last executing test programs: 23.262791871s ago: executing program 2 (id=2512): r0 = socket$kcm(0xa, 0x2, 0x88) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10410, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x203}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000230000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x10) getpid() r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b4861ea30df81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca25b3659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf5f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730af36bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d26ce7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652cecbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b204007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000000000000000c87bd5b7cb8c5ae18218963f6d71cfa8b8afb7a4ade932aa3c4701a1c3284cf6b08a4c265dbf4c96cf1ccbcf8f43fd0abf415e581956070f52673a4fa63fb36788bbbcdc0cb1519e8e8fdd9c1463230ce4ccfa63d7069135d9804765a62bd12c2cf388b09c3a0bbd296a4ce6e523145bb6"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1, 0x4, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r6}, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x2, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x49}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0004f678ec630000000066"], 0xd) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x8202) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x3, @local, 0xd}, 0x80, 0x0}, 0x0) 23.022988395s ago: executing program 0 (id=2513): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r0}, &(0x7f0000001780)=0x4, 0x0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x21, &(0x7f0000000ac0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xc5ae447da5e7c058}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x3, 0x4}, {0x1, 0x5}, {0x6}, {0x1, 0x4}, {0xa, 0x3}]}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x4, 0x7}, @var={0x4, 0x0, 0x0, 0xe, 0x5, 0x2}, @float={0xd, 0x0, 0x0, 0x10, 0x4}, @decl_tag={0xb, 0x0, 0x0, 0x11, 0x1, 0x6}]}, {0x0, [0x5f, 0x30]}}, &(0x7f0000001840)=""/4096, 0x8c, 0x1000, 0x0, 0x7, 0x10000, @value=r5}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r4}, 0x10) 22.669392092s ago: executing program 0 (id=2516): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x7a7241, 0x0) close(r2) socket$kcm(0x29, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000000000)={'dummy0\x00', @link_local}) perf_event_open(&(0x7f0000001440)={0x2, 0x80, 0xe2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000000c0)="1400000021000b12d25a805bb98222f90524fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/242, 0xf2}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x2, &(0x7f0000000200)=""/184, 0xb8}, 0x100) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r4, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x0, 0x53}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0xa, 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000380)={'a', ' *:* ', 'w\x00'}, 0x8) r6 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r6, 0x29, 0x39, 0x0, 0xfcd8) 21.545560634s ago: executing program 0 (id=2520): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x820}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_all\x00', 0x275a, 0x0) (async) r2 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r2, 0x10d, 0xa, &(0x7f0000000000)=r1, 0x4) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES16=r3], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f00000001c0)=r4) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xa0}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 19.497318693s ago: executing program 1 (id=2526): socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6a9d5adc, 0x1}, 0x10204, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x2, 0x3, 0x84) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000640)) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r2, &(0x7f00000003c0)={&(0x7f0000000740)={0x2, 0xfffe, @remote}, 0x10, &(0x7f0000000fc0)=[{&(0x7f0000000680)="ae", 0x1}], 0x1}, 0x400c810) write$cgroup_subtree(r1, 0x0, 0xfe33) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000100)='.%.d\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1200000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x4) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0xb) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) socketpair(0x1, 0x6, 0xae, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000280)={'wlan0\x00', @multicast}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18.416907475s ago: executing program 3 (id=2530): socket$kcm(0x2, 0x922000000001, 0x106) r0 = socket$kcm(0xa, 0x2, 0x88) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = socket$kcm(0x11, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x2a979d) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e40)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000580)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x4) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000080)) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 18.347417025s ago: executing program 1 (id=2531): perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x118442}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) socket$kcm(0xa, 0x5, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffff, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000008000000dd00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0000000000f5d13b540000ba19014eff5f64564655182455bc4b3fb21e1b085345916cb03e7f8cfb8734a1e529146ebef67773aee5d66128ee439240bb985d28dc0419c4dee48c065ce03dffe4a297635234d304b1819005c59cd830ef7c", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000001a4270fbcfbc099eb3636a2e6e3f9cb6747345c2764b665ecf541cb953b04117e3bef274e940e50c06894d11a5b61d3bd9cbcffdbcabb43d682b24d19ab7e432b5a092b7f1dd9d2d4347dbf8b343f6580cdbe34a9e2f84bddc00c0b0f5a5beeec42b9e7665d88074b2d71321863ac209c8a98972b53cf684ab8097f920f3b037ea717c0226c2ea06d4b8351f59d27d4f8eef0933ccc2296893930dfe9a9302b30bfb337c8465618bc9068e1f71c2a086557ccb2c4a7ca0ffffffffffffff7f49998f783ddbdb1fd76b63dc1611", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x149, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0xa0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8832, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x19e9b8, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a) 18.344331316s ago: executing program 2 (id=2532): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000160000000000e5d0bc0a9f491c46b4ab1f6a22cd83c6d9e8891e03230dd7d9b580a86d4fc1a8020c5426cc4b81ea8a440ab555e2ec85b265a0064a8cde0205e16645df4b815f722144d068345e112ca1cbd2a93a829d0defd674eb7691dff1f59f999e1e87ef8d1ba3fcb1e6df8bb4c7591305a575a423ec9827c000"/140, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x4, 0x0, 0x0) 18.311867076s ago: executing program 4 (id=2533): socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000160000000000e5d0bc0a9f491c46b4ab1f6a22cd83c6d9e8891e03230dd7d9b580a86d4fc1a8020c5426cc4b81ea8a440ab555e2ec85b265a0064a8cde0205e16645df4b815f722144d068345e112ca1cbd2a93a829d0defd674eb7691dff1f59f999e1e87ef8d1ba3fcb1e6df8bb4c7591305a575a423ec9827c000"/140, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f0000000340)={0x2, 0x0, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f00000003c0)='\f', 0x1}], 0x1}, 0xfffc) 18.266667327s ago: executing program 0 (id=2534): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x819, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) sendmsg$inet(r2, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500924e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000ac0)={0x0, 0x80, 0x6, 0x0, 0xff, 0x3, 0x0, 0x10001, 0x45, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000a80), 0x7}, 0x1068c, 0x4000000000000000, 0x3824a50a, 0x4, 0x8, 0x3, 0x3, 0x0, 0x5, 0x0, 0x401}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000808500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) close(r4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x92301, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x141, 0x4, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc6}, 0x0, 0x4, 0xffffffffffffffff, 0x7d52ccb4e02ee533) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x9, 0x4, 0x1, 0x0, r5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r7, &(0x7f0000000d40), 0x0}, 0x20) 18.265990127s ago: executing program 3 (id=2535): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003c80)="d800000019008111e0020f060d8107040a60000060020000000455a12a00090008000699e3ffffff14000500fe80817806000500000000000074d67f6f9400f7d1d9bbe94fa27108a007a240c77f01896034277ce06bbace8037cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a365ce4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad96267e004dcdf634c1f215ce3bb9ad809d50b69b42a9ecbee5de6ccd44242f4d643f6fd0f26", 0xbd}], 0x1}, 0x40) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r4}, 0x10) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa65, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) r7 = syz_clone(0x8000, &(0x7f0000000a80)="b04d47a826575f48b9a4f81ca5cea252552dfddcae7f2a1b96bd14ab5fdf7456c1b1eae5099c94b5b537954f45349aaca16cf1a56cb8358983ac2ddedb99a64da0da2b7cfced2452e9ceb0575a87545bd5db34512db6fa05c8125dfb432e7b44371a2424110e2764f7ed7f6f4ab9f172b0a36e2df41ee432bd327427bdd78c8b1938e3454ceae5cf663ed0e049861d5cc8101c81eec1f9a3ccd223769c6aa155c4e76fbc08d5cecd0539a458dc9b20b3ccff2874aa4a1647f63fe2c136ee89e2027d15eedd6ed6e0889f21fc8f97631c03f87c4e32adf5874f17ab", 0xdb, &(0x7f0000000040), &(0x7f0000000b80), &(0x7f0000000bc0)="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") syz_open_procfs$namespace(r7, &(0x7f0000000cc0)='ns/pid\x00') perf_event_open(&(0x7f0000000400)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x8004745a, &(0x7f0000000000)) 18.11562048s ago: executing program 4 (id=2536): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r1, 0xb, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, 0x0, 0x4040000) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="af374b8e3657637ebabf19250a6e6962f498c280895ff792cc44009d44a079ff2235f16d3f55b52053cb1547d2d14a2ccadf6dd221939bfce5c3613fbae2934c4334770f828dc80437c00f133a77da933a515e80f449a44b13f1a8418c879aeea0d480a391a6ed27130e1f0108ba83a966ce03d4b14617f9a29e45777d59aa0bfe3a3bde4f22d4df4b19f3c3139930b1ce29ea29d77b5518661610773cdade7c3dbb5ed909508a11a2d0004a", @ANYRES64=r2, @ANYRES8=r1, @ANYRESOCT=r6, @ANYRES32=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000079113000000000008510000002000000850000000500000095000000000000009500a50500cf0000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x0, 0xe, 0x5c, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x2b}, 0x14869, 0x0, 0x0, 0xc, 0x2, 0xffe, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, r3, 0x0) perf_event_open(&(0x7f00000021c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r10 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r10, 0x29, 0x12, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 18.015258332s ago: executing program 1 (id=2537): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a0400", 0x14}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0xa0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8832, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x19e9b8, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a) 17.957428233s ago: executing program 2 (id=2538): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYRES32=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x3, 0x84) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x541b, &(0x7f0000000640)) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r4, &(0x7f00000003c0)={&(0x7f0000000740)={0x2, 0xfffe, @remote}, 0x10, &(0x7f0000000fc0)=[{&(0x7f0000000680)="ae", 0x1}], 0x1}, 0x400c810) write$cgroup_subtree(r3, 0x0, 0xfe33) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000100)='.%.d\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES64], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580), &(0x7f00000004c0), 0x1000, r7}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) 17.856802835s ago: executing program 1 (id=2539): mkdir(&(0x7f0000000040)='./file0\x00', 0x144540f2249c4cee) 17.776188286s ago: executing program 1 (id=2540): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x0, 0x44, 0x0, &(0x7f0000000200)="e460cdfbef2408002900119386dd6a00000000072feb3014cd3ec8a755c1e1380081ffad000030e8d5000000010000001400000500242c106558d320d98a61a90021c9bf", 0x0, 0x400, 0x0, 0x0, 0x0, &(0x7f0000000b80)}, 0x22) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x8, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x8}}, [], {{0x7, 0x1, 0x3, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e27, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x5c8, 0x29, 0x3, "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"}], 0x5c8}, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0xc58}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r6) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r7, 0x58, &(0x7f0000000280)={0x0, 0x0}}, 0x10) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001740)={r8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x5}, {}, {}, {}, {0x85, 0x0, 0x0, 0x83}}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8912, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="050000000c0000004200000040000000c0000000", @ANYRES32=0x1, @ANYRESDEC], 0x50) 17.771263277s ago: executing program 4 (id=2541): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) perf_event_open$cgroup(&(0x7f0000000140)={0x1, 0x80, 0xb1, 0xf, 0x47, 0x8, 0x0, 0x6, 0x12202, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000100), 0x7}, 0x0, 0x81f8, 0x7ff, 0x7, 0xf, 0x5, 0x7, 0x0, 0x7, 0x0, 0x3}, r0, 0x0, r0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000680)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`\x04\x00\x00\x00\x00\x00\x00\x00O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xaf\xcc\xee\x00\x00\x00\x00\x00\x00\x03\xff\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe9\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\'\xad\x01\xf2\x9e\xcc\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_E\x99\xde\xca\x00\x97\xdcQyZ\xdab/\xef{u\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc8?\x87\x95\x8e\r\t\x0er\x92\xe2\t\xc4S\xd4\xd2\x87.&`\x95\'=0\r\xd2n\xf5\xcd\x9b\x15Oo\xd8Nj0\xe2\xe5A\xb2\xc3\xf7\xc8\xe7 \"+\xd6\x9e\x18\xec\xb7H\xf9\vd\xebE\x9dtI\xe5\xb5\x8e3\x19<\xdeS\xf4\xe6\xba\x0er\xfc]\xcbd@\xe8R#(u\xe1\x9b\xb7\xd5\x82\xab;\xdb\xa2\x9e\xe8W;\x86\x89\x99\xa1\x99\x1b\xbd\xaf\x11\xcf\x1d\xb5n\xe3&\x1b Z|\x18\n/\xe4\x83\xb5\x00'/415) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xf, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a"], 0xfe33) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0xe, 0xfffffffffffffd85, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x739d, 0x0, 0x7, 0xfffffffffffffff3}, 0x28) 17.471902093s ago: executing program 4 (id=2542): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2}, 0x0, 0x1000, 0x3, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0xd, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00'}, 0x10) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x4) sendmsg$tipc(r1, &(0x7f0000001780)={0x0, 0x0, 0x0, 0xf5}, 0x0) 17.470156223s ago: executing program 3 (id=2543): socket$kcm(0x2, 0x2, 0x73) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x807fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @broadcast}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="000000009ef82920aba1eb9aff940000800000000000000095bad617c324c99d4000fee70eb405c22ac04dc171844fca0078d62b69c6a48bf34317ca2ee0b2c8cf640da5efab87551c950ee4011e78391083017b644d766e36ea29a552124478628798f6f85ab5a495640ec54490ac6885c520ae6933b220c0fc1ceac463455b0d984256313b40347d7d4e0d3020e43bd39ba13f1d8e53fb28662d820cb3e89fb876452323ec800f4f4362128ea637a76b1ed1146d114a40f81140a6b738157f847faf3de9016fda77390e65c3c263859e8f"], &(0x7f00000001c0)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x1000, 0x3, 0x6, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xcfa4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000003c0)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac008002600070002000600040024eab556a705251e618294ffd4938037e786a690001000000e4509c5bbcd72c6c953000000", 0x55}, {&(0x7f0000001e40)="dceddd02a62da3", 0x7}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 17.257329217s ago: executing program 1 (id=2544): r0 = socket$kcm(0xa, 0x2, 0x88) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10410, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x203}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000230000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x10) getpid() r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1, 0x4, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r6}, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x2, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x49}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0004f678ec630000000066"], 0xd) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x8202) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x3, @local, 0xd}, 0x80, 0x0}, 0x0) 17.257047817s ago: executing program 2 (id=2545): socket$kcm(0x2, 0x922000000001, 0x106) r0 = socket$kcm(0xa, 0x2, 0x88) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = socket$kcm(0x11, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x2a979d) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e40)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000580)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x4) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000080)) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 17.231549697s ago: executing program 0 (id=2546): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8912, 0x0) bpf$MAP_CREATE(0x8000000, &(0x7f0000000600)=ANY=[@ANYBLOB="050000000c0000004200000040000000c0000000", @ANYRES32=0x1, @ANYRESDEC], 0x50) 17.231119127s ago: executing program 4 (id=2547): perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x118442}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) socket$kcm(0xa, 0x5, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffff, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000008000000dd00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0000000000f5d13b540000ba19014eff5f64564655182455bc4b3fb21e1b085345916cb03e7f8cfb8734a1e529146ebef67773aee5d66128ee439240bb985d28dc0419c4dee48c065ce03dffe4a297635234d304b1819005c59cd830ef7c", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000001a4270fbcfbc099eb3636a2e6e3f9cb6747345c2764b665ecf541cb953b04117e3bef274e940e50c06894d11a5b61d3bd9cbcffdbcabb43d682b24d19ab7e432b5a092b7f1dd9d2d4347dbf8b343f6580cdbe34a9e2f84bddc00c0b0f5a5beeec42b9e7665d88074b2d71321863ac209c8a98972b53cf684ab8097f920f3b037ea717c0226c2ea06d4b8351f59d27d4f8eef0933ccc2296893930dfe9a9302b30bfb337c8465618bc9068e1f71c2a086557ccb2c4a7ca0ffffffffffffff7f49998f783ddbdb1fd76b63dc1611", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x149, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0xa0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8832, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x19e9b8, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a) 17.143807499s ago: executing program 3 (id=2548): socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000160000000000e5d0bc0a9f491c46b4ab1f6a22cd83c6d9e8891e03230dd7d9b580a86d4fc1a8020c5426cc4b81ea8a440ab555e2ec85b265a0064a8cde0205e16645df4b815f722144d068345e112ca1cbd2a93a829d0defd674eb7691dff1f59f999e1e87ef8d1ba3fcb1e6df8bb4c7591305a575a423ec9827c000"/140, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f0000000340)={0x2, 0x0, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f00000003c0)='\f', 0x1}], 0x1}, 0xfffc) 17.131116969s ago: executing program 2 (id=2549): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a0400", 