.151326][ T9492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 325.156628][ T9492] ? __import_iovec+0x536/0x820 [ 325.161493][ T9492] ? aa_sock_msg_perm+0x91/0x160 [ 325.166455][ T9492] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 325.171760][ T9492] ? security_socket_sendmsg+0x87/0xb0 [ 325.177232][ T9492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 325.182526][ T9492] __sock_sendmsg+0x221/0x270 [ 325.187220][ T9492] ____sys_sendmsg+0x525/0x7d0 [ 325.192014][ T9492] ? __pfx_____sys_sendmsg+0x10/0x10 [ 325.197330][ T9492] __sys_sendmsg+0x2b0/0x3a0 [ 325.201934][ T9492] ? __pfx___sys_sendmsg+0x10/0x10 [ 325.207060][ T9492] ? vfs_write+0x7c4/0xc90 [ 325.211539][ T9492] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 325.217879][ T9492] ? do_syscall_64+0x100/0x230 [ 325.222654][ T9492] ? do_syscall_64+0xb6/0x230 [ 325.227340][ T9492] do_syscall_64+0xf3/0x230 [ 325.231853][ T9492] ? clear_bhb_loop+0x35/0x90 [ 325.236544][ T9492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.242457][ T9492] RIP: 0033:0x7f9a03175f19 [ 325.246890][ T9492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.266513][ T9492] RSP: 002b:00007f9a03f10048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 325.274953][ T9492] RAX: ffffffffffffffda RBX: 00007f9a03305f60 RCX: 00007f9a03175f19 [ 325.283025][ T9492] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 325.291041][ T9492] RBP: 00007f9a03f100a0 R08: 0000000000000000 R09: 0000000000000000 [ 325.299018][ T9492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.306997][ T9492] R13: 000000000000004d R14: 00007f9a03305f60 R15: 00007ffdf7b5a708 [ 325.314999][ T9492] [ 325.743414][ T9504] netlink: 105108 bytes leftover after parsing attributes in process `syz.4.1374'. [ 325.800111][ T9504] netlink: 'syz.4.1374': attribute type 1 has an invalid length. [ 325.827770][ T9504] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1374'. [ 325.904413][ T9514] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.1379'. [ 325.925105][ T9514] netlink: 'syz.0.1379': attribute type 3 has an invalid length. [ 326.066353][ T9517] netlink: 2051 bytes leftover after parsing attributes in process `syz.3.1381'. [ 326.349749][ T9522] netlink: 'syz.4.1382': attribute type 4 has an invalid length. [ 328.511175][ T9534] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1385'. [ 328.541703][ T4494] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 329.234517][ T9549] netlink: 'syz.4.1391': attribute type 29 has an invalid length. [ 329.304765][ T9552] netlink: 'syz.4.1391': attribute type 29 has an invalid length. [ 329.348932][ T9549] netlink: 'syz.4.1391': attribute type 29 has an invalid length. [ 329.387640][ T9551] netlink: 105108 bytes leftover after parsing attributes in process `syz.2.1392'. [ 329.404163][ T9551] netlink: 'syz.2.1392': attribute type 1 has an invalid length. [ 329.407210][ T9554] netlink: 'syz.3.1393': attribute type 39 has an invalid length. [ 329.416427][ T9551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1392'. [ 329.452501][ T9554] netlink: 'syz.3.1393': attribute type 4 has an invalid length. [ 329.471184][ T9554] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1393'. [ 329.510374][ T9554] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 329.540849][ T9556] netlink: 'syz.0.1394': attribute type 21 has an invalid length. [ 329.561638][ T9556] netlink: 'syz.0.1394': attribute type 1 has an invalid length. [ 329.666929][ T9561] netlink: 'syz.4.1395': attribute type 4 has an invalid length. [ 329.686007][ T9561] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1395'. [ 329.716301][ T9561] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 329.961211][ T9572] netlink: 'syz.3.1398': attribute type 1 has an invalid length. [ 329.978452][ T9572] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.1398'. [ 329.989920][ T9572] netlink: 'syz.3.1398': attribute type 1 has an invalid length. [ 330.710231][ T4494] Bluetooth: hci6: unexpected event 0x08 length: 15 > 4 [ 331.060955][ T9586] FAULT_INJECTION: forcing a failure. [ 331.060955][ T9586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.148567][ T9586] CPU: 0 PID: 9586 Comm: syz.3.1402 Not tainted 6.10.0-syzkaller-04485-gfa5ef655615a #0 [ 331.158365][ T9586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 331.168461][ T9586] Call Trace: [ 331.171764][ T9586] [ 331.174716][ T9586] dump_stack_lvl+0x241/0x360 [ 331.179430][ T9586] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.184660][ T9586] ? __pfx__printk+0x10/0x10 [ 331.189289][ T9586] ? snprintf+0xda/0x120 [ 331.193613][ T9586] should_fail_ex+0x3b0/0x4e0 [ 331.198330][ T9586] _copy_to_user+0x2f/0xb0 [ 331.202788][ T9586] simple_read_from_buffer+0xca/0x150 [ 331.208202][ T9586] proc_fail_nth_read+0x1e9/0x250 [ 331.213269][ T9586] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 331.218866][ T9586] ? rw_verify_area+0x520/0x6b0 [ 331.223755][ T9586] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 331.229346][ T9586] vfs_read+0x204/0xbc0 [ 331.233561][ T9586] ? __pfx_lock_release+0x10/0x10 [ 331.238630][ T9586] ? __pfx_vfs_read+0x10/0x10 [ 331.243348][ T9586] ? __fget_files+0x29/0x470 [ 331.247971][ T9586] ? __fget_files+0x3f6/0x470 [ 331.252688][ T9586] ksys_read+0x1a0/0x2c0 [ 331.256970][ T9586] ? __pfx_ksys_read+0x10/0x10 [ 331.261772][ T9586] ? rcu_is_watching+0x15/0xb0 [ 331.266586][ T9586] ? trace_sys_enter+0x1f/0xd0 [ 331.271391][ T9586] do_syscall_64+0xf3/0x230 [ 331.275920][ T9586] ? clear_bhb_loop+0x35/0x90 [ 331.280623][ T9586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.286540][ T9586] RIP: 0033:0x7f3b225749fc [ 331.290996][ T9586] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 331.310638][ T9586] RSP: 002b:00007f3b232ee040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 331.319086][ T9586] RAX: ffffffffffffffda RBX: 00007f3b22706110 RCX: 00007f3b225749fc [ 331.327081][ T9586] RDX: 000000000000000f RSI: 00007f3b232ee0b0 RDI: 000000000000000a [ 331.335102][ T9586] RBP: 00007f3b232ee0a0 R08: 0000000000000000 R09: 0000000000000000 [ 331.343095][ T9586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.351090][ T9586] R13: 000000000000006e R14: 00007f3b22706110 R15: 00007fff336a8da8 [ 331.359108][ T9586] [ 331.607015][ T9588] veth0_vlan: entered allmulticast mode [ 331.734996][ T9589] veth0_vlan: left promiscuous mode [ 331.744707][ T9589] veth0_vlan: left allmulticast mode [ 331.756883][ T9589] veth0_vlan: entered promiscuous mode [ 331.942807][ T9597] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1406'. [ 331.987655][ T4494] Bluetooth: hci9: unexpected event 0x08 length: 15 > 4 [ 331.992826][ T9597] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1406'. [ 332.030770][ T9597] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 332.348814][ T9612] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1412'. [ 332.358391][ T9612] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 333.054858][ T4494] Bluetooth: hci7: unexpected event 0x06 length: 15 > 3 [ 333.174545][ T4494] Bluetooth: hci6: unexpected event 0x08 length: 15 > 4 [ 333.308721][ T9639] Driver unsupported XDP return value 0 on prog (id 1067) dev N/A, expect packet loss! [ 333.803439][ T4494] Bluetooth: hci9: unexpected event 0x08 length: 15 > 4 [ 334.621003][ T9657] netlink: 105108 bytes leftover after parsing attributes in process `syz.0.1430'. [ 334.674472][ T9657] validate_nla: 5 callbacks suppressed [ 334.675444][ T9657] netlink: 'syz.0.1430': attribute type 1 has an invalid length. [ 334.711913][ T9657] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1430'. [ 334.834828][ T4494] Bluetooth: hci9: unexpected event 0x06 length: 15 > 3 [ 334.956757][ T4494] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 335.010469][ T4494] Bluetooth: hci6: unexpected event 0x08 length: 15 > 4 [ 335.115283][ T9682] netlink: 'syz.0.1441': attribute type 39 has an invalid length. [ 335.134262][ T9682] netlink: 'syz.0.1441': attribute type 4 has an invalid length. [ 335.142516][ T9682] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1441'. [ 335.152392][ T9682] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 335.253607][ T9683] netlink: 'syz.3.1440': attribute type 10 has an invalid length. [ 335.481226][ T4494] Bluetooth: hci7: unexpected event 0x08 length: 15 > 4 [ 335.542187][ T9694] netlink: 'syz.3.1444': attribute type 39 has an invalid length. [ 335.581544][ T9694] netlink: 'syz.3.1444': attribute type 4 has an invalid length. [ 335.607644][ T9694] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1444'. [ 335.624718][ T9694] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 335.849380][ T4494] Bluetooth: hci6: unexpected event 0x06 length: 15 > 3 [ 335.916612][ T9698] netlink: 105108 bytes leftover after parsing attributes in process `syz.4.1446'. [ 335.941899][ T9698] netlink: 'syz.4.1446': attribute type 1 has an invalid length. [ 335.950103][ T9698] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1446'. [ 336.012989][ T4494] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 336.163196][ T9709] netlink: 'syz.3.1450': attribute type 1 has an invalid length. [ 336.213978][ T9709] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.1450'. [ 336.252084][ T4494] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 336.347317][ T9721] netlink: 'syz.4.1454': attribute type 39 has an invalid length. [ 336.489829][ T4494] Bluetooth: hci8: unexpected event 0x08 length: 15 > 4 [ 336.567019][ T9727] netlink: 'syz.1.1456': attribute type 10 has an invalid length. [ 336.589032][ T9727] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1456'. [ 336.964522][ T4494] Bluetooth: hci7: unknown advertising packet type: 0x13 [ 337.009267][ T9739] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1458'. [ 337.514519][ T4494] Bluetooth: hci9: unexpected event 0x06 length: 15 > 3 [ 339.012740][ T9781] netlink: 134308 bytes leftover after parsing attributes in process `syz.3.1473'. [ 339.079196][ T9781] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 339.111634][ T9781] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 339.216607][ T4494] bt_warn_ratelimited: 1 callbacks suppressed [ 339.216628][ T4494] Bluetooth: hci9: unexpected event 0x06 length: 15 > 3 [ 339.875328][ T9808] validate_nla: 7 callbacks suppressed [ 339.875375][ T9808] netlink: 'syz.4.1485': attribute type 10 has an invalid length. [ 340.472366][ T9823] netlink: 'syz.4.1489': attribute type 1 has an invalid length. [ 340.480447][ T9823] __nla_validate_parse: 3 callbacks suppressed [ 340.480502][ T9823] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.1489'. [ 340.519219][ T9830] netlink: 'syz.0.1490': attribute type 10 has an invalid length. [ 340.565092][ T9830] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1490'. [ 341.277201][ T9833] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1493'. [ 341.301295][ T9844] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 341.496032][ T9856] netlink: 'syz.2.1500': attribute type 10 has an invalid length. [ 341.953698][ T4494] Bluetooth: hci6: command 0x0406 tx timeout [ 342.320215][ T9867] netlink: 'syz.1.1505': attribute type 1 has an invalid length. [ 342.366001][ T9867] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.1505'. [ 342.411257][ T9869] netlink: 105108 bytes leftover after parsing attributes in process `syz.4.1506'. [ 342.423018][ T9869] netlink: 'syz.4.1506': attribute type 1 has an invalid length. [ 342.431015][ T9869] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1506'. [ 342.732463][ T9889] netlink: 'syz.2.1512': attribute type 29 has an invalid length. [ 342.785901][ T9889] netlink: 'syz.2.1512': attribute type 29 has an invalid length. [ 342.820281][ T9884] netlink: 'syz.4.1511': attribute type 1 has an invalid length. [ 342.849502][ T9895] netlink: 'syz.1.1514': attribute type 4 has an invalid length. [ 342.872675][ T9895] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1514'. [ 342.889864][ T9895] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1514'. [ 342.898524][ T9884] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.1511'. [ 342.909597][ T9895] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 342.947622][ T9891] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 343.719415][ T9909] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.1520'. [ 344.405608][ T9918] mac80211_hwsim hwsim23 wlan1: entered allmulticast mode [ 344.418907][ T9930] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 344.581191][ T5110] Bluetooth: hci9: unexpected event 0x08 length: 15 > 4 [ 344.853409][ T9938] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 346.359773][ T9958] validate_nla: 5 callbacks suppressed [ 346.359800][ T9958] netlink: 'syz.1.1536': attribute type 1 has an invalid length. [ 346.404552][ T9958] __nla_validate_parse: 5 callbacks suppressed [ 346.404580][ T9958] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.1536'. [ 347.147171][ T9977] netlink: 'syz.3.1542': attribute type 10 has an invalid length. [ 347.175200][ T9977] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1542'. [ 347.249986][ T9982] netlink: 'syz.4.1544': attribute type 10 has an invalid length. [ 347.299795][ T9985] netlink: 'syz.1.1543': attribute type 4 has an invalid length. [ 347.307676][ T9985] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1543'. [ 347.317485][ T9985] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1543'. [ 347.326989][ T9985] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 347.755824][ T9993] netlink: 'syz.0.1548': attribute type 39 has an invalid length. [ 347.780080][ T9993] netlink: 'syz.0.1548': attribute type 4 has an invalid length. [ 347.797922][ T9993] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1548'. [ 347.809960][ T9993] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 347.858248][ T9992] netlink: 'syz.1.1549': attribute type 39 has an invalid length. [ 347.869454][ T9992] netlink: 'syz.1.1549': attribute type 4 has an invalid length. [ 347.893039][ T9992] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1549'. [ 348.214281][T10001] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1551'. [ 348.334965][ T9995] netlink: 'syz.4.1550': attribute type 1 has an invalid length. [ 348.358282][ T9995] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.1550'. [ 348.370995][ T9992] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 348.846913][T10008] netlink: 'syz.3.1553': attribute type 1 has an invalid length. [ 348.856134][T10008] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.1553'. [ 348.874249][ T9992] syz.1.1549 (9992) used greatest stack depth: 18912 bytes left [ 348.976487][T10003] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1552'. [ 349.235037][T10026] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 349.813167][T10035] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 350.254052][T10047] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 351.001757][T10044] hsr_slave_0: left promiscuous mode [ 351.031478][T10044] hsr_slave_1: left promiscuous mode [ 351.120435][T10054] FAULT_INJECTION: forcing a failure. [ 351.120435][T10054] name failslab, interval 1, probability 0, space 0, times 0 [ 351.136432][T10054] CPU: 0 PID: 10054 Comm: syz.4.1569 Not tainted 6.10.0-syzkaller-04485-gfa5ef655615a #0 [ 351.146297][T10054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 351.156388][T10054] Call Trace: [ 351.159695][T10054] [ 351.162652][T10054] dump_stack_lvl+0x241/0x360 [ 351.167378][T10054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.172613][T10054] ? __pfx__printk+0x10/0x10 [ 351.177251][T10054] ? __ipv6_dev_mc_inc+0x10d/0xa90 [ 351.182411][T10054] should_fail_ex+0x3b0/0x4e0 [ 351.187097][T10054] ? __ipv6_dev_mc_inc+0x426/0xa90 [ 351.192229][T10054] should_failslab+0x9/0x20 [ 351.196760][T10054] kmalloc_trace_noprof+0x6c/0x2c0 [ 