last executing test programs: 6m44.405446801s ago: executing program 3 (id=236): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000200)}], 0x2}, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="13030000690005"], 0xfe33) 6m44.17653375s ago: executing program 3 (id=241): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) getpid() socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xa, [@fwd={0x8}, @var={0x5, 0x0, 0x0, 0xe, 0x1, 0x1}]}, {0x0, [0x2e, 0x2e, 0x0, 0x30, 0x2e, 0x61, 0x0, 0x61]}}, 0x0, 0x3e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x1, 0x106) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8990, &(0x7f0000000040)={'wg2\x00', @multicast}) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2d, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ec0)={0x6, 0x4, &(0x7f0000001c00)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0xa, 0xfe00}]}, &(0x7f0000001c40)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000340)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000040)={r2}) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x18, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x107, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e3, &(0x7f0000000180)={r2, r6}) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0}, 0xe07e872420dfefca) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c000) 6m43.293331763s ago: executing program 3 (id=247): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0}, 0x8820, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0x69cc098656a213b3) r1 = getpid() perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x7, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r0, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x2008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x80044944, 0x0) socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x72, &(0x7f00000002c0), 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2832], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000000c0)="76389e147583ddd0569ba56a5cfd", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110c230000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x40047459, 0xf0ff1f00000000) bpf$MAP_CREATE(0x0, 0x0, 0x48) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 6m43.123173838s ago: executing program 4 (id=250): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x210000, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0xd, 0x7, 0x1, 0x8, 0x0, 0x100000000, 0x5000, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x3}, 0x100400, 0xfff, 0x1, 0x7, 0x1fe00000, 0x1ff, 0x3ff, 0x0, 0x7, 0x0, 0x1}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f00000000c0)) (async) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f0000000180)="bb79db4a898a4ca0a993a82e6729a7439d63ee9b25e0c32bfa174be4429f95cb1fe3f647715c205acffe123c54211759eef592c6d5f19ea2d135e527e8bd610cac9206c48c3ab8389b70ad934a09938b73761022d917a0540f46f75017b22c7772f053b2ec5c77567a472e8b13a5e1a12e0dce17731f05d16d0a"}, 0x20) r3 = perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x5, 0x40, 0x2, 0x4, 0x0, 0x8000000000000001, 0x5062, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x5, @perf_config_ext={0x5, 0x31}, 0x9620, 0x7fff, 0x6, 0x5, 0x7, 0xcd6, 0x5, 0x0, 0xb2c5, 0x0, 0x7fff}, 0xffffffffffffffff, 0x0, r1, 0x8) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0xb, 0x4, 0x3, 0x0, 0x0, 0x8001, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000240)}, 0x80, 0x7, 0x80000000, 0x2, 0x2, 0x7, 0x80, 0x0, 0x81, 0x0, 0xfff}, 0xffffffffffffffff, 0x5, r3, 0xa) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r4, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000003c0)="2c1b151adc10febb374753d11c1823a5aaa73e9bf405f68ea9b6da19b119271b3a86620bcd7cdb412900dbcaac16f1d9331c2ada400ca80fa10c7b9c6fb17dddcb63bf876529ea4901a10d4414b9194524f6151bb6e393b0507d1cac8de94b4478a2972fd907250faf39b59245b6b999c6f342d9f2c7ea78fc9d19992c2b0a3b4f5b212e96607645a5057d2b9fc4d3303c5a204113038f1806cab3ce3cced13c529f9ab85540a073ad26e919bada9dc07a967f5b9a0891af86f785bfc52b3115e004b42abddcaf302e8f506070fce248c484b96f8172b8a92e890cbc108cbf40773f07ece4d9add88e847f3e033d729815faab2d92094f3278bbda03fc49544ca5fdaa23e3fc4f218a76d07dfadf961390c54e8cafb8b035c2ec7324c3e6c802dca743ef83fa344a979e006c7171baa64a44d95e324c953f596d598f8010c40b452f31b8a17e92f5cb9e13b0b77adcb3ed8f829ac635bc414b4b0be8dd335a67b1837043735ae7ffaf3bdee66bac21b887e363c178ccb78953ec1919981f0a17ec269332fe4c64c3eba4dc72bc6c86e7d3098183e5f180531b26082e313269ff86db99efce937bac30ac3ed83fff5c79eba300adf3fcfc83508631f507aa6f583cd57148d08ff71651c00f4f02b5a6aa74ee0914a72248245975f73e065dd752bb8f7234d71498e4282aa51d1a83b6e78556fa383c837355ef71896091f5ef7759902b38b1b178080394e69a02a96d69547ecd8d4e3f9563dfbd516c37fd6340f77954c926a8029050265a43c759940a0270fad7ca3fd29788f0074c4f29be96ca1680d3df3a1168bdb64c20c9594efc361c1a79f4799b9e5b55f592b57e8109cf02a95eaac5f1f4889e1c280101d9040fef1e64496ae890b689548fff93c85c3ee9ee313e530ee0892eb6c5308af93e331600d33ea75c06d066404b243a4a514b9291e6accf3b81f5296a1de84a788ef69bf750d36243cc294c59cbc28a43d51c83d2d9b4180babbd061976acc044354b7faf640fba08f4b36b593b7a0cf0f506961c9f741d67ed29d7a19703d98d14addcd08638672c9eaedcf9e2ecebbf08861f0f5078ddf7207bd98b443a2eb56a0dd8ecc6404361feff8853acc633bf4e6d08a88b6afe6fc3f32f1ec2691a4627c5b1e8d53cdf51301a5de26acf879a0c490a5ddfb07817601c072f0a8ac2c2d391764313dc2f6c892497ba49691da5f3f9e040fd76449b26142bd2ef714b9111cf1d8f59175afbb3e0fcc3df0fc904b5ab52dea15f7db4802fb7f6c500b93a12a11747217dd393684ee2be37d6f4953f6d65cfa151d19c27a4e316f8c501ed37e0cd2c571c691186cc0012485142b2291166df6baaba62f3070732c478e442cab87f454ba66ca15f97d720b196b6d7305bdeb1adb0737ef3988fdd16a801f4c4ff87190191f47183133206d2ca6dd914ef46cc9f1ab4135c4becb538e14865abac86cc034c746047a7acce92eea986f23f7f21bc553859b2be0ed856616cde343c771c4fadb322c939eb6e241f406d02b638e5c0ead4c37a5bc07bfdee856e1f624442996324ce07d2a567c0007a3a1b63bcaef5c45537701d0b32bcf2d787f972c66e8e3c0ca87ae366980aedd48c898a24e7b50219eb4cda3b408a38a3d30626a62aa9e131153d71360346efbe50052821eb275b8e3c511e9b03879025f0cc5b88dfc31aed70f77c9975cc77460abc398a2cd71d0d5d9a24e92913492a47c21830cb28d5934a187d5c973258404081b3a7b0849fb44d2a8e4e9c503b8ff40b475cb2f0550d7a4e5ad9da0150f2523f56906ec5d1cc7666ac7e4fee1d42fbcfb0e6979f015d803da9a4b877c3251e812e7f60811b581f1e4dc0237b5233dfd272eee330765e2c0c1d184a53625262e4ca5917916d15a04ca0da8272fead541ade87bf1d271673725654a267e8ad8ef43e7294ba765a4449e15deaa2efb6e447f44f83ef39255437f971b7f8efb225f4021a52d88daccf9ba90228022433fc523a73fa2394534a05a9bca61011d2af1d108386db22f9923144a0408e08b192e17b6c35c856c81760e9d8e46da43619e9ac9b855508b61385234f89e7180958dadac9e3433219c13e96e7c838dd4ddff214f7d22aa68a147acf742197ec9352e199fbc92d58321c9b0d4c857344d1ce627017fe04c2f1351e3171d2a0023d2a320c83e88b2ee2534366bfc6a031d06b0c368f52425963518844dc69305b06efd60173ca06edbdb7b7f56d72b9312a643bb1249c94a4f451c59cfa2ef3545716616ce35aa985de98b47ea6ac4ddfd8c14461ab26d9d23b73be5f0b8d84b04e583a7b0b75e12fd7a1ebf6b0f0d94c76a823c7150bd92792d81346d1c81965cde6616c1f6a008baf750986182747429136b38a1f33e4f758cda5c524b9949580f21261531ce9fff00165d7ac61400842ccf69e2a61f91d8e38356b1b94d7442b308bb01a2ac261b030f7ebbc5977bca592e3fec17fe55d1d659b7ad77201dcb05406993ea1b45cbbc785b0d3ba10563d987a03842224bc94833b3711d41698349e2aea50db19f132e9b2b8a73d49e70dfa64bc395a06988c7c772c90d210ca7992843d01b827d5a47ccee4db0ec1719b88a37eb1f769ba3ae8460692beae492636ab986414f2a21f42ac9f77fc7fe6a6966df1dba92c76fc444533cd95c98fdaa8722bf84a283752781d62188250a9ced087badb8d91394ef5efac192b420c2b491b12aa468237549ff52b91252b6cc7b2b0ba84b0d8152cfb15e3098a26f597ac143a4a3d5bfb6bca24f9678ba24224753085f50e93434339e2c3c24f51f6ec8ac14521199a1f72c531a7231484896a2033a602f3b76e314bdaf913be7dabb9f7cc56f8e41339a7220e5820e784d48cce65891f19c3adefed0c26f161c3c2e81e14e7384d79edd3f46c131b7e784db11e4bc570a5e3cf05b70c01428f56523fe7d42da07d8c1f59ca135ff4c9af5eaa6ca67c0f2c5eb2ea1e4b420573fb55c47d219f47df509cd6d6f5928b0502801889a6c29668d6e3d73d741d7117ffbc10d9a3f0da66d70fc93fab05fa6ec799fbe7de017d3aa48c88dbbcf9cb48de5799a4d1fb84e27b4ff106ea5c1ed25d6c7067fa3faf3feb76891a3bf05a84798282281f94152d36b6aee179bc8f5669feb6dc0dc0612310966e292a2f86ec3bf19b5ff03cfbd73d6be52f3093b39b9bc79f1051d651fa402df7860c036f3c79526fcb8d5210037f67e43ad2f2205b000fe16c82ec8adcdc6c074de73212b47d04c69e2fb8a60918b3af54c5b988316a068fdfbd3e48326b0725096088a8f3c3a47d3dcf65f0330693fffda2c85ab94bfbe422e596ac86daa984f545ebd1f6a560b3b105e51dc389197970cf1efd16c938ed3f81a6c26c9be41f120e0767a29e371e4274f79eaf5a08cc89f61c5bbaff0cb77495dc4be0ff648c406c3cd70b39402c7f24e0b9a510490857bf98088dba7adf3c2383f3ed9cb637380c7c1bcc1b83a31cff5e53a2e10ab935b9b2edd96b2018ef1afa3d42a332fbf414475259e544a72807060b895a620e8c8c42b2d79509c22219ccc98c118c60d4dc49bef5a7c710bb23fc1dd33195ccedb29d289aa8410520861103e918ac62f91ddb7d475098bbf6a7cc2ae5d747372b474fbeb5f7a179f62425c6394c5ced92178708d92856905024de58e351ddcc57b0839d2d7c2dc5b0e3d259a8a237dfdaf7b586d86504f2b179de7ac0bf82cc934e65d255ca312e183a25ffe07178078696c080c0d8b2570226b9f33b596fd98c252985dfef4f566908e59c817f60bfd88a38abb10d3ef48ca13559d7ff592f9fa061058769e4acd2fb340d1757fb68549ac50b03e27ef700dc6a624389738d2dca98821e4c330d49de95c72a85b9472d532bcaec967bf9bce0f56115516c71a7f90fb519f3e02b862a8541af16e33ecb85578b902e2eae931d9dae45db03924b31fa1c1b62172e0bfad33c084abaaf08dd0c22a21c2b6924b59c3f39a0c78ddcb6ac32e7450774c9b608ef3a7c4670615bce3bfaa792016a331ffc03a4318c1d25ca23a3a0c867e22676d999104963d85a1fbf1780ecf95203f4d5d90f8672b1cd181187e84671749d03ba572cc7cfb3c5601a4f5990d05ed0e02e179321cdcc3f1ef2eac6679114416eeb5e427e783915ce1d49846d8d25cff818a3147e5d62a1e5f2f6acf161da224ebc3481844e748a7157aae81c95b2b819f79731d16b377397dcd53bd0bd78a79ed6fd27a9859b34323a20556b7681417d45213252423e49aee5c9f94ef08f992bd56079ddaddee3d11aee5a1f605066e42a52f81f3afd648ee4450a0d6bd116118b4bfb123b9ec84cc7389f05332d694e751e1203f068bbcbe68dc3351b841ef3dee26c9bbca2230806172bec307ccfc192499d8ad2fca30da5d00369b51b36fdab0d8f05066867e3c0ca6ab1838bdf434a0b2edc37157683b96858850d7f6406ddee8571808f8d4a5f6120a43d1840c8e8929e63f31602841611f1d387f483971a7b7480b3e55448f71a4157b8b6f399513d3c0fd528bcb2fc9976491e71f729a0badbf459541828bd57fb9fa2dab89c0e7bb64d179cd95dc721dc1735cfd7b7f96910385702f7f358b48892d2e3329bd9306c0036abc5ba122a70acd47e67ddfec481f22acd76f45ff208edda92c5f203d5b9a97d4d3fe85884d207f25c8474fb824d6173d5c26f91c7c4010e473c795415bf884006364a6a146cac4f12c23078fbd75a31439385b77d08bdf1fb797f082f4fde43b5b1d922f9f857725b011171a92cdb5658542f9dd4ffb2fdd2b8e54287102251376383ff23e299bc7d5e1c4c94c6dde515229826d694c2a9c21ca3407db5134e363cbf32a469956df321300264d90fc54ee43d7ebda3f33dba13809abfad019ed9b077ec98e3a939de2dcc326287a0e830477cc97c866f9c2266cc02b0414da5266c29afa59e6c1340de73f43a438601ddfdf3ad21b1ad7505af06cf8d8add059720e9de1e1c1aa713521efa1caee4394b7ae2039697fdd1a3777f801343df54ccb269eb0ce46ac7fce08127855a071d08bf969341a167b9aa757c0b2d54b898e66c9e45cd97817ab6e513767bbf45247438716bc07fe22e918f0852ab4d19987bf1794fb0cbf94c8a274fe0820dfcbc2686ccc87c1959a7d93f2c636ac867d9bae63974a7e16a8414e444313e9a4bc119832abc9e2916c626cbd43a5e98b646a0e00825e90baf46c8b5fa85ac1972b6723f42d75d919a113db5b37aa0efab0c695b8a0e8226580e74b7bf8d2ac4b36905bd714257496634192277d8603fbeb55eb301e4210193ef002843bb8822c1dc3371cb8bcf49db855409c606929e369d046113049ef438a1f89cca82440e3ec25ae018041f75d5d19aaca45c362b840df5fd767c79e0b66fc9cc183a5c079c336cf470c0e7ac87457f99eefdddd371a4f66587b77058d63791626fe51c66acba8fdac453ce606964ad51bf43e37cf5f0e92e4a9bdb6c5360956e8eccd49d78e70f70516c579da58b127d2a25992b8a4afb0fdf509a830bb52c4e3bafb0cb3b3c9b2a770038a9f0b1c08d385af0c7da51f764ee3e284a7928895744cf11b8c9fad92597852ea7fdabc048be2ad58b5c27684b613cd0b404f5134e265ca67c45036198f95e0d35232bc759fa479e4d16ebcd89bc9424f006e492356e0b9e3e24d3d8f7d9d779e3aa550ba369c1709b70f819f2a370f465b7cfa6840c2bdfa263858142e0d1a89131f3b57937892f45ac1772d1ccb0e7c8afb3fe67", 0x1000}, {&(0x7f00000013c0)="d713b55471c7f202e97cd8d596cfc87ba9adc3a096a4165f54bfc823f38d294064d44fa2ea12a8691dcddce79831fd70f96c43db79b8e370e8077cb7cb4bdbf2c8b6416bcb31e033d93ef7d815efa10fb3f24499785b5e51c265a16b94a4b07fa148920a91a320f2023db62ba85a6803696322a93a6f4598ba24a697d404b41936eb4e8a69cfaebd0a790ab891a9ef1c2b5144ec5375475027f487d210284038d14783ae3413dd55295cdd3440b190240e5500ea9a0da04078b9370f0b8b38e1ea0e2f6ef7455bbe3ab62cb0676fcda45584c4b3e11cc3e3282a720b062916dbe351e2", 0xe3}, {&(0x7f00000014c0)="01018e76f4845afeac1b8aaecde00c5062f701a0a5ab7506624ee3aeb2d4e31323fa4efcc8d6753f4045a28d72695656e9f496d87d01195157ea3d86e0356c2173603ad914d1eaf91fc87701d9b0b6efb19da2bfc678b11a750baebcc623f37dd85945b9a1295b27820677d5ac3fe148abc1ea4907c4f0504ba9ace75f380a39430ad807e53b5a918283f1453ff891491379c83acf189b8e76cfaf23f3fc6e8e3ea5011fd1f75617e7300f26d47dd405ab1b116b0e79475d7e8d941260b43ec0cce5f6b30605fd35c16c", 0xca}, {&(0x7f00000015c0)="938e85ae6161df892c6fef625c604bf02a629b464a30297ac447667c00bb3c06945d366da638633f83f43681866d505eea4b664b6ae0d4ebbac931fea1380ab92e99", 0x42}, {&(0x7f0000001640)="06848a43abb7a528618e0f65da6a5e971b2c67ffa5bca5af64ce7c3b9178381300328ffd4581de7e69766569432dd0cd9eece4216bdac2f35b359fd3d9dc16d9170a8099de16d8c22cfc831b91879743ce95753fb03b4abab8c52f98f0a465a008f9b70808610b5a1a2c2a1d06d44b943dc21e9d93b9cbf4566f87f5dc209897caa12ad8c884d2e65840e82a0a3ab23146a521684998fe703bf2ff6db552ff26ad7ed69c43310aafe65091a0aeb439855908432468e9", 0xb6}, {&(0x7f0000001700)="d8acd9109c118e4a971f9aa9adb462b55527d437ae77b19f170a3186d8f2cbbf82f42b9aa733006ed7c04ec8fc7fb2eb0ac66f640bf4771f421cd12de353acd7b23cb15f93b7725e68a7fbe20a69d0e9bbb9ee4176eec313e4b8caf53cdcb47d6179aa727baad651533c728ade9e8fbd943d7381ec3772ca2de2f76d122533", 0x7f}, {&(0x7f0000001780)="46860610f9f711f7eb4a81b6a5443d6dfb9ddadea54f0c8fda978a316370f9dd8f6bf37f99e37441ea46", 0x2a}], 0x7, &(0x7f0000001840)=[{0x40, 0x0, 0x101, "4748a6aee78d958074efc8e16dbbc337efeba4097b37a5f3175080d371df7314d1e84c49e831f19e19bcd755"}, {0x100, 0x108, 0x47b, "8dab44e04ea731c4c6388184938f73e8597523ce61cd3474b4921919de11b61353a7ea9630d2792c2c31a6a8f44db91d4a2740eb6f2fa6bffda7a1efb37f63bad84d341f3fcf1766b02c8fd9c0879a75102705e32ebc632eab70e7bf38677a712c79ad26656da430a4762ced2b4f4774f0d850a29c1028b957983cff6e8cdb45b9c5db00cb1883d906de59ccc3289aaaee926fd609b0d72dee989284601876add171f1cde2ccc11d4923eeaffe6c06943790e429d9503a923db392f2805eb8faca8b9ac54a74e6a7ebc2eefbe5a62c8ce4279fe52dce16ae26c610254cf6d8ad44bc67ce52dc2f12b1de"}], 0x140}, 0x4) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000019c0)=0xffffffffffffffff, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001a00)=@bloom_filter={0x1e, 0x4, 0x7, 0x0, 0x42000, 0xffffffffffffffff, 0x2, '\x00', 0x0, r5, 0x1, 0x5, 0x0, 0x4, @void, @value, @void, @value}, 0x50) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001b80)={@cgroup, 0x22, 0x1, 0x3, &(0x7f0000001a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000001ac0)=[0x0, 0x0, 0x0], &(0x7f0000001b00)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002000)={0xffffffffffffffff, 0xe0, &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001d40)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000001d80)=[0x0, 0x0, 0x0], &(0x7f0000001dc0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa0, &(0x7f0000001e00)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001e40), &(0x7f0000001e80), 0x8, 0x35, 0x8, 0x8, &(0x7f0000001ec0)}}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000002180)={0x6, 0x11, &(0x7f0000001bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x3}, @alu={0x4, 0x1, 0x7, 0x1, 0x6, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}]}, &(0x7f0000001c80)='GPL\x00', 0x4, 0x59, &(0x7f0000001cc0)=""/89, 0x41100, 0x5, '\x00', r7, @xdp=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002040)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000002080)={0x5, 0x4, 0x0, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f00000020c0)=[r2, r6, r2, r2, r2, r6, r2, r2, r6], &(0x7f0000002100)=[{0x2, 0x3, 0x7, 0x9}, {0x3, 0x1, 0x3, 0xc}, {0x5, 0x3, 0x10, 0x7}, {0x4, 0x2, 0xa5d2b7b, 0x2}, {0x2, 0x1, 0x1}, {0x5, 0x3, 0xa}], 0x10, 0x8000, @void, @value}, 0x94) (async, rerun: 32) write$cgroup_subtree(r1, &(0x7f0000002240)={[{0x2d, 'freezer'}, {0x2d, 'rdma'}, {0x2b, 'devices'}, {0x2b, 'net_cls'}, {0x2b, 'rdma'}]}, 0x27) (async, rerun: 32) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x5) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002280)='./cgroup.net/syz0\x00', 0x1ff) (async) r10 = perf_event_open$cgroup(&(0x7f00000023c0)={0x4, 0x80, 0x3, 0x5, 0x9, 0xeb, 0x0, 0x4, 0x810, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000002380), 0x4}, 0x8000, 0x9, 0x4, 0x4, 0xd, 0x7c42, 0xcf, 0x0, 0x5, 0x0, 0x6}, r0, 0xa, r3, 0xb) r11 = perf_event_open(&(0x7f0000002300)={0x4, 0x80, 0x7, 0xbd, 0xf5, 0x0, 0x0, 0x3, 0x50147, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5da, 0x4, @perf_bp={&(0x7f00000022c0), 0x4}, 0xe2b2, 0x9, 0x0, 0x4, 0x7, 0x4, 0x7, 0x0, 0x1, 0x0, 0x8}, 0xffffffffffffffff, 0xf, r10, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r9) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002440)={0xffffffffffffffff, 0xffffffffffffffff}) close(r12) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000002480)=r9, 0x4) (async) sendmsg$inet(r12, &(0x7f0000002680)={&(0x7f00000024c0)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000002640)=[{&(0x7f0000002500)="480ba2445ee351ed51983108251fba3604b8c766ab0e5d34feccc23dbb47693a5857589fe48c2ba59ea2b0c5badb54b5aa8874b4e2e5b7fc", 0x38}, {&(0x7f0000002540)="d6291bc5c4a0a0c486016b569ae1ac8d60cf7569403c84d3831cedcef2f7ad92d396a82e883704090f6075a8a5b56d0d8f502cb814b88fd7036088935049a3e4d022ffc1c20ef09d2d44e464307e9e1dad76ac1fdb8532c523cd867119c1fc59748aefc49e2f024836af839bc0c095dd96b3e2d6a70e2a339fed913ca73413e3c849a5bc791522724b4a4036d0a021f7a24266804e884552d255bb882462636fb0f53c940e4e7f8161edf64c2e918394064476d147ffda6aa7b5c703f2fd77ec35a55ca91e943c93070742f685e1e9c3b16fce2693e6c193d5810b", 0xdb}], 0x2}, 0x600080c0) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002880)={0x0, 0x17, &(0x7f00000026c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002780)='GPL\x00', 0x7f, 0x0, 0x0, 0x40f00, 0x2, '\x00', r7, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000027c0)={0x3, 0x2, 0x2, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000002800)=[r4, r6, r2, r6, r6, r6], &(0x7f0000002840)=[{0x2, 0x4, 0x6, 0x6}, {0x1, 0x3, 0xe, 0x2}], 0x10, 0x1, @void, @value}, 0x94) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002c80)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x862, '\x00', r7, 0xffffffffffffffff, 0x1, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002d80)={0x10, 0x35, &(0x7f0000002940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x400}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @printk={@u}, @map_val={0x18, 0x7, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xffff8000}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xbc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x11, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @map_idx={0x18, 0xa}]}, &(0x7f0000002b00)='syzkaller\x00', 0xffffff01, 0xe9, &(0x7f0000002b40)=""/233, 0x41000, 0x13, '\x00', r7, @fallback=0x21, r5, 0x8, &(0x7f0000002c40)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, r8, r13, 0x2, &(0x7f0000002d00)=[r14, r2, r2, r6], &(0x7f0000002d40)=[{0x1, 0x4, 0x5}, {0x0, 0x3, 0x7, 0xa}], 0x10, 0xc, @void, @value}, 0x94) (async) r15 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000002e80)=@o_path={&(0x7f0000002e40)='./file0\x00', 0x0, 0x4018, r14}, 0x18) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000002ec0)=r15, 0x4) 6m42.843234577s ago: executing program 4 (id=252): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r0, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680), 0x0, 0xd6, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0xc9, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, @perf_config_ext={0x3, 0x4}, 0x104791, 0x4, 0x0, 0x8, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8902, &(0x7f0000000080)) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)="ff", 0x1}], 0x1}, 0x400100f) 6m42.481164913s ago: executing program 4 (id=254): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) syz_clone(0xab009500, 0x0, 0x20010, 0x0, 0x0, 0x0) 6m42.192353682s ago: executing program 4 (id=257): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="180000043000000000000000000010008500000088000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94) 6m42.077920719s ago: executing program 3 (id=258): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sock=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r1, &(0x7f00000001c0), &(0x7f00000000c0)=""/22}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xffffffffffff8000}, 0x14105, 0x3310, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000440), 0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000100), &(0x7f0000000140)=r4}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000980)=ANY=[@ANYRES32, @ANYBLOB], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) socket$kcm(0x10, 0x3, 0x10) r7 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x8, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xe, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r8, 