0x14}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0xa0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8832, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x19e9b8, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a) 16.953121842s ago: executing program 0 (id=2550): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1190e95fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a202304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a8640724a5f4e12ad99012a2e01ce79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe50151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa332482e6137e994d3f5259b7f51544cdc6d8cb4becc20dd3a57545b0c2621e4c5f94a23f73ee02c22ee7e27c2cc491a85947baac523c347c9b9ede5d6265997f2ad6e9719aafdb323988e62b7ec84545cd63b7a7"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdf2, 0x0, 0xffffffffffffffff, 0xfffffe89}, 0x48) r1 = perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) close(r1) r2 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="b5", 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000180), 0x43) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x100008, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000029000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000fa00"/28], 0x50) r6 = getpid() perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x7f, 0x8, 0xa, 0x9, 0x0, 0x5, 0xc1, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x3, 0x184e}, 0x16425, 0x8, 0x7, 0x0, 0x4, 0xffff39dc, 0x7ce, 0x0, 0x3, 0x0, 0x80000001}, r6, 0xb, r3, 0x8) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080307000000e8fea4a1180015000600142603600e120800110000810401040016fc0a00104004000000036010fab94dcf5c0461c1d67f6f94067134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 16.781312696s ago: executing program 2 (id=2551): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x140, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x1ce79, 0x63, 0x0, 0x0, 0xdca, 0x9, 0x0, 0x0, 0x0, 0x0, 0xcad}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x27}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x7}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00R\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r2, &(0x7f0000000240), 0x0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT=r3, @ANYRES32=r4], 0x18}, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x3400c0c1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) recvmsg$kcm(r0, &(0x7f0000000700)={0x0, 0xfffffffffffffe60, &(0x7f0000000580), 0xb1}, 0x2020) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r8}, 0x18) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r9}, 0x8) write$cgroup_int(r10, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300), &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2b, &(0x7f0000000640)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x5b, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r11) 16.767395976s ago: executing program 4 (id=2552): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x86, &(0x7f0000000140), 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x68, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0x10}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r0}, 0x20) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x18, r0}, 0x18) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{0x1, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)='%pI4 \x00'}, 0x20) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x1e, &(0x7f00000004c0)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1}, @map_fd={0x18, 0xa, 0x1, 0x0, r3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @generic={0x88, 0x4, 0x5, 0xe, 0x9}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x101}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x0, 0xd, 0x9, 0x1, 0x30, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7800000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}], &(0x7f00000005c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x4, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000980)=[r6, r7, r8, 0x1, r9, r10], &(0x7f00000009c0)=[{0x1, 0x5, 0x10}, {0x5, 0x1, 0xd, 0x4}, {0x3, 0x1, 0x1, 0xb}, {0x3, 0x3, 0x6, 0xb}], 0x10, 0x6}, 0x94) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f0000000ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@float={0xc, 0x0, 0x0, 0x10, 0x4}, @fwd={0xd}]}, {0x0, [0x2e, 0x2e, 0x0]}}, &(0x7f0000000b00)=""/28, 0x35, 0x1c, 0x0, 0x1000, 0x10000}, 0x28) close(r11) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b80), 0xa00, 0x0) ioctl$TUNSETPERSIST(r13, 0x400454cb, 0x0) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x1d, &(0x7f0000000c00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1ff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x8}]}, &(0x7f0000000d00)='GPL\x00', 0x4ac3d27a, 0x0, 0x0, 0x41100, 0x45, '\x00', r1, 0x25, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000d40)={0x1, 0x1, 0x2, 0xf8d0}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000d80)=[{0x2, 0x3, 0xb, 0x8}], 0x10, 0x9}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ec0)={{r3, 0xffffffffffffffff}, &(0x7f0000000bc0), &(0x7f0000000e80)=r14}, 0x20) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f00)={0x2, 0x4, 0x8, 0x1, 0x80, r10, 0x40, '\x00', r1, r12, 0x4, 0x1, 0x2}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x40082406, &(0x7f0000000f80)='(}\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001280)={r11, 0xe0, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001040)=[0x0, 0x0], 0x0, 0x5e, &(0x7f0000001080)=[{}], 0x8, 0x10, &(0x7f00000010c0), &(0x7f0000001100), 0x8, 0xa, 0x8, 0x8, &(0x7f0000001140)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x15, 0x36, &(0x7f00000012c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8af, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r15}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r15}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @printk={@lld}, @ldst={0x0, 0x2, 0x3, 0x7, 0x0, 0xfffffffffffffff8, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001480)='syzkaller\x00', 0x0, 0xe2, &(0x7f00000014c0)=""/226, 0x0, 0x41, '\x00', 0x0, @fallback=0x11, r12, 0x8, &(0x7f00000015c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000001600)={0x4, 0xc, 0xbac, 0x2}, 0x10, r2, r11, 0x9, 0x0, &(0x7f0000001640)=[{0x0, 0x2, 0x0, 0x3}, {0x5, 0x2, 0xd, 0x5}, {0x2, 0x1, 0x8, 0x2}, {0x4, 0x5, 0xe, 0x3}, {0x0, 0x2, 0x7, 0x8}, {0x1, 0x3, 0x6, 0xb}, {0x3, 0x1, 0x8, 0x6}, {0x2, 0x2, 0x2, 0x3}, {0x1, 0x1, 0x9, 0x5}], 0x10, 0x582f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000017c0)={0x0, r0}, 0x10) r17 = bpf$ITER_CREATE(0x21, &(0x7f0000001800), 0x8) write$cgroup_subtree(r17, &(0x7f0000001840)={[{0x2d, 'net_prio'}, {0x2b, 'devices'}, {0x2d, 'net_prio'}, {0x2b, 'perf_event'}]}, 0x29) r18 = openat$cgroup_ro(r17, &(0x7f0000001a80)='memory.swap.current\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001bc0)={0x6, 0x2, &(0x7f0000001880)=@raw=[@cb_func={0x18, 0x1, 0x4, 0x0, 0x3}], &(0x7f00000018c0)='syzkaller\x00', 0x2, 0xf6, &(0x7f0000001900)=""/246, 0x40f00, 0x7407187da29a294, '\x00', 0x0, 0x25, r12, 0x8, &(0x7f0000001a00)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001a40)={0x5, 0xe, 0x8, 0x2}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000001ac0)=[r8, r6, r3, r18, r16, 0xffffffffffffffff, r17, r15, r7], &(0x7f0000001b00)=[{0x3, 0x2, 0xc, 0xa}, {0x1, 0x1, 0x2, 0x9}, {0x2, 0x1, 0x2, 0x4}, {0x0, 0x2, 0x1}, {0x1, 0x2, 0x2, 0x4}, {0x3, 0x4, 0x8, 0xb}, {0x5, 0x3, 0xe, 0x6}, {0x4, 0x2, 0x6, 0x8}, {0x5, 0x3, 0xc, 0x9}], 0x10, 0xec2b, @value=r17}, 0x94) r19 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001d00)=@generic={&(0x7f0000001cc0)='./file0/file0\x00'}, 0x18) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001d40)=@o_path={&(0x7f0000001c80)='./file0\x00', r5, 0x4000, r19}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001e00)={{r7}, &(0x7f0000001d80), &(0x7f0000001dc0)=r17}, 0x20) 16.711665377s ago: executing program 3 (id=2553): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000040000000600000004"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000070000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) (fail_nth: 7) 16.273261225s ago: executing program 3 (id=2554): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003c80)="d800000019008111e0020f060d8107040a60000060020000000455a12a00090008000699e3ffffff14000500fe80817806000500000000000074d67f6f9400f7d1d9bbe94fa27108a007a240c77f01896034277ce06bbace8037cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a365ce4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad96267e004dcdf634c1f215ce3bb9ad809d50b69b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51f9ffffff0000e1ffffffff", 0xcb}], 0x1}, 0x40) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r4}, 0x10) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa65, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) r7 = syz_clone(0x8000, &(0x7f0000000a80)="b04d47a826575f48b9a4f81ca5cea252552dfddcae7f2a1b96bd14ab5fdf7456c1b1eae5099c94b5b537954f45349aaca16cf1a56cb8358983ac2ddedb99a64da0da2b7cfced2452e9ceb0575a87545bd5db34512db6fa05c8125dfb432e7b44371a2424110e2764f7ed7f6f4ab9f172b0a36e2df41ee432bd327427bdd78c8b1938e3454ceae5cf663ed0e049861d5cc8101c81eec1f9a3ccd223769c6aa155c4e76fbc08d5cecd0539a458dc9b20b3ccff2874aa4a1647f63fe2c136ee89e2027d15eedd6ed6e0889f21fc8f97631c03f87c4e32adf5874f17ab", 0xdb, &(0x7f0000000040), &(0x7f0000000b80), &(0x7f0000000bc0)="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") syz_open_procfs$namespace(r7, &(0x7f0000000cc0)='ns/pid\x00') perf_event_open(&(0x7f0000000400)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x8004745a, &(0x7f0000000000)) 2.189964427s ago: executing program 32 (id=2544): r0 = socket$kcm(0xa, 0x2, 0x88) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10410, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x203}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000230000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x10) getpid() r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1, 0x4, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r6}, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x2, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x49}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0004f678ec630000000066"], 0xd) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x8202) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x3, @local, 0xd}, 0x80, 0x0}, 0x0) 1.036859649s ago: executing program 33 (id=2550): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdf2, 0x0, 0xffffffffffffffff, 0xfffffe89}, 0x48) r1 = perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) close(r1) r2 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="b5", 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000180), 0x43) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x100008, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000029000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000fa00"/28], 0x50) r6 = getpid() perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x7f, 0x8, 0xa, 0x9, 0x0, 0x5, 0xc1, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x3, 0x184e}, 0x16425, 0x8, 0x7, 0x0, 0x4, 0xffff39dc, 0x7ce, 0x0, 0x3, 0x0, 0x80000001}, r6, 0xb, r3, 0x8) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080307000000e8fea4a1180015000600142603600e120800110000810401040016fc0a00104004000000036010fab94dcf5c0461c1d67f6f94067134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 939.817781ms ago: executing program 34 (id=2551): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x140, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x1ce79, 0x63, 0x0, 0x0, 0xdca, 0x9, 0x0, 0x0, 0x0, 0x0, 0xcad}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x27}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x7}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00R\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r2, &(0x7f0000000240), 0x0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT=r3, @ANYRES32=r4], 0x18}, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x3400c0c1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) recvmsg$kcm(r0, &(0x7f0000000700)={0x0, 0xfffffffffffffe60, &(0x7f0000000580), 0xb1}, 0x2020) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r8}, 0x18) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r9}, 0x8) write$cgroup_int(r10, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300), &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2b, &(0x7f0000000640)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x5b, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r11) 160.000926ms ago: executing program 35 (id=2554): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003c80)="d800000019008111e0020f060d8107040a60000060020000000455a12a00090008000699e3ffffff14000500fe80817806000500000000000074d67f6f9400f7d1d9bbe94fa27108a007a240c77f01896034277ce06bbace8037cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a365ce4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad96267e004dcdf634c1f215ce3bb9ad809d50b69b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51f9ffffff0000e1ffffffff", 0xcb}], 0x1}, 0x40) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r4}, 0x10) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa65, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) r7 = syz_clone(0x8000, &(0x7f0000000a80)="b04d47a826575f48b9a4f81ca5cea252552dfddcae7f2a1b96bd14ab5fdf7456c1b1eae5099c94b5b537954f45349aaca16cf1a56cb8358983ac2ddedb99a64da0da2b7cfced2452e9ceb0575a87545bd5db34512db6fa05c8125dfb432e7b44371a2424110e2764f7ed7f6f4ab9f172b0a36e2df41ee432bd327427bdd78c8b1938e3454ceae5cf663ed0e049861d5cc8101c81eec1f9a3ccd223769c6aa155c4e76fbc08d5cecd0539a458dc9b20b3ccff2874aa4a1647f63fe2c136ee89e2027d15eedd6ed6e0889f21fc8f97631c03f87c4e32adf5874f17ab", 0xdb, &(0x7f0000000040), &(0x7f0000000b80), &(0x7f0000000bc0)="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") syz_open_procfs$namespace(r7, &(0x7f0000000cc0)='ns/pid\x00') perf_event_open(&(0x7f0000000400)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x8004745a, &(0x7f0000000000)) 0s ago: executing program 36 (id=2552): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x86, &(0x7f0000000140), 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x68, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0x10}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r0}, 0x20) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x18, r0}, 0x18) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{0x1, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)='%pI4 \x00'}, 0x20) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x1e, &(0x7f00000004c0)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1}, @map_fd={0x18, 0xa, 0x1, 0x0, r3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @generic={0x88, 0x4, 0x5, 0xe, 0x9}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x101}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x0, 0xd, 0x9, 0x1, 0x30, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7800000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}], &(0x7f00000005c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x4, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000980)=[r6, r7, r8, 0x1, r9, r10], &(0x7f00000009c0)=[{0x1, 0x5, 0x10}, {0x5, 0x1, 0xd, 0x4}, {0x3, 0x1, 0x1, 0xb}, {0x3, 0x3, 0x6, 0xb}], 0x10, 0x6}, 0x94) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f0000000ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@float={0xc, 0x0, 0x0, 0x10, 0x4}, @fwd={0xd}]}, {0x0, [0x2e, 0x2e, 0x0]}}, &(0x7f0000000b00)=""/28, 0x35, 0x1c, 0x0, 0x1000, 0x10000}, 0x28) close(r11) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b80), 0xa00, 0x0) ioctl$TUNSETPERSIST(r13, 0x400454cb, 0x0) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x1d, &(0x7f0000000c00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1ff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x8}]}, &(0x7f0000000d00)='GPL\x00', 0x4ac3d27a, 0x0, 0x0, 0x41100, 0x45, '\x00', r1, 0x25, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000d40)={0x1, 0x1, 0x2, 0xf8d0}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000d80)=[{0x2, 0x3, 0xb, 0x8}], 0x10, 0x9}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ec0)={{r3, 0xffffffffffffffff}, &(0x7f0000000bc0), &(0x7f0000000e80)=r14}, 0x20) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f00)={0x2, 0x4, 0x8, 0x1, 0x80, r10, 0x40, '\x00', r1, r12, 0x4, 0x1, 0x2}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x40082406, &(0x7f0000000f80)='(}\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001280)={r11, 0xe0, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001040)=[0x0, 0x0], 0x0, 0x5e, &(0x7f0000001080)=[{}], 0x8, 0x10, &(0x7f00000010c0), &(0x7f0000001100), 0x8, 0xa, 0x8, 0x8, &(0x7f0000001140)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x15, 0x36, &(0x7f00000012c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8af, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r15}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r15}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @printk={@lld}, @ldst={0x0, 0x2, 0x3, 0x7, 0x0, 0xfffffffffffffff8, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001480)='syzkaller\x00', 0x0, 0xe2, &(0x7f00000014c0)=""/226, 0x0, 0x41, '\x00', 0x0, @fallback=0x11, r12, 0x8, &(0x7f00000015c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000001600)={0x4, 0xc, 0xbac, 0x2}, 0x10, r2, r11, 0x9, 0x0, &(0x7f0000001640)=[{0x0, 0x2, 0x0, 0x3}, {0x5, 0x2, 0xd, 0x5}, {0x2, 0x1, 0x8, 0x2}, {0x4, 0x5, 0xe, 0x3}, {0x0, 0x2, 0x7, 0x8}, {0x1, 0x3, 0x6, 0xb}, {0x3, 0x1, 0x8, 0x6}, {0x2, 0x2, 0x2, 0x3}, {0x1, 0x1, 0x9, 0x5}], 0x10, 0x582f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000017c0)={0x0, r0}, 0x10) r17 = bpf$ITER_CREATE(0x21, &(0x7f0000001800), 0x8) write$cgroup_subtree(r17, &(0x7f0000001840)={[{0x2d, 'net_prio'}, {0x2b, 'devices'}, {0x2d, 'net_prio'}, {0x2b, 'perf_event'}]}, 0x29) r18 = openat$cgroup_ro(r17, &(0x7f0000001a80)='memory.swap.current\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001bc0)={0x6, 0x2, &(0x7f0000001880)=@raw=[@cb_func={0x18, 0x1, 0x4, 0x0, 0x3}], &(0x7f00000018c0)='syzkaller\x00', 0x2, 0xf6, &(0x7f0000001900)=""/246, 0x40f00, 0x7407187da29a294, '\x00', 0x0, 0x25, r12, 0x8, &(0x7f0000001a00)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001a40)={0x5, 0xe, 0x8, 0x2}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000001ac0)=[r8, r6, r3, r18, r16, 0xffffffffffffffff, r17, r15, r7], &(0x7f0000001b00)=[{0x3, 0x2, 0xc, 0xa}, {0x1, 0x1, 0x2, 0x9}, {0x2, 0x1, 0x2, 0x4}, {0x0, 0x2, 0x1}, {0x1, 0x2, 0x2, 0x4}, {0x3, 0x4, 0x8, 0xb}, {0x5, 0x3, 0xe, 0x6}, {0x4, 0x2, 0x6, 0x8}, {0x5, 0x3, 0xc, 0x9}], 0x10, 0xec2b, @value=r17}, 0x94) r19 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001d00)=@generic={&(0x7f0000001cc0)='./file0/file0\x00'}, 0x18) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001d40)=@o_path={&(0x7f0000001c80)='./file0\x00', r5, 0x4000, r19}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001e00)={{r7}, &(0x7f0000001d80), &(0x7f0000001dc0)=r17}, 0x20) kernel console output (not intermixed with test programs): k: 168 bytes leftover after parsing attributes in process `syz.1.1435'. [ 360.005527][ T8387] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1437'. [ 360.021020][ T8389] netlink: 'syz.1.1438': attribute type 1 has an invalid length. [ 360.029421][ T8389] netlink: 'syz.1.1438': attribute type 4 has an invalid length. [ 360.044899][ T8389] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1438'. [ 360.055534][ T8415] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1448'. [ 360.482721][ T8437] device wg2 entered promiscuous mode [ 360.499745][ T4277] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 360.507619][ T4277] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 360.667848][ T4277] Bluetooth: hci1: ISO packet for unknown connection handle 2366 [ 360.709014][ T8442] netlink: 'syz.4.1459': attribute type 1 has an invalid length. [ 360.862747][ T8449] netlink: 'syz.2.1462': attribute type 1 has an invalid