351.201894][T10054] __ipv6_dev_mc_inc+0x426/0xa90 [ 351.206859][T10054] __ipv6_sock_mc_join+0x557/0x7e0 [ 351.211996][T10054] do_ipv6_setsockopt+0x239c/0x3630 [ 351.217213][T10054] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 351.222789][T10054] ? __pfx___might_resched+0x10/0x10 [ 351.228083][T10054] ? perf_trace_lock+0x136/0x490 [ 351.233136][T10054] ? __lock_acquire+0x1346/0x1fd0 [ 351.238215][T10054] ? aa_sk_perm+0x967/0xab0 [ 351.242745][T10054] ? __pfx_aa_sk_perm+0x10/0x10 [ 351.247622][T10054] ? __pfx_lock_acquire+0x10/0x10 [ 351.252675][T10054] ipv6_setsockopt+0x5c/0x1a0 [ 351.257378][T10054] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 351.263319][T10054] do_sock_setsockopt+0x3af/0x720 [ 351.268406][T10054] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 351.273965][T10054] ? __fget_files+0x29/0x470 [ 351.278652][T10054] ? __fget_files+0x3f6/0x470 [ 351.283354][T10054] __sys_setsockopt+0x1ae/0x250 [ 351.288228][T10054] __x64_sys_setsockopt+0xb5/0xd0 [ 351.293275][T10054] do_syscall_64+0xf3/0x230 [ 351.297791][T10054] ? clear_bhb_loop+0x35/0x90 [ 351.302480][T10054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.308378][T10054] RIP: 0033:0x7f9a03175f19 [ 351.312805][T10054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.332434][T10054] RSP: 002b:00007f9a03eef048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 351.340872][T10054] RAX: ffffffffffffffda RBX: 00007f9a03306038 RCX: 00007f9a03175f19 [ 351.348860][T10054] RDX: 0000000000000014 RSI: 0000000000000029 RDI: 0000000000000004 [ 351.356854][T10054] RBP: 00007f9a03eef0a0 R08: 0000000000000120 R09: 0000000000000000 [ 351.364843][T10054] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 351.372824][T10054] R13: 000000000000006e R14: 00007f9a03306038 R15: 00007ffdf7b5a708 [ 351.380822][T10054] [ 351.540086][T10058] __nla_validate_parse: 7 callbacks suppressed [ 351.540112][T10058] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1571'. [ 351.801982][T10070] validate_nla: 8 callbacks suppressed [ 351.802004][T10070] netlink: 'syz.2.1573': attribute type 10 has an invalid length. [ 351.832897][T10070] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1573'. [ 352.190177][T10072] netlink: 'syz.3.1576': attribute type 39 has an invalid length. [ 352.309762][T10076] netlink: 'syz.4.1577': attribute type 1 has an invalid length. [ 352.331537][T10076] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.1577'. [ 352.502935][T10087] netlink: 'syz.0.1579': attribute type 6 has an invalid length. [ 352.531577][T10087] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1579'. [ 352.641247][T10091] netlink: 'syz.1.1583': attribute type 10 has an invalid length. [ 352.701513][T10091] hsr_slave_0: left promiscuous mode [ 352.734917][T10091] hsr_slave_1: left promiscuous mode [ 353.000255][T10095] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1585'. [ 353.042659][T10094] netlink: 'syz.3.1584': attribute type 29 has an invalid length. [ 353.072158][T10102] netlink: 'syz.3.1584': attribute type 29 has an invalid length. [ 353.122373][T10104] netlink: 'syz.3.1584': attribute type 29 has an invalid length. [ 353.616778][T10115] netlink: 105108 bytes leftover after parsing attributes in process `syz.2.1592'. [ 353.627868][T10115] netlink: 'syz.2.1592': attribute type 1 has an invalid length. [ 353.638803][T10115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1592'. [ 353.650730][T10107] syzkaller0: entered promiscuous mode [ 353.650768][T10107] syzkaller0: entered allmulticast mode [ 353.808105][T10117] netlink: 'syz.4.1593': attribute type 1 has an invalid length. [ 353.854481][T10117] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.1593'. [ 354.280813][T10135] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.1601'. [ 355.573044][T10122] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1596'. [ 355.582713][T10122] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 356.236304][T10165] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 356.672384][ T5110] Bluetooth: hci7: unexpected event 0x06 length: 15 > 3 [ 357.080733][T10188] validate_nla: 7 callbacks suppressed [ 357.080896][T10188] netlink: 'syz.3.1624': attribute type 29 has an invalid length. [ 357.130601][T10192] netlink: 'syz.1.1626': attribute type 4 has an invalid length. [ 357.147586][T10192] __nla_validate_parse: 5 callbacks suppressed [ 357.147604][T10192] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1626'. [ 357.176270][T10192] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1626'. [ 357.193057][T10192] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 357.211196][T10188] netlink: 'syz.3.1624': attribute type 29 has an invalid length. [ 357.236749][T10198] netlink: 'syz.3.1624': attribute type 29 has an invalid length. [ 357.280168][T10199] IPv6: NLM_F_CREATE should be specified when creating new route [ 357.311515][T10199] tap0: tun_chr_ioctl cmd 2147767507 [ 357.742666][T10209] FAULT_INJECTION: forcing a failure. [ 357.742666][T10209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.758483][T10209] CPU: 0 PID: 10209 Comm: syz.3.1632 Not tainted 6.10.0-syzkaller-04485-gfa5ef655615a #0 [ 357.768345][T10209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 357.778437][T10209] Call Trace: [ 357.781749][T10209] [ 