0x2000000, 0xb, 0x0, &(0x7f0000000100)="63eced8e46dc3f2ddf33c9", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x3a470f0550df65cc) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES8=r3, @ANYBLOB="3e05"], 0x9a) 6m42.077422117s ago: executing program 4 (id=259): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x28}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 6m42.009599262s ago: executing program 4 (id=260): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000cfd1a8bc0000000000060000000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg$sock(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)='m', 0x1}], 0x1}, 0x0) sendmsg(r1, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xff51}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00fffffff700"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r0], 0xe) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x5, 0x1a82}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x7, 0x3}, 0x104141, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x200, 0x40, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x2111, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x1ff, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x18}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x2a, 0xa, 0x1, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x8}, 0x14105, 0x32, 0x1, 0x3, 0x1, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x9e0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000011000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x0, 0x10, 0x10, &(0x7f0000000080)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x30) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) 6m41.564067056s ago: executing program 3 (id=264): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, @perf_config_ext={0x3, 0x4}, 0x104791, 0x4, 0x0, 0x8, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8902, &(0x7f0000000080)) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)="ff", 0x1}], 0x1}, 0x400100f) 6m39.205509538s ago: executing program 3 (id=268): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0}, 0x8820, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0x69cc098656a213b3) r0 = getpid() r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x7, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x2008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x80044944, 0x0) socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x72, &(0x7f00000002c0), 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2832], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000000c0)="76389e147583ddd0569ba56a5cfd", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110c230000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x40047459, 0xf0ff1f00000000) bpf$MAP_CREATE(0x0, 0x0, 0x48) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 6m26.296072222s ago: executing program 32 (id=260): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000cfd1a8bc0000000000060000000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg$sock(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)='m', 0x1}], 0x1}, 0x0) sendmsg(r1, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xff51}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00fffffff700"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r0], 0xe) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x5, 0x1a82}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x7, 0x3}, 0x104141, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x200, 0x40, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x2111, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x1ff, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x18}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x2a, 0xa, 0x1, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x8}, 0x14105, 0x32, 0x1, 0x3, 0x1, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x9e0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000011000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x0, 0x10, 0x10, &(0x7f0000000080)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x30) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) 6m24.583799567s ago: executing program 33 (id=268): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0}, 0x8820, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0x69cc098656a213b3) r0 = getpid() r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x7, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x2008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x80044944, 0x0) socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x72, &(0x7f00000002c0), 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2832], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000000c0)="76389e147583ddd0569ba56a5cfd", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110c230000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x40047459, 0xf0ff1f00000000) bpf$MAP_CREATE(0x0, 0x0, 0x48) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 13.665234438s ago: executing program 0 (id=2782): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='./\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0x3) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="020e000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r4 = getpid() r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x3, 0x5}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400}, 0x0, 0xaffffff7ffffffff, r7, 0x0) r8 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x37, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000fffff0000000000000100000d040000000400000004000000000000000000001004000000000000000000000a030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000, 0x0, @void, @value}, 0x28) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848390000005e140602000000000e000a00100000000280000012", 0x2d}], 0x1}, 0x0) r9 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r9, 0x110, 0x5, 0x0, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x1000}) 13.279841968s ago: executing program 0 (id=2785): r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000780)=""/165, 0xa5}, {&(0x7f0000000840)=""/139, 0x8b}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/208, 0xd0}], 0x4}, 0x10002) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\a\x00\x00B\x00'], 0xfe33) 12.409576901s ago: executing program 0 (id=2794): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x9509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0xc610, 0xd}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x10000000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e50200000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8110) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x80, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r2, 0x8010743f, 0xf0ff1f00000000) 11.810787105s ago: executing program 0 (id=2801): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x89}, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.freeze\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x4, 0x0, &(0x7f00000002c0)) r1 = getpid() r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, 0x0, 0x33fe0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x1, 0x42, 0x40, 0xc2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8918, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000120800000000009500"/32], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x5d) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac00ed0401000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce34c75837447fc37a681ed0bffece0b42a9ecbee5b7276505de6ccd40dd6c4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x9ba68ab93330003d, 0x0) 9.442607698s ago: executing program 0 (id=2814): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) 9.326525813s ago: executing program 0 (id=2816): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x9509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0xc610, 0xd}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x10000000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcd9e3fe3d46e48aa31086b8703130000001f00000000007815080004000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c902d1938037e73f07d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x10, 0x0, 0x0) 5.702997025s ago: executing program 5 (id=2828): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x9509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0xc610, 0xd}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x10000000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8110) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x80, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r2, 0x8010743f, 0xf0ff1f00000000) 4.664402655s ago: executing program 5 (id=2835): r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000780)=""/165, 0xa5}, {&(0x7f0000000840)=""/139, 0x8b}, {&(0x7f0000000900)=""/4096, 0x1000}], 0x3}, 0x10002) write$cgroup_subtree(r0, 0x0, 0xfe33) 3.612241072s ago: executing program 5 (id=2844): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x9509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0xc610, 0xd}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x10000000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8110) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x80, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r2, 0x8010743f, 0xf0ff1f00000000) 3.186284503s ago: executing program 6 (id=2851): r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000780)=""/165, 0xa5}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/208, 0xd0}], 0x3, 0x0, 0x0, 0xa5000000}, 0x10002) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) 2.77074623s ago: executing program 6 (id=2853): r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000780)=""/165, 0xa5}, {&(0x7f0000000840)=""/139, 0x8b}, {&(0x7f0000000900)=""/4096, 0x1000}], 0x3}, 0x10002) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xfe33) 2.578082543s ago: executing program 5 (id=2857): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, @perf_config_ext={0xffffffffffffffff, 0x8}, 0x9000, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000c63f1de100000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0xa, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b108b4ab502", @ANYRES32, @ANYRES8=r0], 0x4394) 2.413520271s ago: executing program 5 (id=2860): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000000000001000850000000f000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0xfffffffffffffffe, 0x9}, 0x14185, 0x20032, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f0a9c8085000000040000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="0606000000000000"], &(0x7f0000000480)='GPL\x00', 0x6f33, 0xa3, &(0x7f0000000d40)=""/163, 0x41000, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x5, 0x1c, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000700)=[r1, r1, r1, 0xffffffffffffffff], &(0x7f0000000e00)=[{0x2, 0x2, 0x2, 0x2}, {0x5, 0x1, 0x1, 0x1}, {0x5, 0x5, 0xf}, {0x5, 0x4, 0xf, 0x5}, {0x5, 0x1, 0x8, 0x1}], 0x10, 0x6, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x5452, &(0x7f00000006c0)) setsockopt$sock_attach_bpf(r5, 0x1, 0x7, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x80000002}, 0x240, 0xc8, 0x0, 0x6, 0x9}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb7907007bc717aa38e486dd6317ce22060000fe0000000005000000000000007fc5f603ffabb9a807695c6144e6dcf16b797e9202d7407a4636c4c1c55a8f42042832fbfa5649685bdc4cba6d4ff6568db6a0af4f0011ab7ee6634c1085ff7fb559f9507c00df75cfcecab7931c4e6e8ddded", @ANYRES64=r2, @ANYRESDEC=r3, @ANYRES16=0x0], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x84a46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ada}, 0x40, 0x8, 0x0, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x0, 0x400c000}, 0x4008001) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff15, 0x10, &(0x7f0000000000), 0xf000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.013956518s ago: executing program 1 (id=2863): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x1306, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, @perf_config_ext={0xffffffffffffffff, 0x8}, 0x9000, 0x0, 0x0, 0x1, 0x3, 0xa5f, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000c63f1de100000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000280)}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000800)={0xffffffffffffffff, 0x7, 0x18}, 0xc) 1.735537511s ago: executing program 6 (id=2866): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x9509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0xc610, 0xd}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x10000000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8110) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x80, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r2, 0x8010743f, 0xf0ff1f00000000) 1.581934382s ago: executing program 1 (id=2868): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x84}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x201, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.55632333s ago: executing program 1 (id=2869): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8982, &(0x7f0000000080)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000040000850000008200000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0xf) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r4}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r5, 0x1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="61a000fe00000000050000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)='%-5lx \x00'}, 0x20) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf09000000000000550901000000000095000000000000003f9804800000000004080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000380)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x400, '\x00', 0x0, r0, 0x0, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0xfffffffa}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@jmp={0x5, 0x1, 0x2, 0x5, 0xa, 0xffffffffffffffc0, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0xc2, &(0x7f0000000140)=""/194, 0x40f00, 0x54, '\x00', r6, 0x25, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x0, 0x2, 0x5, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000580)=[r8, r9, r10, r11, r12, r13], &(0x7f00000005c0)=[{0x1, 0x1, 0xf, 0x6}, {0x0, 0x2, 0x4, 0x2}], 0x10, 0xe, @void, @value}, 0x94) 927.280475ms ago: executing program 2 (id=2874): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0xffffffffffffffff, 0x8}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x23, 0x5, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x17, 0x0, 0x1300) socket$kcm(0x29, 0x7, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x8, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = getpid() r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14125, 0x2e, 0xfffffbff, 0x3, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x18002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, @perf_config_ext={0x1, 0x5}, 0x10580, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700000004000000000300000100000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000edff000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0xa, 0x3, 0x87) perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x5, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x0, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfdff7fffffffffff, r3, 0x9) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8041) socket$kcm(0xa, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)=ANY=[@ANYRESHEX=0x0, @ANYRES32, @ANYBLOB="0c0600000000000000400000", @ANYRES32, @ANYBLOB="469e0476ce4a9048605c1289bf77043ed21f63bd34af8197e2ef632c4a326fa68d7bb446cfe2389320ed4067163e8b835851711127a9ec87307b3c799462231b0eb414029d719897b4faa39ee870c0a0cb6917bb7b6ad038a3cb4795298cd3c20e8029ed6217f66cc297d410b7e61bb4827fabb362c047e534ec807daf19dcb601384cdaf66d675b7c6ad78139b001c96d78ed5159b30a29d9a9bebf2b10c64a4068e03c294a", @ANYRES64=0x0], 0x10) socket$kcm(0x10, 0x2, 0x0) 664.335314ms ago: executing program 5 (id=2875): r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000780)=""/165, 0xa5}, {&(0x7f0000000840)=""/139, 0x8b}, {&(0x7f0000000900)=""/4096, 0x1000}], 0x3}, 0x10002) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xfe33) 580.532442ms ago: executing program 1 (id=2876): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x9509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0xc610, 0xd}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x10000000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcd9e3fe3d46e48aa31086b8703130000001f00000000000020080004000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c902d1938037e73f07d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x10, 0x0, 0x0) 579.791318ms ago: executing program 6 (id=2877): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x2019, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffaecd, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d00014001080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000060063eac333b2cf295000200000000ffd15085c1ab24beb28da515001796f369fe6a0b1b124c9e6adcf11c785e2bf4c0b224683da1eba58dd6326918050e3604ab8181cf1ae29b6d7fdeb30e679875e9ed0c620d9fef54c4288197841636f1ba6abb2d4780ecf36599500c869fea77bc4dd6db6fdcb1025375d433a2575eda146b5c7fcd439c75b72b59360e4a7d3a93887a3dca48bb4e0000000000"], &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034004000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83", 0xd4}, {&(0x7f00000014c0)="5c9ebe30", 0x4}], 0x2}, 0x0) r5 = getpid() perf_event_open(0x0, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_open_procfs$namespace(r5, &(0x7f0000000140)='ns/cgroup\x00') 494.422843ms ago: executing program 2 (id=2878): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000001020018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 466.782634ms ago: executing program 2 (id=2879): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x33, 0x33, 0xa, [@datasec={0x8, 0x2, 0x0, 0xf, 0x2, [{0x2, 0x0, 0x1}, {0x3, 0x8001}], 'Iw'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "17"}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x56, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) 277.632191ms ago: executing program 1 (id=2880): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x11f2, 0x4}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0xf) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0x1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="61a000fe00000000050000000000000b95"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) 258.644991ms ago: executing program 2 (id=2881): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000210000003400000034000000020000000000000000000003000000000200000002000000fcffffff000000000000000105000000100000000000000000000004"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 159.590984ms ago: executing program 2 (id=2882): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001480)=ANY=[], 0x20) 159.00578ms ago: executing program 6 (id=2883): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000400e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) 122.500703ms ago: executing program 1 (id=2884): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="18300000040000000000"], &(0x7f00000002c0)='GPL\x00', 0x7ff, 0x46, &(0x7f0000000300)=""/70, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0xd, 0x80000000, 0x8000}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000400)=[{0x2, 0x3, 0xb, 0xb}, {0x4, 0x3, 0x0, 0x7}, {0x0, 0x1, 0x9, 0xb}], 0x10, 0x8, @void, @value}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000440)={r0, r1}) perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) unlink(&(0x7f0000000200)='./cgroup\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000480)='ext4_da_update_reserve_space\x00'}, 0x19) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'dvmrp0\x00', 0xe43986f95b0e4309}) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000000d00)={'veth0_to_hsr\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x800c6613, 0x20ffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x4, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xce8, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080307000000e8fea4a1180015000600142603600e120800110000810401040016000a0029", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x33fe0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x80, 0x101, 0x0, 0x0, 0x2000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8932, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) close(r6) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 85.550144ms ago: executing program 2 (id=2885): r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000780)=""/165, 0xa5}, {&(0x7f0000000840)=""/139, 0x8b}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/208, 0xd0}], 0x4}, 0x10002) (fail_nth: 2) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) 0s ago: executing program 6 (id=2886): gettid() bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0, 0xffffffffffffffff}, 