length. [ 360.874303][ T8449] netlink: 'syz.2.1462': attribute type 4 has an invalid length. [ 361.298933][ T8453] device syzkaller0 entered promiscuous mode [ 361.321935][ T8462] __nla_validate_parse: 3 callbacks suppressed [ 361.321952][ T8462] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1465'. [ 361.949827][ T4277] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 361.957823][ T4277] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 362.172739][ T4277] Bluetooth: hci0: ISO packet for unknown connection handle 2366 [ 363.602627][ T8481] netlink: 'syz.1.1475': attribute type 1 has an invalid length. [ 363.610743][ T8481] netlink: 'syz.1.1475': attribute type 4 has an invalid length. [ 363.619266][ T8481] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1475'. [ 363.628919][ T8482] netlink: 'syz.0.1474': attribute type 1 has an invalid length. [ 363.640075][ T8482] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.1474'. [ 363.757770][ T8489] syzkaller0: refused to change device tx_queue_len [ 363.856122][ T8494] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1479'. [ 364.152357][ T4277] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 364.160985][ T4277] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 364.243293][ T48] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 364.251019][ T48] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 364.370648][ T48] Bluetooth: hci4: ISO packet for unknown connection handle 2366 [ 364.396853][ T8509] netlink: 'syz.2.1488': attribute type 1 has an invalid length. [ 364.405512][ T8509] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.1488'. [ 364.669038][ T8518] device syzkaller0 entered promiscuous mode [ 364.895207][ T48] Bluetooth: hci4: ISO packet for unknown connection handle 2366 [ 365.723263][ T48] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 365.730883][ T48] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 366.008021][ T48] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 366.015522][ T48] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 366.414685][ T48] Bluetooth: hci0: ISO packet for unknown connection handle 2366 [ 367.254063][ T8526] netlink: 'syz.2.1495': attribute type 1 has an invalid length. [ 367.262413][ T8526] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.1495'. [ 367.272141][ T8531] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1496'. [ 367.281707][ T8552] netlink: 'syz.0.1507': attribute type 1 has an invalid length. [ 367.306022][ T8552] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.1507'. [ 367.395367][ T8554] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1508'. [ 367.746820][ T48] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 367.754413][ T48] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 367.773605][ T8574] FAULT_INJECTION: forcing a failure. [ 367.773605][ T8574] name failslab, interval 1, probability 0, space 0, times 0 [ 367.792234][ T8574] CPU: 1 PID: 8574 Comm: syz.3.1515 Not tainted syzkaller #0 [ 367.799646][ T8574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 367.809728][ T8574] Call Trace: [ 367.813030][ T8574] [ 367.815982][ T8574] dump_stack_lvl+0x168/0x22e [ 367.820694][ T8574] ? show_regs_print_info+0x12/0x12 [ 367.825927][ T8574] ? load_image+0x3b0/0x3b0 [ 367.830475][ T8574] ? __might_sleep+0xd0/0xd0 [ 367.835098][ T8574] ? __lock_acquire+0x7c50/0x7c50 [ 367.840165][ T8574] should_fail_ex+0x399/0x4d0 [ 367.844912][ T8574] should_failslab+0x5/0x20 [ 367.849456][ T8574] slab_pre_alloc_hook+0x59/0x310 [ 367.854513][ T8574] ? apparmor_sk_alloc_security+0x74/0x100 [ 367.860343][ T8574] __kmem_cache_alloc_node+0x4f/0x260 [ 367.865721][ T8574] ? apparmor_sk_alloc_security+0x74/0x100 [ 367.871567][ T8574] kmalloc_trace+0x26/0xe0 [ 367.875997][ T8574] apparmor_sk_alloc_security+0x74/0x100 [ 367.881645][ T8574] security_sk_alloc+0x6a/0xa0 [ 367.886533][ T8574] sk_prot_alloc+0x101/0x210 [ 367.891124][ T8574] ? sk_alloc+0x20/0x340 [ 367.895370][ T8574] sk_alloc+0x36/0x340 [ 367.899447][ T8574] ? bpf_ctx_init+0x163/0x1a0 [ 367.904139][ T8574] ? bpf_prog_test_run_skb+0x267/0x11b0 [ 367.909701][ T8574] bpf_prog_test_run_skb+0x350/0x11b0 [ 367.915090][ T8574] ? __fget_files+0x28/0x4d0 [ 367.919693][ T8574] ? __fget_files+0x44a/0x4d0 [ 367.924386][ T8574] ? cpu_online+0xa0/0xa0 [ 367.928729][ T8574] bpf_prog_test_run+0x31e/0x390 [ 367.933674][ T8574] __sys_bpf+0x593/0x6d0 [ 367.937922][ T8574] ? bpf_link_show_fdinfo+0x340/0x340 [ 367.943337][ T8574] ? lock_chain_count+0x20/0x20 [ 367.948199][ T8574] __x64_sys_bpf+0x78/0x90 [ 367.952624][ T8574] do_syscall_64+0x4c/0xa0 [ 367.957049][ T8574] ? clear_bhb_loop+0x60/0xb0 [ 367.961723][ T8574] ? clear_bhb_loop+0x60/0xb0 [ 367.966403][ T8574] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 367.972299][ T8574] RIP: 0033:0x7f4647d8ec29 [ 367.976757][ T8574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.996370][ T8574] RSP: 002b:00007f4648cba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 368.004793][ T8574] RAX: ffffffffffffffda RBX: 00007f4647fd5fa0 RCX: 00007f4647d8ec29 [ 368.012764][ T8574] RDX: 0000000000000050 RSI: 0000200000001a00 RDI: 000000000000000a [ 368.020751][ T8574] RBP: 00007f4648cba090 R08: 0000000000000000 R09: 0000000000000000 [ 368.028727][ T8574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.036702][ T8574] R13: 00007f4647fd6038 R14: 00007f4647fd5fa0 R15: 00007ffe14277c68 [ 368.044684][ T8574] [ 368.080808][ T48] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 368.088599][ T48] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 368.223364][ T8589] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1520'. [ 368.467598][ T8599] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1524'. [ 368.778462][ T48] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 368.786009][ T48] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 368.823333][ T48] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 368.830964][ T48] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 369.032862][ T48] Bluetooth: hci1: ISO packet for unknown connection handle 2366 [ 369.112444][ T8613] netlink: 'syz.4.1529': attribute type 1 has an invalid length. [ 369.166188][ T8613] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.1529'. [ 369.312150][ T8622] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1533'. [ 369.519385][ T48] Bluetooth: hci2: ISO packet for unknown connection handle 2366 [ 369.551375][ T8630] netlink: 'syz.3.1537': attribute type 1 has an invalid length. [ 369.596448][ T8630] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.1537'. [ 369.720692][ T8639] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1539'. [ 369.843569][ T8643] netlink: 'syz.3.1542': attribute type 1 has an invalid length. [ 369.863505][ T8643] netlink: 'syz.3.1542': attribute type 4 has an invalid length. [ 370.383935][ T48] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 370.391593][ T48] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 371.226010][ T8666] netlink: 'syz.4.1551': attribute type 10 has an invalid length. [ 371.291500][ T8666] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.312572][ T8666] bond0: (slave team0): Enslaving as an active interface with an up link [ 371.529058][ T4277] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 371.536591][ T4277] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 372.946280][ T8709] netlink: 'syz.0.1569': attribute type 3 has an invalid length. [ 372.954058][ T8709] __nla_validate_parse: 6 callbacks suppressed [ 372.954070][ T8709] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1569'. [ 372.968262][ T8712] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1571'. [ 373.027154][ T8716] netlink: 'syz.0.1569': attribute type 41 has an invalid length. [ 373.037933][ T4277] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 373.045356][ T4277] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 373.054132][ T8716] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1569'. [ 373.244691][ T8726] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1575'. [ 373.298518][ T8730] netlink: 'syz.0.1576': attribute type 10 has an invalid length. [ 373.354704][ T8730] FAULT_INJECTION: forcing a failure. [ 373.354704][ T8730] name failslab, interval 1, probability 0, space 0, times 0 [ 373.411369][ T8730] CPU: 0 PID: 8730 Comm: syz.0.1576 Not tainted syzkaller #0 [ 373.418788][ T8730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 373.428864][ T8730] Call Trace: [ 373.432176][ T8730] [ 373.435115][ T8730] dump_stack_lvl+0x168/0x22e [ 373.439815][ T8730] ? show_regs_print_info+0x12/0x12 [ 373.445029][ T8730] ? load_image+0x3b0/0x3b0 [ 373.449555][ T8730] ? __might_sleep+0xd0/0xd0 [ 373.454166][ T8730] ? __lock_acquire+0x7c50/0x7c50 [ 373.459215][ T8730] should_fail_ex+0x399/0x4d0 [ 373.463921][ T8730] should_failslab+0x5/0x20 [ 373.468429][ T8730] slab_pre_alloc_hook+0x59/0x310 [ 373.473455][ T8730] ? rcu_is_watching+0x11/0xa0 [ 373.478236][ T8730] ? nf_nat_masq_schedule+0x234/0x550 [ 373.483612][ T8730] __kmem_cache_alloc_node+0x4f/0x260 [ 373.489000][ T8730] ? __mutex_lock+0x19e/0xaf0 [ 373.493689][ T8730] ? nf_nat_masq_schedule+0x234/0x550 [ 373.499069][ T8730] kmalloc_trace+0x26/0xe0 [ 373.503504][ T8730] nf_nat_masq_schedule+0x234/0x550 [ 373.508726][ T8730] ? nf_nat_masq_schedule+0x550/0x550 [ 373.514143][ T8730] ? masq_device_event+0xd0/0xd0 [ 373.519155][ T8730] ? nfqnl_rcv_dev_event+0x737/0x770 [ 373.524467][ T8730] ? nfqnl_rcv_dev_event+0xad/0x770 [ 373.529686][ T8730] ? nf_tables_flowtable_event+0x341/0x360 [ 373.535513][ T8730] masq_device_event+0x9e/0xd0 [ 373.540284][ T8730] raw_notifier_call_chain+0xcb/0x160 [ 373.545659][ T8730] __dev_notify_flags+0x178/0x2d0 [ 373.550692][ T8730] ? __dev_change_flags+0x6a0/0x6a0 [ 373.555902][ T8730] ? __dev_change_flags+0x4bb/0x6a0 [ 373.561132][ T8730] ? dev_get_flags+0x1c0/0x1c0 [ 373.565903][ T8730] ? vprintk_emit+0x571/0x680 [ 373.570593][ T8730] dev_change_flags+0xe3/0x1a0 [ 373.575366][ T8730] do_setlink+0xc31/0x3c40 [ 373.579807][ T8730] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 373.585977][ T8730] ? load_image+0x3b0/0x3b0 [ 373.590517][ T8730] ? __nla_validate_parse+0x1fd2/0x2990 [ 373.596078][ T8730] ? netlink_rcv_skb+0x1de/0x420 [ 373.601026][ T8730] ? netlink_unicast+0x74d/0x8d0 [ 373.605987][ T8730] ? __nla_validate+0x50/0x50 [ 373.610688][ T8730] ? validate_linkmsg+0x3db/0x4c0 [ 373.615723][ T8730] ? mutex_is_locked+0xe/0x40 [ 373.620416][ T8730] rtnl_newlink+0x17d6/0x1ff0 [ 373.625106][ T8730] ? rtnl_newlink+0x531/0x1ff0 [ 373.629900][ T8730] ? rtnl_setlink+0x450/0x450 [ 373.634591][ T8730] ? trace_raw_output_contention_end+0xd0/0xd0 [ 373.640759][ T8730] ? rcu_is_watching+0x11/0xa0 [ 373.645530][ T8730] ? trace_contention_end+0x5f/0x170 [ 373.650833][ T8730] ? __mutex_lock+0x19e/0xaf0 [ 373.655527][ T8730] ? rcu_read_unlock+0x8c/0xa0 [ 373.660315][ T8730] ? rtnl_setlink+0x450/0x450 [ 373.665019][ T8730] ? rtnetlink_rcv_msg+0x1d8/0xed0 [ 373.670144][ T8730] rtnetlink_rcv_msg+0x79b/0xed0 [ 373.675105][ T8730] ? rtnetlink_bind+0x80/0x80 [ 373.679802][ T8730] ? __local_bh_enable_ip+0x12a/0x1b0 [ 373.685203][ T8730] ? lockdep_hardirqs_on+0x94/0x140 [ 373.690422][ T8730] ? __local_bh_enable_ip+0x12a/0x1b0 [ 373.695812][ T8730] ? _local_bh_enable+0xa0/0xa0 [ 373.700695][ T8730] ? __dev_queue_xmit+0x26f/0x3760 [ 373.705817][ T8730] ? __dev_queue_xmit+0x26f/0x3760 [ 373.710935][ T8730] ? __dev_queue_xmit+0x15c9/0x3760 [ 373.716156][ T8730] ? __dev_queue_xmit+0x26f/0x3760 [ 373.721289][ T8730] ? netdev_core_pick_tx+0x340/0x340 [ 373.726592][ T8730] ? ref_tracker_free+0x630/0x7c0 [ 373.731628][ T8730] ? refcount_inc+0x70/0x70 [ 373.736146][ T8730] ? __copy_skb_header+0x417/0x5a0 [ 373.741265][ T8730] ? __skb_clone+0x480/0x790 [ 373.745866][ T8730] netlink_rcv_skb+0x1de/0x420 [ 373.750638][ T8730] ? rtnetlink_bind+0x80/0x80 [ 373.755327][ T8730] ? netlink_ack+0x1100/0x1100 [ 373.760118][ T8730] ? netlink_deliver_tap+0x2e/0x1b0 [ 373.765324][ T8730] netlink_unicast+0x74d/0x8d0 [ 373.770125][ T8730] netlink_sendmsg+0x89e/0xbc0 [ 373.774920][ T8730] ? netlink_getsockopt+0x540/0x540 [ 373.780132][ T8730] ? aa_sock_msg_perm+0x94/0x150 [ 373.785100][ T8730] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 373.790393][ T8730] ? security_socket_sendmsg+0x7c/0xa0 [ 373.795865][ T8730] ? netlink_getsockopt+0x540/0x540 [ 373.801085][ T8730] ____sys_sendmsg+0x59b/0x970 [ 373.805863][ T8730] ? __sys_sendmsg_sock+0x30/0x30 [ 373.810892][ T8730] ? __import_iovec+0x315/0x500 [ 373.815762][ T8730] ? import_iovec+0x6f/0xa0 [ 373.820282][ T8730] ___sys_sendmsg+0x21c/0x290 [ 373.824974][ T8730] ? __sys_sendmsg+0x270/0x270 [ 373.829771][ T8730] ? __lock_acquire+0x7c50/0x7c50 [ 373.834829][ T8730] ? __fdget+0x17c/0x200 [ 373.839093][ T8730] __se_sys_sendmsg+0x19e/0x270 [ 373.843957][ T8730] ? __x64_sys_sendmsg+0x80/0x80 [ 373.848933][ T8730] ? lockdep_hardirqs_on+0x94/0x140 [ 373.854149][ T8730] do_syscall_64+0x4c/0xa0 [ 373.858572][ T8730] ? clear_bhb_loop+0x60/0xb0 [ 373.863260][ T8730] ? clear_bhb_loop+0x60/0xb0 [ 373.867950][ T8730] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 373.873857][ T8730] RIP: 0033:0x7f9fe658ec29 [ 373.878281][ T8730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.897919][ T8730] RSP: 002b:00007f9fe7462038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 373.906343][ T8730] RAX: ffffffffffffffda RBX: 00007f9fe67d5fa0 RCX: 00007f9fe658ec29 [ 373.914430][ T8730] RDX: 0000000020000040 RSI: 0000200000000000 RDI: 0000000000000006 [ 373.922402][ T8730] RBP: 00007f9fe7462090 R08: 0000000000000000 R09: 0000000000000000 [ 373.930378][ T8730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 373.938355][ T8730] R13: 00007f9fe67d6038 R14: 00007f9fe67d5fa0 R15: 00007ffdd651d918 [ 373.946342][ T8730] [ 373.983874][ T8730] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.008389][ T8730] bond0: (slave team0): Enslaving as an active interface with an up link [ 374.159877][ T8732] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1579'. [ 374.175922][ T8747] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1584'. [ 374.401588][ T4277] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 374.409172][ T4277] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 374.435117][ T8760] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1591'. [ 374.527521][ T8763] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1593'. [ 375.653784][ T8783] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1598'. [ 375.680622][ T8781] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1600'. [ 375.902000][ T8785] device syzkaller0 entered promiscuous mode [ 378.028420][ T8812] __nla_validate_parse: 1 callbacks suppressed [ 378.028454][ T8812] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1610'. [ 378.174185][ T8824] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1613'. [ 378.255359][ T8832] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1617'. [ 378.390712][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.397137][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.900719][ T8840] netlink: 'syz.0.1619': attribute type 4 has an invalid length. [ 378.945964][ T8840] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1619'. [ 379.123736][ T48] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 379.158074][ T8843] netlink: 'syz.1.1621': attribute type 1 has an invalid length. [ 379.219731][ T8843] netlink: 16134 bytes leftover after parsing attributes in process `syz.1.1621'. [ 379.527402][ T48] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 379.535028][ T48] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 379.558653][ T8848] netlink: 'syz.4.1623': attribute type 10 has an invalid length. [ 379.595154][ T8849] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1624'. [ 379.697378][ T8853] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1627'. [ 379.899605][ T8856] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1628'. [ 380.458901][ T8868] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1631'. [ 380.972531][ T48] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 380.991783][ T8878] netlink: 'syz.1.1635': attribute type 1 has an invalid length. [ 381.006050][ T8878] netlink: 16134 bytes leftover after parsing attributes in process `syz.1.1635'. [ 381.080935][ T48] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 381.088618][ T48] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 381.882156][ T48] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 381.908054][ T8911] netlink: 'syz.1.1651': attribute type 1 has an invalid length. [ 382.333619][ T48] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 382.341232][ T48] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 383.184697][ T8937] __nla_validate_parse: 6 callbacks suppressed [ 383.184734][ T8937] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1661'. [ 383.551876][ T8946] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1664'. [ 383.662021][ T48] Bluetooth: hci2: ISO packet for unknown connection handle 2366 [ 383.771614][ T8947] netlink: 'syz.3.1665': attribute type 1 has an invalid length. [ 383.824908][ T8947] netlink: 16134 bytes leftover after parsing attributes in process `syz.3.1665'. [ 383.897570][ T8951] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1666'. [ 384.050311][ T8955] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1669'. [ 384.335367][ T48] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 384.344083][ T48] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 384.494639][ T8970] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1675'. [ 384.614518][ T8974] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1677'. [ 384.756803][ T48] Bluetooth: hci4: ISO packet for unknown connection handle 2366 [ 384.784536][ T8978] netlink: 'syz.2.1678': attribute type 1 has an invalid length. [ 384.823844][ T8978] netlink: 'syz.2.1678': attribute type 4 has an invalid length. [ 384.854696][ T8978] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1678'. [ 385.038405][ T8986] sctp: [Deprecated]: syz.3.1682 (pid 8986) Use of struct sctp_assoc_value in delayed_ack socket option. [ 385.038405][ T8986] Use struct sctp_sack_info instead [ 385.088489][ T8989] netlink: 'syz.2.1683': attribute type 10 has an invalid length. [ 385.117858][ T8989] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.135260][ T8989] bond0: (slave team0): Enslaving as an active interface with an up link [ 385.296597][ T8999] netlink: 'syz.2.1688': attribute type 4 has an invalid length. [ 385.304458][ T8999] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1688'. [ 385.400451][ T48] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 385.408124][ T48] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 385.421896][ T9001] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1689'. [ 385.876723][ T48] Bluetooth: hci1: ISO packet for unknown connection handle 2366 [ 385.905631][ T9016] netlink: 'syz.4.1694': attribute type 1 has an invalid length. [ 385.966166][ T9016] netlink: 'syz.4.1694': attribute type 4 has an invalid length. [ 386.076230][ T9023] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 386.433410][ T48] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 386.440993][ T48] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 388.951283][ T48] Bluetooth: hci4: ISO packet for unknown connection handle 2366 [ 388.984562][ T9063] netlink: 'syz.2.1712': attribute type 1 has an invalid length. [ 389.046258][ T9063] netlink: 'syz.2.1712': attribute type 4 has an invalid length. [ 389.086702][ T9063] __nla_validate_parse: 4 callbacks suppressed [ 389.086789][ T9063] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1712'. [ 389.303889][ T9070] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1715'. [ 389.900974][ T9092] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1722'. [ 391.161007][ T9114] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1730'. [ 391.172555][ T48] Bluetooth: hci2: ISO packet for unknown connection handle 2366 [ 391.376775][ T9112] netlink: 'syz.3.1729': attribute