357.784720][T10209] dump_stack_lvl+0x241/0x360 [ 357.789438][T10209] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.794658][T10209] ? __pfx__printk+0x10/0x10 [ 357.799263][T10209] ? snprintf+0xda/0x120 [ 357.803522][T10209] should_fail_ex+0x3b0/0x4e0 [ 357.808214][T10209] _copy_to_user+0x2f/0xb0 [ 357.812674][T10209] simple_read_from_buffer+0xca/0x150 [ 357.818068][T10209] proc_fail_nth_read+0x1e9/0x250 [ 357.823218][T10209] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 357.828795][T10209] ? rw_verify_area+0x520/0x6b0 [ 357.833663][T10209] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 357.839224][T10209] vfs_read+0x204/0xbc0 [ 357.843408][T10209] ? __pfx_lock_release+0x10/0x10 [ 357.848444][T10209] ? do_sock_setsockopt+0x3e2/0x720 [ 357.853661][T10209] ? __pfx_vfs_read+0x10/0x10 [ 357.858367][T10209] ? __fget_files+0x29/0x470 [ 357.862970][T10209] ? __fget_files+0x3f6/0x470 [ 357.867665][T10209] ksys_read+0x1a0/0x2c0 [ 357.871939][T10209] ? __pfx_ksys_read+0x10/0x10 [ 357.876718][T10209] ? do_syscall_64+0x100/0x230 [ 357.881493][T10209] ? do_syscall_64+0xb6/0x230 [ 357.886180][T10209] do_syscall_64+0xf3/0x230 [ 357.890691][T10209] ? clear_bhb_loop+0x35/0x90 [ 357.895389][T10209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.901286][T10209] RIP: 0033:0x7f3b225749fc [ 357.905707][T10209] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 357.925415][T10209] RSP: 002b:00007f3b2330f040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 357.933842][T10209] RAX: ffffffffffffffda RBX: 00007f3b22706038 RCX: 00007f3b225749fc [ 357.941819][T10209] RDX: 000000000000000f RSI: 00007f3b2330f0b0 RDI: 0000000000000005 [ 357.949790][T10209] RBP: 00007f3b2330f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 357.957760][T10209] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.965734][T10209] R13: 000000000000006e R14: 00007f3b22706038 R15: 00007fff336a8da8 [ 357.973812][T10209] [ 358.041382][ T5110] Bluetooth: hci7: unexpected event 0x06 length: 15 > 3 [ 358.860987][T10240] netlink: 'syz.4.1641': attribute type 4 has an invalid length. [ 358.883896][T10240] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1641'. [ 358.915993][T10240] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1641'. [ 358.935368][T10240] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 358.956720][T10241] netlink: 'syz.2.1642': attribute type 29 has an invalid length. [ 358.982697][T10242] netlink: 'syz.2.1642': attribute type 29 has an invalid length. [ 359.003858][T10241] netlink: 'syz.2.1642': attribute type 29 has an invalid length. [ 359.382819][T10253] netlink: 'syz.3.1644': attribute type 29 has an invalid length. [ 359.425093][T10253] netlink: 'syz.3.1644': attribute type 29 has an invalid length. [ 359.744890][T10266] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1653'. [ 360.131193][T10273] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1652'. [ 360.361765][T10277] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1656'. [ 360.391448][T10277] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1656'. [ 360.400375][T10277] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 360.597160][ T5110] Bluetooth: hci6: unexpected event 0x06 length: 15 > 3 [ 360.700615][T10294] FAULT_INJECTION: forcing a failure. [ 360.700615][T10294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.728847][T10294] CPU: 1 PID: 10294 Comm: syz.3.1664 Not tainted 6.10.0-syzkaller-04485-gfa5ef655615a #0 [ 360.738718][T10294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 360.748802][T10294] Call Trace: [ 360.752104][T10294] [ 360.755057][T10294] dump_stack_lvl+0x241/0x360 [ 360.759767][T10294] ? __pfx_dump_stack_lvl+0x10/0x10 [ 360.764983][T10294] ? __pfx__printk+0x10/0x10 [ 360.769595][T10294] ? snprintf+0xda/0x120 [ 360.773865][T10294] should_fail_ex+0x3b0/0x4e0 [ 360.778580][T10294] _copy_to_user+0x2f/0xb0 [ 360.783032][T10294] simple_read_from_buffer+0xca/0x150 [ 360.788437][T10294] proc_fail_nth_read+0x1e9/0x250 [ 360.793494][T10294] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 360.799067][T10294] ? rw_verify_area+0x520/0x6b0 [ 360.803944][T10294] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 360.809511][T10294] vfs_read+0x204/0xbc0 [ 360.813688][T10294] ? __pfx_lock_release+0x10/0x10 [ 360.818739][T10294] ? __pfx_vfs_read+0x10/0x10 [ 360.823446][T10294] ? bpf_prog_test_run+0x352/0x3b0 [ 360.828586][T10294] ? __fget_files+0x29/0x470 [ 360.833198][T10294] ? __fget_files+0x3f6/0x470 [ 360.837907][T10294] ksys_read+0x1a0/0x2c0 [ 360.842184][T10294] ? __pfx_ksys_read+0x10/0x10 [ 360.846969][T10294] ? do_syscall_64+0x100/0x230 [ 360.851754][T10294] ? do_syscall_64+0xb6/0x230 [ 360.856454][T10294] do_syscall_64+0xf3/0x230 [ 360.860983][T10294] ? clear_bhb_loop+0x35/0x90 [ 360.865693][T10294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.871611][T10294] RIP: 0033:0x7f3b225749fc [ 360.876096][T10294] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 360.895742][T10294] RSP: 002b:00007f3b23330040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 360.904175][T10294] RAX: ffffffffffffffda RBX: 00007f3b22705f60 RCX: 00007f3b225749fc [ 360.912160][T10294] RDX: 000000000000000f RSI: 00007f3b233300b0 RDI: 0000000000000005 [ 360.920146][T10294] RBP: 00007f3b233300a0 R08: 0000000000000000 R09: 