0x4) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="140000002d000b35f8ffffffffffffff0424ff0f", 0x14}], 0x1}, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0xfffffffffffffee4, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x2a509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x5, 0x6, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000005000000fd0900008400000000000000", @ANYRES32, @ANYBLOB="0001000000051000000000000000000000010000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6c, r7}, 0x38) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000320081114e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a80016000400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r8 = perf_event_open(&(0x7f0000000a00)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1e3787, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4283, 0x200, 0x1, 0x7, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES64=r1, @ANYRES32, @ANYRESDEC=r8, @ANYRES32=0x0, @ANYRES16=r6, @ANYRESHEX=r3], 0x50) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b00000009500"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x8c, 0xa, 0x1, 0x0, 0x0, 0x40000, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x4e, 0x3ff}, 0x0, 0x3, 0x7, 0x9, 0x64d1, 0x78, 0x7, 0x0, 0x6, 0x0, 0x1000}, 0x0, 0x9, 0xffffffffffffffff, 0x2) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000df0000007111ae00000000008510000002000000850000000700000095000000000000009500a50500000000"], &(0x7f0000000140)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r12 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f91624fc60100c2140020000", 0x1b}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r12, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r12, &(0x7f0000000040)={&(0x7f0000000100)=@hci={0x1f, 0x1, 0x4}, 0x80, &(0x7f0000000080)}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r11) kernel console output (not intermixed with test programs): 9348] ? xdp_convert_md_to_buff+0x5b/0x330 [ 304.034630][ T9348] bpf_prog_test_run_xdp+0x713/0xf90 [ 304.034669][ T9348] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 304.034696][ T9348] ? __fget_files+0x2a/0x420 [ 304.034729][ T9348] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 304.034751][ T9348] bpf_prog_test_run+0x2a9/0x340 [ 304.034782][ T9348] __sys_bpf+0x4a4/0x860 [ 304.034809][ T9348] ? __pfx___sys_bpf+0x10/0x10 [ 304.034846][ T9348] ? ksys_write+0x1f0/0x250 [ 304.034881][ T9348] __x64_sys_bpf+0x7c/0x90 [ 304.034904][ T9348] do_syscall_64+0xf6/0x210 [ 304.034930][ T9348] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 304.034950][ T9348] ? clear_bhb_loop+0x45/0xa0 [ 304.035015][ T9348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.035035][ T9348] RIP: 0033:0x7efff2f8e969 [ 304.035052][ T9348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.035069][ T9348] RSP: 002b:00007efff3d13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 304.035090][ T9348] RAX: ffffffffffffffda RBX: 00007efff31b5fa0 RCX: 00007efff2f8e969 [ 304.035104][ T9348] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 304.035116][ T9348] RBP: 00007efff3d13090 R08: 0000000000000000 R09: 0000000000000000 [ 304.035128][ T9348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.035139][ T9348] R13: 0000000000000000 R14: 00007efff31b5fa0 R15: 00007ffc50a64ff8 [ 304.035169][ T9348] [ 304.075749][ T9348] page_pool_create_percpu() gave up with errno -12 [ 304.620950][ T9362] netlink: 'syz.6.934': attribute type 10 has an invalid length. [ 305.208642][ T9362] bond0: (slave bond_slave_0): Releasing backup interface [ 306.405949][ T9412] netlink: 'syz.0.955': attribute type 33 has an invalid length. [ 306.418505][ T9412] netlink: 152 bytes leftover after parsing attributes in process `syz.0.955'. [ 306.438318][ T3540] bridge0: port 4(team0) entered disabled state [ 307.933373][ T9453] netlink: 'syz.1.970': attribute type 17 has an invalid length. [ 307.958389][ T9453] netlink: 48 bytes leftover after parsing attributes in process `syz.1.970'. [ 307.988385][ T9459] netlink: 'syz.6.971': attribute type 6 has an invalid length. [ 307.996775][ T9459] netlink: 'syz.6.971': attribute type 7 has an invalid length. [ 308.004717][ T9459] netlink: 13182 bytes leftover after parsing attributes in process `syz.6.971'. [ 308.542068][ T9468] FAULT_INJECTION: forcing a failure. [ 308.542068][ T9468] name failslab, interval 1, probability 0, space 0, times 0 [ 308.614438][ T9468] CPU: 0 UID: 0 PID: 9468 Comm: syz.1.975 Not tainted 6.15.0-rc4-syzkaller-gf4efc73b1ee7 #0 PREEMPT(full) [ 308.614468][ T9468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 308.614480][ T9468] Call Trace: [ 308.614488][ T9468] [ 308.614496][ T9468] dump_stack_lvl+0x189/0x250 [ 308.614534][ T9468] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.614563][ T9468] ? __pfx__printk+0x10/0x10 [ 308.614589][ T9468] ? __pfx___might_resched+0x10/0x10 [ 308.614607][ T9468] ? fs_reclaim_acquire+0x7d/0x100 [ 308.614643][ T9468] should_fail_ex+0x414/0x560 [ 308.614669][ T9468] should_failslab+0xa8/0x100 [ 308.614699][ T9468] __kmalloc_cache_noprof+0x70/0x3d0 [ 308.614726][ T9468] ? __xdp_reg_mem_model+0x1d8/0x5a0 [ 308.614756][ T9468] __xdp_reg_mem_model+0x1d8/0x5a0 [ 308.614788][ T9468] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 308.614811][ T9468] ? page_pool_list+0x1b0/0x1e0 [ 308.614832][ T9468] ? page_pool_create_percpu+0x761/0xba0 [ 308.614865][ T9468] xdp_reg_mem_model+0x22/0x40 [ 308.614890][ T9468] bpf_test_run_xdp_live+0x218/0x1aa0 [ 308.614927][ T9468] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 308.614960][ T9468] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 308.614983][ T9468] ? synchronize_rcu+0x11a/0x310 [ 308.615002][ T9468] ? __pfx_synchronize_rcu+0x10/0x10 [ 308.615024][ T9468] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 308.615049][ T9468] ? bpf_dispatcher_xdp+0x800/0x1000 [ 308.615088][ T9468] ? 0xffffffffa0000a10 [ 308.615104][ T9468] ? 0xffffffffa0009508 [ 308.615149][ T9468] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 308.615184][ T9468] ? _copy_from_user+0x94/0xb0 [ 308.615212][ T9468] ? bpf_test_init+0x133/0x170 [ 308.615230][ T9468] ? xdp_convert_md_to_buff+0x5b/0x330 [ 308.615255][ T9468] bpf_prog_test_run_xdp+0x713/0xf90 [ 308.615295][ T9468] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 308.615322][ T9468] ? __fget_files+0x2a/0x420 [ 308.615355][ T9468] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 308.615378][ T9468] bpf_prog_test_run+0x2a9/0x340 [ 308.615409][ T9468] __sys_bpf+0x4a4/0x860 [ 308.615437][ T9468] ? __pfx___sys_bpf+0x10/0x10 [ 308.615492][ T9468] __x64_sys_bpf+0x7c/0x90 [ 308.615516][ T9468] do_syscall_64+0xf6/0x210 [ 308.615541][ T9468] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 308.615561][ T9468] ? clear_bhb_loop+0x45/0xa0 [ 308.615585][ T9468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.615604][ T9468] RIP: 0033:0x7efff2f8e969 [ 308.615620][ T9468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.615636][ T9468] RSP: 002b:00007efff3d13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 308.615657][ T9468] RAX: ffffffffffffffda RBX: 00007efff31b5fa0 RCX: 00007efff2f8e969 [ 308.615672][ T9468] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 308.615684][ T9468] RBP: 00007efff3d13090 R08: 0000000000000000 R09: 0000000000000000 [ 308.615696][ T9468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.615707][ T9468] R13: 0000000000000000 R14: 00007efff31b5fa0 R15: 00007ffc50a64ff8 [ 308.615738][ T9468] [ 310.355214][ T9509] netlink: 'syz.6.988': attribute type 37 has an invalid length. [ 311.398024][ T9536] netlink: 132 bytes leftover after parsing attributes in process `syz.2.996'. [ 311.535911][ T9541] netlink: 36 bytes leftover after parsing attributes in process `syz.2.997'. [ 313.614291][ T9568] syzkaller0: entered promiscuous mode [ 313.651638][ T9568] syzkaller0: entered allmulticast mode [ 317.190185][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.196663][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.108970][ T9579] ipvlan0: entered promiscuous mode [ 318.114263][ T9579] ipvlan0: entered allmulticast mode [ 318.122968][ T9579] veth0_vlan: entered allmulticast mode [ 318.165985][ T9604] syz_tun: refused to change device tx_queue_len [ 318.880436][ T9641] netlink: 'syz.5.1029': attribute type 10 has an invalid length. [ 318.905524][ T9641] vlan0: entered allmulticast mode [ 319.075517][ T9641] team0: Port device vlan0 added [ 319.113502][ T9641] syz.5.1029 (9641) used greatest stack depth: 19240 bytes left [ 319.170409][ T9635] syzkaller0: entered promiscuous mode [ 319.191768][ T9635] syzkaller0: entered allmulticast mode [ 319.216383][ T9652] netlink: 'syz.2.1034': attribute type 10 has an invalid length. [ 319.262163][ T9652] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1034'. [ 320.209374][ T9677] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1040'. [ 321.200984][ T9684] bridge0: port 4(bond0) entered blocking state [ 321.207687][ T9684] bridge0: port 4(bond0) entered disabled state [ 321.214209][ T9684] bond0: entered allmulticast mode [ 321.220333][ T9684] bond_slave_0: entered allmulticast mode [ 321.244820][ T9684] bond_slave_1: entered allmulticast mode [ 321.299316][ T9684] bond0: entered promiscuous mode [ 321.316376][ T9684] bond_slave_0: entered promiscuous mode [ 321.337272][ T9684] bond_slave_1: entered promiscuous mode [ 321.369934][ T9684] bridge0: port 4(bond0) entered blocking state [ 321.377088][ T9684] bridge0: port 4(bond0) entered forwarding state [ 321.945223][ T9713] FAULT_INJECTION: forcing a failure. [ 321.945223][ T9713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.985609][ T9713] CPU: 0 UID: 0 PID: 9713 Comm: syz.5.1052 Not tainted 6.15.0-rc4-syzkaller-gf4efc73b1ee7 #0 PREEMPT(full) [ 321.985641][ T9713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 321.985654][ T9713] Call Trace: [ 321.985662][ T9713] [ 321.985672][ T9713] dump_stack_lvl+0x189/0x250 [ 321.985710][ T9713] ? __pfx_dump_stack_lvl+0x10/0x10 [ 321.985740][ T9713] ? __pfx__printk+0x10/0x10 [ 321.985774][ T9713] should_fail_ex+0x414/0x560 [ 321.985801][ T9713] _copy_to_user+0x31/0xb0 [ 321.985832][ T9713] simple_read_from_buffer+0xe1/0x170 [ 321.985864][ T9713] proc_fail_nth_read+0x1df/0x250 [ 321.985901][ T9713] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 321.985934][ T9713] ? rw_verify_area+0x258/0x650 [ 321.985957][ T9713] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 321.985987][ T9713] vfs_read+0x1fd/0x980 [ 321.986016][ T9713] ? __pfx___mutex_lock+0x10/0x10 [ 321.986043][ T9713] ? __pfx_vfs_read+0x10/0x10 [ 321.986067][ T9713] ? __fget_files+0x2a/0x420 [ 321.986099][ T9713] ? __fget_files+0x3a0/0x420 [ 321.986125][ T9713] ? __fget_files+0x2a/0x420 [ 321.986162][ T9713] ksys_read+0x145/0x250 [ 321.986184][ T9713] ? rcu_is_watching+0x15/0xb0 [ 321.986216][ T9713] ? __pfx_ksys_read+0x10/0x10 [ 321.986244][ T9713] ? do_syscall_64+0xba/0x210 [ 321.986274][ T9713] do_syscall_64+0xf6/0x210 [ 321.986299][ T9713] ? clear_bhb_loop+0x45/0xa0 [ 321.986325][ T9713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.986344][ T9713] RIP: 0033:0x7f26ad38d37c [ 321.986362][ T9713] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 321.986378][ T9713] RSP: 002b:00007f26ae151030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 321.986400][ T9713] RAX: ffffffffffffffda RBX: 00007f26ad5b5fa0 RCX: 00007f26ad38d37c [ 321.986415][ T9713] RDX: 000000000000000f RSI: 00007f26ae1510a0 RDI: 0000000000000005 [ 321.986428][ T9713] RBP: 00007f26ae151090 R08: 0000000000000000 R09: 0000000000000000 [ 321.986440][ T9713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.986451][ T9713] R13: 0000000000000000 R14: 00007f26ad5b5fa0 R15: 00007ffc6ba700e8 [ 321.986485][ T9713] [ 322.575116][ T9718] syzkaller0: entered promiscuous mode [ 322.581798][ T9718] syzkaller0: entered allmulticast mode [ 325.395170][ T9769] syzkaller0: entered promiscuous mode [ 325.403562][ T9769] syzkaller0: entered allmulticast mode [ 325.938795][ T9786] netlink: 'syz.6.1079': attribute type 10 has an invalid length. [ 325.960688][ T9787] FAULT_INJECTION: forcing a failure. [ 325.960688][ T9787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.987758][ T9787] CPU: 0 UID: 0 PID: 9787 Comm: syz.2.1078 Not tainted 6.15.0-rc4-syzkaller-gf4efc73b1ee7 #0 PREEMPT(full) [ 325.987788][ T9787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 325.987800][ T9787] Call Trace: [ 325.987808][ T9787] [ 325.987817][ T9787] dump_stack_lvl+0x189/0x250 [ 325.987850][ T9787] ? __lock_acquire+0xaac/0xd20 [ 325.987880][ T9787] ? __pfx_dump_stack_lvl+0x10/0x10 [ 325.987909][ T9787] ? __pfx__printk+0x10/0x10 [ 325.987929][ T9787] ? __might_fault+0xb0/0x130 [ 325.987967][ T9787] should_fail_ex+0x414/0x560 [ 325.988002][ T9787] _copy_from_user+0x2d/0xb0 [ 325.988031][ T9787] __sys_bpf+0x1ed/0x860 [ 325.988059][ T9787] ? __pfx___sys_bpf+0x10/0x10 [ 325.988098][ T9787] ? ksys_write+0x1f0/0x250 [ 325.988120][ T9787] ? rcu_is_watching+0x15/0xb0 [ 325.988160][ T9787] __x64_sys_bpf+0x7c/0x90 [ 325.988183][ T9787] do_syscall_64+0xf6/0x210 [ 325.988209][ T9787] ? clear_bhb_loop+0x45/0xa0 [ 325.988234][ T9787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.988253][ T9787] RIP: 0033:0x7ff89fd8e969 [ 325.988271][ T9787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.988288][ T9787] RSP: 002b:00007ff8a0b47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 325.988310][ T9787] RAX: ffffffffffffffda RBX: 00007ff89ffb5fa0 RCX: 00007ff89fd8e969 [ 325.988325][ T9787] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 325.988338][ T9787] RBP: 00007ff8a0b47090 R08: 0000000000000000 R09: 0000000000000000 [ 325.988350][ T9787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.988362][ T9787] R13: 0000000000000000 R14: 00007ff89ffb5fa0 R15: 00007fffaba85b78 [ 325.988392][ T9787] [ 330.629149][ T9864] syzkaller0: entered promiscuous mode [ 330.643488][ T9864] syzkaller0: entered allmulticast mode [ 336.268250][ T9973] netlink: 'syz.5.1144': attribute type 10 has an invalid length. [ 336.324834][ T9973] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1144'. [ 336.793348][ T9989] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1147'. [ 336.915113][ T9991] syzkaller0: entered allmulticast mode [ 337.645309][T10014] FAULT_INJECTION: forcing a failure. [ 337.645309][T10014] name failslab, interval 1, probability 0, space 0, times 0 [ 337.695832][T10014] CPU: 1 UID: 0 PID: 10014 Comm: syz.6.1154 Not tainted 6.15.0-rc4-syzkaller-gf4efc73b1ee7 #0 PREEMPT(full) [ 337.695862][T10014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 337.695873][T10014] Call Trace: [ 337.695881][T10014] [ 337.695890][T10014] dump_stack_lvl+0x189/0x250 [ 337.695930][T10014] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.695960][T10014] ? __pfx__printk+0x10/0x10 [ 337.695985][T10014] ? __pfx___might_resched+0x10/0x10 [ 337.696004][T10014] ? fs_reclaim_acquire+0x7d/0x100 [ 337.696046][T10014] should_fail_ex+0x414/0x560 [ 337.696073][T10014] should_failslab+0xa8/0x100 [ 337.696104][T10014] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 337.696131][T10014] ? __alloc_skb+0x112/0x2d0 [ 337.696170][T10014] __alloc_skb+0x112/0x2d0 [ 337.696199][T10014] alloc_skb_with_frags+0xca/0x890 [ 337.696227][T10014] ? process_measurement+0x1640/0x1a40 [ 337.696269][T10014] sock_alloc_send_pskb+0x857/0x990 [ 337.696328][T10014] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 337.696364][T10014] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 337.696401][T10014] queue_oob+0xe6/0x4e0 [ 337.696431][T10014] ? __pfx_queue_oob+0x10/0x10 [ 337.696454][T10014] ? __pfx___might_resched+0x10/0x10 [ 337.696476][T10014] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 337.696508][T10014] unix_stream_sendmsg+0xa41/0xb60 [ 337.696558][T10014] ? perf_trace_lock_acquire+0xf5/0x410 [ 337.696589][T10014] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 337.696621][T10014] ? aa_sock_msg_perm+0x94/0x160 [ 337.696647][T10014] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 337.696669][T10014] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 337.696701][T10014] __sock_sendmsg+0x219/0x270 [ 337.696728][T10014] ____sys_sendmsg+0x505/0x830 [ 337.696764][T10014] ? __pfx_____sys_sendmsg+0x10/0x10 [ 337.696811][T10014] ? import_iovec+0x74/0xa0 [ 337.696846][T10014] ___sys_sendmsg+0x21f/0x2a0 [ 337.696878][T10014] ? __pfx____sys_sendmsg+0x10/0x10 [ 337.696943][T10014] ? __fget_files+0x2a/0x420 [ 337.696995][T10014] ? __fget_files+0x2a/0x420 [ 337.697022][T10014] ? __fget_files+0x3a0/0x420 [ 337.697065][T10014] __x64_sys_sendmsg+0x19b/0x260 [ 337.697097][T10014] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 337.697120][T10014] ? perf_trace_preemptirq_template+0xa3/0x340 [ 337.697177][T10014] ? do_syscall_64+0xba/0x210 [ 337.697210][T10014] do_syscall_64+0xf6/0x210 [ 337.697236][T10014] ? clear_bhb_loop+0x45/0xa0 [ 337.697263][T10014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.697284][T10014] RIP: 0033:0x7fddcc58e969 [ 337.697302][T10014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.697318][T10014] RSP: 002b:00007fddcd3bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 337.697340][T10014] RAX: ffffffffffffffda RBX: 00007fddcc7b5fa0 RCX: 00007fddcc58e969 [ 337.697354][T10014] RDX: 000000000400100f RSI: 0000200000000f80 RDI: 0000000000000006 [ 337.697367][T10014] RBP: 00007fddcd3bc090 R08: 0000000000000000 R09: 0000000000000000 [ 337.697379][T10014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.697391][T10014] R13: 0000000000000000 R14: 00007fddcc7b5fa0 R15: 00007ffe6451a798 [ 337.697430][T10014] [ 338.281769][T10025] netlink: 'syz.5.1161': attribute type 16 has an invalid length. [ 338.290066][T10025] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1161'. [ 338.303195][T10025] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.743863][T10027] netlink: 176 bytes leftover after parsing attributes in process `syz.6.1162'. [ 339.100963][T10032] netlink: 'syz.0.1164': attribute type 29 has an invalid length. [ 339.149449][T10033] netlink: 'syz.0.1164': attribute type 29 has an invalid length. [ 339.164932][T10034] netlink: 'syz.0.1164': attribute type 29 has an invalid length. [ 339.211160][T10035] netlink: 'syz.0.1164': attribute type 29 has an invalid length. [ 339.537849][T10047] FAULT_INJECTION: forcing a failure. [ 339.537849][T10047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.565200][T10047] CPU: 0 UID: 0 PID: 10047 Comm: syz.1.1168 Not tainted 6.15.0-rc4-syzkaller-gf4efc73b1ee7 #0 PREEMPT(full) [ 339.565231][T10047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 339.565244][T10047] Call Trace: [ 339.565254][T10047] [ 339.565265][T10047] dump_stack_lvl+0x189/0x250 [ 339.565313][T10047] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.565357][T10047] ? __pfx__printk+0x10/0x10 [ 339.565399][T10047] ? __might_fault+0xb0/0x130 [ 339.565447][T10047] should_fail_ex+0x414/0x560 [ 339.565488][T10047] _copy_from_user+0x2d/0xb0 [ 339.565522][T10047] memdup_sockptr_noprof+0x95/0x100 [ 339.565567][T10047] do_ip_setsockopt+0x1fc2/0x2d00 [ 339.565610][T10047] ? __pfx_perf_trace_lock+0x10/0x10 [ 339.565646][T10047] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 339.565692][T10047] ? aa_sk_perm+0x81e/0x950 [ 339.565734][T10047] ? __pfx_aa_sk_perm+0x10/0x10 [ 339.565767][T10047] ? __pfx_perf_trace_lock+0x10/0x10 [ 339.565817][T10047] ip_setsockopt+0x66/0x110 [ 339.565846][T10047] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 339.565877][T10047] do_sock_setsockopt+0x257/0x3e0 [ 339.565930][T10047] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 339.565952][T10047] ? __fget_files+0x2a/0x420 [ 339.565997][T10047] ? __fget_files+0x3a0/0x420 [ 339.566023][T10047] ? __fget_files+0x2a/0x420 [ 339.566080][T10047] __x64_sys_setsockopt+0x18b/0x220 [ 339.566130][T10047] do_syscall_64+0xf6/0x210 [ 339.566161][T10047] ? clear_bhb_loop+0x45/0xa0 [ 339.566195][T10047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.566216][T10047] RIP: 0033:0x7efff2f8e969 [ 339.566236][T10047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.566253][T10047] RSP: 002b:00007efff3d13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 339.566275][T10047] RAX: ffffffffffffffda RBX: 00007efff31b5fa0 RCX: 00007efff2f8e969 [ 339.566289][T10047] RDX: 0000000000000029 RSI: 0000000000000000 RDI: 0000000000000005 [ 339.566302][T10047] RBP: 00007efff3d13090 R08: 0000000000000029 R09: 0000000000000000 [ 339.566314][T10047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.566325][T10047] R13: 0000000000000000 R14: 00007efff31b5fa0 R15: 00007ffc50a64ff8 [ 339.566395][T10047] [ 339.810810][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 340.326913][T10075] netlink: 'syz.1.1178': attribute type 29 has an invalid length. [ 340.366754][T10075] netlink: 'syz.1.1178': attribute type 29 has an invalid length. [ 340.410755][T10077] netlink: 'syz.1.1178': attribute type 29 has an invalid length. [ 341.803892][T10115] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1190'. [ 342.617744][T10143] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1197'. [ 