type 1 has an invalid length. [ 391.398866][ T9112] netlink: 'syz.3.1729': attribute type 4 has an invalid length. [ 391.418074][ T9112] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1729'. [ 391.842284][ T9125] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1734'. [ 391.876066][ T9125] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1734'. [ 391.906989][ T9125] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1734'. [ 391.936607][ T9125] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1734'. [ 392.102150][ T9132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1735'. [ 392.842865][ T48] Bluetooth: hci4: ISO packet for unknown connection handle 2366 [ 392.889167][ T9156] netlink: 'syz.2.1747': attribute type 1 has an invalid length. [ 392.897966][ T9156] netlink: 'syz.2.1747': attribute type 4 has an invalid length. [ 393.930604][ T48] Bluetooth: hci2: ISO packet for unknown connection handle 2366 [ 393.960478][ T9199] netlink: 'syz.3.1763': attribute type 1 has an invalid length. [ 393.972494][ T9199] netlink: 'syz.3.1763': attribute type 4 has an invalid length. [ 394.280861][ T9215] __nla_validate_parse: 7 callbacks suppressed [ 394.280904][ T9215] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1768'. [ 394.639324][ T9226] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1773'. [ 395.645644][ T9234] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1776'. [ 395.710260][ T48] Bluetooth: hci0: ISO packet for unknown connection handle 2366 [ 395.770693][ T9238] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1777'. [ 396.018452][ T9246] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1778'. [ 396.052637][ T9240] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1778'. [ 396.551584][ T9257] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1784'. [ 396.613037][ T9259] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1786'. [ 396.962430][ T48] Bluetooth: hci1: ISO packet for unknown connection handle 2366 [ 397.031750][ T9269] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1790'. [ 397.181472][ T9276] FAULT_INJECTION: forcing a failure. [ 397.181472][ T9276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.210723][ T9276] CPU: 0 PID: 9276 Comm: syz.2.1792 Not tainted syzkaller #0 [ 397.218142][ T9276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 397.228214][ T9276] Call Trace: [ 397.231511][ T9276] [ 397.234464][ T9276] dump_stack_lvl+0x168/0x22e [ 397.239175][ T9276] ? show_regs_print_info+0x12/0x12 [ 397.244401][ T9276] ? load_image+0x3b0/0x3b0 [ 397.248954][ T9276] ? __lock_acquire+0x7c50/0x7c50 [ 397.254022][ T9276] should_fail_ex+0x399/0x4d0 [ 397.258759][ T9276] _copy_from_user+0x2c/0x170 [ 397.263471][ T9276] perf_copy_attr+0x174/0x850 [ 397.268184][ T9276] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 397.273879][ T9276] __se_sys_perf_event_open+0xce/0x1e60 [ 397.279481][ T9276] ? __fget_files+0x44a/0x4d0 [ 397.284207][ T9276] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 397.289899][ T9276] ? lockdep_hardirqs_on+0x94/0x140 [ 397.295138][ T9276] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 397.300820][ T9276] do_syscall_64+0x4c/0xa0 [ 397.305377][ T9276] ? clear_bhb_loop+0x60/0xb0 [ 397.310103][ T9276] ? clear_bhb_loop+0x60/0xb0 [ 397.314827][ T9276] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 397.320738][ T9276] RIP: 0033:0x7f63ddf8ec29 [ 397.325175][ T9276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.344801][ T9276] RSP: 002b:00007f63dee01038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 397.348211][ T9284] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1794'. [ 397.353227][ T9276] RAX: ffffffffffffffda RBX: 00007f63de1d5fa0 RCX: 00007f63ddf8ec29 [ 397.353247][ T9276] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000080 [ 397.353263][ T9276] RBP: 00007f63dee01090 R08: 0000000000000000 R09: 0000000000000000 [ 397.353278][ T9276] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 397.353293][ T9276] R13: 00007f63de1d6038 R14: 00007f63de1d5fa0 R15: 00007ffc78e495a8 [ 397.353327][ T9276] [ 399.070185][ T48] Bluetooth: hci0: ISO packet for unknown connection handle 2366 [ 399.302306][ T9322] __nla_validate_parse: 5 callbacks suppressed [ 399.302323][ T9322] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1812'. [ 399.607887][ T9340] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1818'. [ 399.901795][ T48] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 399.923509][ T48] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 399.931169][ T48] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 399.942448][ T9350] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1823'. [ 400.503844][ T9376] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1835'. [ 400.935137][ T48] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 400.946069][ T48] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 400.953665][ T48] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 401.022521][ T9391] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1840'. [ 401.221995][ T9400] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1845'. [ 401.332277][ T9405] FAULT_INJECTION: forcing a failure. [ 401.332277][ T9405] name failslab, interval 1, probability 0, space 0, times 0 [ 401.365798][ T9405] CPU: 1 PID: 9405 Comm: syz.4.1848 Not tainted syzkaller #0 [ 401.373312][ T9405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 401.383380][ T9405] Call Trace: [ 401.386665][ T9405] [ 401.389707][ T9405] dump_stack_lvl+0x168/0x22e [ 401.394406][ T9405] ? show_regs_print_info+0x12/0x12 [ 401.399613][ T9405] ? load_image+0x3b0/0x3b0 [ 401.404138][ T9405] ? __might_sleep+0xd0/0xd0 [ 401.408741][ T9405] ? __lock_acquire+0x7c50/0x7c50 [ 401.413775][ T9405] ? mark_lock+0x94/0x320 [ 401.418125][ T9405] should_fail_ex+0x399/0x4d0 [ 401.422824][ T9405] should_failslab+0x5/0x20 [ 401.427341][ T9405] slab_pre_alloc_hook+0x59/0x310 [ 401.432399][ T9405] ? __get_vm_area_node+0x122/0x330 [ 401.437631][ T9405] __kmem_cache_alloc_node+0x4f/0x260 [ 401.443010][ T9405] ? __get_vm_area_node+0x122/0x330 [ 401.448217][ T9405] kmalloc_node_trace+0x22/0xe0 [ 401.453088][ T9405] __get_vm_area_node+0x122/0x330 [ 401.458130][ T9405] __vmalloc_node_range+0x357/0x1390 [ 401.463422][ T9405] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 401.469002][ T9405] ? free_vm_area+0x50/0x50 [ 401.473516][ T9405] ? end_current_label_crit_section+0x170/0x170 [ 401.479781][ T9405] ? __lock_acquire+0x7c50/0x7c50 [ 401.484828][ T9405] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 401.490392][ T9405] __vmalloc+0x76/0x80 [ 401.494466][ T9405] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 401.500052][ T9405] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 401.505450][ T9405] ? bpf_lsm_capable+0x5/0x10 [ 401.510137][ T9405] ? security_capable+0x85/0xb0 [ 401.514995][ T9405] bpf_prog_alloc+0x1c/0x1b0 [ 401.519603][ T9405] bpf_prog_load+0x7b6/0x15a0 [ 401.524301][ T9405] ? map_freeze+0x390/0x390 [ 401.528820][ T9405] ? __might_fault+0xa6/0x120 [ 401.533550][ T9405] ? __might_fault+0xa6/0x120 [ 401.538246][ T9405] ? __might_fault+0xc2/0x120 [ 401.542934][ T9405] ? __might_fault+0xa6/0x120 [ 401.547622][ T9405] ? bpf_lsm_bpf+0x5/0x10 [ 401.551951][ T9405] ? security_bpf+0x7a/0xa0 [ 401.556469][ T9405] __sys_bpf+0x520/0x6d0 [ 401.560728][ T9405] ? bpf_link_show_fdinfo+0x340/0x340 [ 401.566127][ T9405] ? lock_chain_count+0x20/0x20 [ 401.570999][ T9405] __x64_sys_bpf+0x78/0x90 [ 401.575444][ T9405] do_syscall_64+0x4c/0xa0 [ 401.579865][ T9405] ? clear_bhb_loop+0x60/0xb0 [ 401.584550][ T9405] ? clear_bhb_loop+0x60/0xb0 [ 401.589237][ T9405] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 401.595143][ T9405] RIP: 0033:0x7fc4b738ec29 [ 401.599567][ T9405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.619277][ T9405] RSP: 002b:00007fc4b829b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 401.627741][ T9405] RAX: ffffffffffffffda RBX: 00007fc4b75d5fa0 RCX: 00007fc4b738ec29 [ 401.635727][ T9405] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 401.643711][ T9405] RBP: 00007fc4b829b090 R08: 0000000000000000 R09: 0000000000000000 [ 401.651695][ T9405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.659676][ T9405] R13: 00007fc4b75d6038 R14: 00007fc4b75d5fa0 R15: 00007ffc7c0bec28 [ 401.667674][ T9405] [ 401.704143][ T9405] syz.4.1848: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 401.727022][ T9405] CPU: 0 PID: 9405 Comm: syz.4.1848 Not tainted syzkaller #0 [ 401.734434][ T9405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 401.744509][ T9405] Call Trace: [ 401.747811][ T9405] [ 401.750775][ T9405] dump_stack_lvl+0x168/0x22e [ 401.755488][ T9405] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 401.761942][ T9405] ? show_regs_print_info+0x12/0x12 [ 401.767170][ T9405] ? load_image+0x3b0/0x3b0 [ 401.771706][ T9405] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 401.778170][ T9405] ? cpuset_print_current_mems_allowed+0x2df/0x360 [ 401.784722][ T9405] warn_alloc+0x20c/0x300 [ 401.789093][ T9405] ? __get_vm_area_node+0x122/0x330 [ 401.794351][ T9405] ? zone_watermark_ok_safe+0x270/0x270 [ 401.799945][ T9405] ? rcu_is_watching+0x11/0xa0 [ 401.804769][ T9405] ? __get_vm_area_node+0x318/0x330 [ 401.810021][ T9405] __vmalloc_node_range+0x37c/0x1390 [ 401.815374][ T9405] ? free_vm_area+0x50/0x50 [ 401.819910][ T9405] ? end_current_label_crit_section+0x170/0x170 [ 401.826196][ T9405] ? __lock_acquire+0x7c50/0x7c50 [ 401.831257][ T9405] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 401.836838][ T9405] __vmalloc+0x76/0x80 [ 401.840939][ T9405] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 401.846531][ T9405] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 401.852029][ T9405] ? bpf_lsm_capable+0x5/0x10 [ 401.856761][ T9405] ? security_capable+0x85/0xb0 [ 401.861643][ T9405] bpf_prog_alloc+0x1c/0x1b0 [ 401.866285][ T9405] bpf_prog_load+0x7b6/0x15a0 [ 401.871028][ T9405] ? map_freeze+0x390/0x390 [ 401.875575][ T9405] ? __might_fault+0xa6/0x120 [ 401.880332][ T9405] ? __might_fault+0xa6/0x120 [ 401.885064][ T9405] ? __might_fault+0xc2/0x120 [ 401.889791][ T9405] ? __might_fault+0xa6/0x120 [ 401.894513][ T9405] ? bpf_lsm_bpf+0x5/0x10 [ 401.898899][ T9405] ? security_bpf+0x7a/0xa0 [ 401.903467][ T9405] __sys_bpf+0x520/0x6d0 [ 401.907753][ T9405] ? bpf_link_show_fdinfo+0x340/0x340 [ 401.913179][ T9405] ? lock_chain_count+0x20/0x20 [ 401.918102][ T9405] __x64_sys_bpf+0x78/0x90 [ 401.922573][ T9405] do_syscall_64+0x4c/0xa0 [ 401.927021][ T9405] ? clear_bhb_loop+0x60/0xb0 [ 401.931706][ T9405] ? clear_bhb_loop+0x60/0xb0 [ 401.936405][ T9405] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 401.942331][ T9405] RIP: 0033:0x7fc4b738ec29 [ 401.946744][ T9405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.966370][ T9405] RSP: 002b:00007fc4b829b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 401.974808][ T9405] RAX: ffffffffffffffda RBX: 00007fc4b75d5fa0 RCX: 00007fc4b738ec29 [ 401.982805][ T9405] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 401.990783][ T9405] RBP: 00007fc4b829b090 R08: 0000000000000000 R09: 0000000000000000 [ 401.998762][ T9405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.006734][ T9405] R13: 00007fc4b75d6038 R14: 00007fc4b75d5fa0 R15: 00007ffc7c0bec28 [ 402.014723][ T9405] [ 402.022833][ T9405] Mem-Info: [ 402.029198][ T9419] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1851'. [ 402.041816][ T9405] active_anon:4698 inactive_anon:0 isolated_anon:0 [ 402.041816][ T9405] active_file:21357 inactive_file:39987 isolated_file:0 [ 402.041816][ T9405] unevictable:768 dirty:275 writeback:0 [ 402.041816][ T9405] slab_reclaimable:21235 slab_unreclaimable:94174 [ 402.041816][ T9405] mapped:29338 shmem:1360 pagetables:616 [ 402.041816][ T9405] sec_pagetables:0 bounce:0 [ 402.041816][ T9405] kernel_misc_reclaimable:0 [ 402.041816][ T9405] free:1318772 free_pcp:11541 free_cma:0 [ 402.090226][ T9405] Node 0 active_anon:18692kB inactive_anon:0kB active_file:85428kB inactive_file:159748kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117352kB dirty:1100kB writeback:0kB shmem:3904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11092kB pagetables:2364kB sec_pagetables:0kB all_unreclaimable? no [ 402.128273][ T9405] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 402.167089][ T9405] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 402.211811][ T9405] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 402.219833][ T9405] Node 0 DMA32 free:1363772kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:18892kB inactive_anon:0kB active_file:85428kB inactive_file:159748kB unevictable:1536kB writepending:1100kB present:3129332kB managed:2593344kB mlocked:0kB bounce:0kB free_pcp:25088kB local_pcp:20424kB free_cma:0kB [ 402.293103][ T9405] lowmem_reserve[]: 0 0 1 1 1 [ 402.303741][ T9405] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 402.338629][ T9405] lowmem_reserve[]: 0 0 0 0 0 [ 402.343565][ T9405] Node 1 Normal free:3895956kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:21088kB local_pcp:13280kB free_cma:0kB [ 402.396188][ T9405] lowmem_reserve[]: 0 0 0 0 0 [ 402.401592][ T9405] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 402.421073][ T48] Bluetooth: hci4: ISO packet for unknown connection handle 2366 [ 402.443022][ T9429] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1856'. [ 402.445867][ T9405] Node 0 DMA32: 1021*4kB (ME) 647*8kB (ME) 1497*16kB (UME) 830*32kB (UM) 731*64kB (UM) 320*128kB (UME) 155*256kB (UME) 70*512kB (UM) 24*1024kB (UME) 5*2048kB (UME) 270*4096kB (M) = 1363772kB [ 402.505383][ T9405] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 402.529786][ T9405] Node 1 Normal: 275*4kB (UME) 71*8kB (UE) 45*16kB (UME) 52*32kB (UME) 33*64kB (UME) 17*128kB (UME) 10*256kB (UM) 4*512kB (UME) 2*1024kB (UE) 1*2048kB (E) 947*4096kB (M) = 3895956kB [ 402.548959][ T9405] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 402.559498][ T9405] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 402.586144][ T9405] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 402.610086][ T9405] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 402.630015][ T9405] 62704 total pagecache pages [ 402.635012][ T9405] 0 pages in swap cache [ 402.645254][ T9405] Free swap = 124996kB [ 402.652388][ T48] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 402.660424][ T48] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 402.681837][ T9405] Total swap = 124996kB [ 402.691927][ T9405] 2097051 pages RAM [ 402.697760][ T9405] 0 pages HighMem/MovableOnly [ 402.702950][ T9405] 415114 pages reserved [ 402.708471][ T9405] 0 pages cma reserved [ 402.964361][ T9440] device syzkaller0 entered promiscuous mode [ 403.925512][ T48] Bluetooth: hci4: ISO packet for unknown connection handle 2366 [ 405.013268][ T9461] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1868'. [ 405.023026][ T9467] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1870'. [ 405.220386][ T9472] netlink: 'syz.3.1872': attribute type 3 has an invalid length. [ 405.248931][ T9472] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1872'. [ 405.271282][ T9475] netlink: 'syz.1.1874': attribute type 21 has an invalid length. [ 405.305992][ T9475] netlink: 'syz.1.1874': attribute type 1 has an invalid length. [ 405.324131][ T9475] netlink: 'syz.1.1874': attribute type 2 has an invalid length. [ 405.342500][ T9475] netlink: 9062 bytes leftover after parsing attributes in process `syz.1.1874'. [ 405.415642][ T9479] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1875'. [ 405.433234][ T9479] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1875'. [ 405.444382][ T9479] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1875'. [ 405.469224][ T9479] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1875'. [ 405.816580][ T48] Bluetooth: hci2: ISO packet for unknown connection handle 2366 [ 405.865200][ T9492] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1881'. [ 405.979338][ T9494] device syzkaller0 entered promiscuous mode [ 407.686888][ T9496] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1882'. [ 407.901444][ T9516] FAULT_INJECTION: forcing a failure. [ 407.901444][ T9516] name failslab, interval 1, probability 0, space 0, times 0 [ 407.950676][ T9516] CPU: 0 PID: 9516 Comm: syz.2.1890 Not tainted syzkaller #0 [ 407.958105][ T9516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 407.968185][ T9516] Call Trace: [ 407.971481][ T9516] [ 407.974444][ T9516] dump_stack_lvl+0x168/0x22e [ 407.979155][ T9516] ? show_regs_print_info+0x12/0x12 [ 407.984395][ T9516] ? load_image+0x3b0/0x3b0 [ 407.988959][ T9516] ? __might_sleep+0xd0/0xd0 [ 407.993598][ T9516] ? __lock_acquire+0x7c50/0x7c50 [ 407.998663][ T9516] ? mark_lock+0x94/0x320 [ 408.003037][ T9516] should_fail_ex+0x399/0x4d0 [ 408.007770][ T9516] should_failslab+0x5/0x20 [ 408.012317][ T9516] slab_pre_alloc_hook+0x59/0x310 [ 408.017382][ T9516] ? __get_vm_area_node+0x122/0x330 [ 408.022606][ T9516] __kmem_cache_alloc_node+0x4f/0x260 [ 408.028036][ T9516] ? __get_vm_area_node+0x122/0x330 [ 408.033263][ T9516] kmalloc_node_trace+0x22/0xe0 [ 408.038148][ T9516] __get_vm_area_node+0x122/0x330 [ 408.043215][ T9516] __vmalloc_node_range+0x357/0x1390 [ 408.048547][ T9516] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 408.054153][ T9516] ? free_vm_area+0x50/0x50 [ 408.058687][ T9516] ? end_current_label_crit_section+0x170/0x170 [ 408.064960][ T9516] ? __lock_acquire+0x7c50/0x7c50 [ 408.070025][ T9516] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 408.075619][ T9516] __vmalloc+0x76/0x80 [ 408.079710][ T9516] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 408.085295][ T9516] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 408.090710][ T9516] ? bpf_lsm_capable+0x5/0x10 [ 408.095418][ T9516] ? security_capable+0x85/0xb0 [ 408.100302][ T9516] bpf_prog_alloc+0x1c/0x1b0 [ 408.104935][ T9516] bpf_prog_load+0x7b6/0x15a0 [ 408.109656][ T9516] ? map_freeze+0x390/0x390 [ 408.114195][ T9516] ? __might_fault+0xa6/0x120 [ 408.118952][ T9516] ? __might_fault+0xa6/0x120 [ 408.123665][ T9516] ? __might_fault+0xc2/0x120 [ 408.128368][ T9516] ? __might_fault+0xa6/0x120 [ 408.133078][ T9516] ? bpf_lsm_bpf+0x5/0x10 [ 408.137435][ T9516] ? security_bpf+0x7a/0xa0 [ 408.141965][ T9516] __sys_bpf+0x520/0x6d0 [ 408.146233][ T9516] ? bpf_link_show_fdinfo+0x340/0x340 [ 408.151650][ T9516] ? lock_chain_count+0x20/0x20 [ 408.156538][ T9516] __x64_sys_bpf+0x78/0x90 [ 408.160980][ T9516] do_syscall_64+0x4c/0xa0 [ 408.165415][ T9516] ? clear_bhb_loop+0x60/0xb0 [ 408.170132][ T9516] ? clear_bhb_loop+0x60/0xb0 [ 408.174844][ T9516] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 408.180769][ T9516] RIP: 0033:0x7f63ddf8ec29 [ 408.185207][ T9516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.204831][ T9516] RSP: 002b:00007f63dee01038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 408.213279][ T9516] RAX: ffffffffffffffda RBX: 00007f63de1d5fa0 RCX: 00007f63ddf8ec29 [ 408.221277][ T9516] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 408.229279][ T9516] RBP: 00007f63dee01090 R08: 0000000000000000 R09: 0000000000000000 [ 408.237275][ T9516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.245256][ T9516] R13: 00007f63de1d6038 R14: 00007f63de1d5fa0 R15: 00007ffc78e495a8 [ 408.253263][ T9516] [ 408.444515][ T48] Bluetooth: hci2: ISO packet for unknown connection handle 2366 [ 408.521516][ T48] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 408.529387][ T48] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 409.077959][ T9549] device syzkaller0 entered promiscuous mode [ 409.281582][ T48] Bluetooth: hci1: ISO packet for unknown connection handle 2366 [ 410.211367][ T48] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 410.475303][ T48] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 410.482918][ T48] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 411.836982][ T9556] __nla_validate_parse: 4 callbacks suppressed [ 411.836996][ T9556] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1905'. [ 411.853563][ T9568] netlink: 'syz.2.1910': attribute