0000000000000000 [ 360.928157][T10294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.936154][T10294] R13: 000000000000000b R14: 00007f3b22705f60 R15: 00007fff336a8da8 [ 360.944170][T10294] [ 361.465297][T10315] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1672'. [ 361.475643][T10315] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1672'. [ 361.485066][T10315] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 361.646396][ T5110] Bluetooth: hci9: unexpected event 0x06 length: 15 > 3 [ 362.083236][T10336] validate_nla: 15 callbacks suppressed [ 362.083260][T10336] netlink: 'syz.0.1678': attribute type 29 has an invalid length. [ 362.202662][T10337] netlink: 'syz.0.1678': attribute type 29 has an invalid length. [ 362.947729][T10352] netlink: 'syz.2.1685': attribute type 4 has an invalid length. [ 362.969865][T10352] __nla_validate_parse: 2 callbacks suppressed [ 362.969884][T10352] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1685'. [ 362.995272][T10352] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1685'. [ 363.021620][T10352] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 363.061574][ T5110] Bluetooth: hci8: unexpected event 0x06 length: 15 > 3 [ 363.190524][T10349] delete_channel: no stack [ 363.317420][T10364] netlink: 'syz.2.1688': attribute type 10 has an invalid length. [ 363.331695][T10364] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1688'. [ 363.574335][T10375] netlink: 'syz.3.1690': attribute type 12 has an invalid length. [ 363.601489][T10375] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.1690'. [ 363.631058][T10377] syzkaller0: entered promiscuous mode [ 363.653558][T10377] syzkaller0: entered allmulticast mode [ 363.685270][T10374] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 363.880981][T10390] netlink: 'syz.2.1693': attribute type 29 has an invalid length. [ 363.903828][T10389] netlink: 'syz.2.1693': attribute type 29 has an invalid length. [ 364.113754][T10401] netlink: 'syz.0.1698': attribute type 4 has an invalid length. [ 364.149835][T10401] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1698'. [ 364.191533][T10401] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1698'. [ 364.219841][T10404] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1696'. [ 364.223649][T10401] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 364.442186][ T5110] Bluetooth: hci9: unexpected event 0x06 length: 15 > 3 [ 364.620795][ T5110] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 365.000397][ T5110] Bluetooth: hci8: unexpected event 0x08 length: 15 > 4 [ 365.106115][T10417] delete_channel: no stack [ 365.355126][T10437] netlink: 'syz.3.1709': attribute type 29 has an invalid length. [ 365.388720][T10437] netlink: 'syz.3.1709': attribute type 29 has an invalid length. [ 365.442076][T10440] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1712'. [ 365.475073][T10440] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1712'. [ 365.508429][T10440] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 365.516801][ T5110] Bluetooth: hci6: unexpected event 0x06 length: 15 > 3 [ 365.639211][ T5110] Bluetooth: hci7: unexpected event 0x06 length: 15 > 3 [ 365.749541][ T5110] Bluetooth: hci6: unexpected event 0x08 length: 15 > 4 [ 366.148008][ T5110] Bluetooth: hci9: unexpected event for opcode 0x0000 [ 366.520649][T10487] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1728'. [ 366.546682][T10487] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 366.677675][ T5110] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 366.725545][ T5110] Bluetooth: hci8: unexpected event 0x08 length: 15 > 4 [ 366.936886][T10504] FAULT_INJECTION: forcing a failure. [ 366.936886][T10504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.041628][T10504] CPU: 1 PID: 10504 Comm: syz.4.1735 Not tainted 6.10.0-syzkaller-04485-gfa5ef655615a #0 [ 367.051504][T10504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 367.061588][T10504] Call Trace: [ 367.064891][T10504] [ 367.067854][T10504] dump_stack_lvl+0x241/0x360 [ 367.072584][T10504] ? __pfx_dump_stack_lvl+0x10/0x10 [ 367.077841][T10504] ? __pfx__printk+0x10/0x10 [ 367.082467][T10504] ? __pfx_lock_release+0x10/0x10 [ 367.087540][T10504] should_fail_ex+0x3b0/0x4e0 [ 367.092258][T10504] _copy_from_user+0x2f/0xe0 [ 367.096891][T10504] generic_map_update_batch+0x567/0x900 [ 367.102503][T10504] ? __pfx_generic_map_update_batch+0x10/0x10 [ 367.108623][T10504] ? __pfx_generic_map_update_batch+0x10/0x10 [ 367.114732][T10504] bpf_map_do_batch+0x3e0/0x690 [ 367.119619][T10504] __sys_bpf+0x377/0x810 [ 367.123893][T10504] ? __pfx___sys_bpf+0x10/0x10 [ 367.128688][T10504] ? ktime_get+0x9b/0xb0 [ 367.132983][T10504] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 367.139004][T10504] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 367.145368][T10504] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 367.151721][T10504] ? __irq_exit_rcu+0x100/0x1c0 [ 367.156621][T10504] __x64_sys_bpf+0x7c/0x90 [ 367.161079][T10504] do_syscall_64+0xf3/0x230 [ 367.165616][T10504] ? clear_bhb_loop+0x35/0x90 [ 367.170326][T10504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.176248][T10504] RIP: 0033:0x7f9a03175f19 [ 367.180690][T10504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.200321][T10504] RSP: 