343.021945][T10162] FAULT_INJECTION: forcing a failure. [ 343.021945][T10162] name failslab, interval 1, probability 0, space 0, times 0 [ 343.086694][T10162] CPU: 0 UID: 0 PID: 10162 Comm: syz.6.1204 Not tainted 6.15.0-rc4-syzkaller-gf4efc73b1ee7 #0 PREEMPT(full) [ 343.086721][T10162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 343.086733][T10162] Call Trace: [ 343.086742][T10162] [ 343.086752][T10162] dump_stack_lvl+0x189/0x250 [ 343.086814][T10162] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.086847][T10162] ? __pfx__printk+0x10/0x10 [ 343.086890][T10162] ? __pfx___might_resched+0x10/0x10 [ 343.086927][T10162] should_fail_ex+0x414/0x560 [ 343.086966][T10162] should_failslab+0xa8/0x100 [ 343.087003][T10162] __kmalloc_node_noprof+0xd1/0x4e0 [ 343.087031][T10162] ? alloc_slab_obj_exts+0x39/0xa0 [ 343.087077][T10162] alloc_slab_obj_exts+0x39/0xa0 [ 343.087105][T10162] __memcg_slab_post_alloc_hook+0x332/0x820 [ 343.087176][T10162] kmem_cache_alloc_node_noprof+0x2bd/0x3c0 [ 343.087204][T10162] ? perf_swevent_event+0x113/0x5e0 [ 343.087224][T10162] ? __alloc_skb+0x112/0x2d0 [ 343.087264][T10162] __alloc_skb+0x112/0x2d0 [ 343.087306][T10162] alloc_skb_with_frags+0xca/0x890 [ 343.087341][T10162] ? perf_swevent_event+0x113/0x5e0 [ 343.087395][T10162] sock_alloc_send_pskb+0x857/0x990 [ 343.087485][T10162] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 343.087529][T10162] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 343.087586][T10162] queue_oob+0xe6/0x4e0 [ 343.087623][T10162] ? __pfx_queue_oob+0x10/0x10 [ 343.087651][T10162] ? __pfx___might_resched+0x10/0x10 [ 343.087679][T10162] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 343.087718][T10162] unix_stream_sendmsg+0xa41/0xb60 [ 343.087799][T10162] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 343.087845][T10162] ? aa_sock_msg_perm+0x94/0x160 [ 343.087876][T10162] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 343.087900][T10162] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 343.087928][T10162] __sock_sendmsg+0x219/0x270 [ 343.087963][T10162] ____sys_sendmsg+0x505/0x830 [ 343.088012][T10162] ? __pfx_____sys_sendmsg+0x10/0x10 [ 343.088072][T10162] ? import_iovec+0x74/0xa0 [ 343.088116][T10162] ___sys_sendmsg+0x21f/0x2a0 [ 343.088156][T10162] ? __pfx____sys_sendmsg+0x10/0x10 [ 343.088251][T10162] ? __fget_files+0x2a/0x420 [ 343.088319][T10162] ? __fget_files+0x2a/0x420 [ 343.088346][T10162] ? __fget_files+0x3a0/0x420 [ 343.088407][T10162] __x64_sys_sendmsg+0x19b/0x260 [ 343.088446][T10162] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 343.088528][T10162] ? do_syscall_64+0xba/0x210 [ 343.088568][T10162] do_syscall_64+0xf6/0x210 [ 343.088599][T10162] ? clear_bhb_loop+0x45/0xa0 [ 343.088633][T10162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.088654][T10162] RIP: 0033:0x7fddcc58e969 [ 343.088675][T10162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.088692][T10162] RSP: 002b:00007fddcd3bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.088713][T10162] RAX: ffffffffffffffda RBX: 00007fddcc7b5fa0 RCX: 00007fddcc58e969 [ 343.088726][T10162] RDX: 000000000400100f RSI: 0000200000000f80 RDI: 0000000000000006 [ 343.088738][T10162] RBP: 00007fddcd3bc090 R08: 0000000000000000 R09: 0000000000000000 [ 343.088751][T10162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.088762][T10162] R13: 0000000000000000 R14: 00007fddcc7b5fa0 R15: 00007ffe6451a798 [ 343.088831][T10162] [ 344.095288][T10181] FAULT_INJECTION: forcing a failure. [ 344.095288][T10181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.153085][T10181] CPU: 0 UID: 0 PID: 10181 Comm: syz.5.1212 Not tainted 6.15.0-rc4-syzkaller-gf4efc73b1ee7 #0 PREEMPT(full) [ 344.153115][T10181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 344.153127][T10181] Call Trace: [ 344.153137][T10181] [ 344.153148][T10181] dump_stack_lvl+0x189/0x250 [ 344.153196][T10181] ? __pfx_dump_stack_lvl+0x10/0x10 [ 344.153230][T10181] ? __pfx__printk+0x10/0x10 [ 344.153266][T10181] ? __might_fault+0xb0/0x130 [ 344.153315][T10181] should_fail_ex+0x414/0x560 [ 344.153356][T10181] _copy_to_user+0x31/0xb0 [ 344.153396][T10181] simple_read_from_buffer+0xe1/0x170 [ 344.153438][T10181] proc_fail_nth_read+0x1df/0x250 [ 344.153482][T10181] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 344.153525][T10181] ? rw_verify_area+0x258/0x650 [ 344.153551][T10181] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 344.153590][T10181] vfs_read+0x1fd/0x980 [ 344.153635][T10181] ? __pfx___mutex_lock+0x10/0x10 [ 344.153692][T10181] ? __pfx_vfs_read+0x10/0x10 [ 344.153727][T10181] ? __fget_files+0x2a/0x420 [ 344.153771][T10181] ? __fget_files+0x3a0/0x420 [ 344.153798][T10181] ? __fget_files+0x2a/0x420 [ 344.153856][T10181] ksys_read+0x145/0x250 [ 344.153892][T10181] ? __pfx_ksys_read+0x10/0x10 [ 344.153932][T10181] ? do_syscall_64+0xba/0x210 [ 344.153973][T10181] do_syscall_64+0xf6/0x210 [ 344.154004][T10181] ? clear_bhb_loop+0x45/0xa0 [ 344.154038][T10181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.154059][T10181] RIP: 0033:0x7f26ad38d37c [ 344.154080][T10181] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 344.154097][T10181] RSP: 002b:00007f26ae151030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 344.154118][T10181] RAX: ffffffffffffffda RBX: 00007f26ad5b5fa0 RCX: 00007f26ad38d37c [ 344.154133][T10181] RDX: 000000000000000f RSI: 00007f26ae1510a0 RDI: 0000000000000007 [ 344.154146][T10181] RBP: 00007f26ae151090 R08: 0000000000000000 R09: 0000000000000000 [ 344.154157][T10181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.154169][T10181] R13: 0000000000000000 R14: 00007f26ad5b5fa0 R15: 00007ffc6ba700e8 [ 344.154233][T10181] [ 344.720653][T10199] netlink: 'syz.0.1217': attribute type 13 has an invalid length. [ 344.728908][T10199] macvtap0: entered promiscuous mode [ 344.775409][T10199] macvtap0: refused to change device tx_queue_len [ 344.786299][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 346.221262][T10234] wg2: entered promiscuous mode [ 346.232851][T10234] wg2: entered allmulticast mode [ 346.345308][T10238] netlink: 'syz.1.1228': attribute type 10 has an invalid length. [ 346.365515][T10238] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1228'. [ 346.394198][T10238] dummy0: entered promiscuous mode [ 346.424642][T10238] dummy0: entered allmulticast mode [ 348.328511][T10238] bond0: (slave dummy0): Releasing backup interface [ 348.363879][T10238] bridge0: port 4(dummy0) entered blocking state [ 348.401947][T10238] bridge0: port 4(dummy0) entered disabled state [ 353.330143][T10332] netlink: 'syz.2.1260': attribute type 10 has an invalid length. [ 353.376976][T10332] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1260'. [ 353.950159][T10347] netlink: 'syz.6.1266': attribute type 10 has an invalid length. [ 353.990048][T10347] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1266'. [ 354.787917][T10366] FAULT_INJECTION: forcing a failure. [ 354.787917][T10366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.802659][T10366] CPU: 0 UID: 0 PID: 10366 Comm: syz.5.1272 Not tainted 6.15.0-rc4-syzkaller-gf4efc73b1ee7 #0 PREEMPT(full) [ 354.802687][T10366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 354.802700][T10366] Call Trace: [ 354.802710][T10366] [ 354.802719][T10366] dump_stack_lvl+0x189/0x250 [ 354.802752][T10366] ? __lock_acquire+0xaac/0xd20 [ 354.802790][T10366] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.802822][T10366] ? __pfx__printk+0x10/0x10 [ 354.802858][T10366] ? __might_fault+0xb0/0x130 [ 354.802923][T10366] should_fail_ex+0x414/0x560 [ 354.802963][T10366] _copy_from_iter+0x1db/0x15a0 [ 354.803003][T10366] ? sock_alloc_send_pskb+0x875/0x990 [ 354.803054][T10366] ? __pfx__copy_from_iter+0x10/0x10 [ 354.803111][T10366] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 354.803154][T10366] skb_copy_datagram_from_iter+0xf5/0x720 [ 354.803200][T10366] ? skb_put+0x11b/0x210 [ 354.803240][T10366] queue_oob+0x13a/0x4e0 [ 354.803276][T10366] ? __pfx_queue_oob+0x10/0x10 [ 354.803304][T10366] ? __pfx___might_resched+0x10/0x10 [ 354.803333][T10366] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 354.803372][T10366] unix_stream_sendmsg+0xa41/0xb60 [ 354.803446][T10366] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 354.803491][T10366] ? aa_sock_msg_perm+0x94/0x160 [ 354.803522][T10366] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 354.803545][T10366] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 354.803574][T10366] __sock_sendmsg+0x219/0x270 [ 354.803608][T10366] ____sys_sendmsg+0x505/0x830 [ 354.803656][T10366] ? __pfx_____sys_sendmsg+0x10/0x10 [ 354.803715][T10366] ? import_iovec+0x74/0xa0 [ 354.803758][T10366] ___sys_sendmsg+0x21f/0x2a0 [ 354.803796][T10366] ? __pfx____sys_sendmsg+0x10/0x10 [ 354.803942][T10366] ? __fget_files+0x2a/0x420 [ 354.803969][T10366] ? __fget_files+0x3a0/0x420 [ 354.804032][T10366] __x64_sys_sendmsg+0x19b/0x260 [ 354.804071][T10366] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 354.804151][T10366] ? do_syscall_64+0xba/0x210 [ 354.804191][T10366] do_syscall_64+0xf6/0x210 [ 354.804222][T10366] ? clear_bhb_loop+0x45/0xa0 [ 354.804255][T10366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.804274][T10366] RIP: 0033:0x7f26ad38e969 [ 354.804296][T10366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.804314][T10366] RSP: 002b:00007f26ae151038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.804335][T10366] RAX: ffffffffffffffda RBX: 00007f26ad5b5fa0 RCX: 00007f26ad38e969 [ 354.804350][T10366] RDX: 000000000400100f RSI: 0000200000000f80 RDI: 0000000000000006 [ 354.804363][T10366] RBP: 00007f26ae151090 R08: 0000000000000000 R09: 0000000000000000 [ 354.804375][T10366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.804387][T10366] R13: 0000000000000000 R14: 00007f26ad5b5fa0 R15: 00007ffc6ba700e8 [ 354.804450][T10366] [ 355.304624][T10380] netlink: 'syz.5.1277': attribute type 10 has an invalid length. [ 355.515800][T10380] bridge0: port 5(netdevsim0) entered blocking state [ 355.536202][T10380] bridge0: port 5(netdevsim0) entered disabled state [ 355.545930][T10380] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 355.700816][T10380] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 356.560141][T10402] wg2: left promiscuous mode [ 356.581621][T10402] wg2: left allmulticast mode [ 356.868618][T10421] netlink: 'syz.2.1290': attribute type 10 has an invalid length. [ 356.946305][T10421] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1290'. [ 357.192083][T10430] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1293'. [ 358.229054][T10462] netlink: 193500 bytes leftover after parsing attributes in process `syz.6.1305'. [ 359.641515][T10514] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1318'. [ 361.196244][T10556] netlink: 731 bytes leftover after parsing attributes in process `syz.5.1333'. [ 363.257990][T10630] : renamed from bond0 (while UP) [ 363.684137][T10654] FAULT_INJECTION: forcing a failure. [ 363.684137][T10654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.700100][T10654] CPU: 0 UID: 0 PID: 10654 Comm: syz.1.1367 Not tainted 6.15.0-rc4-syzkaller-gf4efc73b1ee7 #0 PREEMPT(full) [ 363.700135][T10654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 363.700149][T10654] Call Trace: [ 363.700157][T10654] [ 363.700165][T10654] dump_stack_lvl+0x189/0x250 [ 363.700196][T10654] ? __lock_acquire+0xaac/0xd20 [ 363.700227][T10654] ? __pfx_dump_stack_lvl+0x10/0x10 [ 363.700254][T10654] ? __pfx__printk+0x10/0x10 [ 363.700275][T10654] ? __might_fault+0xb0/0x130 [ 363.700304][T10654] ? __might_fault+0xb0/0x130 [ 363.700335][T10654] should_fail_ex+0x414/0x560 [ 363.700362][T10654] _copy_from_user+0x2d/0xb0 [ 363.700392][T10654] __sys_bpf+0x1ed/0x860 [ 363.700419][T10654] ? __pfx___sys_bpf+0x10/0x10 [ 363.700482][T10654] __x64_sys_bpf+0x7c/0x90 [ 363.700506][T10654] do_syscall_64+0xf6/0x210 [ 363.700534][T10654] ? clear_bhb_loop+0x45/0xa0 [ 363.700559][T10654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.700578][T10654] RIP: 0033:0x7efff2f8e969 [ 363.700596][T10654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.700613][T10654] RSP: 002b:00007efff3d13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 363.700634][T10654] RAX: ffffffffffffffda RBX: 00007efff31b5fa0 RCX: 00007efff2f8e969 [ 363.700649][T10654] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 363.700662][T10654] RBP: 00007efff3d13090 R08: 0000000000000000 R09: 0000000000000000 [ 363.700674][T10654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.700686][T10654] R13: 0000000000000001 R14: 00007efff31b5fa0 R15: 00007ffc50a64ff8 [ 363.700720][T10654] [ 364.406348][T10674] netlink: 'syz.2.1375': attribute type 10 has an invalid length. [ 364.421754][T10674] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1375'. [ 364.867373][T10676] delete_channel: no stack [ 364.874224][T10676] delete_channel: no stack [ 365.547960][T10717] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1390'. [ 366.574441][T10741] netlink: 830 bytes leftover after parsing attributes in process `syz.6.1398'. [ 366.891054][T10749] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1401'. [ 366.909912][ T5203] udevd[5203]: worker [9653] terminated by signal 33 (Unknown signal 33) [ 366.932269][ T5203] udevd[5203]: worker [9653] failed while handling '/devices/virtual/block/loop5' [ 368.355121][T10801] netlink: 'syz.5.1421': attribute type 10 has an invalid length. [ 368.369463][T10801] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1421'. [ 368.380201][T10801] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 368.393195][T10801] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 370.074978][T10879] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1452'. [ 370.845659][T10883] netlink: 'syz.1.1453': attribute type 2 has an invalid length. [ 370.911671][T10883] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.1453'. [ 371.383122][T10888] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1455'. [ 371.491479][T10891] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1455'. [ 373.554322][T10913] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1462'. [ 373.924638][T10914] netlink: 'syz.0.1461': attribute type 10 has an invalid length. [ 373.987081][T10914] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1461'. [ 373.994226][T10912] netlink: 'syz.0.1461': attribute type 19 has an invalid length. [ 374.056138][T10914] batadv_slave_1: entered promiscuous mode [ 374.063870][T10914] bridge0: port 6(batadv_slave_1) entered blocking state [ 374.072494][T10914] bridge0: port 6(batadv_slave_1) entered disabled state [ 374.129691][T10914] batadv_slave_1: entered allmulticast mode [ 374.229305][T10914] bridge0: port 6(batadv_slave_1) entered blocking state [ 374.236709][T10914] bridge0: port 6(batadv_slave_1) entered forwarding state [ 374.399472][T10925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1466'. [ 374.482838][T10925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1466'. [ 374.492803][T10925] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1466'. [ 374.503249][T10925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1466'. [ 374.513875][T10925] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1466'. [ 375.534684][T10946] netlink: 'syz.2.1475': attribute type 21 has an invalid length. [ 375.548424][T10946] netlink: 'syz.2.1475': attribute type 1 has an invalid length. [ 375.674528][T10947] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 376.484562][T10961] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1478'. [ 377.992850][T10999] netlink: 'syz.5.1489': attribute type 10 has an invalid length. [ 378.014713][T10999] batman_adv: batadv0: Adding interface: wlan0 [ 378.025370][T10999] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.136487][T10999] batman_adv: batadv0: Interface activated: wlan0 [ 378.801264][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.807733][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.369957][T11018] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1497'. [ 381.250424][T11047] wg2: entered promiscuous mode [ 381.291446][T11047] wg2: entered allmulticast mode [ 382.361992][T11064] sctp: [Deprecated]: syz.0.1511 (pid 11064) Use of int in maxseg socket option. [ 382.361992][T11064] Use struct sctp_assoc_value instead [ 384.083230][T11102] sctp: [Deprecated]: syz.5.1525 (pid 11102) Use of int in maxseg socket option. [ 384.083230][T11102] Use struct sctp_assoc_value instead [ 385.397706][T11150] sctp: [Deprecated]: syz.5.1542 (pid 11150) Use of int in maxseg socket option. [ 385.397706][T11150] Use struct sctp_assoc_value instead [ 386.329269][T11163] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode [ 387.464811][T11196] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1558'. [ 387.524861][T11198] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1560'. [ 388.176985][T11208] syzkaller0: entered promiscuous mode [ 388.196485][T11208] syzkaller0: entered allmulticast mode [ 391.944032][T11325] FAULT_INJECTION: forcing a failure. [ 391.944032][T11325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.975540][T11325] CPU: 1 UID: 0 PID: 11325 Comm: syz.5.1604 Not tainted 6.15.0-rc4-syzkaller-gf4efc73b1ee7 #0 PREEMPT(full) [ 391.975572][T11325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 391.975586][T11325] Call Trace: [ 391.975594][T11325] [ 391.975602][T11325] dump_stack_lvl+0x189/0x250 [ 391.975636][T11325] ? __lock_acquire+0xaac/0xd20 [ 391.975667][T11325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 391.975697][T11325] ? __pfx__printk+0x10/0x10 [ 391.975717][T11325] ? __might_fault+0xb0/0x130 [ 391.975757][T11325] should_fail_ex+0x414/0x560 [ 391.975783][T11325] _copy_from_user+0x2d/0xb0 [ 391.975813][T11325] __sys_bpf+0x1ed/0x860 [ 391.975841][T11325] ? __pfx___sys_bpf+0x10/0x10 [ 391.975880][T11325] ? ksys_write+0x1f0/0x250 [ 391.975905][T11325] ? rcu_is_watching+0x15/0xb0 [ 391.975946][T11325] __x64_sys_bpf+0x7c/0x90 [ 391.975970][T11325] do_syscall_64+0xf6/0x210 [ 391.975998][T11325] ? clear_bhb_loop+0x45/0xa0 [ 391.976035][T11325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.976054][T11325] RIP: 0033:0x7f26ad38e969 [ 391.976072][T11325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.976090][T11325] RSP: 002b:00007f26ae151038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 391.976111][T11325] RAX: ffffffffffffffda RBX: 00007f26ad5b5fa0 RCX: 00007f26ad38e969 [ 391.976126][T11325] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 391.976139][T11325] RBP: 00007f26ae151090 R08: 0000000000000000 R09: 0000000000000000 [ 391.976151][T11325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.976162][T11325] R13: 0000000000000001 R14: 00007f26ad5b5fa0 R15: 00007ffc6ba700e8 [ 391.976194][T11325] [ 392.964204][T11354] sctp: [Deprecated]: syz.6.1609 (pid 11354) Use of int in maxseg socket option. [ 392.964204][T11354] Use struct sctp_assoc_value instead [ 392.989662][T11353] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1608'. [ 393.096518][T11349] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1608'. [ 393.109452][T11359] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1608'. [ 393.519584][T11375] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1613'. [ 394.278877][T11391] sctp: [Deprecated]: syz.5.1621 (pid 11391) Use of int in maxseg socket option. [ 394.278877][T11391] Use struct sctp_assoc_value instead [ 394.711617][T11406] netlink: 'syz.2.1625': attribute type 29 has an invalid length. [ 394.738695][T11406] netlink: 'syz.2.1625': attribute type 29 has an invalid length. [ 394.908519][T11411] netlink: 'syz.2.1625': attribute type 29 has an invalid length. [ 394.960933][T11406] netlink: 'syz.2.1625': attribute type 29 has an invalid length. [ 395.098657][T11418] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1629'. [ 396.041451][T11427] netlink: 'syz.6.1631': attribute type 1 has an invalid length. [ 396.342056][T11434] sctp: [Deprecated]: syz.2.1634 (pid 11434) Use of int in maxseg socket option. [ 396.342056][T11434] Use struct sctp_assoc_value instead [ 396.754408][T11449] netlink: 'syz.0.1638': attribute type 10 has an invalid length. [ 396.779458][T11449] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1638'. [ 396.804782][T11449] bridge0: port 3(ÿÿÿÿÿÿ) entered disabled state [ 397.276719][T11449] bridge0: port 3(ÿÿÿÿÿÿ) entered disabled state [ 398.546576][T11490] sctp: [Deprecated]: syz.0.1649 (pid 11490) Use of int in maxseg socket option. [ 398.546576][T11490] Use struct sctp_assoc_value instead [ 399.592529][T11498] syzkaller0: entered promiscuous mode [ 399.613166][T11498] syzkaller0: entered allmulticast mode [ 402.330637][T11534] FAULT_INJECTION: forcing a failure. [ 402.330637][T11534] name failslab, interval 1, probability 0, space 0, times 0 [ 402.344761][T11534] CPU: 1 UID: 0 PID: 11534 Comm: syz.5.1664 Not tainted 6.15.0-rc4-syzkaller-gf4efc73b1ee7 #0 PREEMPT(full) [ 402.344790][T11534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 402.344803][T11534] Call Trace: [ 402.344810][T11534] [ 402.344819][T11534] dump_stack_lvl+0x189/0x250 [ 402.344854][T11534] ? __pfx_dump_stack_lvl+0x10/0x10 [ 