type 10 has an invalid length. [ 411.861768][ T9568] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1910'. [ 411.871093][ T9568] device team0 entered promiscuous mode [ 411.879388][ T9568] device team_slave_0 entered promiscuous mode [ 411.886148][ T9568] device team_slave_1 entered promiscuous mode [ 411.893844][ T9568] bond0: (slave team0): Releasing backup interface [ 411.912636][ T9568] bridge0: port 3(team0) entered blocking state [ 411.921817][ T9568] bridge0: port 3(team0) entered disabled state [ 411.936527][ T9570] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1911'. [ 412.023937][ T9580] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1914'. [ 412.127242][ T9583] netlink: 16162 bytes leftover after parsing attributes in process `syz.2.1915'. [ 412.499771][ T9595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1921'. [ 412.561952][ T9595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1921'. [ 412.622059][ T9595] netlink: 33 bytes leftover after parsing attributes in process `syz.3.1921'. [ 412.676006][ T9595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1921'. [ 412.719373][ T9595] netlink: 33 bytes leftover after parsing attributes in process `syz.3.1921'. [ 412.794762][ T48] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 412.802351][ T48] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 413.002664][ T9610] FAULT_INJECTION: forcing a failure. [ 413.002664][ T9610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.050408][ T9610] CPU: 0 PID: 9610 Comm: syz.2.1926 Not tainted syzkaller #0 [ 413.058029][ T9610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 413.068115][ T9610] Call Trace: [ 413.071438][ T9610] [ 413.074398][ T9610] dump_stack_lvl+0x168/0x22e [ 413.079133][ T9610] ? show_regs_print_info+0x12/0x12 [ 413.084373][ T9610] ? load_image+0x3b0/0x3b0 [ 413.088923][ T9610] ? __lock_acquire+0x7c50/0x7c50 [ 413.093995][ T9610] should_fail_ex+0x399/0x4d0 [ 413.098719][ T9610] _copy_from_user+0x2c/0x170 [ 413.103434][ T9610] generic_map_update_batch+0x518/0x850 [ 413.109042][ T9610] ? rcu_read_unlock+0xa0/0xa0 [ 413.113847][ T9610] ? __fdget+0x17c/0x200 [ 413.118144][ T9610] ? rcu_read_unlock+0xa0/0xa0 [ 413.122991][ T9610] bpf_map_do_batch+0x466/0x600 [ 413.127878][ T9610] __sys_bpf+0x65f/0x6d0 [ 413.132156][ T9610] ? bpf_link_show_fdinfo+0x340/0x340 [ 413.137581][ T9610] ? lock_chain_count+0x20/0x20 [ 413.142472][ T9610] __x64_sys_bpf+0x78/0x90 [ 413.146936][ T9610] do_syscall_64+0x4c/0xa0 [ 413.151412][ T9610] ? clear_bhb_loop+0x60/0xb0 [ 413.156123][ T9610] ? clear_bhb_loop+0x60/0xb0 [ 413.160829][ T9610] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 413.166753][ T9610] RIP: 0033:0x7f63ddf8ec29 [ 413.171212][ T9610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.191019][ T9610] RSP: 002b:00007f63dee01038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 413.199455][ T9610] RAX: ffffffffffffffda RBX: 00007f63de1d5fa0 RCX: 00007f63ddf8ec29 [ 413.207450][ T9610] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 413.215432][ T9610] RBP: 00007f63dee01090 R08: 0000000000000000 R09: 0000000000000000 [ 413.223403][ T9610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 413.231381][ T9610] R13: 00007f63de1d6038 R14: 00007f63de1d5fa0 R15: 00007ffc78e495a8 [ 413.239403][ T9610] [ 413.358332][ T48] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 413.860445][ T9625] netlink: 'syz.2.1929': attribute type 3 has an invalid length. [ 415.573916][ T9618] device syzkaller0 entered promiscuous mode [ 417.079242][ T9626] __nla_validate_parse: 4 callbacks suppressed [ 417.079260][ T9626] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1929'. [ 417.095748][ T9630] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1930'. [ 417.312156][ T9646] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1935'. [ 417.327015][ T48] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 417.334446][ T48] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 418.003429][ T48] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 418.651306][ T9667] netlink: 'syz.2.1942': attribute type 4 has an invalid length. [ 418.660375][ T9667] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1942'. [ 419.749012][ T9658] netlink: 'syz.3.1939': attribute type 10 has an invalid length. [ 419.757050][ T9658] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1939'. [ 419.766900][ T9658] device ipvlan1 entered promiscuous mode [ 419.774168][ T9658] bridge0: port 3(ipvlan1) entered blocking state [ 419.780866][ T9658] bridge0: port 3(ipvlan1) entered disabled state [ 419.789769][ T9658] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 419.805982][ T9662] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1941'. [ 420.088083][ T9677] device syzkaller0 entered promiscuous mode [ 420.128310][ T9676] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1947'. [ 420.211938][ T9679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1948'. [ 420.256433][ T9679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1948'. [ 420.292234][ T9679] netlink: 33 bytes leftover after parsing attributes in process `syz.0.1948'. [ 420.634092][ T48] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 420.642002][ T48] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 420.685619][ T9688] netlink: 'syz.4.1951': attribute type 3 has an invalid length. [ 422.200580][ T9692] __nla_validate_parse: 5 callbacks suppressed [ 422.200598][ T9692] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1951'. [ 422.457585][ T9715] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1957'. [ 422.553288][ T48] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 422.615417][ T9713] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1958'. [ 423.067330][ T9727] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1963'. [ 423.132817][ T9729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1965'. [ 423.149406][ T48] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 423.156937][ T48] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 423.166284][ T9729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1965'. [ 423.205968][ T9729] netlink: 33 bytes leftover after parsing attributes in process `syz.4.1965'. [ 423.223548][ T9729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1965'. [ 423.233776][ T9729] netlink: 33 bytes leftover after parsing attributes in process `syz.4.1965'. [ 423.259819][ T9729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1965'. [ 423.534206][ T9747] device syzkaller0 entered promiscuous mode [ 423.662100][ T9754] netlink: 'syz.0.1970': attribute type 2 has an invalid length. [ 423.704471][ T9754] netlink: 'syz.0.1970': attribute type 1 has an invalid length. [ 423.838422][ T48] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 425.313379][ T48] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 425.320994][ T48] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 426.455496][ T48] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 426.463160][ T48] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 426.506743][ T9805] netlink: 'syz.0.1990': attribute type 3 has an invalid length. [ 426.732841][ T48] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 426.875343][ T9813] device syzkaller0 entered promiscuous mode [ 427.227152][ T9821] netlink: 'syz.2.1995': attribute type 10 has an invalid length. [ 428.563124][ T9815] __nla_validate_parse: 15 callbacks suppressed [ 428.563140][ T9815] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1993'. [ 428.584272][ T9821] netlink: 'syz.2.1995': attribute type 10 has an invalid length. [ 428.717146][ T9827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1997'. [ 428.751937][ T9827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1997'. [ 428.777309][ T9827] netlink: 33 bytes leftover after parsing attributes in process `syz.1.1997'. [ 428.804378][ T9827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1997'. [ 428.820357][ T9827] netlink: 33 bytes leftover after parsing attributes in process `syz.1.1997'. [ 428.843714][ T9827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1997'. [ 428.853733][ T9827] netlink: 33 bytes leftover after parsing attributes in process `syz.1.1997'. [ 428.904927][ T48] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 428.912846][ T48] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 429.127383][ T48] Bluetooth: hci1: ISO packet for unknown connection handle 2366 [ 429.428727][ T9843] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2003'. [ 429.654142][ T9856] device syzkaller0 entered promiscuous mode [ 429.672551][ T9859] netlink: 16162 bytes leftover after parsing attributes in process `syz.4.2010'. [ 430.209678][ T48] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 430.218041][ T48] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 430.927568][ T48] Bluetooth: hci1: ISO packet for unknown connection handle 2366 [ 432.948088][ T9892] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 433.238522][ T48] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 433.246454][ T48] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 433.451885][ T48] Bluetooth: hci1: ISO packet for unknown connection handle 2366 [ 433.547706][ T9921] netlink: 'syz.3.2033': attribute type 4 has an invalid length. [ 433.568769][ T9921] __nla_validate_parse: 3 callbacks suppressed [ 433.568784][ T9921] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2033'. [ 433.923133][ T9925] device syzkaller0 entered promiscuous mode [ 433.943349][ T9926] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2034'. [ 434.689975][ T48] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 434.697757][ T48] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 434.872027][ T9945] FAULT_INJECTION: forcing a failure. [ 434.872027][ T9945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.886326][ T9945] CPU: 1 PID: 9945 Comm: syz.0.2040 Not tainted syzkaller #0 [ 434.893734][ T9945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 434.903807][ T9945] Call Trace: [ 434.907103][ T9945] [ 434.910055][ T9945] dump_stack_lvl+0x168/0x22e [ 434.914780][ T9945] ? show_regs_print_info+0x12/0x12 [ 434.920010][ T9945] ? load_image+0x3b0/0x3b0 [ 434.924563][ T9945] ? __might_fault+0xa6/0x120 [ 434.929293][ T9945] should_fail_ex+0x399/0x4d0 [ 434.934030][ T9945] copyin+0x1b/0x120 [ 434.937965][ T9945] _copy_from_iter+0x45a/0x10c0 [ 434.942857][ T9945] ? copyout_mc+0x110/0x110 [ 434.947382][ T9945] ? __virt_addr_valid+0x188/0x540 [ 434.952517][ T9945] ? __virt_addr_valid+0x188/0x540 [ 434.957658][ T9945] ? __virt_addr_valid+0x465/0x540 [ 434.962798][ T9945] ? __check_object_size+0x500/0xa40 [ 434.968110][ T9945] netlink_sendmsg+0x746/0xbc0 [ 434.972915][ T9945] ? netlink_getsockopt+0x540/0x540 [ 434.978135][ T9945] ? aa_sock_msg_perm+0x94/0x150 [ 434.983087][ T9945] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 434.988378][ T9945] ? security_socket_sendmsg+0x7c/0xa0 [ 434.993848][ T9945] ? netlink_getsockopt+0x540/0x540 [ 434.999059][ T9945] ____sys_sendmsg+0x59b/0x970 [ 435.003841][ T9945] ? __sys_sendmsg_sock+0x30/0x30 [ 435.008868][ T9945] ? __import_iovec+0x315/0x500 [ 435.013755][ T9945] ? import_iovec+0x6f/0xa0 [ 435.018271][ T9945] ___sys_sendmsg+0x21c/0x290 [ 435.022962][ T9945] ? __sys_sendmsg+0x270/0x270 [ 435.027763][ T9945] ? __lock_acquire+0x7c50/0x7c50 [ 435.032811][ T9945] ? __fdget+0x17c/0x200 [ 435.037067][ T9945] __se_sys_sendmsg+0x19e/0x270 [ 435.041939][ T9945] ? __x64_sys_sendmsg+0x80/0x80 [ 435.046912][ T9945] ? lockdep_hardirqs_on+0x94/0x140 [ 435.052143][ T9945] do_syscall_64+0x4c/0xa0 [ 435.056562][ T9945] ? clear_bhb_loop+0x60/0xb0 [ 435.061242][ T9945] ? clear_bhb_loop+0x60/0xb0 [ 435.065927][ T9945] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 435.071820][ T9945] RIP: 0033:0x7f9fe658ec29 [ 435.076238][ T9945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.095848][ T9945] RSP: 002b:00007f9fe7462038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 435.104261][ T9945] RAX: ffffffffffffffda RBX: 00007f9fe67d5fa0 RCX: 00007f9fe658ec29 [ 435.112241][ T9945] RDX: 000000000000c850 RSI: 0000200000000340 RDI: 0000000000000003 [ 435.120297][ T9945] RBP: 00007f9fe7462090 R08: 0000000000000000 R09: 0000000000000000 [ 435.128276][ T9945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.136251][ T9945] R13: 00007f9fe67d6038 R14: 00007f9fe67d5fa0 R15: 00007ffdd651d918 [ 435.144228][ T9945] [ 435.271674][ T48] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 435.279169][ T48] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 436.129655][ T9953] netlink: 'syz.0.2044': attribute type 4 has an invalid length. [ 436.147921][ T9953] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2044'. [ 436.297147][ T48] Bluetooth: hci2: ISO packet for unknown connection handle 2366 [ 436.325556][ T9957] netlink: 16162 bytes leftover after parsing attributes in process `syz.3.2045'. [ 436.444173][ T48] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 436.452807][ T48] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 436.784695][ T48] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 436.792355][ T48] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 436.865073][ T9987] device syzkaller0 entered promiscuous mode [ 437.249704][ T9995] sctp: [Deprecated]: syz.0.2061 (pid 9995) Use of int in max_burst socket option deprecated. [ 437.249704][ T9995] Use struct sctp_assoc_value instead [ 437.604086][ T48] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 437.611860][ T48] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 437.980639][ T48] Bluetooth: hci0: ISO packet for unknown connection handle 2366 [ 439.763242][ T9993] netlink: 'syz.2.2060': attribute type 4 has an invalid length. [ 439.771264][ T9993] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2060'. [ 439.780848][T10001] netlink: 16162 bytes leftover after parsing attributes in process `syz.0.2064'. [ 439.826069][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.832402][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.096322][ T48] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 440.103844][ T48] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 440.518571][ T48] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 440.526064][ T48] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 440.552476][T10033] FAULT_INJECTION: forcing a failure. [ 440.552476][T10033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.569943][T10033] CPU: 1 PID: 10033 Comm: syz.3.2073 Not tainted syzkaller #0 [ 440.577477][T10033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 440.587569][T10033] Call Trace: [ 440.590884][T10033] [ 440.593858][T10033] dump_stack_lvl+0x168/0x22e [ 440.598597][T10033] ? show_regs_print_info+0x12/0x12 [ 440.603852][T10033] ? load_image+0x3b0/0x3b0 [ 440.608440][T10033] ? __lock_acquire+0x7c50/0x7c50 [ 440.613562][T10033] should_fail_ex+0x399/0x4d0 [ 440.618343][T10033] _copy_to_user+0x2c/0x130 [ 440.622933][T10033] copy_siginfo_to_user+0x1f/0x140 [ 440.628115][T10033] arch_do_signal_or_restart+0xd2e/0x1230 [ 440.633957][T10033] ? get_sigframe_size+0x10/0x10 [ 440.638989][T10033] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 440.645080][T10033] ? exit_to_user_mode_loop+0x3b/0x110 [ 440.650609][T10033] exit_to_user_mode_loop+0x70/0x110 [ 440.655944][T10033] exit_to_user_mode_prepare+0xee/0x180 [ 440.661523][T10033] irqentry_exit_to_user_mode+0x5/0x30 [ 440.667015][T10033] exc_general_protection+0x164/0x1f0 [ 440.672473][T10033] ? do_syscall_64+0x58/0xa0 [ 440.677099][T10033] asm_exc_general_protection+0x22/0x30 [ 440.682673][T10033] RIP: 0033:0x7f4647d67779 [ 440.687121][T10033] Code: f8 77 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 fd 74 0f c5 fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 [ 440.706759][T10033] RSP: 002b:00007f4648cb97c8 EFLAGS: 00010283 [ 440.712862][T10033] RAX: 0000000000000999 RBX: 00007f4648cb9d30 RCX: 00007f4647f98120 [ 440.720853][T10033] RDX: 9999999999999999 RSI: 00007f4647e11b59 RDI: 9999999999999999 [ 440.728843][T10033] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000 [ 440.736865][T10033] R10: 00000000ffffffff R11: 0000000000000000 R12: 0000000000000073 [ 440.744859][T10033] R13: 00007f4648cb9eb0 R14: 9999999999999999 R15: 0000000000000000 [ 440.752888][T10033] [ 441.620862][ T48] Bluetooth: hci0: ISO packet for unknown connection handle 2366 [ 441.789324][T10042] netlink: 16162 bytes leftover after parsing attributes in process `syz.0.2076'. [ 444.491028][ T48] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 444.498651][ T48] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 446.239133][T10050] netlink: 'syz.0.2079': attribute type 1 has an invalid length. [ 446.246978][T10050] netlink: 'syz.0.2079': attribute type 4 has an invalid length. [ 446.254816][T10050] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2079'. [ 446.493921][ T48] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 446.501428][ T48] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 446.685240][ T48] Bluetooth: hci0: ISO packet for unknown connection handle 2366 [ 446.704453][T10079] netlink: 16162 bytes leftover after parsing attributes in process `syz.0.2090'. [ 446.793139][T10084] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2092'. [ 446.895447][ T48] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 446.903519][ T48] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 447.077045][T10092] netlink: 'syz.0.2095': attribute type 1 has an invalid length. [ 447.095094][T10092] netlink: 'syz.0.2095': attribute type 4 has an invalid length. [ 447.124340][T10092] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2095'. [ 447.650513][T10099] device syzkaller0 entered promiscuous mode [ 448.098136][ T48] Bluetooth: hci2: ISO packet for unknown connection handle 2366 [ 448.153812][ T48] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 448.161677][ T48] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 448.896979][T10126] FAULT_INJECTION: forcing a failure. [ 448.896979][T10126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.910648][T10126] CPU: 1 PID: 10126 Comm: syz.0.2109 Not tainted syzkaller #0 [ 448.918151][T10126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 448.928215][T10126] Call Trace: [ 448.931522][T10126] [ 448.934454][T10126] dump_stack_lvl+0x168/0x22e [ 448.939164][T10126] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 448.945337][T10126] ? show_regs_print_info+0x12/0x12 [ 448.950557][T10126] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 448.956725][T10126] should_fail_ex+0x399/0x4d0 [ 448.961425][T10126] _copy_from_user+0x2c/0x170 [ 448.966154][T10126] __sys_bpf+0x265/0x6d0 [ 448.970438][T10126] ? bpf_link_show_fdinfo+0x340/0x340 [ 448.975864][T10126] __x64_sys_bpf+0x78/0x90 [ 448.980301][T10126] do_syscall_64+0x4c/0xa0 [ 448.984716][T10126] ? clear_bhb_loop+0x60/0xb0 [ 448.989395][T10126] ? clear_bhb_loop+0x60/0xb0 [ 448.994076][T10126] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 449.000004][T10126] RIP: 0033:0x7f9fe658ec29 [ 449.004430][T10126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.024063][T10126] RSP: 002b:00007f9fe7441038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 449.032486][T10126] RAX: ffffffffffffffda RBX: 00007f9fe67d6090 RCX: 00007f9fe658ec29 [ 449.040469][T10126] RDX: 0000000000000020 RSI: 0000200000000240 RDI: 0000000000000002 [ 449.048468][T10126] RBP: 00007f9fe7441090 R08: 0000000000000000 R09: 0000000000000000 [ 449.056462][T10126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.064434][T10126] R13: 00007f9fe67d6128 R14: 00007f9fe67d6090 R15: 00007ffdd651d918 [ 449.072426][T10126] [ 450.042861][T10117] netlink: 16162 bytes leftover after parsing attributes in process `syz.3.2105'. [ 450.056167][T10121] netlink: 'syz.4.2107': attribute type 1 has an invalid length. [ 450.063929][T10121] netlink: 'syz.4.2107': attribute type 4 has an invalid length. [ 450.085698][T10121] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2107'. [ 450.764226][T10151] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2117'. [ 