002b:00007f9a03f10048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 367.208761][T10504] RAX: ffffffffffffffda RBX: 00007f9a03305f60 RCX: 00007f9a03175f19 [ 367.216743][T10504] RDX: 0000000000000038 RSI: 0000000020000380 RDI: 000000000000001a [ 367.224729][T10504] RBP: 00007f9a03f100a0 R08: 0000000000000000 R09: 0000000000000000 [ 367.232725][T10504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.240718][T10504] R13: 000000000000004d R14: 00007f9a03305f60 R15: 00007ffdf7b5a708 [ 367.248745][T10504] [ 367.339574][T10509] validate_nla: 5 callbacks suppressed [ 367.339615][T10509] netlink: 'syz.2.1740': attribute type 39 has an invalid length. [ 367.363724][T10509] netlink: 'syz.2.1740': attribute type 4 has an invalid length. [ 367.387577][T10509] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 367.621065][T10528] netlink: 'syz.1.1743': attribute type 29 has an invalid length. [ 367.653302][T10527] netlink: 'syz.3.1744': attribute type 4 has an invalid length. [ 367.681994][T10527] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 367.718713][T10528] netlink: 'syz.1.1743': attribute type 29 has an invalid length. [ 367.744677][ T5110] Bluetooth: hci7: unexpected event 0x06 length: 15 > 3 [ 368.440655][T10553] syzkaller0: entered promiscuous mode [ 368.474849][T10553] syzkaller0: entered allmulticast mode [ 368.495289][ C1] [ 368.497650][ C1] ================================ [ 368.502748][ C1] WARNING: inconsistent lock state [ 368.507842][ C1] 6.10.0-syzkaller-04485-gfa5ef655615a #0 Not tainted [ 368.514609][ C1] -------------------------------- [ 368.519724][ C1] inconsistent {HARDIRQ-ON-W} -> {IN-HARDIRQ-W} usage. [ 368.526575][ C1] syz.1.1754/10558 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 368.533006][ C1] ffff8880b9538798 (lock#10){?.+.}-{2:2}, at: __mmap_lock_do_trace_acquire_returned+0x8f/0x630 [ 368.543384][ C1] {HARDIRQ-ON-W} state was registered at: [ 368.549104][ C1] lock_acquire+0x1ed/0x550 [ 368.553695][ C1] __mmap_lock_do_trace_start_locking+0x9c/0x620 [ 368.560113][ C1] exit_mmap+0xb13/0xc80 [ 368.564443][ C1] __mmput+0x115/0x390 [ 368.568600][ C1] exit_mm+0x220/0x310 [ 368.572760][ C1] do_exit+0x9b2/0x27f0 [ 368.577002][ C1] do_group_exit+0x207/0x2c0 [ 368.581679][ C1] __x64_sys_exit_group+0x3f/0x40 [ 368.586793][ C1] x64_sys_call+0x2634/0x2640 [ 368.591556][ C1] do_syscall_64+0xf3/0x230 [ 368.596160][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.602141][ C1] irq event stamp: 10 [ 368.606138][ C1] hardirqs last enabled at (9): [] exc_page_fault+0x113/0x8c0 [ 368.615253][ C1] hardirqs last disabled at (10): [] sysvec_call_function_single+0xe/0xc0 [ 368.625347][ C1] softirqs last enabled at (0): [] copy_process+0xa03/0x3dc0 [ 368.634375][ C1] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 368.641484][ C1] [ 368.641484][ C1] other info that might help us debug this: [ 368.649560][ C1] Possible unsafe locking scenario: [ 368.649560][ C1] [ 368.657002][ C1] CPU0 [ 368.660275][ C1] ---- [ 368.663563][ C1] lock(lock#10); [ 368.667324][ C1] [ 368.670768][ C1] lock(lock#10); [ 368.674663][ C1] [ 368.674663][ C1] *** DEADLOCK *** [ 368.674663][ C1] [ 368.682807][ C1] 8 locks held by syz.1.1754/10558: [ 368.687999][ C1] #0: ffff8880222b0d18 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x2f9/0x6e0 [ 368.698275][ C1] #1: ffffffff8e335fe0 (rcu_read_lock){....}-{1:2}, at: handle_pte_fault+0x222c/0x7090 [ 368.708040][ C1] #2: ffffffff8e335fe0 (rcu_read_lock){....}-{1:2}, at: filemap_map_pages+0x24f/0x1e70 [ 368.717903][ C1] #3: ffffffff8e335fe0 (rcu_read_lock){....}-{1:2}, at: __pte_offset_map+0x82/0x380 [ 368.727396][ C1] #4: ffff88801190f678 (ptlock_ptr(ptdesc)#2){+.+.}-{2:2}, at: __pte_offset_map_lock+0x1ba/0x300 [ 368.738104][ C1] #5: ffffffff8e335f60 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xf6/0x450 [ 368.747524][ C1] #6: ffffffff8e335fe0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1fc/0x540 [ 368.756924][ C1] #7: ffff8880615ce098 (&mm->mmap_lock){++++}-{3:3}, at: stack_map_get_build_id_offset+0x237/0x9d0 [ 368.767725][ C1] [ 368.767725][ C1] stack backtrace: [ 368.773608][ C1] CPU: 1 PID: 10558 Comm: syz.1.1754 Not tainted 6.10.0-syzkaller-04485-gfa5ef655615a #0 [ 368.783404][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 368.793537][ C1] Call Trace: [ 368.796811][ C1] [ 368.799655][ C1] dump_stack_lvl+0x241/0x360 [ 368.804337][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.809536][ C1] ? print_usage_bug+0x61a/0x8a0 [ 368.814479][ C1] ? is_bpf_text_address+0x285/0x2a0 [ 368.819766][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 368.824965][ C1] valid_state+0x13a/0x1c0 [ 368.829382][ C1] mark_lock_irq+0xbb/0xc20 [ 368.833884][ C1] ? arch_stack_walk+0x16d/0x1b0 [ 368.838820][ C1] ? __pfx_mark_lock_irq+0x10/0x10 [ 368.843936][ C1] ? stack_trace_save+0x118/0x1d0 [ 368.848964][ C1] ? __pfx_validate_chain+0x10/0x10 [ 368.854163][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 368.859527][ C1] ? validate_chain+0x11e/0x5900 [ 368.864557][ C1] ? lockdep_lock+0x123/0x2b0 [ 368.869256][ C1] ? save_trace+0x5a/0xb40 [ 368.873678][ C1] mark_lock+0x223/0x350 [ 368.877925][ C1] __lock_acquire+0xb8e/0x1fd0 [ 368.882695][ C1] lock_acquire+0x1ed/0x550 [ 368.887195][ C1] ? __mmap_lock_do_trace_acquire_returned+0x8f/0x630 [ 