402.344882][T11534] ? __pfx__printk+0x10/0x10 [ 402.344907][T11534] ? __pfx___might_resched+0x10/0x10 [ 402.344924][T11534] ? fs_reclaim_acquire+0x7d/0x100 [ 402.344959][T11534] should_fail_ex+0x414/0x560 [ 402.344985][T11534] should_failslab+0xa8/0x100 [ 402.345014][T11534] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 402.345042][T11534] ? __get_vm_area_node+0x131/0x2d0 [ 402.345073][T11534] __get_vm_area_node+0x131/0x2d0 [ 402.345113][T11534] __vmalloc_node_range_noprof+0x2f1/0x12c0 [ 402.345140][T11534] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 402.345182][T11534] ? aa_get_newest_label+0xf7/0x5d0 [ 402.345203][T11534] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 402.345227][T11534] ? _parse_integer_limit+0x1ae/0x1f0 [ 402.345247][T11534] ? rcu_is_watching+0x15/0xb0 [ 402.345274][T11534] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 402.345294][T11534] __vmalloc_noprof+0x7a/0x90 [ 402.345317][T11534] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 402.345339][T11534] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 402.345365][T11534] bpf_prog_alloc+0x3c/0x1a0 [ 402.345388][T11534] bpf_prog_load+0x735/0x1930 [ 402.345416][T11534] ? __lock_acquire+0xaac/0xd20 [ 402.345440][T11534] ? __pfx_bpf_prog_load+0x10/0x10 [ 402.345481][T11534] ? bpf_lsm_bpf+0x9/0x20 [ 402.345503][T11534] ? security_bpf+0x7e/0x300 [ 402.345521][T11534] __sys_bpf+0x5f1/0x860 [ 402.345543][T11534] ? __pfx___sys_bpf+0x10/0x10 [ 402.345577][T11534] ? ksys_write+0x1f0/0x250 [ 402.345608][T11534] __x64_sys_bpf+0x7c/0x90 [ 402.345627][T11534] do_syscall_64+0xf6/0x210 [ 402.345650][T11534] ? clear_bhb_loop+0x45/0xa0 [ 402.345671][T11534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.345687][T11534] RIP: 0033:0x7f26ad38e969 [ 402.345702][T11534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.345716][T11534] RSP: 002b:00007f26ae151038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 402.345734][T11534] RAX: ffffffffffffffda RBX: 00007f26ad5b5fa0 RCX: 00007f26ad38e969 [ 402.345746][T11534] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 402.345756][T11534] RBP: 00007f26ae151090 R08: 0000000000000000 R09: 0000000000000000 [ 402.345766][T11534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.345775][T11534] R13: 0000000000000001 R14: 00007f26ad5b5fa0 R15: 00007ffc6ba700e8 [ 402.345801][T11534] [ 402.638990][T11534] syz.5.1664: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 402.658958][T11534] CPU: 1 UID: 0 PID: 11534 Comm: syz.5.1664 Not tainted 6.15.0-rc4-syzkaller-gf4efc73b1ee7 #0 PREEMPT(full) [ 402.658984][T11534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 402.658994][T11534] Call Trace: [ 402.659002][T11534] [ 402.659009][T11534] dump_stack_lvl+0x189/0x250 [ 402.659036][T11534] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 402.659059][T11534] ? __pfx_dump_stack_lvl+0x10/0x10 [ 402.659090][T11534] ? __pfx__printk+0x10/0x10 [ 402.659107][T11534] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 402.659134][T11534] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 402.659167][T11534] warn_alloc+0x214/0x310 [ 402.659198][T11534] ? __pfx_warn_alloc+0x10/0x10 [ 402.659231][T11534] ? __get_vm_area_node+0x27f/0x2d0 [ 402.659259][T11534] __vmalloc_node_range_noprof+0x316/0x12c0 [ 402.659304][T11534] ? aa_get_newest_label+0xf7/0x5d0 [ 402.659325][T11534] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 402.659349][T11534] ? _parse_integer_limit+0x1ae/0x1f0 [ 402.659369][T11534] ? rcu_is_watching+0x15/0xb0 [ 402.659396][T11534] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 402.659417][T11534] __vmalloc_noprof+0x7a/0x90 [ 402.659440][T11534] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 402.659462][T11534] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 402.659488][T11534] bpf_prog_alloc+0x3c/0x1a0 [ 402.659512][T11534] bpf_prog_load+0x735/0x1930 [ 402.659540][T11534] ? __lock_acquire+0xaac/0xd20 [ 402.659565][T11534] ? __pfx_bpf_prog_load+0x10/0x10 [ 402.659607][T11534] ? bpf_lsm_bpf+0x9/0x20 [ 402.659628][T11534] ? security_bpf+0x7e/0x300 [ 402.659647][T11534] __sys_bpf+0x5f1/0x860 [ 402.659670][T11534] ? __pfx___sys_bpf+0x10/0x10 [ 402.659702][T11534] ? ksys_write+0x1f0/0x250 [ 402.659733][T11534] __x64_sys_bpf+0x7c/0x90 [ 402.659752][T11534] do_syscall_64+0xf6/0x210 [ 402.659775][T11534] ? clear_bhb_loop+0x45/0xa0 [ 402.659795][T11534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.659811][T11534] RIP: 0033:0x7f26ad38e969 [ 402.659826][T11534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.659843][T11534] RSP: 002b:00007f26ae151038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 402.659861][T11534] RAX: ffffffffffffffda RBX: 00007f26ad5b5fa0 RCX: 00007f26ad38e969 [ 402.659874][T11534] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 402.659884][T11534] RBP: 00007f26ae151090 R08: 0000000000000000 R09: 0000000000000000 [ 402.659894][T11534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.659903][T11534] R13: 0000000000000001 R14: 00007f26ad5b5fa0 R15: 00007ffc6ba700e8 [ 402.659930][T11534] [ 402.659948][T11534] Mem-Info: [ 402.926949][T11534] active_anon:5612 inactive_anon:0 isolated_anon:0 [ 402.926949][T11534] active_file:17785 inactive_file:39957 isolated_file:0 [ 402.926949][T11534] unevictable:768 dirty:392 writeback:0 [ 402.926949][T11534] slab_reclaimable:10104 slab_unreclaimable:104278 [ 402.926949][T11534] mapped:29477 shmem:1384 pagetables:1101 [ 402.926949][T11534] sec_pagetables:0 bounce:0 [ 402.926949][T11534] kernel_misc_reclaimable:0 [ 402.926949][T11534] free:1327445 free_pcp:276 free_cma:0 [ 402.977837][T11534] Node 0 active_anon:22472kB inactive_anon:0kB active_file:71140kB inactive_file:159628kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117944kB dirty:1568kB writeback:0kB shmem:4000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10800kB pagetables:4428kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 403.016903][T11534] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 403.054813][T11534] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 403.090524][T11534] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 403.096594][T11534] Node 0 DMA32 free:1386536kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:22464kB inactive_anon:0kB active_file:71140kB inactive_file:159536kB unevictable:1536kB writepending:1568kB present:3129332kB managed:2564152kB mlocked:0kB bounce:0kB free_pcp:908kB local_pcp:8kB free_cma:0kB [ 403.127351][T11534] lowmem_reserve[]: 0 0 0 0 0 [ 403.132259][T11534] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 403.159015][T11534] lowmem_reserve[]: 0 0 0 0 0 [ 403.163917][T11534] Node 1 Normal free:3909476kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 403.193590][T11534] lowmem_reserve[]: 0 0 0 0 0 [ 403.198510][T11534] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 403.211748][T11534] Node 0 DMA32: 776*4kB (UM) 988*8kB (UME) 740*16kB (UME) 1139*32kB (UME) 394*64kB (UME) 293*128kB (UME) 175*256kB (UME) 78*512kB (UME) 34*1024kB (UM) 14*2048kB (UME) 273*4096kB (UM) = 1388448kB [ 403.234520][T11534] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 403.249522][T11534] Node 1 Normal: 263*4kB (UME) 71*8kB (UME) 31*16kB (UME) 229*32kB (UME) 92*64kB (UME) 27*128kB (UME) 14*256kB (UME) 6*512kB (UME) 3*1024kB (UME) 3*2048kB (UE) 946*4096kB (M) = 3909476kB [ 403.271091][T11534] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 403.281438][T11534] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 403.291555][T11534] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 403.301504][T11534] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 403.311171][T11534] 59122 total pagecache pages [ 403.315900][T11534] 0 pages in swap cache [ 403.320470][T11534] Free swap = 124996kB [ 403.324661][T11534] Total swap = 124996kB [ 403.329049][T11534] 2097051 pages RAM [ 403.332884][T11534] 0 pages HighMem/MovableOnly [ 403.341430][T11534] 424355 pages reserved [ 403.345638][T11534] 0 pages cma reserved [ 404.223825][T11552] netlink: 'syz.6.1669': attribute type 21 has an invalid length. [ 404.247566][T11552] netlink: 14546 bytes leftover after parsing attributes in process `syz.6.1669'. [ 404.319714][T11552] netlink: 'syz.6.1669': attribute type 21 has an invalid length. [ 404.329198][T11552] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1669'. [ 404.434155][T11561] netlink: 'syz.0.1671': attribute type 9 has an invalid length. [ 404.442169][T11561] netlink: 49779 bytes leftover after parsing attributes in process `syz.0.1671'. [ 404.560840][T11569] netlink: 'syz.6.1675': attribute type 10 has an invalid length. [ 404.632157][T11569] : (slave geneve0): Releasing backup interface [ 404.840681][T11578] sctp: [Deprecated]: syz.1.1677 (pid 11578) Use of int in maxseg socket option. [ 404.840681][T11578] Use struct sctp_assoc_value instead [ 406.574539][T11607] sctp: [Deprecated]: syz.0.1687 (pid 11607) Use of struct sctp_assoc_value in delayed_ack socket option. [ 406.574539][T11607] Use struct sctp_sack_info instead [ 406.721689][T11610] sctp: [Deprecated]: syz.5.1689 (pid 11610) Use of int in maxseg socket option. [ 406.721689][T11610] Use struct sctp_assoc_value instead [ 406.887373][T11623] netlink: 'syz.2.1694': attribute type 10 has an invalid length. [ 406.904898][T11623] netlink: 'syz.2.1694': attribute type 19 has an invalid length. [ 406.946476][T11623] netlink: 14536 bytes leftover after parsing attributes in process `syz.2.1694'. [ 406.980444][T11631] netlink: 'syz.2.1694': attribute type 13 has an invalid length. [ 406.988614][T11631] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1694'. [ 407.021489][T11627] netlink: 176 bytes leftover after parsing attributes in process `syz.6.1696'. [ 407.033186][T11631] erspan0: refused to change device tx_queue_len [ 407.075288][T11631] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 407.465615][T11638] FAULT_INJECTION: forcing a failure. [ 407.465615][T11638] name failslab, interval 1, probability 0, space 0, times 0 [ 407.493212][T11638] CPU: 0 UID: 0 PID: 11638 Comm: syz.2.1699 Not tainted 6.15.0-rc4-syzkaller-gf4efc73b1ee7 #0 PREEMPT(full) [ 407.493234][T11638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 407.493243][T11638] Call Trace: [ 407.493249][T11638] [ 407.493256][T11638] dump_stack_lvl+0x189/0x250 [ 407.493283][T11638] ? __pfx_dump_stack_lvl+0x10/0x10 [ 407.493305][T11638] ? __pfx__printk+0x10/0x10 [ 407.493323][T11638] ? __pfx___might_resched+0x10/0x10 [ 407.493335][T11638] ? fs_reclaim_acquire+0x7d/0x100 [ 407.493361][T11638] should_fail_ex+0x414/0x560 [ 407.493379][T11638] should_failslab+0xa8/0x100 [ 407.493400][T11638] __kmalloc_noprof+0xcb/0x4f0 [ 407.493418][T11638] ? bpf_test_init+0xc2/0x170 [ 407.493436][T11638] bpf_test_init+0xc2/0x170 [ 407.493453][T11638] bpf_prog_test_run_xdp+0x37c/0xf90 [ 407.493480][T11638] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 407.493500][T11638] ? __fget_files+0x2a/0x420 [ 407.493524][T11638] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 407.493540][T11638] bpf_prog_test_run+0x2a9/0x340 [ 407.493562][T11638] __sys_bpf+0x4a4/0x860 [ 407.493582][T11638] ? __pfx___sys_bpf+0x10/0x10 [ 407.493597][T11638] ? lapic_next_event+0x11/0x20 [ 407.493634][T11638] __x64_sys_bpf+0x7c/0x90 [ 407.493657][T11638] do_syscall_64+0xf6/0x210 [ 407.493676][T11638] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 407.493690][T11638] ? clear_bhb_loop+0x45/0xa0 [ 407.493708][T11638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.493721][T11638] RIP: 0033:0x7ff89fd8e969 [ 407.493734][T11638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.493746][T11638] RSP: 002b:00007ff8a0b47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 407.493762][T11638] RAX: ffffffffffffffda RBX: 00007ff89ffb5fa0 RCX: 00007ff89fd8e969 [ 407.493772][T11638] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 407.493782][T11638] RBP: 00007ff8a0b47090 R08: 0000000000000000 R09: 0000000000000000 [ 407.493790][T11638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.493799][T11638] R13: 0000000000000000 R14: 00007ff89ffb5fa0 R15: 00007fffaba85b78 [ 407.493821][T11638] [ 408.031948][T11652] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1704'. [ 408.110562][T11663] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1709'. [ 408.138307][T11663] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1709'. [ 409.085933][T11701] sctp: [Deprecated]: syz.5.1722 (pid 11701) Use of int in maxseg socket option. [ 409.085933][T11701] Use struct sctp_assoc_value instead [ 409.487421][T11711] bridge0: port 3(dummy0) entered disabled state [ 409.496283][T11711] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.507387][T11711] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.585280][T11711] bridge0: entered allmulticast mode [ 410.834882][T11750] sctp: [Deprecated]: syz.5.1737 (pid 11750) Use of int in maxseg socket option. [ 410.834882][T11750] Use struct sctp_assoc_value instead [ 411.655006][T11756] netlink: 3752 bytes leftover after parsing attributes in process `syz.5.1741'. [ 415.540898][T11825] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1763'. [ 417.711139][T11873] netlink: 'syz.2.1782': attribute type 2 has an invalid length. [ 417.739476][T11873] netlink: 'syz.2.1782': attribute type 8 has an invalid length. [ 417.755543][T11873] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1782'. [ 417.995445][T11882] netlink: 'syz.2.1785': attribute type 11 has an invalid length. [ 420.923837][T11967] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1818'. [ 422.011972][T12000] netlink: 'syz.6.1829': attribute type 10 has an invalid length. [ 422.021868][T12000] veth1_macvtap: left promiscuous mode [ 422.055711][T12000] bridge0: port 3(macsec0) entered blocking state [ 422.067441][T12000] bridge0: port 3(macsec0) entered disabled state [ 422.074377][T12000] macsec0: entered allmulticast mode [ 422.087274][T12000] macsec0: entered promiscuous mode [ 422.269964][T12015] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1834'. [ 422.318513][T12016] netlink: 'syz.1.1833': attribute type 11 has an invalid length. [ 422.370130][T12013] netlink: 'syz.2.1832': attribute type 29 has an invalid length. [ 422.382368][T12016] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1833'. [ 422.407765][T12024] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1833'. [ 422.467929][T12024] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 423.975748][T12057] netlink: 'syz.5.1846': attribute type 21 has an invalid length. [ 424.061586][T12057] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1846'. [ 424.944354][T12076] bond_slave_1: mtu less than device minimum [ 429.077774][T12115] netlink: 'syz.6.1863': attribute type 29 has an invalid length. [ 429.096831][T12116] netlink: 'syz.6.1863': attribute type 29 has an invalid length. [ 429.612261][T12122] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.1866'. [ 429.974536][T12143] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1873'. [ 430.015402][T12146] netlink: 'syz.0.1870': attribute type 6 has an invalid length. [ 431.069477][T12174] C: renamed from team_slave_0 (while UP) [ 431.230344][T12174] netlink: 'syz.1.1882': attribute type 3 has an invalid length. [ 431.271923][T12174] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 431.775159][T12191] netlink: 'syz.1.1887': attribute type 10 has an invalid length. [ 431.815730][T12191] team0: Device veth1_macvtap failed to register rx_handler [ 431.934444][T12196] netlink: 'syz.2.1889': attribute type 10 has an invalid length. [ 432.131366][T12196] dummy0: left allmulticast mode [ 432.144527][T12196] dummy0: left promiscuous mode [ 432.150690][T12196] bridge0: port 3(dummy0) entered disabled state [ 432.172383][T12196] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 432.229224][T12186] syz.5.1886 (12186) used greatest stack depth: 18304 bytes left [ 432.713419][T12217] netlink: 'syz.5.1896': attribute type 17 has an invalid length. [ 433.484990][T12238] sctp: [Deprecated]: syz.6.1905 (pid 12238) Use of int in maxseg socket option. [ 433.484990][T12238] Use struct sctp_assoc_value instead [ 433.561724][T12247] Dead loop on virtual device ip6_vti0, fix it urgently! [ 434.169774][T12260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1914'. [ 434.564831][T12274] sctp: [Deprecated]: syz.1.1919 (pid 12274) Use of int in maxseg socket option. [ 434.564831][T12274] Use struct sctp_assoc_value instead [ 434.631598][T12279] netlink: 'syz.0.1920': attribute type 10 has an invalid length. [ 434.700466][T12279] bridge0: port 4(team0) entered disabled state [ 435.110521][T12298] netlink: 'syz.6.1926': attribute type 10 has an invalid length. [ 435.645619][T12279] team0 (unregistering): left allmulticast mode [ 435.652103][T12279] team_slave_0: left allmulticast mode [ 435.658861][T12279] team_slave_1: left allmulticast mode [ 435.664570][T12279] bridge0: port 4(team0) entered disabled state [ 435.682551][T12279] team_slave_0: left promiscuous mode [ 435.701496][T12279] team0 (unregistering): Port device team_slave_0 removed [ 435.709074][T12279] team_slave_1: left promiscuous mode [ 435.725159][T12279] team0 (unregistering): Port device team_slave_1 removed [ 435.735728][T12279] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 435.753381][T12279] team0 (unregistering): Port device wlan1 removed [ 435.791690][T12299] lo: entered promiscuous mode [ 435.812672][T12306] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1928'. [ 436.193880][T12298] macsec0 (unregistering): left allmulticast mode [ 436.213312][T12298] macsec0 (unregistering): left promiscuous mode [ 436.245545][T12298] bridge0: port 3(macsec0) entered disabled state [ 436.789173][T12319] sctp: [Deprecated]: syz.2.1932 (pid 12319) Use of int in maxseg socket option. [ 436.789173][T12319] Use struct sctp_assoc_value instead [ 437.536433][T12344] netlink: 'syz.6.1941': attribute type 10 has an invalid length. [ 437.554644][T12344] : (slave dummy0): Enslaving as an active interface with an up link [ 437.608448][T12344] netlink: 52615 bytes leftover after parsing attributes in process `syz.6.1941'. [ 437.970301][T12359] netlink: 'syz.2.1944': attribute type 10 has an invalid length. [ 438.024190][T12364] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1947'. [ 438.785018][T12359] team0: Device hsr_slave_0 failed to register rx_handler [ 439.074308][T12372] sctp: [Deprecated]: syz.1.1949 (pid 12372) Use of int in maxseg socket option. [ 439.074308][T12372] Use struct sctp_assoc_value instead [ 439.731093][T12400] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.1959'. [ 439.996567][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.003147][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.223311][T12408] netlink: 'syz.6.1962': attribute type 10 has an invalid length. [ 440.859134][T12430] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1970'. [ 441.821306][T12466] netlink: 14975 bytes leftover after parsing attributes in process `syz.5.1984'. [ 441.971685][T12472] netlink: 'syz.5.1984': attribute type 25 has an invalid length. [ 442.514734][T12499] netlink: 'syz.6.1998': attribute type 10 has an invalid length. [ 443.052473][T12535] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2012'. [ 443.061905][T12534] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2012'. [ 443.080327][T12535] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.122687][T12535] bridge_slave_0 (unregistering): left promiscuous mode [ 443.131051][T12535] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.961335][T12559] FAULT_INJECTION: forcing a failure. [ 443.961335][T12559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.978023][T12559] CPU: 0 UID: 0 PID: 12559 Comm: syz.1.2022 Not tainted 6.15.0-rc4-syzkaller-gf4efc73b1ee7 #0 PREEMPT(full) [ 443.978052][T12559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 443.978064][T12559] Call Trace: [ 443.978072][T12559] [ 443.978080][T12559] dump_stack_lvl+0x189/0x250 [ 443.978112][T12559] ? __lock_acquire+0xaac/0xd20 [ 443.978140][T12559] ? __pfx_dump_stack_lvl+0x10/0x10 [ 443.978167][T12559] ? __pfx__printk+0x10/0x10 [ 443.978187][T12559] ? __might_fault+0xb0/0x130 [ 443.978223][T12559] should_fail_ex+0x414/0x560 [ 443.978247][T12559] _copy_from_user+0x2d/0xb0 [ 443.978276][T12559] btf_new_fd+0x33a/0xc90 [ 443.978294][T12559] ? apparmor_capable+0x137/0x1b0 [ 443.978329][T12559] ? __pfx_btf_new_fd+0x10/0x10 [ 443.978350][T12559] ? bpf_token_put+0x143/0x160 [ 443.978373][T12559] ? bpf_btf_load+0x126/0x190 [ 443.978403][T12559] __sys_bpf+0x635/0x860 [ 443.978428][T12559] ? __pfx___sys_bpf+0x10/0x10 [ 443.978465][T12559] ? ksys_write+0x1f0/0x250 [ 443.978526][T12559] __x64_sys_bpf+0x7c/0x90 [ 443.978547][T12559] do_syscall_64+0xf6/0x210 [ 443.978573][T12559] ? clear_bhb_loop+0x45/0xa0 [ 443.978596][T12559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.978614][T12559] RIP: 0033:0x7efff2f8e969 [ 443.978632][T12559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.978648][T12559] RSP: 002b:00007efff3d13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 443.978670][T12559] RAX: ffffffffffffffda RBX: 00007efff31b5fa0 RCX: 