450.808180][ T48] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 450.815799][ T48] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 450.943556][T10158] device syzkaller0 entered promiscuous mode [ 451.013178][ T48] Bluetooth: hci2: ISO packet for unknown connection handle 2366 [ 452.642802][T10156] netlink: 16162 bytes leftover after parsing attributes in process `syz.3.2120'. [ 452.652932][T10162] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2123'. [ 452.662799][T10173] netlink: 'syz.4.2126': attribute type 10 has an invalid length. [ 452.702625][T10173] team0: Port device macvlan1 added [ 452.922069][T10184] raw_sendmsg: syz.0.2130 forgot to set AF_INET. Fix it! [ 452.932206][ T48] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 452.941118][ T48] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 453.315191][ T48] Bluetooth: hci1: ISO packet for unknown connection handle 2366 [ 453.357800][T10202] netlink: 16162 bytes leftover after parsing attributes in process `syz.4.2138'. [ 453.508620][T10204] device syzkaller0 entered promiscuous mode [ 453.548712][T10206] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2142'. [ 453.758565][T10223] FAULT_INJECTION: forcing a failure. [ 453.758565][T10223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.773116][T10223] CPU: 0 PID: 10223 Comm: syz.3.2145 Not tainted syzkaller #0 [ 453.780620][T10223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 453.790711][T10223] Call Trace: [ 453.794011][T10223] [ 453.796966][T10223] dump_stack_lvl+0x168/0x22e [ 453.801688][T10223] ? show_regs_print_info+0x12/0x12 [ 453.806908][T10223] ? load_image+0x3b0/0x3b0 [ 453.811447][T10223] ? __lock_acquire+0x7c50/0x7c50 [ 453.816525][T10223] should_fail_ex+0x399/0x4d0 [ 453.821265][T10223] _copy_from_user+0x2c/0x170 [ 453.825980][T10223] ___sys_sendmsg+0x155/0x290 [ 453.830694][T10223] ? __sys_sendmsg+0x270/0x270 [ 453.835545][T10223] ? __lock_acquire+0x7c50/0x7c50 [ 453.840659][T10223] ? __fdget+0x17c/0x200 [ 453.844974][T10223] __se_sys_sendmsg+0x19e/0x270 [ 453.849872][T10223] ? __x64_sys_sendmsg+0x80/0x80 [ 453.854850][T10223] ? lockdep_hardirqs_on+0x94/0x140 [ 453.860093][T10223] do_syscall_64+0x4c/0xa0 [ 453.864550][T10223] ? clear_bhb_loop+0x60/0xb0 [ 453.869255][T10223] ? clear_bhb_loop+0x60/0xb0 [ 453.873974][T10223] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 453.879893][T10223] RIP: 0033:0x7f4647d8ec29 [ 453.884337][T10223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.903970][T10223] RSP: 002b:00007f4648cba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.912425][T10223] RAX: ffffffffffffffda RBX: 00007f4647fd5fa0 RCX: 00007f4647d8ec29 [ 453.920538][T10223] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 453.928530][T10223] RBP: 00007f4648cba090 R08: 0000000000000000 R09: 0000000000000000 [ 453.936539][T10223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.944531][T10223] R13: 00007f4647fd6038 R14: 00007f4647fd5fa0 R15: 00007ffe14277c68 [ 453.952566][T10223] [ 454.065174][ T48] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 454.072775][ T48] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 455.539683][T10232] netlink: 'syz.3.2149': attribute type 21 has an invalid length. [ 455.559497][T10232] netlink: 'syz.3.2149': attribute type 6 has an invalid length. [ 455.585807][T10232] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2149'. [ 455.825301][ T48] Bluetooth: hci4: ISO packet for unknown connection handle 2366 [ 455.851663][T10243] netlink: 16162 bytes leftover after parsing attributes in process `syz.2.2153'. [ 456.157917][ T48] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 456.165403][ T48] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 456.428916][T10260] device syzkaller0 entered promiscuous mode [ 457.436867][ T48] Bluetooth: hci2: ISO packet for unknown connection handle 2366 [ 457.819376][ T48] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 457.827364][ T48] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 459.089427][T10284] netlink: 16162 bytes leftover after parsing attributes in process `syz.3.2170'. [ 459.420031][T10305] device wlan1 entered promiscuous mode [ 459.735981][ T48] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 459.743443][ T48] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 460.541798][ T48] Bluetooth: hci2: ISO packet for unknown connection handle 2366 [ 460.619668][T10324] device syzkaller0 entered promiscuous mode [ 460.628836][T10322] netlink: 'syz.3.2187': attribute type 4 has an invalid length. [ 460.637516][T10322] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2187'. [ 461.472915][ T48] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 461.480518][ T48] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 463.108210][T10355] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2199'. [ 463.131665][T10357] netlink: 'syz.4.2200': attribute type 1 has an invalid length. [ 463.139533][T10357] netlink: 'syz.4.2200': attribute type 4 has an invalid length. [ 463.153174][T10357] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2200'. [ 463.176592][T10355] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2199'. [ 463.234202][T10361] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2199'. [ 463.385274][T10361] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2199'. [ 464.298034][ T48] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 464.305473][ T48] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 464.456784][T10383] netlink: 'syz.1.2211': attribute type 3 has an invalid length. [ 464.496238][T10383] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2211'. [ 464.533330][T10387] device syzkaller0 entered promiscuous mode [ 466.479002][T10398] netlink: 'syz.1.2215': attribute type 1 has an invalid length. [ 466.487119][T10398] netlink: 'syz.1.2215': attribute type 4 has an invalid length. [ 466.494972][T10398] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2215'. [ 466.695061][ T48] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 466.702846][ T48] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 466.738661][T10419] netlink: 'syz.2.2225': attribute type 10 has an invalid length. [ 466.761463][T10419] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2225'. [ 466.812524][T10419] device dummy0 entered promiscuous mode [ 466.883992][T10419] bridge0: port 4(dummy0) entered blocking state [ 466.906910][T10419] bridge0: port 4(dummy0) entered disabled state [ 466.949762][T10419] bridge0: port 4(dummy0) entered blocking state [ 466.956822][T10419] bridge0: port 4(dummy0) entered forwarding state [ 467.280847][ T48] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 467.288494][ T48] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 467.537983][T10440] netlink: 'syz.3.2233': attribute type 1 has an invalid length. [ 467.546223][T10440] netlink: 'syz.3.2233': attribute type 4 has an invalid length. [ 467.554342][T10440] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2233'. [ 467.824325][ T48] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 467.832068][ T48] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 467.863971][T10446] device syzkaller0 entered promiscuous mode [ 468.186585][T10463] netlink: 'syz.1.2241': attribute type 49 has an invalid length. [ 468.349007][ T48] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 468.356672][ T48] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 469.736096][T10472] delete_channel: no stack [ 469.931514][T10463] netlink: 'syz.1.2241': attribute type 49 has an invalid length. [ 469.945899][T10470] netlink: 'syz.2.2245': attribute type 1 has an invalid length. [ 469.965799][T10470] netlink: 'syz.2.2245': attribute type 4 has an invalid length. [ 469.992053][T10470] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2245'. [ 470.224696][ T48] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 470.232344][ T48] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 471.233630][ T48] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 471.241736][ T48] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 471.834574][T10502] netlink: 'syz.1.2256': attribute type 21 has an invalid length. [ 471.898138][T10502] netlink: 'syz.1.2256': attribute type 4 has an invalid length. [ 471.966097][T10502] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2256'. [ 472.438855][T10512] netlink: 'syz.0.2257': attribute type 10 has an invalid length. [ 472.483422][T10512] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2257'. [ 472.504449][T10512] device dummy0 entered promiscuous mode [ 472.525552][T10512] bridge0: port 3(dummy0) entered blocking state [ 472.546660][T10512] bridge0: port 3(dummy0) entered disabled state [ 472.554652][T10512] bridge0: port 3(dummy0) entered blocking state [ 472.561154][T10512] bridge0: port 3(dummy0) entered forwarding state [ 472.581281][T10516] netlink: 'syz.3.2261': attribute type 1 has an invalid length. [ 472.592429][T10516] netlink: 'syz.3.2261': attribute type 4 has an invalid length. [ 472.601879][T10516] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2261'. [ 472.847192][ T48] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 472.854806][ T48] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 472.882120][T10517] device syzkaller0 entered promiscuous mode [ 473.106498][ T48] Bluetooth: hci2: ISO packet for unknown connection handle 2366 [ 473.547597][ T48] Bluetooth: hci1: ISO packet for unknown connection handle 2366 [ 474.358803][ T48] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 474.366623][ T48] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 475.926527][T10530] netlink: 'syz.3.2266': attribute type 1 has an invalid length. [ 475.934402][T10530] netlink: 'syz.3.2266': attribute type 4 has an invalid length. [ 475.942333][T10530] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2266'. [ 475.951692][T10532] netlink: 'syz.4.2267': attribute type 1 has an invalid length. [ 475.960253][T10532] netlink: 'syz.4.2267': attribute type 4 has an invalid length. [ 475.972574][T10532] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2267'. [ 475.994238][T10546] netlink: 'syz.2.2273': attribute type 1 has an invalid length. [ 476.010950][T10546] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2273'. [ 476.194696][ T48] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 476.202318][ T48] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 476.323439][ T48] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 476.331224][ T48] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 477.568999][T10580] validate_nla: 1 callbacks suppressed [ 477.569096][T10580] netlink: 'syz.3.2285': attribute type 10 has an invalid length. [ 477.628026][T10580] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 477.661628][ T48] Bluetooth: hci4: ISO packet for unknown connection handle 2366 [ 477.719112][T10583] netlink: 'syz.2.2286': attribute type 1 has an invalid length. [ 477.747182][T10583] netlink: 'syz.2.2286': attribute type 4 has an invalid length. [ 477.772725][T10583] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2286'. [ 477.892480][T10584] device syzkaller0 entered promiscuous mode [ 477.982581][T10587] device syzkaller0 entered promiscuous mode [ 478.012733][ T48] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 478.021208][ T48] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 478.283113][ T48] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 478.291354][ T48] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 480.590839][T10593] netlink: 'syz.3.2290': attribute type 1 has an invalid length. [ 480.606196][T10593] netlink: 'syz.3.2290': attribute type 4 has an invalid length. [ 480.613976][T10593] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2290'. [ 484.144048][ T48] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 484.151761][ T48] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 484.195311][ T48] Bluetooth: hci2: ISO packet for unknown connection handle 2366 [ 484.235474][T10631] netlink: 'syz.3.2302': attribute type 1 has an invalid length. [ 484.274421][ T48] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 484.282208][ T48] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 484.307069][T10631] netlink: 'syz.3.2302': attribute type 4 has an invalid length. [ 484.332378][T10631] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2302'. [ 484.490523][T10639] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2307'. [ 485.122787][T10642] device syzkaller0 entered promiscuous mode [ 487.935710][T10660] netlink: 'syz.2.2306': attribute type 21 has an invalid length. [ 487.943638][T10660] netlink: 'syz.2.2306': attribute type 4 has an invalid length. [ 487.986491][T10660] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2306'. [ 488.166950][ T48] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 488.174446][ T48] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 488.224562][T10673] device syzkaller0 entered promiscuous mode [ 488.383169][ T48] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 488.391153][ T48] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 488.533795][ T48] Bluetooth: hci1: ISO packet for unknown connection handle 2366 [ 491.462839][T10680] netlink: 'syz.4.2320': attribute type 1 has an invalid length. [ 491.474018][T10680] netlink: 'syz.4.2320': attribute type 4 has an invalid length. [ 491.483215][T10680] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2320'. [ 491.518492][T10686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2321'. [ 491.547683][T10686] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2321'. [ 491.685367][T10705] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2326'. [ 491.746365][T10708] device syzkaller0 entered promiscuous mode [ 492.010256][ T48] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 492.017921][ T48] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 492.297658][ T48] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 492.305143][ T48] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 492.921024][T10733] netlink: 'syz.4.2336': attribute type 16 has an invalid length. [ 492.943777][T10733] netlink: 'syz.4.2336': attribute type 3 has an invalid length. [ 492.962358][T10733] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2336'. [ 493.122580][ T48] Bluetooth: hci0: ISO packet for unknown connection handle 2366 [ 494.802734][T10736] netlink: 'syz.0.2337': attribute type 1 has an invalid length. [ 494.813906][T10736] netlink: 'syz.0.2337': attribute type 4 has an invalid length. [ 494.831590][T10736] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2337'. [ 495.068396][ T48] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 495.076181][ T48] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 495.114431][ T48] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 495.122016][ T48] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 495.590864][ T48] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 495.598452][ T48] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 495.661660][T10776] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2351'. [ 495.856721][ T48] Bluetooth: hci2: ISO packet for unknown connection handle 2366 [ 495.870784][T10785] device syzkaller0 entered promiscuous mode [ 498.290197][T10783] netlink: 'syz.3.2352': attribute type 1 has an invalid length. [ 498.298224][T10783] netlink: 'syz.3.2352': attribute type 4 has an invalid length. [ 498.306582][T10783] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2352'. [ 498.491335][ T48] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 498.498994][ T48] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 498.603468][ T48] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 498.611094][ T48] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 498.640791][T10810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2362'. [ 498.688449][T10810] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2362'. [ 498.742314][T10816] netlink: 'syz.1.2364': attribute type 1 has an invalid length. [ 498.762952][T10816] netlink: 'syz.1.2364': attribute type 4 has an invalid length. [ 498.788965][T10816] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2364'. [ 499.168220][T10827] netlink: 126632 bytes leftover after parsing attributes in process `syz.1.2367'. [ 499.341164][ T48] Bluetooth: hci2: ISO packet for unknown connection handle 2366 [ 499.400706][T10829] netlink: 'syz.3.2368': attribute type 1 has an invalid length. [ 499.411052][T10829] netlink: 'syz.3.2368': attribute type 4 has an invalid length. [ 499.426024][T10829] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2368'. [ 499.852025][T10835] device syzkaller0 entered promiscuous mode [ 500.227848][ T48] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 500.235324][ T48] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 500.472434][ T48] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 500.480590][ T48] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 501.175250][T10863] FAULT_INJECTION: forcing a failure. [ 501.175250][T10863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.189667][T10863] CPU: 0 PID: 10863 Comm: syz.0.2380 Not tainted syzkaller #0 [ 501.197190][T10863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 501.207278][T10863] Call Trace: [ 501.210573][T10863] [ 501.213516][T10863] dump_stack_lvl+0x168/0x22e [ 501.218205][T10863] ? show_regs_print_info+0x12/0x12 [ 501.223426][T10863] ? load_image+0x3b0/0x3b0 [ 501.227952][T10863] ? __lock_acquire+0x7c50/0x7c50 [ 501.233002][T10863] should_fail_ex+0x399/0x4d0 [ 501.237691][T10863] _copy_from_user+0x2c/0x170 [ 501.242405][T10863] __sys_bpf+0x265/0x6d0 [ 501.246686][T10863] ? bpf_link_show_fdinfo+0x340/0x340 [ 501.252111][T10863] ? lock_chain_count+0x20/0x20 [ 501.257033][T10863] __x64_sys_bpf+0x78/0x90 [ 501.258906][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.261466][T10863] do_syscall_64+0x4c/0xa0 [ 501.268712][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.272104][T10863] ? clear_bhb_loop+0x60/0xb0 [ 501.272129][T10863] ? clear_bhb_loop+0x60/0xb0 [ 501.272156][T10863] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 501.293668][T10863] RIP: 0033:0x7f9fe658ec29 [ 501.298100][T10863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.317728][T10863] RSP: 002b:00007f9fe7462038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 501.326154][T10863] RAX: ffffffffffffffda RBX: 00007f9fe67d5fa0 RCX: 00007f9fe658ec29 [ 501.334138][T10863] RDX: 0000000000000020 RSI: 0000200000000640 RDI: 0000000000000015 [ 501.342121][T10863] RBP: 00007f9fe7462090 R08: 0000000000000000 R09: 0000000000000000 [ 501.350120][T10863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.358109][T10863] R13: 00007f9fe67d6038 R14: 00007f9fe67d5fa0 R15: 00007ffdd651d918 [ 501.366098][T10863] [ 502.727927][T10854] netlink: 'syz.2.2378': attribute type 1 has an invalid length. [ 502.735831][T10854] netlink: 'syz.2.2378': attribute type 4 has an invalid length. [ 502.743584][T10854] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2378'. [ 502.754213][T10851] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2377'. [ 502.919973][ T48] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 502.927707][ T48] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 503.159118][T10879] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 503.166817][T10879] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 503.389037][T10898] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2392'. [ 503.448466][T10898] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2392'. [ 503.503634][T10896] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2392'. [ 503.593331][T10899] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2392'. [ 503.814987][T10897] netlink: 'syz.0.2391': attribute type 10 has an invalid length. [ 503.859425][T10897] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2391'. [ 503.905982][T10897] device team0 entered promiscuous mode [ 503.931768][T10897] device team_slave_0 entered promiscuous mode [ 503.964270][T10897] device team_slave_1 entered promiscuous mode [ 504.010868][T10897] bond0: (slave team0): Releasing backup interface [ 504.069950][T10897] bridge0: port 4(team0) entered blocking state [ 504.136237][T10897] bridge0: port 4(team0) entered disabled state [ 504.244408][T10896] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 504.252054][T10896] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 504.430360][T10914] FAULT_INJECTION: forcing a failure. [ 504.430360][T10914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 504.465868][T10914] CPU: 1 PID: 10914 Comm: syz.3.2396 Not tainted syzkaller #0 [ 504.473480][T10914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 504.483590][T10914] Call Trace: [ 504.486909][T10914] [ 504.489864][T10914] dump_stack_lvl+0x168/0x22e [ 504.494587][T10914] ? show_regs_print_info+0x12/0x12 [ 504.499826][T10914] ? load_image+0x3b0/0x3b0 [ 504.504411][T10914] ? __lock_acquire+0x7c50/0x7c50 [ 504.509486][T10914] ? snprintf+0xd7/0x120 [ 504.513778][T10914] should_fail_ex+0x399/0x4d0 [ 504.518508][T10914] _copy_to_user+0x2c/0x130 [ 504.523061][T10914] simple_read_from_buffer+0xe3/0x150 [ 504.528496][T10914] proc_fail_nth_read+0x19a/0x210 [ 504.533566][T10914] ? proc_fault_inject_write+0x2f0/0x2f0 [ 504.539243][T10914] ? fsnotify_perm+0x248/0x550 [ 504.544057][T10914] ? proc_fault_inject_write+0x2f0/0x2f0 [ 504.549731][T10914] vfs_read+0x2c0/0x920 [ 504.553938][T10914] ? kernel_read+0x1e0/0x1e0 [ 504.558574][T10914] ? __fget_files+0x28/0x4d0 [ 504.563208][T10914] ? __fget_files+0x44a/0x4d0 [ 504.567937][T10914] ? __fdget_pos+0x2ae/0x360 [ 504.572605][T10914] ? ksys_read+0x71/0x240 [ 504.576977][T10914] ksys_read+0x143/0x240 [ 504.581272][T10914] ? vfs_write+0x960/0x960 [ 504.585732][T10914] ? lockdep_hardirqs_on+0x94/0x140 [ 504.590973][T10914] do_syscall_64+0x4c/0xa0 [ 504.595431][T10914] ? clear_bhb_loop+0x60/0xb0 [ 504.600156][T10914] ? clear_bhb_loop+0x60/0xb0 [ 504.604883][T10914] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 504.610809][T10914] RIP: 0033:0x7f4647d8d63c [ 504.615265][T10914] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 504.634910][T10914] RSP: 002b:00007f4648cba030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 504.643361][T10914] RAX: ffffffffffffffda RBX: 00007f4647fd5fa0 RCX: 00007f4647d8d63c [ 504.651344][T10914] RDX: 000000000000000f RSI: 00007f4648cba0a0 RDI: 0000000000000004 [ 504.659319][T10914] RBP: 00007f4648cba090 R08: 0000000000000000 R09: 0000000000000000 [ 504.667329][T10914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.675323][T10914] R13: 00007f4647fd6038 R14: 00007f4647fd5fa0 R15: 00007ffe14277c68 [ 504.683314][T10914] [ 504.721624][T10879] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 504.729149][T10879] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 505.013963][T10936] FAULT_INJECTION: forcing a failure. [ 505.013963][T10936] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 505.029641][T10936] CPU: 0 PID: 10936 Comm: syz.0.2405 Not tainted syzkaller #0 [ 505.037153][T10936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 505.047223][T10936] Call Trace: [ 505.050507][T10936] [ 505.053437][T10936] dump_stack_lvl+0x168/0x22e [ 505.058128][T10936] ? show_regs_print_info+0x12/0x12 [ 505.063355][T10936] ? load_image+0x3b0/0x3b0 [ 505.067874][T10936] ? __lock_acquire+0x7c50/0x7c50 [ 505.072905][T10936] ? verify_lock_unused+0x140/0x140 [ 505.078117][T10936] should_fail_ex+0x399/0x4d0 [ 505.082808][T10936] _copy_from_user+0x2c/0x170 [ 505.087502][T10936] ___sys_sendmsg+0x155/0x290 [ 505.092186][T10936] ? __sys_sendmsg+0x270/0x270 [ 505.096973][T10936] ? __lock_acquire+0x7c50/0x7c50 [ 505.102023][T10936] ? __fdget+0x17c/0x200 [ 505.106280][T10936] __se_sys_sendmsg+0x19e/0x270 [ 505.111149][T10936] ? __x64_sys_sendmsg+0x80/0x80 [ 505.116109][T10936] ? lockdep_hardirqs_on+0x94/0x140 [ 505.121320][T10936] do_syscall_64+0x4c/0xa0 [ 505.125754][T10936] ? clear_bhb_loop+0x60/0xb0 [ 505.130438][T10936] ? clear_bhb_loop+0x60/0xb0 [ 505.135118][T10936] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 505.141012][T10936] RIP: 0033:0x7f9fe658ec29 [ 505.145432][T10936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.165039][T10936] RSP: 002b:00007f9fe7462038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 505.173464][T10936] RAX: ffffffffffffffda RBX: 00007f9fe67d5fa0 RCX: 00007f9fe658ec29 [ 505.181452][T10936] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 505.189423][T10936] RBP: 00007f9fe7462090 R08: 0000000000000000 R09: 0000000000000000 [ 505.197397][T10936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.205366][T10936] R13: 00007f9fe67d6038 R14: 00007f9fe67d5fa0 R15: 00007ffdd651d918 [ 505.213352][T10936] [ 505.422783][T10939] netlink: 'syz.2.2406': attribute type 10 has an invalid length. [ 505.442891][T10939] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2406'. [ 505.483851][T10939] bridge0: port 3(team0) entered blocking state [ 505.490328][T10939] bridge0: port 3(team0) entered forwarding state [ 505.499904][T10939] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.507749][T10939] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 505.659257][T10951] device syzkaller0 entered promiscuous mode [ 505.722563][T10879] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 505.730302][T10879] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 505.969110][T10879] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 506.187418][T10879] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 506.194994][T10879] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 506.718524][T10965] netlink: 'syz.4.2415': attribute type 3 has an invalid length. [ 506.726846][T10965] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2415'. [ 508.073490][T10955] netlink: 'syz.1.2411': attribute type 1 has an invalid length. [ 508.081401][T10955] netlink: 'syz.1.2411': attribute type 4 has an invalid length. [ 508.089421][T10955] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2411'. [ 508.301056][T10975] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 508.397526][T10981] FAULT_INJECTION: forcing a failure. [ 508.397526][T10981] name failslab, interval 1, probability 0, space 0, times 0 [ 508.419087][T10981] CPU: 0 PID: 10981 Comm: syz.3.2422 Not tainted syzkaller #0 [ 508.426696][T10981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 508.436776][T10981] Call Trace: [ 508.440112][T10981] [ 508.443087][T10981] dump_stack_lvl+0x168/0x22e [ 508.447830][T10981] ? show_regs_print_info+0x12/0x12 [ 508.453085][T10981] ? load_image+0x3b0/0x3b0 [ 508.457664][T10981] ? __might_sleep+0xd0/0xd0 [ 508.462335][T10981] ? __lock_acquire+0x7c50/0x7c50 [ 508.467441][T10981] should_fail_ex+0x399/0x4d0 [ 508.472207][T10981] should_failslab+0x5/0x20 [ 508.476780][T10981] slab_pre_alloc_hook+0x59/0x310 [ 508.481882][T10981] kmem_cache_alloc_node+0x5a/0x320 [ 508.487134][T10981] ? __alloc_skb+0xfc/0x7e0 [ 508.491716][T10981] __alloc_skb+0xfc/0x7e0 [ 508.496098][T10981] ? netlink_autobind+0xda/0x300 [ 508.501114][T10981] netlink_sendmsg+0x645/0xbc0 [ 508.505961][T10981] ? netlink_getsockopt+0x540/0x540 [ 508.511245][T10981] ? aa_sock_msg_perm+0x94/0x150 [ 508.516261][T10981] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 508.521616][T10981] ? security_socket_sendmsg+0x7c/0xa0 [ 508.527157][T10981] ? netlink_getsockopt+0x540/0x540 [ 508.532424][T10981] ____sys_sendmsg+0x59b/0x970 [ 508.537281][T10981] ? __sys_sendmsg_sock+0x30/0x30 [ 508.542366][T10981] ? __import_iovec+0x315/0x500 [ 508.547319][T10981] ? import_iovec+0x6f/0xa0 [ 508.551895][T10981] ___sys_sendmsg+0x21c/0x290 [ 508.556645][T10981] ? __sys_sendmsg+0x270/0x270 [ 508.561546][T10981] ? __lock_acquire+0x7c50/0x7c50 [ 508.566706][T10981] ? __fdget+0x17c/0x200 [ 508.571017][T10981] __se_sys_sendmsg+0x19e/0x270 [ 508.576011][T10981] ? __x64_sys_sendmsg+0x80/0x80 [ 508.581067][T10981] ? lockdep_hardirqs_on+0x94/0x140 [ 508.586353][T10981] do_syscall_64+0x4c/0xa0 [ 508.590820][T10981] ? clear_bhb_loop+0x60/0xb0 [ 508.595551][T10981] ? clear_bhb_loop+0x60/0xb0 [ 508.600283][T10981] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 508.606224][T10981] RIP: 0033:0x7f4647d8ec29 [ 508.610687][T10981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 508.630339][T10981] RSP: 002b:00007f4648cba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 508.638814][T10981] RAX: ffffffffffffffda RBX: 00007f4647fd5fa0 RCX: 00007f4647d8ec29 [ 508.646836][T10981] RDX: 00000000240000c0 RSI: 0000200000000140 RDI: 0000000000000003 [ 508.654855][T10981] RBP: 00007f4648cba090 R08: 0000000000000000 R09: 0000000000000000 [ 508.662875][T10981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.670889][T10981] R13: 00007f4647fd6038 R14: 00007f4647fd5fa0 R15: 00007ffe14277c68 [ 508.678986][T10981] [ 510.127923][T10989] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2424'. [ 510.229056][T10879] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 510.236771][T10879] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 510.593675][T10998] FAULT_INJECTION: forcing a failure. [ 510.593675][T10998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.619379][T10998] CPU: 0 PID: 10998 Comm: syz.4.2428 Not tainted syzkaller #0 [ 510.626902][T10998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 510.637063][T10998] Call Trace: [ 510.640372][T10998] [ 510.643319][T10998] dump_stack_lvl+0x168/0x22e [ 510.648061][T10998] ? show_regs_print_info+0x12/0x12 [ 510.653273][T10998] ? load_image+0x3b0/0x3b0 [ 510.657803][T10998] ? __lock_acquire+0x7c50/0x7c50 [ 510.662947][T10998] should_fail_ex+0x399/0x4d0 [ 510.667667][T10998] _copy_from_user+0x2c/0x170 [ 510.672359][T10998] vmemdup_user+0xa8/0x1d0 [ 510.676791][T10998] map_get_next_key+0x225/0x620 [ 510.681750][T10998] ? __might_fault+0xa6/0x120 [ 510.686454][T10998] ? bpf_lsm_bpf+0x5/0x10 [ 510.690798][T10998] __sys_bpf+0x3ce/0x6d0 [ 510.695060][T10998] ? bpf_link_show_fdinfo+0x340/0x340 [ 510.700461][T10998] ? lock_chain_count+0x20/0x20 [ 510.705351][T10998] __x64_sys_bpf+0x78/0x90 [ 510.709788][T10998] do_syscall_64+0x4c/0xa0 [ 510.714219][T10998] ? clear_bhb_loop+0x60/0xb0 [ 510.718909][T10998] ? clear_bhb_loop+0x60/0xb0 [ 510.723608][T10998] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 510.729522][T10998] RIP: 0033:0x7fc4b738ec29 [ 510.733950][T10998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.753652][T10998] RSP: 002b:00007fc4b829b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 510.762078][T10998] RAX: ffffffffffffffda RBX: 00007fc4b75d5fa0 RCX: 00007fc4b738ec29 [ 510.770065][T10998] RDX: 0000000000000020 RSI: 0000200000001600 RDI: 0000000000000004 [ 510.778069][T10998] RBP: 00007fc4b829b090 R08: 0000000000000000 R09: 0000000000000000 [ 510.786055][T10998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.794037][T10998] R13: 00007fc4b75d6038 R14: 00007fc4b75d5fa0 R15: 00007ffc7c0bec28 [ 510.802028][T10998] [ 510.866407][T11002] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.2429'. [ 510.914936][T11005] FAULT_INJECTION: forcing a failure. [ 510.914936][T11005] name failslab, interval 1, probability 0, space 0, times 0 [ 510.964664][T11005] CPU: 1 PID: 11005 Comm: syz.4.2431 Not tainted syzkaller #0 [ 510.972202][T11005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 510.982310][T11005] Call Trace: [ 510.985633][T11005] [ 510.988614][T11005] dump_stack_lvl+0x168/0x22e [ 510.993356][T11005] ? show_regs_print_info+0x12/0x12 [ 510.998627][T11005] ? load_image+0x3b0/0x3b0 [ 511.003212][T11005] ? __might_sleep+0xd0/0xd0 [ 511.007888][T11005] ? __lock_acquire+0x7c50/0x7c50 [ 511.012985][T11005] ? lock_chain_count+0x20/0x20 [ 511.017915][T11005] should_fail_ex+0x399/0x4d0 [ 511.022708][T11005] should_failslab+0x5/0x20 [ 511.027287][T11005] slab_pre_alloc_hook+0x59/0x310 [ 511.032365][T11005] ? _local_bh_enable+0xa0/0xa0 [ 511.033759][T10879] Bluetooth: hci4: ISO packet for unknown connection handle 2366 [ 511.037257][T11005] ? __hw_addr_del_ex+0x133/0x4e0 [ 511.050152][T11005] ? igmp6_group_dropped+0x378/0xd20 [ 511.055528][T11005] __kmem_cache_alloc_node+0x4f/0x260 [ 511.060957][T11005] ? igmp6_group_dropped+0x378/0xd20 [ 511.066288][T11005] kmalloc_trace+0x26/0xe0 [ 511.070746][T11005] igmp6_group_dropped+0x378/0xd20 [ 511.075902][T11005] ? sf_setstate+0xdfa/0xe90 [ 511.080524][T11005] ? __ipv6_dev_mc_dec+0x65/0x330 [ 511.085583][T11005] ? mutex_lock_nested+0x10/0x10 [ 511.090560][T11005] ? __ipv6_dev_mc_inc+0xa90/0xa90 [ 511.095733][T11005] __ipv6_dev_mc_dec+0x2af/0x330 [ 511.100732][T11005] ipv6_sock_mc_drop+0x4bf/0x600 [ 511.105755][T11005] do_ipv6_setsockopt+0x2592/0x3b20 [ 511.111026][T11005] ? sk_dst_reset+0xa0/0xa0 [ 511.115588][T11005] ? verify_lock_unused+0x140/0x140 [ 511.120837][T11005] ? mark_lock+0x94/0x320 [ 511.125221][T11005] ? __lock_acquire+0x12e5/0x7c50 [ 511.130339][T11005] ? get_pid_task+0x1c/0x1e0 [ 511.134957][T11005] ? verify_lock_unused+0x140/0x140 [ 511.140189][T11005] ? aa_label_sk_perm+0x3e7/0x500 [ 511.145268][T11005] ? aa_sk_perm+0x920/0x920 [ 511.149853][T11005] ? __might_sleep+0xd0/0xd0 [ 511.154493][T11005] ? __fget_files+0x28/0x4d0 [ 511.159137][T11005] ? __lock_acquire+0x7c50/0x7c50 [ 511.164227][T11005] ? aa_sk_perm+0x7e5/0x920 [ 511.168798][T11005] ? aa_af_perm+0x2b0/0x2b0 [ 511.173337][T11005] ? __fget_files+0x44a/0x4d0 [ 511.178059][T11005] ? aa_sock_opt_perm+0x74/0x100 [ 511.183063][T11005] ipv6_setsockopt+0x55/0x190 [ 511.187788][T11005] ? sock_common_recvmsg+0x1a0/0x1a0 [ 511.193126][T11005] __sys_setsockopt+0x2bf/0x3d0 [ 511.198042][T11005] __x64_sys_setsockopt+0xb1/0xc0 [ 511.203140][T11005] do_syscall_64+0x4c/0xa0 [ 511.207589][T11005] ? clear_bhb_loop+0x60/0xb0 [ 511.212307][T11005] ? clear_bhb_loop+0x60/0xb0 [ 511.217022][T11005] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 511.222949][T11005] RIP: 0033:0x7fc4b738ec29 [ 511.227396][T11005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.247022][T11005] RSP: 002b:00007fc4b829b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 511.255459][T11005] RAX: ffffffffffffffda RBX: 00007fc4b75d5fa0 RCX: 00007fc4b738ec29 [ 511.263522][T11005] RDX: 0000000000000015 RSI: 0000000000000029 RDI: 0000000000000003 [ 511.271550][T11005] RBP: 00007fc4b829b090 R08: 00000000000000b9 R09: 0000000000000000 [ 511.279552][T11005] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 511.287564][T11005] R13: 00007fc4b75d6038 R14: 00007fc4b75d5fa0 R15: 00007ffc7c0bec28 [ 511.295611][T11005] [ 511.372063][T11008] netlink: 'syz.2.2430': attribute type 1 has an invalid length. [ 511.399251][T11008] netlink: 'syz.2.2430': attribute type 4 has an invalid length. [ 511.431173][T11008] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2430'. [ 511.502819][T11006] netlink: 'syz.1.2426': attribute type 10 has an invalid length. [ 511.532425][T11006] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2426'. [ 511.552282][T11006] device team0 entered promiscuous mode [ 511.562471][T11006] device team_slave_1 entered promiscuous mode [ 511.582003][T11006] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 511.614585][T11006] bridge0: port 3(team0) entered blocking state [ 511.666590][T11006] bridge0: port 3(team0) entered disabled state [ 511.706071][T11006] bridge0: port 3(team0) entered blocking state [ 511.712451][T11006] bridge0: port 3(team0) entered forwarding state [ 511.747987][T11006] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 511.851763][T11018] device wlan1 left promiscuous mode [ 511.914793][T11018] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2434'. [ 512.210405][T10879] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 512.218029][T10879] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 512.506316][T11040] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2441'. [ 512.521182][T11040] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2441'. [ 512.542878][T11038] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2441'. [ 512.570061][T11042] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2441'. [ 512.884925][T11048] netlink: 'syz.2.2443': attribute type 21 has an invalid length. [ 512.916319][T11048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2443'. [ 513.031163][T11038] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 513.040370][T11038] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 513.056644][T11048] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 513.077622][T11048] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 513.118476][T11048] device veth0_to_bridge entered promiscuous mode [ 513.159786][T11049] netlink: 'syz.2.2443': attribute type 10 has an invalid length. [ 513.199459][T11049] batman_adv: batadv0: Adding interface: virt_wifi0 [ 513.220460][T11049] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.255970][T11049] batman_adv: batadv0: Interface activated: virt_wifi0 [ 513.279141][T11053] netlink: 'syz.3.2444': attribute type 1 has an invalid length. [ 513.292670][T11053] netlink: 'syz.3.2444': attribute type 4 has an invalid length. [ 513.762401][T10879] Bluetooth: hci0: ISO packet for unknown connection handle 2366 [ 513.809029][T11061] netlink: 'syz.0.2446': attribute type 1 has an invalid length. [ 513.835932][T11061] netlink: 'syz.0.2446': attribute type 4 has an invalid length. [ 514.005693][T10879] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 514.013155][T10879] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 514.268940][T11072] netlink: 'syz.4.2449': attribute type 10 has an invalid length. [ 514.307235][T11072] device team0 entered promiscuous mode [ 514.337973][T11072] device team_slave_0 entered promiscuous mode [ 514.344322][T11072] device team_slave_1 entered promiscuous mode [ 514.380970][T11072] device macvlan1 entered promiscuous mode [ 514.405796][T11072] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.427463][T11072] bond0: (slave team0): Releasing backup interface [ 514.466834][T11072] bridge0: port 3(team0) entered blocking state [ 514.475455][T11072] bridge0: port 3(team0) entered disabled state [ 514.634602][T11095] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 514.645489][T11095] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 515.143124][T10879] Bluetooth: hci2: ISO packet for unknown connection handle 2366 [ 515.195344][T11109] __nla_validate_parse: 6 callbacks suppressed [ 515.195478][T11109] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2462'. [ 515.330155][T10879] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 515.337938][T10879] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 515.449891][T11120] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2468'. [ 515.570320][T11122] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2467'. [ 515.697286][T11127] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.2469'. [ 516.113136][T11136] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2473'. [ 516.254846][T11139] netlink: 185432 bytes leftover after parsing attributes in process `syz.2.2474'. [ 516.283123][T11139] netlink: zone id is out of range [ 516.296850][T11139] netlink: zone id is out of range [ 516.310244][T11139] netlink: zone id is out of range [ 516.337211][T11139] netlink: zone id is out of range [ 516.361739][T11139] netlink: zone id is out of range [ 516.374227][T11139] netlink: zone id is out of range [ 516.388863][T11139] netlink: zone id is out of range [ 516.403896][T11145] device lo entered promiscuous mode [ 516.540745][T10879] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 516.577657][T11149] validate_nla: 7 callbacks suppressed [ 516.577768][T11149] netlink: 'syz.1.2477': attribute type 1 has an invalid length. [ 516.593441][T11149] netlink: 'syz.1.2477': attribute type 4 has an invalid length. [ 516.604569][T11149] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2477'. [ 516.658629][T10879] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 516.666143][T10879] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 516.922369][T11163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2482'. [ 516.949656][T11163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2482'. [ 