368.893963][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 368.898989][ C1] ? down_read_trylock+0x24f/0x3c0 [ 368.904103][ C1] ? stack_map_get_build_id_offset+0x237/0x9d0 [ 368.910259][ C1] ? __mmap_lock_do_trace_acquire_returned+0x8f/0x630 [ 368.917107][ C1] __mmap_lock_do_trace_acquire_returned+0xa8/0x630 [ 368.923693][ C1] ? __mmap_lock_do_trace_acquire_returned+0x8f/0x630 [ 368.930459][ C1] stack_map_get_build_id_offset+0x9af/0x9d0 [ 368.936529][ C1] ? __pfx_stack_map_get_build_id_offset+0x10/0x10 [ 368.943040][ C1] __bpf_get_stack+0x4ad/0x5a0 [ 368.947811][ C1] ? __pfx___bpf_get_stack+0x10/0x10 [ 368.953100][ C1] ? __pfx_lock_release+0x10/0x10 [ 368.958139][ C1] ? __pfx___cant_migrate+0x10/0x10 [ 368.963358][ C1] bpf_get_stack_raw_tp+0x1a3/0x240 [ 368.968585][ C1] ? bpf_trace_run2+0x1fc/0x540 [ 368.973433][ C1] bpf_prog_ec3b2eefa702d8d3+0x42/0x46 [ 368.978889][ C1] bpf_trace_run2+0x2ec/0x540 [ 368.983624][ C1] ? __hrtimer_run_queues+0xcdc/0xd50 [ 368.989008][ C1] ? __pfx_bpf_trace_run2+0x10/0x10 [ 368.994205][ C1] ? seqcount_lockdep_reader_access+0x1c1/0x220 [ 369.000445][ C1] ? __pfx_native_flush_tlb_one_user+0x10/0x10 [ 369.006609][ C1] trace_tlb_flush+0x118/0x140 [ 369.011376][ C1] flush_tlb_func+0x4e7/0x630 [ 369.016147][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 369.021346][ C1] ? sched_clock_cpu+0x76/0x490 [ 369.026199][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 369.031400][ C1] __flush_smp_call_function_queue+0x3fc/0x1690 [ 369.037653][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 369.042856][ C1] __sysvec_call_function_single+0xb8/0x430 [ 369.048746][ C1] sysvec_call_function_single+0x9e/0xc0 [ 369.054382][ C1] [ 369.057302][ C1] [ 369.060222][ C1] asm_sysvec_call_function_single+0x1a/0x20 [ 369.066202][ C1] RIP: 0010:rcu_is_watching+0x26/0xb0 [ 369.071578][ C1] Code: 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 65 ff 05 28 5b 87 7e e8 fb bb 0f 0a 89 c3 83 f8 08 73 7a 49 bf 00 00 00 00 00 fc ff df <4c> 8d 34 dd 40 3a dd 8d 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 [ 369.091187][ C1] RSP: 0000:ffffc90003f17500 EFLAGS: 00000297 [ 369.097255][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffff888022930000 [ 369.105221][ C1] RDX: ffff888022930000 RSI: ffffffff8c204580 RDI: ffffffff8c204540 [ 369.113188][ C1] RBP: 0000000000000001 R08: ffffffff820879e2 R09: 1ffffffff25f9eb8 [ 369.121183][ C1] R10: dffffc0000000000 R11: fffffbfff25f9eb9 R12: dffffc0000000000 [ 369.129150][ C1] R13: 00000000000113ca R14: ffffffff82087766 R15: dffffc0000000000 [ 369.137122][ C1] ? pfn_valid+0xf6/0x450 [ 369.141455][ C1] ? pfn_valid+0x372/0x450 [ 369.145874][ C1] ? pfn_valid+0xf6/0x450 [ 369.150196][ C1] pfn_valid+0x37b/0x450 [ 369.154440][ C1] page_table_check_set+0x25/0x550 [ 369.159555][ C1] __page_table_check_ptes_set+0x30f/0x410 [ 369.165362][ C1] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 369.171684][ C1] ? folio_add_file_rmap_ptes+0x337/0x560 [ 369.177413][ C1] set_pte_range+0x71f/0x750 [ 369.182005][ C1] ? __pfx_set_pte_range+0x10/0x10 [ 369.187108][ C1] ? next_uptodate_folio+0x986/0xa40 [ 369.192413][ C1] filemap_map_pages+0x117b/0x1e70 [ 369.197521][ C1] ? filemap_map_pages+0x24f/0x1e70 [ 369.202750][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 369.208228][ C1] ? handle_pte_fault+0x348/0x7090 [ 369.213338][ C1] ? __pfx_lock_release+0x10/0x10 [ 369.218354][ C1] ? pte_offset_map_nolock+0x137/0x1f0 [ 369.223815][ C1] ? validate_chain+0x11e/0x5900 [ 369.228752][ C1] ? handle_pte_fault+0x222c/0x7090 [ 369.233952][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 369.239408][ C1] ? handle_pte_fault+0x222c/0x7090 [ 369.244609][ C1] handle_pte_fault+0x3b9b/0x7090 [ 369.249637][ C1] ? __pfx_validate_chain+0x10/0x10 [ 369.254841][ C1] ? __pfx_validate_chain+0x10/0x10 [ 369.260040][ C1] ? __pfx_handle_pte_fault+0x10/0x10 [ 369.265411][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 369.270442][ C1] ? reacquire_held_locks+0x3eb/0x690 [ 369.275816][ C1] ? lock_vma_under_rcu+0x2f9/0x6e0 [ 369.281018][ C1] ? __pfx_reacquire_held_locks+0x10/0x10 [ 369.286744][ C1] handle_mm_fault+0x10df/0x1ba0 [ 369.291695][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 369.296973][ C1] ? lock_vma_under_rcu+0x592/0x6e0 [ 369.302188][ C1] ? exc_page_fault+0x113/0x8c0 [ 369.307065][ C1] exc_page_fault+0x459/0x8c0 [ 369.311764][ C1] asm_exc_page_fault+0x26/0x30 [ 369.316618][ C1] RIP: 0033:0x7f1db230c910 [ 369.321036][ C1] Code: Unable to access opcode bytes at 0x7f1db230c8e6. [ 369.328059][ C1] RSP: 002b:00007f1db30a3118 EFLAGS: 00010246 [ 369.334127][ C1] RAX: fffffffffffffeb8 RBX: 00007f1db30a36c0 RCX: 00007f1db23a9ee9 [ 369.342096][ C1] RDX: 00007f1db30a3d78 RSI: 0000000000000058 RDI: 00007f1db30a36c0 [ 369.350062][ C1] RBP: 0000000000000000 R08: 00007f1db30a36c0 R09: 00007ffd4d5cf6a7 [ 369.358027][ C1] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffa8 [ 369.365995][ C1] R13: 000000000000000b R14: 00007ffd4d5cf5c0 R15: 00007ffd4d5cf6a8 [ 369.373970][ C1] [ 370.191496][ T5110] Bluetooth: hci9: Controller not accepting commands anymore: ncmd = 0 [ 370.200965][ T5110] Bluetooth: hci9: Injecting HCI hardware error event [ 370.208524][ T4494] Bluetooth: hci9: hardware error 0x00 [ 372.271392][ T4494] Bluetooth: hci9: Opcode 0x0c03 failed: -110