00007efff2f8e969 [ 443.978683][T12559] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000012 [ 443.978696][T12559] RBP: 00007efff3d13090 R08: 0000000000000000 R09: 0000000000000000 [ 443.978708][T12559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.978719][T12559] R13: 0000000000000001 R14: 00007efff31b5fa0 R15: 00007ffc50a64ff8 [ 443.978749][T12559] [ 444.488905][T12565] netlink: 'syz.5.2025': attribute type 12 has an invalid length. [ 444.510320][T12565] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2025'. [ 444.559088][T12575] tap0: tun_chr_ioctl cmd 2147767507 [ 448.336171][T12653] netlink: 'syz.2.2049': attribute type 39 has an invalid length. [ 449.097206][T12688] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2062'. [ 449.147585][T12688] netlink: 'syz.0.2062': attribute type 10 has an invalid length. [ 449.358336][T12691] netlink: 1053 bytes leftover after parsing attributes in process `syz.5.2063'. [ 449.852917][T12719] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2071'. [ 450.024072][T12721] IPv6: NLM_F_CREATE should be specified when creating new route [ 450.032897][T12725] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2074'. [ 450.049961][T12721] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2072'. [ 450.278829][T12734] netlink: 'syz.0.2076': attribute type 10 has an invalid length. [ 450.306459][T12734] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2076'. [ 451.786453][T12785] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2094'. [ 451.861176][T12789] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2094'. [ 451.952882][T12792] netlink: 'syz.5.2096': attribute type 13 has an invalid length. [ 451.963495][T12792] netlink: 24859 bytes leftover after parsing attributes in process `syz.5.2096'. [ 453.983158][T12831] netlink: 'syz.0.2109': attribute type 39 has an invalid length. [ 453.996657][T12830] netlink: 'syz.0.2109': attribute type 39 has an invalid length. [ 456.758786][T12847] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.2113'. [ 458.020075][T12893] sctp: [Deprecated]: syz.5.2124 (pid 12893) Use of int in maxseg socket option. [ 458.020075][T12893] Use struct sctp_assoc_value instead [ 458.370141][T12896] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2127'. [ 458.437433][T12900] netlink: 'syz.5.2129': attribute type 10 has an invalid length. [ 458.795166][T12917] netdevsim netdevsim0 ªªªªªª: renamed from netdevsim0 (while UP) [ 458.903237][T12912] netlink: 'syz.0.2132': attribute type 10 has an invalid length. [ 460.271760][T12944] tc_dump_action: action bad kind [ 460.946275][T12965] netlink: 'syz.1.2148': attribute type 13 has an invalid length. [ 460.954185][T12965] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2148'. [ 461.001175][T12969] Dead loop on virtual device ip6_vti0, fix it urgently! [ 461.050030][T12965] erspan0: refused to change device tx_queue_len [ 461.074056][T12965] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 461.168585][T12962] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.2148'. [ 461.336348][T12983] netlink: 'syz.1.2154': attribute type 21 has an invalid length. [ 461.363361][T12983] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2154'. [ 461.478773][T12988] netlink: 'syz.0.2155': attribute type 10 has an invalid length. [ 462.138207][T13010] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2164'. [ 462.406870][T13014] Y­4`Ò˜: renamed from lo [ 465.088719][T13061] netlink: 149044 bytes leftover after parsing attributes in process `syz.0.2181'. [ 465.110685][T13061] netlink: 'syz.0.2181': attribute type 10 has an invalid length. [ 465.119040][T13061] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2181'. [ 465.152852][T13057] delete_channel: no stack [ 465.379244][T13074] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2187'. [ 466.063084][T13091] netlink: 'syz.6.2193': attribute type 29 has an invalid length. [ 466.156421][T13091] netlink: 'syz.6.2193': attribute type 29 has an invalid length. [ 466.404842][T13116] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2202'. [ 468.591526][T13160] FAULT_INJECTION: forcing a failure. [ 468.591526][T13160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 468.607599][T13160] CPU: 0 UID: 0 PID: 13160 Comm: syz.1.2220 Not tainted 6.15.0-rc4-syzkaller-gf4efc73b1ee7 #0 PREEMPT(full) [ 468.607628][T13160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 468.607640][T13160] Call Trace: [ 468.607647][T13160] [ 468.607656][T13160] dump_stack_lvl+0x189/0x250 [ 468.607699][T13160] ? __pfx_dump_stack_lvl+0x10/0x10 [ 468.607728][T13160] ? __pfx__printk+0x10/0x10 [ 468.607760][T13160] should_fail_ex+0x414/0x560 [ 468.607787][T13160] _copy_to_user+0x31/0xb0 [ 468.607817][T13160] simple_read_from_buffer+0xe1/0x170 [ 468.607847][T13160] proc_fail_nth_read+0x1df/0x250 [ 468.607880][T13160] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 468.607912][T13160] ? rw_verify_area+0x258/0x650 [ 468.607934][T13160] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 468.607965][T13160] vfs_read+0x1fd/0x980 [ 468.607994][T13160] ? __pfx___mutex_lock+0x10/0x10 [ 468.608020][T13160] ? __pfx_vfs_read+0x10/0x10 [ 468.608045][T13160] ? __fget_files+0x2a/0x420 [ 468.608076][T13160] ? __fget_files+0x3a0/0x420 [ 468.608101][T13160] ? __fget_files+0x2a/0x420 [ 468.608146][T13160] ksys_read+0x145/0x250 [ 468.608167][T13160] ? rcu_is_watching+0x15/0xb0 [ 468.608200][T13160] ? __pfx_ksys_read+0x10/0x10 [ 468.608227][T13160] ? do_syscall_64+0xba/0x210 [ 468.608256][T13160] do_syscall_64+0xf6/0x210 [ 468.608282][T13160] ? clear_bhb_loop+0x45/0xa0 [ 468.608307][T13160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.608327][T13160] RIP: 0033:0x7efff2f8d37c [ 468.608344][T13160] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 468.608361][T13160] RSP: 002b:00007efff3d13030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 468.608383][T13160] RAX: ffffffffffffffda RBX: 00007efff31b5fa0 RCX: 00007efff2f8d37c [ 468.608397][T13160] RDX: 000000000000000f RSI: 00007efff3d130a0 RDI: 0000000000000003 [ 468.608410][T13160] RBP: 00007efff3d13090 R08: 0000000000000000 R09: 0000000000000000 [ 468.608422][T13160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 468.608433][T13160] R13: 0000000000000001 R14: 00007efff31b5fa0 R15: 00007ffc50a64ff8 [ 468.608465][T13160] [ 470.459953][T13203] C: renamed from team_slave_0 (while UP) [ 470.535839][T13203] netlink: 'syz.5.2230': attribute type 1 has an invalid length. [ 470.546796][T13203] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2230'. [ 470.597638][T13203] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 470.733115][T13216] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2231'. [ 470.923787][T13221] IPv6: Can't replace route, no match found [ 471.284940][T13237] veth1_to_bond: entered allmulticast mode [ 472.078915][T13257] FAULT_INJECTION: forcing a failure. [ 472.078915][T13257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 472.152550][T13257] CPU: 1 UID: 0 PID: 13257 Comm: syz.6.2249 Not tainted 6.15.0-rc4-syzkaller-gf4efc73b1ee7 #0 PREEMPT(full) [ 472.152579][T13257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 472.152590][T13257] Call Trace: [ 472.152597][T13257] [ 472.152605][T13257] dump_stack_lvl+0x189/0x250 [ 472.152634][T13257] ? __lock_acquire+0xaac/0xd20 [ 472.152661][T13257] ? __pfx_dump_stack_lvl+0x10/0x10 [ 472.152685][T13257] ? __pfx__printk+0x10/0x10 [ 472.152703][T13257] ? __might_fault+0xb0/0x130 [ 472.152737][T13257] should_fail_ex+0x414/0x560 [ 472.152760][T13257] _copy_to_iter+0x3f5/0x15a0 [ 472.152783][T13257] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.152810][T13257] ? __pfx__copy_to_iter+0x10/0x10 [ 472.152829][T13257] ? __skb_try_recv_from_queue+0x58f/0x730 [ 472.152859][T13257] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 472.152893][T13257] __skb_datagram_iter+0x100/0x960 [ 472.152922][T13257] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 472.152957][T13257] skb_copy_datagram_iter+0xc5/0x230 [ 472.152990][T13257] netlink_recvmsg+0x2c9/0xe00 [ 472.153022][T13257] ? __pfx_netlink_recvmsg+0x10/0x10 [ 472.153048][T13257] ? __pfx_aa_sk_perm+0x10/0x10 [ 472.153079][T13257] ? aa_sock_msg_perm+0x94/0x160 [ 472.153103][T13257] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 472.153124][T13257] ? security_socket_recvmsg+0x7e/0x2e0 [ 472.153151][T13257] ? __pfx_netlink_recvmsg+0x10/0x10 [ 472.153173][T13257] sock_recvmsg+0x229/0x270 [ 472.153197][T13257] ____sys_recvmsg+0x1c9/0x460 [ 472.153233][T13257] ? __pfx_____sys_recvmsg+0x10/0x10 [ 472.153276][T13257] ? import_iovec+0x74/0xa0 [ 472.153307][T13257] ___sys_recvmsg+0x1b5/0x510 [ 472.153339][T13257] ? __pfx____sys_recvmsg+0x10/0x10 [ 472.153391][T13257] ? __fget_files+0x3a0/0x420 [ 472.153427][T13257] __x64_sys_recvmsg+0x198/0x260 [ 472.153455][T13257] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 472.153498][T13257] ? do_syscall_64+0xba/0x210 [ 472.153526][T13257] do_syscall_64+0xf6/0x210 [ 472.153553][T13257] ? clear_bhb_loop+0x45/0xa0 [ 472.153576][T13257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.153595][T13257] RIP: 0033:0x7fddcc58e969 [ 472.153613][T13257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.153631][T13257] RSP: 002b:00007fddcd3bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 472.153652][T13257] RAX: ffffffffffffffda RBX: 00007fddcc7b5fa0 RCX: 00007fddcc58e969 [ 472.153667][T13257] RDX: 0000000000010002 RSI: 0000200000001b80 RDI: 0000000000000003 [ 472.153678][T13257] RBP: 00007fddcd3bc090 R08: 0000000000000000 R09: 0000000000000000 [ 472.153690][T13257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.153701][T13257] R13: 0000000000000000 R14: 00007fddcc7b5fa0 R15: 00007ffe6451a798 [ 472.153731][T13257] [ 472.846973][T13269] netlink: 'syz.0.2253': attribute type 10 has an invalid length. [ 474.159699][T13323] netlink: 'syz.5.2269': attribute type 16 has an invalid length. [ 474.191548][T13323] netlink: 'syz.5.2269': attribute type 3 has an invalid length. [ 474.266246][T13323] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2269'. [ 474.953040][T13345] FAULT_INJECTION: forcing a failure. [ 474.953040][T13345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 474.996360][T13345] CPU: 0 UID: 0 PID: 13345 Comm: syz.1.2279 Not tainted 6.15.0-rc4-syzkaller-gf4efc73b1ee7 #0 PREEMPT(full) [ 474.996390][T13345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 474.996403][T13345] Call Trace: [ 474.996411][T13345] [ 474.996419][T13345] dump_stack_lvl+0x189/0x250 [ 474.996453][T13345] ? __lock_acquire+0xaac/0xd20 [ 474.996483][T13345] ? __pfx_dump_stack_lvl+0x10/0x10 [ 474.996512][T13345] ? __pfx__printk+0x10/0x10 [ 474.996532][T13345] ? __might_fault+0xb0/0x130 [ 474.996572][T13345] should_fail_ex+0x414/0x560 [ 474.996598][T13345] _copy_to_iter+0x575/0x15a0 [ 474.996636][T13345] ? __pfx__copy_to_iter+0x10/0x10 [ 474.996658][T13345] ? __skb_try_recv_from_queue+0x58f/0x730 [ 474.996694][T13345] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 474.996731][T13345] __skb_datagram_iter+0x100/0x960 [ 474.996761][T13345] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 474.996800][T13345] skb_copy_datagram_iter+0xc5/0x230 [ 474.996833][T13345] netlink_recvmsg+0x2c9/0xe00 [ 474.996867][T13345] ? __pfx_netlink_recvmsg+0x10/0x10 [ 474.996893][T13345] ? __pfx_aa_sk_perm+0x10/0x10 [ 474.996918][T13345] ? aa_sock_msg_perm+0x94/0x160 [ 474.996941][T13345] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 474.996964][T13345] ? security_socket_recvmsg+0x7e/0x2e0 [ 474.996992][T13345] ? __pfx_netlink_recvmsg+0x10/0x10 [ 474.997015][T13345] sock_recvmsg+0x229/0x270 [ 474.997039][T13345] ____sys_recvmsg+0x1c9/0x460 [ 474.997077][T13345] ? __pfx_____sys_recvmsg+0x10/0x10 [ 474.997128][T13345] ? import_iovec+0x74/0xa0 [ 474.997160][T13345] ___sys_recvmsg+0x1b5/0x510 [ 474.997193][T13345] ? __pfx____sys_recvmsg+0x10/0x10 [ 474.997248][T13345] ? __fget_files+0x3a0/0x420 [ 474.997288][T13345] __x64_sys_recvmsg+0x198/0x260 [ 474.997318][T13345] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 474.997343][T13345] ? perf_trace_preemptirq_template+0xa3/0x340 [ 474.997389][T13345] ? do_syscall_64+0xba/0x210 [ 474.997419][T13345] do_syscall_64+0xf6/0x210 [ 474.997444][T13345] ? clear_bhb_loop+0x45/0xa0 [ 474.997470][T13345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.997489][T13345] RIP: 0033:0x7efff2f8e969 [ 474.997506][T13345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.997524][T13345] RSP: 002b:00007efff3d13038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 474.997546][T13345] RAX: ffffffffffffffda RBX: 00007efff31b5fa0 RCX: 00007efff2f8e969 [ 474.997561][T13345] RDX: 0000000000010002 RSI: 0000200000001b80 RDI: 0000000000000003 [ 474.997573][T13345] RBP: 00007efff3d13090 R08: 0000000000000000 R09: 0000000000000000 [ 474.997586][T13345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.997597][T13345] R13: 0000000000000000 R14: 00007efff31b5fa0 R15: 00007ffc50a64ff8 [ 474.997630][T13345] [ 476.032144][T13372] netlink: 'syz.2.2286': attribute type 10 has an invalid length. [ 476.093611][T13372] bridge0: port 3(macsec0) entered blocking state [ 476.119140][T13372] bridge0: port 3(macsec0) entered disabled state [ 476.125867][T13372] macsec0: entered allmulticast mode [ 476.151075][T13372] macsec0: entered promiscuous mode [ 477.324307][T13411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2299'. [ 477.333649][T13411] netlink: 125508 bytes leftover after parsing attributes in process `syz.1.2299'. [ 477.354308][T13411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2299'. [ 477.403040][T13411] netlink: 'syz.1.2299': attribute type 2 has an invalid length. [ 477.413370][T13411] netlink: 'syz.1.2299': attribute type 8 has an invalid length. [ 477.440231][T13411] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2299'. [ 478.107424][T13426] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2304'. [ 480.133172][T13451] netlink: 'syz.0.2313': attribute type 10 has an invalid length. [ 480.574617][T13470] netlink: 'syz.2.2319': attribute type 39 has an invalid length. [ 480.862682][T13479] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2321'. [ 481.651387][T13491] netlink: 'syz.6.2324': attribute type 3 has an invalid length. [ 481.725344][T13491] netlink: 130984 bytes leftover after parsing attributes in process `syz.6.2324'. [ 482.065396][T13515] FAULT_INJECTION: forcing a failure. [ 482.065396][T13515] name failslab, interval 1, probability 0, space 0, times 0 [ 482.078399][T13515] CPU: 0 UID: 0 PID: 13515 Comm: syz.6.2332 Not tainted 6.15.0-rc4-syzkaller-gf4efc73b1ee7 #0 PREEMPT(full) [ 482.078426][T13515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 482.078439][T13515] Call Trace: [ 482.078447][T13515] [ 482.078456][T13515] dump_stack_lvl+0x189/0x250 [ 482.078487][T13515] ? unwind_get_return_address+0x4d/0x90 [ 482.078512][T13515] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 482.078536][T13515] ? __pfx_dump_stack_lvl+0x10/0x10 [ 482.078564][T13515] ? __pfx__printk+0x10/0x10 [ 482.078603][T13515] ? stack_trace_save+0x9c/0xe0 [ 482.078627][T13515] should_fail_ex+0x414/0x560 [ 482.078656][T13515] should_failslab+0xa8/0x100 [ 482.078687][T13515] kmem_cache_alloc_noprof+0x73/0x3c0 [ 482.078712][T13515] ? radix_tree_node_alloc+0x7e/0x3a0 [ 482.078733][T13515] ? __kasan_slab_free+0x62/0x70 [ 482.078763][T13515] radix_tree_node_alloc+0x7e/0x3a0 [ 482.078795][T13515] idr_get_free+0x2b3/0xa70 [ 482.078836][T13515] idr_alloc_u32+0x159/0x2d0 [ 482.078867][T13515] ? __pfx_idr_alloc_u32+0x10/0x10 [ 482.078896][T13515] ? do_raw_spin_lock+0x121/0x290 [ 482.078928][T13515] idr_alloc_cyclic+0x9b/0x1b0 [ 482.078961][T13515] btf_new_fd+0x7d0/0xc90 [ 482.078980][T13515] ? apparmor_capable+0x137/0x1b0 [ 482.079020][T13515] ? __pfx_btf_new_fd+0x10/0x10 [ 482.079041][T13515] ? bpf_token_put+0x143/0x160 [ 482.079066][T13515] ? bpf_btf_load+0x126/0x190 [ 482.079097][T13515] __sys_bpf+0x635/0x860 [ 482.079126][T13515] ? __pfx___sys_bpf+0x10/0x10 [ 482.079169][T13515] ? ksys_write+0x1f0/0x250 [ 482.079207][T13515] __x64_sys_bpf+0x7c/0x90 [ 482.079230][T13515] do_syscall_64+0xf6/0x210 [ 482.079257][T13515] ? clear_bhb_loop+0x45/0xa0 [ 482.079284][T13515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.079303][T13515] RIP: 0033:0x7fddcc58e969 [ 482.079322][T13515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.079340][T13515] RSP: 002b:00007fddcd3bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 482.079361][T13515] RAX: ffffffffffffffda RBX: 00007fddcc7b5fa0 RCX: 00007fddcc58e969 [ 482.079375][T13515] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 0000000000000012 [ 482.079387][T13515] RBP: 00007fddcd3bc090 R08: 0000000000000000 R09: 0000000000000000 [ 482.079399][T13515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 482.079410][T13515] R13: 0000000000000001 R14: 00007fddcc7b5fa0 R15: 00007ffe6451a798 [ 482.079447][T13515] [ 484.308960][T13569] netlink: 'syz.2.2348': attribute type 10 has an invalid length. [ 484.317725][T13569] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2348'. [ 484.464601][T13569] batadv_slave_1: entered promiscuous mode [ 484.477143][T13569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.491426][T13569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.502992][T13569] bridge0: port 4(batadv_slave_1) entered blocking state [ 484.510548][T13569] bridge0: port 4(batadv_slave_1) entered disabled state [ 484.518453][T13569] batadv_slave_1: entered allmulticast mode [ 484.569574][T13573] netlink: 'syz.0.2350': attribute type 10 has an invalid length. [ 484.602247][T13573] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2350'. [ 484.636827][T13573] netlink: 'syz.0.2350': attribute type 19 has an invalid length. [ 484.919221][T13589] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.2357'. [ 485.010871][T13600] netlink: 'syz.6.2361': attribute type 13 has an invalid length. [ 485.018967][T13600] netlink: 160 bytes leftover after parsing attributes in process `syz.6.2361'. [ 485.041365][T13600] erspan0: refused to change device tx_queue_len [ 485.052427][T13600] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 485.218297][T13605] netlink: 'syz.1.2362': attribute type 1 has an invalid length. [ 485.230661][T13605] netlink: 156116 bytes leftover after parsing attributes in process `syz.1.2362'. [ 485.380241][T13612] netlink: 180 bytes leftover after parsing attributes in process `syz.6.2365'. [ 485.392581][T13614] netlink: 180 bytes leftover after parsing attributes in process `syz.6.2365'. [ 485.417979][T13612] netlink: 'syz.6.2365': attribute type 21 has an invalid length. [ 485.425863][T13612] netlink: 'syz.6.2365': attribute type 20 has an invalid length. [ 485.446261][T13612] IPv6: NLM_F_CREATE should be specified when creating new route [ 486.920000][T13624] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2370'. [ 487.083397][T13630] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2369'. [ 487.704437][T13650] FAULT_INJECTION: forcing a failure. [ 487.704437][T13650] name failslab, interval 1, probability 0, space 0, times 0 [ 487.735680][T13650] CPU: 1 UID: 0 PID: 13650 Comm: syz.6.2377 Not tainted 6.15.0-rc4-syzkaller-gf4efc73b1ee7 #0 PREEMPT(full) [ 487.735712][T13650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 487.735726][T13650] Call Trace: [ 487.735733][T13650] [ 487.735743][T13650] dump_stack_lvl+0x189/0x250 [ 487.735782][T13650] ? __pfx_dump_stack_lvl+0x10/0x10 [ 487.735812][T13650] ? __pfx__printk+0x10/0x10 [ 487.735842][T13650] ? __pfx___might_resched+0x10/0x10 [ 487.735870][T13650] should_fail_ex+0x414/0x560 [ 487.735899][T13650] should_failslab+0xa8/0x100 [ 487.735931][T13650] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 487.735958][T13650] ? __d_alloc+0x31/0x6f0 [ 487.735987][T13650] __d_alloc+0x31/0x6f0 [ 487.736002][T13650] ? alloc_fd+0x64c/0x6c0 [ 487.736041][T13650] d_alloc_pseudo+0x1f/0xb0 [ 487.736062][T13650] alloc_file_pseudo+0xcc/0x210 [ 487.736099][T13650] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 487.736150][T13650] anon_inode_getfd+0xca/0x1b0 [ 487.736184][T13650] btf_new_fd+0x9a5/0xc90 [ 487.736204][T13650] ? apparmor_capable+0x137/0x1b0 [ 487.736244][T13650] ? __pfx_btf_new_fd+0x10/0x10 [ 487.736266][T13650] ? bpf_token_put+0x143/0x160 [ 487.736291][T13650] ? bpf_btf_load+0x126/0x190 [ 487.736323][T13650] __sys_bpf+0x635/0x860 [ 487.736352][T13650] ? __pfx___sys_bpf+0x10/0x10 [ 487.736397][T13650] ? ksys_write+0x1f0/0x250 [ 487.736419][T13650] ? rcu_is_watching+0x15/0xb0 [ 487.736465][T13650] __x64_sys_bpf+0x7c/0x90 [ 487.736489][T13650] do_syscall_64+0xf6/0x210 [ 487.736517][T13650] ? clear_bhb_loop+0x45/0xa0 [ 487.736544][T13650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.736564][T13650] RIP: 0033:0x7fddcc58e969 [ 487.736583][T13650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.736602][T13650] RSP: 002b:00007fddcd3bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 487.736624][T13650] RAX: ffffffffffffffda RBX: 00007fddcc7b5fa0 RCX: 00007fddcc58e969 [ 487.736639][T13650] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 0000000000000012 [ 487.736660][T13650] RBP: 00007fddcd3bc090 