516.965399][T11163] netlink: 33 bytes leftover after parsing attributes in process `syz.0.2482'. [ 517.019272][T10879] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 517.026843][T10879] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 517.585171][T10879] Bluetooth: hci1: ISO packet for unknown connection handle 2366 [ 517.608776][T11185] netlink: 'syz.4.2491': attribute type 1 has an invalid length. [ 517.636846][T11185] netlink: 'syz.4.2491': attribute type 4 has an invalid length. [ 518.112580][T11199] FAULT_INJECTION: forcing a failure. [ 518.112580][T11199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 518.166060][T11199] CPU: 1 PID: 11199 Comm: syz.3.2497 Not tainted syzkaller #0 [ 518.173616][T11199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 518.183745][T11199] Call Trace: [ 518.187076][T11199] [ 518.190062][T11199] dump_stack_lvl+0x168/0x22e [ 518.194840][T11199] ? show_regs_print_info+0x12/0x12 [ 518.200115][T11199] ? load_image+0x3b0/0x3b0 [ 518.204731][T11199] ? __might_fault+0xa6/0x120 [ 518.209506][T11199] should_fail_ex+0x399/0x4d0 [ 518.214283][T11199] copyin+0x1b/0x120 [ 518.218249][T11199] _copy_from_iter+0x45a/0x10c0 [ 518.223202][T11199] ? copyout_mc+0x110/0x110 [ 518.227774][T11199] ? __virt_addr_valid+0x188/0x540 [ 518.232956][T11199] ? __virt_addr_valid+0x188/0x540 [ 518.238137][T11199] ? __virt_addr_valid+0x465/0x540 [ 518.243336][T11199] ? __check_object_size+0x500/0xa40 [ 518.248730][T11199] netlink_sendmsg+0x746/0xbc0 [ 518.253599][T11199] ? netlink_getsockopt+0x540/0x540 [ 518.258865][T11199] ? aa_sock_msg_perm+0x94/0x150 [ 518.263902][T11199] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 518.269247][T11199] ? security_socket_sendmsg+0x7c/0xa0 [ 518.274780][T11199] ? netlink_getsockopt+0x540/0x540 [ 518.280040][T11199] ____sys_sendmsg+0x59b/0x970 [ 518.284917][T11199] ? __sys_sendmsg_sock+0x30/0x30 [ 518.289989][T11199] ? __import_iovec+0x315/0x500 [ 518.294916][T11199] ? import_iovec+0x6f/0xa0 [ 518.299477][T11199] ___sys_sendmsg+0x21c/0x290 [ 518.304206][T11199] ? __sys_sendmsg+0x270/0x270 [ 518.309075][T11199] ? __lock_acquire+0x7c50/0x7c50 [ 518.314195][T11199] ? __fdget+0x17c/0x200 [ 518.318508][T11199] __se_sys_sendmsg+0x19e/0x270 [ 518.323409][T11199] ? __x64_sys_sendmsg+0x80/0x80 [ 518.328428][T11199] ? lockdep_hardirqs_on+0x94/0x140 [ 518.333667][T11199] do_syscall_64+0x4c/0xa0 [ 518.338107][T11199] ? clear_bhb_loop+0x60/0xb0 [ 518.342817][T11199] ? clear_bhb_loop+0x60/0xb0 [ 518.347535][T11199] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 518.353484][T11199] RIP: 0033:0x7f4647d8ec29 [ 518.357962][T11199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 518.377602][T11199] RSP: 002b:00007f4648cba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 518.386052][T11199] RAX: ffffffffffffffda RBX: 00007f4647fd5fa0 RCX: 00007f4647d8ec29 [ 518.394063][T11199] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 518.402068][T11199] RBP: 00007f4648cba090 R08: 0000000000000000 R09: 0000000000000000 [ 518.410069][T11199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.418080][T11199] R13: 00007f4647fd6038 R14: 00007f4647fd5fa0 R15: 00007ffe14277c68 [ 518.426113][T11199] [ 519.052314][T10879] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 519.140611][T11220] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 519.246614][T11224] netlink: 'syz.1.2505': attribute type 1 has an invalid length. [ 519.255254][T11224] netlink: 'syz.1.2505': attribute type 4 has an invalid length. [ 520.786634][T11241] device syzkaller0 entered promiscuous mode [ 521.230293][T10879] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 521.237901][T10879] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 522.993011][T11278] FAULT_INJECTION: forcing a failure. [ 522.993011][T11278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 523.026704][T11278] CPU: 1 PID: 11278 Comm: syz.1.2524 Not tainted syzkaller #0 [ 523.034248][T11278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 523.044350][T11278] Call Trace: [ 523.047679][T11278] [ 523.050665][T11278] dump_stack_lvl+0x168/0x22e [ 523.055424][T11278] ? show_regs_print_info+0x12/0x12 [ 523.060700][T11278] ? load_image+0x3b0/0x3b0 [ 523.065292][T11278] ? __lock_acquire+0x7c50/0x7c50 [ 523.070423][T11278] should_fail_ex+0x399/0x4d0 [ 523.075193][T11278] _copy_from_user+0x2c/0x170 [ 523.079936][T11278] get_user_ifreq+0x67/0x170 [ 523.084604][T11278] inet_ioctl+0x292/0x400 [ 523.089016][T11278] ? inet_shutdown+0x370/0x370 [ 523.093811][T11278] ? slab_free_freelist_hook+0x131/0x1a0 [ 523.099485][T11278] ? tomoyo_path_number_perm+0x4ae/0x600 [ 523.105157][T11278] ? __kmem_cache_free+0xb6/0x1f0 [ 523.110237][T11278] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 523.115753][T11278] sock_do_ioctl+0xd3/0x2f0 [ 523.120297][T11278] ? sock_show_fdinfo+0xb0/0xb0 [ 523.125242][T11278] sock_ioctl+0x4ed/0x6e0 [ 523.129614][T11278] ? sock_poll+0x3f0/0x3f0 [ 523.134102][T11278] ? bpf_lsm_file_ioctl+0x5/0x10 [ 523.139094][T11278] ? security_file_ioctl+0x7c/0xa0 [ 523.144237][T11278] ? sock_poll+0x3f0/0x3f0 [ 523.148686][T11278] __se_sys_ioctl+0xfa/0x170 [ 523.153314][T11278] do_syscall_64+0x4c/0xa0 [ 523.157753][T11278] ? clear_bhb_loop+0x60/0xb0 [ 523.162449][T11278] ? clear_bhb_loop+0x60/0xb0 [ 523.167161][T11278] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 523.173076][T11278] RIP: 0033:0x7f731a58ec29 [ 523.177520][T11278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.197156][T11278] RSP: 002b:00007f731b387038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 523.205596][T11278] RAX: ffffffffffffffda RBX: 00007f731a7d5fa0 RCX: 00007f731a58ec29 [ 523.213603][T11278] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000009 [ 523.221597][T11278] RBP: 00007f731b387090 R08: 0000000000000000 R09: 0000000000000000 [ 523.229594][T11278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.237588][T11278] R13: 00007f731a7d6038 R14: 00007f731a7d5fa0 R15: 00007ffdede814e8 [ 523.245639][T11278] [ 523.866065][T10879] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 523.873659][T10879] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 524.712289][T10879] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 524.719842][T10879] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 524.950578][T10879] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 524.958344][T10879] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 525.254328][T11316] __nla_validate_parse: 7 callbacks suppressed [ 525.254345][T11316] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.2541'. [ 525.377322][T11320] netlink: 'syz.1.2540': attribute type 21 has an invalid length. [ 525.385478][T11320] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2540'. [ 525.434035][T11320] netlink: 'syz.1.2540': attribute type 5 has an invalid length. [ 525.449376][T11320] netlink: 'syz.1.2540': attribute type 6 has an invalid length. [ 525.461781][T11320] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2540'. [ 525.967683][T10879] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 525.975206][T10879] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 526.042198][T11334] device syzkaller0 entered promiscuous mode [ 526.079307][T10879] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 526.087120][T10879] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 526.239526][T11349] FAULT_INJECTION: forcing a failure. [ 526.239526][T11349] name failslab, interval 1, probability 0, space 0, times 0 [ 526.258650][T11349] CPU: 0 PID: 11349 Comm: syz.3.2553 Not tainted syzkaller #0 [ 526.266168][T11349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 526.276275][T11349] Call Trace: [ 526.279584][T11349] [ 526.282543][T11349] dump_stack_lvl+0x168/0x22e [ 526.287263][T11349] ? show_regs_print_info+0x12/0x12 [ 526.292498][T11349] ? load_image+0x3b0/0x3b0 [ 526.297063][T11349] ? __lock_acquire+0x7c50/0x7c50 [ 526.302129][T11349] ? __mutex_trylock_common+0x14f/0x250 [ 526.307805][T11349] should_fail_ex+0x399/0x4d0 [ 526.312549][T11349] should_failslab+0x5/0x20 [ 526.317094][T11349] slab_pre_alloc_hook+0x59/0x310 [ 526.322343][T11349] ? __mutex_lock+0x19e/0xaf0 [ 526.327064][T11349] ? tracepoint_add_func+0x307/0x9a0 [ 526.332395][T11349] __kmem_cache_alloc_node+0x4f/0x260 [ 526.337814][T11349] ? tracepoint_add_func+0x307/0x9a0 [ 526.343150][T11349] __kmalloc+0xa0/0x240 [ 526.347363][T11349] ? perf_trace_tlb_flush+0x340/0x340 [ 526.352788][T11349] tracepoint_add_func+0x307/0x9a0 [ 526.357950][T11349] ? __radix_tree_preload+0x82/0x880 [ 526.363301][T11349] ? perf_trace_tlb_flush+0x340/0x340 [ 526.368723][T11349] tracepoint_probe_register_prio_may_exist+0x5c/0x90 [ 526.375529][T11349] ? perf_trace_tlb_flush+0x340/0x340 [ 526.381028][T11349] bpf_raw_tp_link_attach+0x3d1/0x550 [ 526.386444][T11349] ? bpf_insn_prepare_dump+0x840/0x840 [ 526.391966][T11349] bpf_raw_tracepoint_open+0x194/0x200 [ 526.397466][T11349] __sys_bpf+0x4e9/0x6d0 [ 526.401777][T11349] ? bpf_link_show_fdinfo+0x340/0x340 [ 526.407228][T11349] ? lock_chain_count+0x20/0x20 [ 526.412126][T11349] __x64_sys_bpf+0x78/0x90 [ 526.416579][T11349] do_syscall_64+0x4c/0xa0 [ 526.421029][T11349] ? clear_bhb_loop+0x60/0xb0 [ 526.425737][T11349] ? clear_bhb_loop+0x60/0xb0 [ 526.430443][T11349] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 526.436361][T11349] RIP: 0033:0x7f4647d8ec29 [ 526.440798][T11349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 526.460437][T11349] RSP: 002b:00007f4648cba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 526.468876][T11349] RAX: ffffffffffffffda RBX: 00007f4647fd5fa0 RCX: 00007f4647d8ec29 [ 526.476909][T11349] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000011 [ 526.484910][T11349] RBP: 00007f4648cba090 R08: 0000000000000000 R09: 0000000000000000 [ 526.492917][T11349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.501018][T11349] R13: 00007f4647fd6038 R14: 00007f4647fd5fa0 R15: 00007ffe14277c68 [ 526.509081][T11349] [ 541.265947][ T4277] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 541.274495][ T4277] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 541.282669][ T4277] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 541.291114][ T4277] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 541.298924][ T4277] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 541.306401][ T4277] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 543.335967][T10879] Bluetooth: hci5: command 0x0409 tx timeout [ 543.566477][T10879] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 543.575331][T10879] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 543.592361][ T48] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 543.600512][ T48] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 543.608600][T10879] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 543.616757][ T48] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 544.006476][T10879] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 544.024988][T11372] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 544.035378][T11372] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 544.044146][T11372] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 544.052627][T11372] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 544.062107][T11372] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 544.069796][T11372] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 544.077982][T11372] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 544.086844][T11372] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 544.096553][T11372] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 544.104505][T11372] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 544.112761][T11372] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 544.132506][T11372] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 544.140654][T11372] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 544.149068][T11372] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 544.157522][T11372] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 544.164726][T11372] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 544.173779][T11372] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 545.415942][T11376] Bluetooth: hci5: command 0x041b tx timeout [ 545.656007][T11376] Bluetooth: hci6: command 0x0409 tx timeout [ 546.215833][T11376] Bluetooth: hci9: command 0x0409 tx timeout [ 546.222311][T11376] Bluetooth: hci8: command 0x0409 tx timeout [ 546.296134][T11376] Bluetooth: hci7: command 0x0409 tx timeout [ 547.495959][T11376] Bluetooth: hci5: command 0x040f tx timeout [ 547.735823][T11376] Bluetooth: hci6: command 0x041b tx timeout [ 548.295795][T11376] Bluetooth: hci8: command 0x041b tx timeout [ 548.301883][T11376] Bluetooth: hci9: command 0x041b tx timeout [ 548.376079][T11376] Bluetooth: hci7: command 0x041b tx timeout [ 549.575962][T11376] Bluetooth: hci5: command 0x0419 tx timeout [ 549.815799][T11376] Bluetooth: hci6: command 0x040f tx timeout [ 550.375784][T11376] Bluetooth: hci9: command 0x040f tx timeout [ 550.381898][T11376] Bluetooth: hci8: command 0x040f tx timeout [ 550.455968][T11376] Bluetooth: hci7: command 0x040f tx timeout [ 551.895795][T11376] Bluetooth: hci6: command 0x0419 tx timeout [ 552.457039][T11376] Bluetooth: hci8: command 0x0419 tx timeout [ 552.463144][T11376] Bluetooth: hci9: command 0x0419 tx timeout [ 552.536018][T11376] Bluetooth: hci7: command 0x0419 tx timeout [ 553.095726][ T4380] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2656 jiffies s: 80941 root: 0x1/. [ 553.118449][ T4380] rcu: blocking rcu_node structures (internal RCU debug): [ 553.130383][ T4380] Sending NMI from CPU 1 to CPUs 0: [ 553.135767][ C0] NMI backtrace for cpu 0 [ 553.135778][ C0] CPU: 0 PID: 11346 Comm: syz.2.2551 Not tainted syzkaller #0 [ 553.135795][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 553.135804][ C0] RIP: 0010:perf_trace_preemptirq_template+0x108/0x330 [ 553.135833][ C0] Code: a5 80 00 00 00 4c 89 e0 48 c1 e8 03 48 8b 0c 24 49 03 0e 48 89 0c 24 80 3c 18 00 74 08 4c 89 e7 e8 ed c8 49 00 49 83 3c 24 00 <75> 23 4c 8b 34 24 4c 89 f0 48 c1 e8 03 80 3c 18 00 74 08 4c 89 f7 [ 553.135847][ C0] RSP: 0018:ffffc900000078e0 EFLAGS: 00000046 [ 553.135862][ C0] RAX: 1ffffffff196fa2c RBX: dffffc0000000000 RCX: ffffe8ffffc34308 [ 553.135875][ C0] RDX: 0000000000000000 RSI: ffffffff8adefc80 RDI: ffffffff8adefc40 [ 553.135886][ C0] RBP: ffffc900000079a8 R08: dffffc0000000000 R09: ffffed10171c6afa [ 553.135899][ C0] R10: ffffed10171c6afa R11: 1ffff110171c6af9 R12: ffffffff8cb7d160 [ 553.135911][ C0] R13: ffffffff8cb7d0e0 R14: ffffffff8c5e4980 R15: 1ffff92000000f20 [ 553.135924][ C0] FS: 00007f63dee016c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 553.135939][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 553.135950][ C0] CR2: 00007f63deddff98 CR3: 000000005939d000 CR4: 00000000003506f0 [ 553.135965][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 553.135974][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 553.135984][ C0] Call Trace: [ 553.135989][ C0] [ 553.135996][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 553.136016][ C0] ? trace_event_raw_event_preemptirq_template+0x1d0/0x1d0 [ 553.136058][ C0] ? __irq_exit_rcu+0x13b/0x220 [ 553.136084][ C0] ? irq_exit_rcu+0x20/0x20 [ 553.136112][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 553.136130][ C0] trace_irq_enable_rcuidle+0xd3/0x140 [ 553.136154][ C0] trace_hardirqs_on+0x24/0x40 [ 553.136185][ C0] asm_sysvec_irq_work+0x16/0x20 [ 553.136202][ C0] RIP: 0010:rcu_read_unlock_special+0x84/0x500 [ 553.136219][ C0] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 2d 97 96 7e 41 f7 c6 00 00 f0 00 74 45 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b [ 553.136232][ C0] RSP: 0018:ffffc90000007aa0 EFLAGS: 00000206 [ 553.136244][ C0] RAX: 17ec6604490f7600 RBX: 1ffff92000000f5c RCX: 17ec6604490f7600 [ 553.136257][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c0500 RDI: ffffffff8adefca0 [ 553.136269][ C0] RBP: ffffc90000007b90 R08: dffffc0000000000 R09: ffffed10171c6afa [ 553.136281][ C0] R10: ffffed10171c6afa R11: 1ffff110171c6af9 R12: 0000000000000246 [ 553.136292][ C0] R13: dffffc0000000000 R14: ffff8880b8e3b900 R15: 0000000000000001 [ 553.136319][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 553.136333][ C0] ? lock_is_held_type+0x13a/0x190 [ 553.136364][ C0] __rcu_read_unlock+0x78/0xd0 [ 553.136378][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 553.136399][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 553.136418][ C0] ieee80211_iterate_active_interfaces_atomic+0x156/0x170 [ 553.136440][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 553.136458][ C0] __hrtimer_run_queues+0x554/0xd60 [ 553.136483][ C0] ? hw_scan_work+0xf30/0xf30 [ 553.136504][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 553.136520][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 553.136546][ C0] hrtimer_run_softirq+0x183/0x2a0 [ 553.136567][ C0] handle_softirqs+0x2a1/0x920 [ 553.136596][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 553.136632][ C0] ? do_softirq+0x200/0x200 [ 553.136662][ C0] __irq_exit_rcu+0x12f/0x220 [ 553.136687][ C0] ? irq_exit_rcu+0x20/0x20 [ 553.136730][ C0] irq_exit_rcu+0x5/0x20 [ 553.136751][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 553.136772][ C0] [ 553.136776][ C0] [ 553.136781][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 553.136796][ C0] RIP: 0010:put_cpu_partial+0x1b0/0x250 [ 553.136813][ C0] Code: 3b 44 24 18 0f 85 b4 00 00 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 3c ec 46 08 f7 c5 00 02 00 00 74 c0 fb 4d 85 e4 <75> bf eb c8 e8 a7 6c 33 02 85 c0 0f 84 e9 fe ff ff 83 3d 90 33 4f [ 553.136825][ C0] RSP: 0018:ffffc90003c9fb18 EFLAGS: 00000246 [ 553.136837][ C0] RAX: 17ec6604490f7600 RBX: ffff8880174c5000 RCX: 17ec6604490f7600 [ 553.136848][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c0500 RDI: ffffffff8adefca0 [ 553.136859][ C0] RBP: 0000000000000286 R08: dffffc0000000000 R09: ffffed10171c6afa [ 553.136870][ C0] R10: ffffed10171c6afa R11: 1ffff110171c6af9 R12: 0000000000000000 [ 553.136881][ C0] R13: 0000000000000000 R14: ffff88807b198000 R15: ffff8880b8e3f770 [ 553.136902][ C0] ? put_cpu_partial+0x6e/0x250 [ 553.136921][ C0] qlist_free_all+0x76/0xe0 [ 553.136937][ C0] kasan_quarantine_reduce+0x144/0x160 [ 553.136954][ C0] __kasan_slab_alloc+0x1e/0x80 [ 553.136975][ C0] slab_post_alloc_hook+0x4b/0x480 [ 553.136990][ C0] ? slab_pre_alloc_hook+0x59/0x310 [ 553.137008][ C0] kmem_cache_alloc_node+0x14d/0x320 [ 553.137023][ C0] ? perf_event_alloc+0x154/0x21b0 [ 553.137049][ C0] perf_event_alloc+0x154/0x21b0 [ 553.137074][ C0] ? _raw_spin_unlock+0x24/0x40 [ 553.137096][ C0] ? alloc_fd+0x58f/0x630 [ 553.137116][ C0] ? find_lively_task_by_vpid+0x19/0x290 [ 553.137133][ C0] ? find_lively_task_by_vpid+0x19/0x290 [ 553.137153][ C0] __se_sys_perf_event_open+0x6cd/0x1e60 [ 553.137183][ C0] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 553.137215][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 553.137234][ C0] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 553.137259][ C0] do_syscall_64+0x4c/0xa0 [ 553.137275][ C0] ? clear_bhb_loop+0x60/0xb0 [ 553.137290][ C0] ? clear_bhb_loop+0x60/0xb0 [ 553.137307][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 553.137321][ C0] RIP: 0033:0x7f63ddf8ec29 [ 553.137334][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 553.137346][ C0] RSP: 002b:00007f63dee01038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 553.137360][ C0] RAX: ffffffffffffffda RBX: 00007f63de1d5fa0 RCX: 00007f63ddf8ec29 [ 553.137371][ C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00002000000001c0 [ 553.137382][ C0] RBP: 00007f63de011e41 R08: 0000000000000000 R09: 0000000000000000 [ 553.137391][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 553.137401][ C0] R13: 00007f63de1d6038 R14: 00007f63de1d5fa0 R15: 00007ffc78e495a8 [ 553.137421][ C0] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 562.699920][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.706319][ T1277] ieee802154 phy1 wpan1: encryption failed: -22