R08: 0000000000000000 R09: 0000000000000000 [ 487.736673][T13650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 487.736685][T13650] R13: 0000000000000001 R14: 00007fddcc7b5fa0 R15: 00007ffe6451a798 [ 487.736721][T13650] [ 491.792357][T13737] netlink: 'syz.6.2412': attribute type 2 has an invalid length. [ 491.896218][T13737] netlink: 17259 bytes leftover after parsing attributes in process `syz.6.2412'. [ 492.299943][T13746] netlink: 'syz.0.2415': attribute type 10 has an invalid length. [ 492.311532][T13745] netlink: 'syz.0.2415': attribute type 10 has an invalid length. [ 492.424605][T13746] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2415'. [ 492.426314][T13745] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2415'. [ 493.851148][T13774] FAULT_INJECTION: forcing a failure. [ 493.851148][T13774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.918196][T13774] CPU: 0 UID: 0 PID: 13774 Comm: syz.6.2424 Not tainted 6.15.0-rc4-syzkaller-gf4efc73b1ee7 #0 PREEMPT(full) [ 493.918227][T13774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 493.918239][T13774] Call Trace: [ 493.918247][T13774] [ 493.918256][T13774] dump_stack_lvl+0x189/0x250 [ 493.918305][T13774] ? __pfx_dump_stack_lvl+0x10/0x10 [ 493.918334][T13774] ? __pfx__printk+0x10/0x10 [ 493.918360][T13774] ? __might_fault+0xb0/0x130 [ 493.918395][T13774] should_fail_ex+0x414/0x560 [ 493.918423][T13774] _copy_to_user+0x31/0xb0 [ 493.918455][T13774] simple_read_from_buffer+0xe1/0x170 [ 493.918487][T13774] proc_fail_nth_read+0x1df/0x250 [ 493.918521][T13774] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 493.918555][T13774] ? rw_verify_area+0x258/0x650 [ 493.918578][T13774] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 493.918610][T13774] vfs_read+0x1fd/0x980 [ 493.918640][T13774] ? __pfx___mutex_lock+0x10/0x10 [ 493.918667][T13774] ? __pfx_vfs_read+0x10/0x10 [ 493.918692][T13774] ? __fget_files+0x2a/0x420 [ 493.918725][T13774] ? __fget_files+0x3a0/0x420 [ 493.918751][T13774] ? __fget_files+0x2a/0x420 [ 493.918790][T13774] ksys_read+0x145/0x250 [ 493.918812][T13774] ? rcu_is_watching+0x15/0xb0 [ 493.918844][T13774] ? __pfx_ksys_read+0x10/0x10 [ 493.918872][T13774] ? do_syscall_64+0xba/0x210 [ 493.918902][T13774] do_syscall_64+0xf6/0x210 [ 493.918928][T13774] ? clear_bhb_loop+0x45/0xa0 [ 493.918954][T13774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.918974][T13774] RIP: 0033:0x7fddcc58d37c [ 493.918991][T13774] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 493.919009][T13774] RSP: 002b:00007fddcd3bc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 493.919030][T13774] RAX: ffffffffffffffda RBX: 00007fddcc7b5fa0 RCX: 00007fddcc58d37c [ 493.919044][T13774] RDX: 000000000000000f RSI: 00007fddcd3bc0a0 RDI: 0000000000000004 [ 493.919056][T13774] RBP: 00007fddcd3bc090 R08: 0000000000000000 R09: 0000000000000000 [ 493.919069][T13774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.919081][T13774] R13: 0000000000000000 R14: 00007fddcc7b5fa0 R15: 00007ffe6451a798 [ 493.919117][T13774] [ 494.404345][T13780] syzkaller0: entered promiscuous mode [ 494.410325][T13780] syzkaller0: entered allmulticast mode [ 494.661092][T13786] netlink: 'syz.0.2428': attribute type 10 has an invalid length. [ 497.759270][T13824] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2442'. [ 497.829525][T13824] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 497.909906][T13833] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2446'. [ 498.953605][T13879] FAULT_INJECTION: forcing a failure. [ 498.953605][T13879] name failslab, interval 1, probability 0, space 0, times 0 [ 498.974278][T13879] CPU: 0 UID: 0 PID: 13879 Comm: syz.6.2462 Not tainted 6.15.0-rc4-syzkaller-gf4efc73b1ee7 #0 PREEMPT(full) [ 498.974307][T13879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 498.974320][T13879] Call Trace: [ 498.974329][T13879] [ 498.974337][T13879] dump_stack_lvl+0x189/0x250 [ 498.974377][T13879] ? __pfx_dump_stack_lvl+0x10/0x10 [ 498.974408][T13879] ? __pfx__printk+0x10/0x10 [ 498.974432][T13879] ? __pfx___might_resched+0x10/0x10 [ 498.974451][T13879] ? fs_reclaim_acquire+0x7d/0x100 [ 498.974488][T13879] should_fail_ex+0x414/0x560 [ 498.974515][T13879] should_failslab+0xa8/0x100 [ 498.974546][T13879] __kmalloc_noprof+0xcb/0x4f0 [ 498.974572][T13879] ? tomoyo_encode+0x28b/0x550 [ 498.974602][T13879] tomoyo_encode+0x28b/0x550 [ 498.974635][T13879] tomoyo_realpath_from_path+0x58d/0x5d0 [ 498.974663][T13879] ? tomoyo_domain+0xda/0x130 [ 498.974696][T13879] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 498.974717][T13879] tomoyo_path_number_perm+0x1e8/0x5a0 [ 498.974741][T13879] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 498.974780][T13879] ? __lock_acquire+0xaac/0xd20 [ 498.974829][T13879] ? __fget_files+0x2a/0x420 [ 498.974862][T13879] ? __fget_files+0x3a0/0x420 [ 498.974887][T13879] ? __fget_files+0x2a/0x420 [ 498.974918][T13879] security_file_ioctl+0xcb/0x2d0 [ 498.974953][T13879] __se_sys_ioctl+0x47/0x170 [ 498.974978][T13879] do_syscall_64+0xf6/0x210 [ 498.975006][T13879] ? clear_bhb_loop+0x45/0xa0 [ 498.975031][T13879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.975051][T13879] RIP: 0033:0x7fddcc58e969 [ 498.975069][T13879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.975086][T13879] RSP: 002b:00007fddcd39b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 498.975108][T13879] RAX: ffffffffffffffda RBX: 00007fddcc7b6080 RCX: 00007fddcc58e969 [ 498.975123][T13879] RDX: 0000000000000000 RSI: 0000000000008907 RDI: 0000000000000003 [ 498.975135][T13879] RBP: 00007fddcd39b090 R08: 0000000000000000 R09: 0000000000000000 [ 498.975147][T13879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.975159][T13879] R13: 0000000000000001 R14: 00007fddcc7b6080 R15: 00007ffe6451a798 [ 498.975203][T13879] [ 498.975226][T13879] ERROR: Out of memory at tomoyo_realpath_from_path. [ 499.545517][T13894] netlink: 'syz.5.2469': attribute type 29 has an invalid length. [ 499.555830][T13894] netlink: 'syz.5.2469': attribute type 3 has an invalid length. [ 499.565347][T13894] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2469'. [ 499.711237][T13906] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2473'. [ 500.689403][T13925] netlink: 'syz.0.2480': attribute type 13 has an invalid length. [ 500.707397][T13925] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2480'. [ 500.765718][T13925] erspan0: refused to change device tx_queue_len [ 500.788739][T13925] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 501.021600][T13941] FAULT_INJECTION: forcing a failure. [ 501.021600][T13941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.041397][T13941] CPU: 1 UID: 0 PID: 13941 Comm: syz.2.2486 Not tainted 6.15.0-rc4-syzkaller-gf4efc73b1ee7 #0 PREEMPT(full) [ 501.041427][T13941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 501.041440][T13941] Call Trace: [ 501.041448][T13941] [ 501.041457][T13941] dump_stack_lvl+0x189/0x250 [ 501.041489][T13941] ? __lock_acquire+0xaac/0xd20 [ 501.041519][T13941] ? __pfx_dump_stack_lvl+0x10/0x10 [ 501.041548][T13941] ? __pfx__printk+0x10/0x10 [ 501.041567][T13941] ? __might_fault+0xb0/0x130 [ 501.041606][T13941] should_fail_ex+0x414/0x560 [ 501.041631][T13941] _copy_from_user+0x2d/0xb0 [ 501.041661][T13941] btf_new_fd+0x33a/0xc90 [ 501.041680][T13941] ? apparmor_capable+0x137/0x1b0 [ 501.041716][T13941] ? __pfx_btf_new_fd+0x10/0x10 [ 501.041737][T13941] ? bpf_token_put+0x143/0x160 [ 501.041760][T13941] ? bpf_btf_load+0x126/0x190 [ 501.041798][T13941] __sys_bpf+0x635/0x860 [ 501.041824][T13941] ? __pfx___sys_bpf+0x10/0x10 [ 501.041863][T13941] ? ksys_write+0x1f0/0x250 [ 501.041899][T13941] __x64_sys_bpf+0x7c/0x90 [ 501.041922][T13941] do_syscall_64+0xf6/0x210 [ 501.041948][T13941] ? clear_bhb_loop+0x45/0xa0 [ 501.041973][T13941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.041992][T13941] RIP: 0033:0x7ff89fd8e969 [ 501.042010][T13941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.042028][T13941] RSP: 002b:00007ff8a0b47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 501.042049][T13941] RAX: ffffffffffffffda RBX: 00007ff89ffb5fa0 RCX: 00007ff89fd8e969 [ 501.042063][T13941] RDX: 0000000000000028 RSI: 0000200000000640 RDI: 0000000000000012 [ 501.042076][T13941] RBP: 00007ff8a0b47090 R08: 0000000000000000 R09: 0000000000000000 [ 501.042089][T13941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.042100][T13941] R13: 0000000000000001 R14: 00007ff89ffb5fa0 R15: 00007fffaba85b78 [ 501.042132][T13941] [ 501.264479][T13943] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2490'. [ 501.452409][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.461165][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.523922][T13959] netlink: 'syz.0.2494': attribute type 10 has an invalid length. [ 501.827129][T13971] netlink: 'syz.5.2499': attribute type 13 has an invalid length. [ 501.835465][T13971] netlink: 160 bytes leftover after parsing attributes in process `syz.5.2499'. [ 501.855922][T13971] erspan0: refused to change device tx_queue_len [ 501.881624][T13971] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 501.981397][T13980] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2502'. [ 502.028192][T13980] netlink: 'syz.1.2502': attribute type 2 has an invalid length. [ 502.048334][T13980] netlink: 197536 bytes leftover after parsing attributes in process `syz.1.2502'. [ 502.125770][T13980] nbd: must specify a device to reconfigure [ 502.408612][T13989] FAULT_INJECTION: forcing a failure. [ 502.408612][T13989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 502.473387][T13989] CPU: 0 UID: 0 PID: 13989 Comm: syz.6.2505 Not tainted 6.15.0-rc4-syzkaller-gf4efc73b1ee7 #0 PREEMPT(full) [ 502.473418][T13989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 502.473431][T13989] Call Trace: [ 502.473443][T13989] [ 502.473456][T13989] dump_stack_lvl+0x189/0x250 [ 502.473517][T13989] ? __pfx_dump_stack_lvl+0x10/0x10 [ 502.473557][T13989] ? __pfx__printk+0x10/0x10 [ 502.473610][T13989] ? __might_fault+0xb0/0x130 [ 502.473678][T13989] should_fail_ex+0x414/0x560 [ 502.473738][T13989] _copy_to_user+0x31/0xb0 [ 502.473787][T13989] simple_read_from_buffer+0xe1/0x170 [ 502.473856][T13989] proc_fail_nth_read+0x1df/0x250 [ 502.473912][T13989] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 502.473970][T13989] ? rw_verify_area+0x258/0x650 [ 502.474000][T13989] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 502.474049][T13989] vfs_read+0x1fd/0x980 [ 502.474114][T13989] ? __pfx___mutex_lock+0x10/0x10 [ 502.474151][T13989] ? __pfx_vfs_read+0x10/0x10 [ 502.474197][T13989] ? __fget_files+0x2a/0x420 [ 502.474260][T13989] ? __fget_files+0x3a0/0x420 [ 502.474290][T13989] ? __fget_files+0x2a/0x420 [ 502.474375][T13989] ksys_read+0x145/0x250 [ 502.474402][T13989] ? __fget_files+0x2a/0x420 [ 502.474444][T13989] ? __pfx_ksys_read+0x10/0x10 [ 502.474499][T13989] ? do_syscall_64+0xba/0x210 [ 502.474553][T13989] do_syscall_64+0xf6/0x210 [ 502.474590][T13989] ? clear_bhb_loop+0x45/0xa0 [ 502.474636][T13989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.474657][T13989] RIP: 0033:0x7fddcc58d37c [ 502.474684][T13989] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 502.474701][T13989] RSP: 002b:00007fddcd39b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 502.474722][T13989] RAX: ffffffffffffffda RBX: 00007fddcc7b6080 RCX: 00007fddcc58d37c [ 502.474737][T13989] RDX: 000000000000000f RSI: 00007fddcd39b0a0 RDI: 0000000000000004 [ 502.474749][T13989] RBP: 00007fddcd39b090 R08: 0000000000000000 R09: 0000000000000000 [ 502.474760][T13989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.474772][T13989] R13: 0000000000000001 R14: 00007fddcc7b6080 R15: 00007ffe6451a798 [ 502.474881][T13989] [ 503.538610][T14022] netlink: 'syz.0.2516': attribute type 13 has an invalid length. [ 503.557486][T14022] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2516'. [ 503.591978][T14022] erspan0: refused to change device tx_queue_len [ 503.601425][T14022] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 503.984724][T14045] FAULT_INJECTION: forcing a failure. [ 503.984724][T14045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 503.999158][T14045] CPU: 0 UID: 0 PID: 14045 Comm: syz.5.2522 Not tainted 6.15.0-rc4-syzkaller-gf4efc73b1ee7 #0 PREEMPT(full) [ 503.999187][T14045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 503.999200][T14045] Call Trace: [ 503.999208][T14045] [ 503.999216][T14045] dump_stack_lvl+0x189/0x250 [ 503.999253][T14045] ? __pfx_dump_stack_lvl+0x10/0x10 [ 503.999283][T14045] ? __pfx__printk+0x10/0x10 [ 503.999304][T14045] ? __asan_memcpy+0x40/0x70 [ 503.999334][T14045] should_fail_ex+0x414/0x560 [ 503.999360][T14045] _copy_to_user+0x31/0xb0 [ 503.999390][T14045] bpf_verifier_vlog+0x520/0x900 [ 503.999424][T14045] btf_verifier_log+0x10a/0x180 [ 503.999455][T14045] ? __pfx_btf_verifier_log+0x10/0x10 [ 503.999478][T14045] ? __might_fault+0xb0/0x130 [ 503.999527][T14045] btf_parse_hdr+0x46b/0x6d0 [ 503.999565][T14045] btf_new_fd+0x36d/0xc90 [ 503.999583][T14045] ? apparmor_capable+0x137/0x1b0 [ 503.999619][T14045] ? __pfx_btf_new_fd+0x10/0x10 [ 503.999641][T14045] ? bpf_token_put+0x143/0x160 [ 503.999664][T14045] ? bpf_btf_load+0x126/0x190 [ 503.999694][T14045] __sys_bpf+0x635/0x860 [ 503.999721][T14045] ? __pfx___sys_bpf+0x10/0x10 [ 503.999759][T14045] ? ksys_write+0x1f0/0x250 [ 503.999782][T14045] ? rcu_is_watching+0x15/0xb0 [ 503.999823][T14045] __x64_sys_bpf+0x7c/0x90 [ 503.999846][T14045] do_syscall_64+0xf6/0x210 [ 503.999872][T14045] ? clear_bhb_loop+0x45/0xa0 [ 503.999897][T14045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.999915][T14045] RIP: 0033:0x7f26ad38e969 [ 503.999933][T14045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.999951][T14045] RSP: 002b:00007f26ae151038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 503.999971][T14045] RAX: ffffffffffffffda RBX: 00007f26ad5b5fa0 RCX: 00007f26ad38e969 [ 503.999985][T14045] RDX: 0000000000000028 RSI: 0000200000000640 RDI: 0000000000000012 [ 503.999998][T14045] RBP: 00007f26ae151090 R08: 0000000000000000 R09: 0000000000000000 [ 504.000009][T14045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.000021][T14045] R13: 0000000000000001 R14: 00007f26ad5b5fa0 R15: 00007ffc6ba700e8 [ 504.000050][T14045] [ 504.237050][T14049] netlink: 'syz.1.2523': attribute type 12 has an invalid length. [ 504.250599][T14049] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2523'. [ 504.393305][T14055] netlink: 'syz.2.2526': attribute type 10 has an invalid length. [ 505.008917][T14074] lo: entered promiscuous mode [ 507.829883][T14167] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2564'. [ 507.879770][T14163] netlink: 'syz.1.2562': attribute type 39 has an invalid length. [ 508.102899][T14163] hsr_slave_0 (unregistering): left promiscuous mode [ 508.624481][T14196] IPv6: NLM_F_CREATE should be specified when creating new route [ 508.659090][T14196] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2575'. [ 508.685532][T14203] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2578'. [ 509.427583][T14234] FAULT_INJECTION: forcing a failure. [ 509.427583][T14234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 509.475580][T14234] CPU: 1 UID: 0 PID: 14234 Comm: syz.0.2587 Not tainted 6.15.0-rc4-syzkaller-gf4efc73b1ee7 #0 PREEMPT(full) [ 509.475613][T14234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 509.475633][T14234] Call Trace: [ 509.475641][T14234] [ 509.475650][T14234] dump_stack_lvl+0x189/0x250 [ 509.475690][T14234] ? __pfx_dump_stack_lvl+0x10/0x10 [ 509.475720][T14234] ? __pfx__printk+0x10/0x10 [ 509.475758][T14234] should_fail_ex+0x414/0x560 [ 509.475788][T14234] _copy_from_user+0x2d/0xb0 [ 509.475819][T14234] bpf_vlog_reverse_ubuf+0xc8/0x410 [ 509.475856][T14234] bpf_vlog_finalize+0x158/0x400 [ 509.475887][T14234] btf_new_fd+0x481/0xc90 [ 509.475906][T14234] ? apparmor_capable+0x137/0x1b0 [ 509.475946][T14234] ? __pfx_btf_new_fd+0x10/0x10 [ 509.475968][T14234] ? bpf_token_put+0x143/0x160 [ 509.475991][T14234] ? bpf_btf_load+0x126/0x190 [ 509.476022][T14234] __sys_bpf+0x635/0x860 [ 509.476051][T14234] ? __pfx___sys_bpf+0x10/0x10 [ 509.476104][T14234] ? ksys_write+0x1f0/0x250 [ 509.476146][T14234] __x64_sys_bpf+0x7c/0x90 [ 509.476171][T14234] do_syscall_64+0xf6/0x210 [ 509.476200][T14234] ? clear_bhb_loop+0x45/0xa0 [ 509.476227][T14234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.476246][T14234] RIP: 0033:0x7fef6d78e969 [ 509.476265][T14234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.476283][T14234] RSP: 002b:00007fef6e6cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 509.476305][T14234] RAX: ffffffffffffffda RBX: 00007fef6d9b5fa0 RCX: 00007fef6d78e969 [ 509.476319][T14234] RDX: 0000000000000028 RSI: 0000200000000640 RDI: 0000000000000012 [ 509.476333][T14234] RBP: 00007fef6e6cd090 R08: 0000000000000000 R09: 0000000000000000 [ 509.476346][T14234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.476358][T14234] R13: 0000000000000001 R14: 00007fef6d9b5fa0 R15: 00007ffef58ecf98 [ 509.476394][T14234] [ 510.408324][T14258] netlink: 'syz.6.2596': attribute type 2 has an invalid length. [ 510.436265][T14258] netlink: 17267 bytes leftover after parsing attributes in process `syz.6.2596'. [ 510.625119][T14265] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2598'. [ 511.328351][T14301] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.2612'. [ 513.106246][T14355] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2632'. [ 513.250413][T14357] netlink: 'syz.6.2631': attribute type 46 has an invalid length. [ 513.294546][T14357] netlink: 55 bytes leftover after parsing attributes in process `syz.6.2631'. [ 513.611315][T14369] netlink: 'syz.1.2636': attribute type 10 has an invalid length. [ 514.044563][T14386] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.2639'. [ 514.552080][T14417] FAULT_INJECTION: forcing a failure. [ 514.552080][T14417] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.636034][T14417] CPU: 1 UID: 0 PID: 14417 Comm: syz.6.2653 Not tainted 6.15.0-rc4-syzkaller-gf4efc73b1ee7 #0 PREEMPT(full) [ 514.636062][T14417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 514.636072][T14417] Call Trace: [ 514.636079][T14417] [ 514.636087][T14417] dump_stack_lvl+0x189/0x250 [ 514.636114][T14417] ? __lock_acquire+0xaac/0xd20 [ 514.636139][T14417] ? __pfx_dump_stack_lvl+0x10/0x10 [ 514.636162][T14417] ? __pfx__printk+0x10/0x10 [ 514.636179][T14417] ? __might_fault+0xb0/0x130 [ 514.636212][T14417] should_fail_ex+0x414/0x560 [ 514.636234][T14417] _copy_to_user+0x31/0xb0 [ 514.636259][T14417] bpf_vlog_reverse_ubuf+0x29f/0x410 [ 514.636288][T14417] bpf_vlog_finalize+0x158/0x400 [ 514.636314][T14417] btf_new_fd+0x481/0xc90 [ 514.636332][T14417] ? apparmor_capable+0x137/0x1b0 [ 514.636367][T14417] ? __pfx_btf_new_fd+0x10/0x10 [ 514.636386][T14417] ? bpf_token_put+0x143/0x160 [ 514.636408][T14417] ? bpf_btf_load+0x126/0x190 [ 514.636437][T14417] __sys_bpf+0x635/0x860 [ 514.636463][T14417] ? __pfx___sys_bpf+0x10/0x10 [ 514.636500][T14417] ? ksys_write+0x1f0/0x250 [ 514.636535][T14417] __x64_sys_bpf+0x7c/0x90 [ 514.636558][T14417] do_syscall_64+0xf6/0x210 [ 514.636586][T14417] ? clear_bhb_loop+0x45/0xa0 [ 514.636611][T14417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.636629][T14417] RIP: 0033:0x7fddcc58e969 [ 514.636657][T14417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.636675][T14417] RSP: 002b:00007fddcd3bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 514.636696][T14417] RAX: ffffffffffffffda RBX: 00007fddcc7b5fa0 RCX: 00007fddcc58e969 [ 514.636711][T14417] RDX: 0000000000000028 RSI: 0000200000000640 RDI: 0000000000000012 [ 514.636723][T14417] RBP: 00007fddcd3bc090 R08: 0000000000000000 R09: 0000000000000000 [ 514.636736][T14417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.636747][T14417] R13: 0000000000000001 R14: 00007fddcc7b5fa0 R15: 00007ffe6451a798 [ 514.636778][T14417] [ 515.177245][T14432] netlink: 'syz.1.2655': attribute type 17 has an invalid length. [ 515.185549][T14432] netlink: 'syz.1.2655': attribute type 41 has an invalid length. [ 515.224442][ T5835] Bluetooth: hci3: ISO packet for unknown connection handle 3082 [ 515.265595][T14432] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2655'. [ 515.643716][T14442] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.2659'. [ 515.653440][T14442] netlink: zone id is out of range [ 515.663964][T14442] netlink: get zone limit has 8 unknown bytes [ 516.580494][T14471] netlink: 'syz.5.2667': attribute type 19 has an invalid length. [ 516.592188][T14471] netlink: 55 bytes leftover after parsing attributes in process `syz.5.2667'. [ 516.605621][T14471] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2667'. [ 517.584286][T14476] netlink: 'syz.0.2669': attribute type 10 has an invalid length. [ 517.852748][T14464] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2665'. [ 518.371050][T14491] netlink: 'syz.5.2671': attribute type 10 has an invalid length. [ 518.380607][T14491] veth1_macvtap: left promiscuous mode [ 518.399728][T14491] bridge0: port 1(macsec0) entered blocking state [ 518.416379][T14491] bridge0: port 1(macsec0) entered disabled state [ 518.443584][T14491] macsec0: entered allmulticast mode [ 518.453855][T14491] macsec0: entered promiscuous mode [ 519.002773][T14511] : entered promiscuous mode [ 519.016341][T14511] bond_slave_1: entered promiscuous mode [ 519.028631][T14511] macvlan0: entered promiscuous mode [ 519.044759][T14511] dummy0: entered promiscuous mode [ 519.389826][T14528] netlink: 180 bytes leftover after parsing attributes in process `syz.6.2686'. [ 520.166864][T14552] IPv6: NLM_F_CREATE should be specified when creating new route [ 520.183763][T14552] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2695'. [ 520.647630][T14583] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2709'. [ 520.843838][T14592] netlink: 196 bytes leftover after parsing attributes in process `syz.5.2710'. [ 521.068601][T14602] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2717'. [ 521.304633][T14610] FAULT_INJECTION: forcing a failure. [ 521.304633][T14610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 521.372437][T14610] CPU: 0 UID: 0 PID: 14610 Comm: syz.2.2720 Not tainted 6.15.0-rc4-syzkaller-gf4efc73b1ee7 #0 PREEMPT(full) [ 521.372466][T14610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 521.372479][T14610] Call Trace: [ 521.372488][T14610] [ 521.372497][T14610] dump_stack_lvl+0x189/0x250 [ 521.372536][T14610] ? __pfx_dump_stack_lvl+0x10/0x10 [ 521.372567][T14610] ? __pfx__printk+0x10/0x10 [ 521.372609][T14610] should_fail_ex+0x414/0x560 [ 521.372639][T14610] _copy_from_user+0x2d/0xb0 [ 521.372669][T14610] bpf_vlog_reverse_ubuf+0xc8/0x410 [ 521.372709][T14610] bpf_vlog_finalize+0x18c/0x400 [ 521.372741][T14610] btf_new_fd+0x481/0xc90 [ 521.372760][T14610] ? apparmor_capable+0x137/0x1b0 [ 521.372802][T14610] ? __pfx_btf_new_fd+0x10/0x10 [ 521.372825][T14610] ? bpf_token_put+0x143/0x160 [ 521.372851][T14610] ? bpf_btf_load+0x126/0x190 [ 521.372883][T14610] __sys_bpf+0x635/0x860 [ 521.372914][T14610] ? __pfx___sys_bpf+0x10/0x10 [ 521.372961][T14610] ? ksys_write+0x1f0/0x250 [ 521.373005][T14610] __x64_sys_bpf+0x7c/0x90 [ 521.373069][T14610] do_syscall_64+0xf6/0x210 [ 521.373097][T14610] ? clear_bhb_loop+0x45/0xa0 [ 521.373125][T14610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.373144][T14610] RIP: 0033:0x7ff89fd8e969 [ 521.373163][T14610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 521.373182][T14610] RSP: 002b:00007ff8a0b47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 521.373203][T14610] RAX: ffffffffffffffda RBX: 00007ff89ffb5fa0 RCX: 00007ff89fd8e969 [ 521.373219][T14610] RDX: 0000000000000028 RSI: 0000200000000640 RDI: 0000000000000012 [ 521.373232][T14610] RBP: 00007ff8a0b47090 R08: 0000000000000000 R09: 0000000000000000 [ 521.373244][T14610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 521.373256][T14610] R13: 0000000000000001 R14: 00007ff89ffb5fa0 R15: 00007fffaba85b78 [ 521.373296][T14610] [ 522.111374][T14618] netlink: 'syz.6.2721': attribute type 10 has an invalid length. [ 522.365614][T14629] netlink: 'syz.2.2725': attribute type 10 has an invalid length. [ 522.373793][T14629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.407510][T14629] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.535596][T14629] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 523.833727][T14657] netlink: 'syz.6.2738': attribute type 21 has an invalid length. [ 523.846088][T14657] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2738'. [ 523.855218][T14657] netlink: 3 bytes leftover after parsing attributes in process `syz.6.2738'. [ 523.903173][T14662] netlink: 'syz.1.2739': attribute type 10 has an invalid length. [ 524.076122][T14662] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2739'. [ 524.199507][T14667] netlink: 'syz.5.2737': attribute type 10 has an invalid length. [ 524.470339][T14667] team0: Device hsr_slave_0 failed to register rx_handler [ 525.601911][T14696] netlink: 'syz.1.2750': attribute type 13 has an invalid length. [ 525.616976][T14696] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2750'. [ 525.636696][T14696] erspan0: refused to change device tx_queue_len [ 525.643599][T14696] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 525.690372][T14698] netlink: 'syz.2.2751': attribute type 21 has an invalid length. [ 526.726701][T14729] -1: renamed from syzkaller0 [ 527.264853][T14738] netlink: 'syz.5.2766': attribute type 21 has an invalid length. [ 527.930872][T14763] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2777'. [ 528.661963][T14774] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2781'. [ 529.199967][T14790] FAULT_INJECTION: forcing a failure. [ 529.199967][T14790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 529.223853][T14790] CPU: 1 UID: 0 PID: 14790 Comm: syz.2.2787 Not tainted 6.15.0-rc4-syzkaller-gf4efc73b1ee7 #0 PREEMPT(full) [ 529.223885][T14790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 529.223905][T14790] Call Trace: [ 529.223913][T14790] [ 529.223922][T14790] dump_stack_lvl+0x189/0x250 [ 529.223955][T14790] ? __lock_acquire+0xaac/0xd20 [ 529.223986][T14790] ? __pfx_dump_stack_lvl+0x10/0x10 [ 529.224015][T14790] ? __pfx__printk+0x10/0x10 [ 529.224036][T14790] ? __might_fault+0xb0/0x130 [ 529.224075][T14790] should_fail_ex+0x414/0x560 [ 529.224102][T14790] _copy_to_user+0x31/0xb0 [ 529.224134][T14790] bpf_vlog_reverse_ubuf+0x29f/0x410 [ 529.224167][T14790] bpf_vlog_finalize+0x18c/0x400 [ 529.224196][T14790] btf_new_fd+0x481/0xc90 [ 529.224215][T14790] ? apparmor_capable+0x137/0x1b0 [ 529.224253][T14790] ? __pfx_btf_new_fd+0x10/0x10 [ 529.224275][T14790] ? bpf_token_put+0x143/0x160 [ 529.224299][T14790] ? bpf_btf_load+0x126/0x190 [ 529.224329][T14790] __sys_bpf+0x635/0x860 [ 529.224357][T14790] ? __pfx___sys_bpf+0x10/0x10 [ 529.224396][T14790] ? ksys_write+0x1f0/0x250 [ 529.224433][T14790] __x64_sys_bpf+0x7c/0x90 [ 529.224458][T14790] do_syscall_64+0xf6/0x210 [ 529.224485][T14790] ? clear_bhb_loop+0x45/0xa0 [ 529.224510][T14790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.224530][T14790] RIP: 0033:0x7ff89fd8e969 [ 529.224547][T14790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.224565][T14790] RSP: 002b:00007ff8a0b47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 529.224586][T14790] RAX: ffffffffffffffda RBX: 00007ff89ffb5fa0 RCX: 00007ff89fd8e969 [ 529.224601][T14790] RDX: 0000000000000028 RSI: 0000200000000640 RDI: 0000000000000012 [ 529.224614][T14790] RBP: 00007ff8a0b47090 R08: 0000000000000000 R09: 0000000000000000 [ 529.224627][T14790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 529.224639][T14790] R13: 0000000000000001 R14: 00007ff89ffb5fa0 R15: 00007fffaba85b78 [ 529.224676][T14790] [ 529.321209][T14791] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2788'. [ 529.597587][T14801] netlink: 'syz.1.2790': attribute type 10 has an invalid length. [ 529.617501][T14801] dummy0: left allmulticast mode [ 529.622641][T14801] dummy0: left promiscuous mode [ 529.657378][T14801] bridge0: port 4(dummy0) entered disabled state [ 529.763541][T14797] netlink: 'syz.1.2790': attribute type 8 has an invalid length. [ 529.778172][T14797] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2790'. [ 529.972900][T14801] team0: Port device dummy0 added [ 530.591191][T14833] netlink: 'syz.1.2800': attribute type 10 has an invalid length. [ 531.039483][T14837] netlink: 'syz.0.2801': attribute type 6 has an invalid length. [ 531.456214][ T5833] Bluetooth: hci1: ISO packet for unknown connection handle 6 [ 532.659360][T14863] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2810'. [ 532.923714][T14876] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2816'. [ 533.074040][T14874] netlink: 'syz.1.2815': attribute type 2 has an invalid length. [ 533.834633][T14896] netlink: 'syz.1.2821': attribute type 21 has an invalid length. [ 533.866155][T14896] netlink: 'syz.1.2821': attribute type 20 has an invalid length. [ 533.874051][T14896] IPv6: NLM_F_CREATE should be specified when creating new route [ 534.390543][T14905] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 534.399380][T14905] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 534.407664][T14905] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 534.426064][T14905] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 534.434255][T14905] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 535.965570][T14903] chnl_net:caif_netlink_parms(): no params data found [ 536.546175][ T5833] Bluetooth: hci5: command tx timeout [ 537.231115][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.471120][T14903] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.482563][T14903] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.492696][T14903] bridge_slave_0: entered allmulticast mode [ 537.505204][T14903] bridge_slave_0: entered promiscuous mode [ 537.534780][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.591259][T14903] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.612125][T14903] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.642582][T14903] bridge_slave_1: entered allmulticast mode [ 537.665309][T14903] bridge_slave_1: entered promiscuous mode [ 537.792299][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.868232][T14903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.884146][T14903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.934667][T14954] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.2838'. [ 537.942372][ T12] netdevsim netdevsim0 ªªªªªª (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.039650][T14903] team0: Port device team_slave_0 added [ 538.053730][T14903] team0: Port device team_slave_1 added [ 538.169367][T14903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 538.180085][T14903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.251808][T14903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.316171][T14964] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2842'. [ 538.348830][T14903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.355870][T14903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.452974][T14903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.626345][ T5833] Bluetooth: hci5: command tx timeout [ 538.641119][ T12] batadv_slave_1: left allmulticast mode [ 538.671550][ T12] bridge0: port 6(batadv_slave_1) entered disabled state [ 538.683878][ T12] bridge0: port 5(dummy0) entered disabled state [ 538.700102][ T12] macsec0: left allmulticast mode [ 538.705378][ T12] macsec0: left promiscuous mode [ 538.715094][ T12] bridge0: port 1(macsec0) entered disabled state [ 538.729919][ T12] bridge_slave_1: left allmulticast mode [ 538.735905][ T12] bridge_slave_1: left promiscuous mode [ 538.741952][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.286441][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 539.298829][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 539.310511][ T12] bond0 (unregistering): Released all slaves [ 539.423494][T14903] hsr_slave_0: entered promiscuous mode [ 539.431306][T14903] hsr_slave_1: entered promiscuous mode [ 539.450585][T14903] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 539.473694][T14903] Cannot create hsr debugfs directory [ 539.711939][T15004] netlink: 15743 bytes leftover after parsing attributes in process `syz.5.2857'. [ 539.901998][T15008] netlink: 'syz.1.2859': attribute type 29 has an invalid length. [ 539.977572][T15008] netlink: 'syz.1.2859': attribute type 29 has an invalid length. [ 540.088293][ T12] hsr_slave_0: left promiscuous mode [ 540.095075][ T12] hsr_slave_1: left promiscuous mode [ 540.125552][ T12] veth0_macvtap: left promiscuous mode [ 540.709175][ T5833] Bluetooth: hci5: command tx timeout [ 540.760307][T15034] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.2870'. [ 541.775381][T15049] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2876'. [ 541.781820][T15053] netlink: 'syz.6.2877': attribute type 21 has an invalid length. [ 541.885006][T15053] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2877'. [ 542.136749][T15065] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2883'. [ 542.254414][T15069] FAULT_INJECTION: forcing a failure. [ 542.254414][T15069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 542.255217][T15069] [ 542.255225][T15069] ====================================================== [ 542.255232][T15069] WARNING: possible circular locking dependency detected [ 542.255243][T15069] 6.15.0-rc4-syzkaller-gf4efc73b1ee7 #0 Not tainted [ 542.255252][T15069] ------------------------------------------------------ [ 542.255258][T15069] syz.2.2885/15069 is trying to acquire lock: [ 542.255267][T15069] ffffffff8df2fa20 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 542.255309][T15069] [ 542.255309][T15069] but task is already holding lock: [ 542.255314][T15069] ffff8880b8939b58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 542.255356][T15069] [ 542.255356][T15069] which lock already depends on the new lock. [ 542.255356][T15069] [ 542.255362][T15069] [ 542.255362][T15069] the existing dependency chain (in reverse order) is: [ 542.255367][T15069] [ 542.255367][T15069] -> #5 (&rq->__lock){-.-.}-{2:2}: [ 542.255387][T15069] lock_acquire+0x120/0x360 [ 542.255410][T15069] _raw_spin_lock_nested+0x32/0x50 [ 542.255428][T15069] raw_spin_rq_lock_nested+0x2a/0x140 [ 542.255450][T15069] task_rq_lock+0xbc/0x470 [ 542.255470][T15069] cgroup_move_task+0x9a/0x590 [ 542.255484][T15069] css_set_move_task+0x658/0x9e0 [ 542.255498][T15069] cgroup_post_fork+0x1ef/0x790 [ 542.255511][T15069] copy_process+0x37e6/0x3b80 [ 542.255524][T15069] kernel_clone+0x21e/0x870 [ 542.255539][T15069] user_mode_thread+0xdd/0x140 [ 542.255554][T15069] rest_init+0x23/0x300 [ 542.255573][T15069] start_kernel+0x470/0x4f0 [ 542.255586][T15069] x86_64_start_reservations+0x2a/0x30 [ 542.255611][T15069] x86_64_start_kernel+0x66/0x70 [ 542.255628][T15069] common_startup_64+0x13e/0x147 [ 542.255651][T15069] [ 542.255651][T15069] -> #4 (&p->pi_lock){-.-.}-{2:2}: [ 542.255670][T15069] lock_acquire+0x120/0x360 [ 542.255689][T15069] _raw_spin_lock_irqsave+0xa7/0xf0 [ 542.255703][T15069] try_to_wake_up+0x6e/0x1290 [ 542.255719][T15069] create_worker+0x503/0x720 [ 542.255738][T15069] workqueue_init+0x503/0x8a0 [ 542.255754][T15069] kernel_init_freeable+0x3a7/0x570 [ 542.255769][T15069] kernel_init+0x1d/0x1d0 [ 542.255788][T15069] ret_from_fork+0x4b/0x80 [ 542.255802][T15069] ret_from_fork_asm+0x1a/0x30 [ 542.255815][T15069] [ 542.255815][T15069] -> #3 (&pool->lock){-.-.}-{2:2}: [ 542.255834][T15069] lock_acquire+0x120/0x360 [ 542.255853][T15069] _raw_spin_lock+0x2e/0x40 [ 542.255866][T15069] __queue_work+0x7b0/0xfe0 [ 542.255879][T15069] queue_work_on+0x181/0x270 [ 542.255891][T15069] rpm_suspend+0xe54/0x1720 [ 542.255906][T15069] __pm_runtime_idle+0x12f/0x1a0 [ 542.255921][T15069] __device_attach+0x342/0x400 [ 542.255938][T15069] bus_probe_device+0x185/0x260 [ 542.255955][T15069] device_add+0x7b6/0xb50 [ 542.255973][T15069] serial_base_port_add+0x2f2/0x430 [ 542.255993][T15069] serial_core_register_port+0x367/0x2700 [ 542.256006][T15069] serial8250_register_8250_port+0x16dc/0x2050 [ 542.256029][T15069] serial_pnp_probe+0x527/0x790 [ 542.256041][T15069] pnp_device_probe+0x308/0x4c0 [ 542.256055][T15069] really_probe+0x26a/0x9a0 [ 542.256073][T15069] __driver_probe_device+0x18c/0x2f0 [ 542.256090][T15069] driver_probe_device+0x4f/0x430 [ 542.256109][T15069] __driver_attach+0x452/0x700 [ 542.256126][T15069] bus_for_each_dev+0x230/0x2b0 [ 542.256138][T15069] bus_add_driver+0x345/0x640 [ 542.256150][T15069] driver_register+0x23a/0x320 [ 542.256170][T15069] serial8250_init+0xc2/0x1c0 [ 542.256200][T15069] do_one_initcall+0x233/0x820 [ 542.256222][T15069] do_initcall_level+0x137/0x1f0 [ 542.256236][T15069] do_initcalls+0x69/0xd0 [ 542.256249][T15069] kernel_init_freeable+0x3d9/0x570 [ 542.256264][T15069] kernel_init+0x1d/0x1d0 [ 542.256284][T15069] ret_from_fork+0x4b/0x80 [ 542.256297][T15069] ret_from_fork_asm+0x1a/0x30 [ 542.256310][T15069] [ 542.256310][T15069] -> #2 (&dev->power.lock){-.-.}-{3:3}: [ 542.256330][T15069] lock_acquire+0x120/0x360 [ 542.256349][T15069] _raw_spin_lock_irqsave+0xa7/0xf0 [ 542.256364][T15069] __pm_runtime_resume+0x10f/0x180 [ 542.256380][T15069] __uart_start+0x171/0x440 [ 542.256392][T15069] uart_write+0x278/0xa40 [ 542.256405][T15069] n_tty_write+0xd32/0x11d0 [ 542.256424][T15069] file_tty_write+0x4fe/0x990 [ 542.256437][T15069] vfs_write+0x548/0xa90 [ 542.256452][T15069] ksys_write+0x145/0x250 [ 542.256468][T15069] do_syscall_64+0xf6/0x210 [ 542.256486][T15069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.256501][T15069] [ 542.256501][T15069] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 542.256520][T15069] lock_acquire+0x120/0x360 [ 542.256539][T15069] _raw_spin_lock_irqsave+0xa7/0xf0 [ 542.256553][T15069] serial8250_console_write+0x17e/0x1ba0 [ 542.256569][T15069] console_flush_all+0x728/0xc40 [ 542.256584][T15069] console_unlock+0xc4/0x270 [ 542.256601][T15069] vprintk_emit+0x5b7/0x7a0 [ 542.256613][T15069] _printk+0xcf/0x120 [ 542.256626][T15069] register_console+0xa8b/0xf90 [ 542.256640][T15069] univ8250_console_init+0x52/0x90 [ 542.256653][T15069] console_init+0x1a1/0x670 [ 542.256666][T15069] start_kernel+0x2cb/0x4f0 [ 542.256679][T15069] x86_64_start_reservations+0x2a/0x30 [ 542.256697][T15069] x86_64_start_kernel+0x66/0x70 [ 542.256715][T15069] common_startup_64+0x13e/0x147 [ 542.256735][T15069] [ 542.256735][T15069] -> #0 (console_owner){-.-.}-{0:0}: [ 542.256755][T15069] validate_chain+0xb9b/0x2140 [ 542.256767][T15069] __lock_acquire+0xaac/0xd20 [ 542.256785][T15069] lock_acquire+0x120/0x360 [ 542.256804][T15069] console_flush_all+0x6d2/0xc40 [ 542.256822][T15069] console_unlock+0xc4/0x270 [ 542.256834][T15069] vprintk_emit+0x5b7/0x7a0 [ 542.256846][T15069] _printk+0xcf/0x120 [ 542.256858][T15069] should_fail_ex+0x3f5/0x560 [ 542.256871][T15069] strncpy_from_user+0x36/0x290 [ 542.256883][T15069] strncpy_from_user_nofault+0x72/0x140 [ 542.256900][T15069] bpf_probe_read_compat_str+0xe2/0x180 [ 542.256920][T15069] bpf_prog_c1796171ffc7efef+0x3e/0x40 [ 542.256932][T15069] bpf_trace_run4+0x28b/0x4a0 [ 542.256946][T15069] __bpf_trace_sched_switch+0x17a/0x1e0 [ 542.256963][T15069] __traceiter_sched_switch+0x9a/0xd0 [ 542.256980][T15069] __schedule+0x2303/0x4cd0 [ 542.256994][T15069] schedule+0x165/0x360 [ 542.257007][T15069] schedule_timeout+0x9a/0x270 [ 542.257019][T15069] __skb_wait_for_more_packets+0x3a2/0x580 [ 542.257041][T15069] skb_recv_datagram+0x119/0x190 [ 542.257060][T15069] netlink_recvmsg+0x11b/0xe00 [ 542.257076][T15069] sock_recvmsg+0x229/0x270 [ 542.257089][T15069] ____sys_recvmsg+0x1c9/0x460 [ 542.257107][T15069] ___sys_recvmsg+0x1b5/0x510 [ 542.257126][T15069] __x64_sys_recvmsg+0x198/0x260 [ 542.257145][T15069] do_syscall_64+0xf6/0x210 [ 542.257162][T15069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.257176][T15069] [ 542.257176][T15069] other info that might help us debug this: [ 542.257176][T15069] [ 542.257181][T15069] Chain exists of: [ 542.257181][T15069] console_owner --> &p->pi_lock --> &rq->__lock [ 542.257181][T15069] [ 542.257204][T15069] Possible unsafe locking scenario: [ 542.257204][T15069] [ 542.257209][T15069] CPU0 CPU1 [ 542.257213][T15069] ---- ---- [ 542.257218][T15069] lock(&rq->__lock); [ 542.257227][T15069] lock(&p->pi_lock); [ 542.257238][T15069] lock(&rq->__lock); [ 542.257249][T15069] lock(console_owner); [ 542.257258][T15069] [ 542.257258][T15069] *** DEADLOCK *** [ 542.257258][T15069] [ 542.257263][T15069] 4 locks held by syz.2.2885/15069: [ 542.257272][T15069] #0: ffff8880b8939b58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 542.257315][T15069] #1: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x19c/0x4a0 [ 542.257351][T15069] #2: ffffffff8df2fa80 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 542.257384][T15069] #3: ffffffff8de17350 (console_srcu){....}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 542.257419][T15069] [ 542.257419][T15069] stack backtrace: [ 542.257427][T15069] CPU: 1 UID: 0 PID: 15069 Comm: syz.2.2885 Not tainted 6.15.0-rc4-syzkaller-gf4efc73b1ee7 #0 PREEMPT(full) [ 542.257445][T15069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 542.257455][T15069] Call Trace: [ 542.257462][T15069] [ 542.257469][T15069] dump_stack_lvl+0x189/0x250 [ 542.257492][T15069] ? __pfx_dump_stack_lvl+0x10/0x10 [ 542.257514][T15069] ? __pfx__printk+0x10/0x10 [ 542.257531][T15069] ? print_lock_name+0xde/0x100 [ 542.257557][T15069] print_circular_bug+0x2ee/0x310 [ 542.257573][T15069] check_noncircular+0x134/0x160 [ 542.257590][T15069] validate_chain+0xb9b/0x2140 [ 542.257620][T15069] __lock_acquire+0xaac/0xd20 [ 542.257643][T15069] ? console_flush_all+0x13a/0xc40 [ 542.257658][T15069] lock_acquire+0x120/0x360 [ 542.257678][T15069] ? console_flush_all+0x13a/0xc40 [ 542.257697][T15069] ? do_raw_spin_unlock+0x122/0x240 [ 542.257713][T15069] ? console_flush_all+0x13a/0xc40 [ 542.257730][T15069] console_flush_all+0x6d2/0xc40 [ 542.257745][T15069] ? console_flush_all+0x13a/0xc40 [ 542.257762][T15069] ? console_flush_all+0x13a/0xc40 [ 542.257781][T15069] ? __pfx_console_flush_all+0x10/0x10 [ 542.257801][T15069] ? is_printk_cpu_sync_owner+0x32/0x40 [ 542.257822][T15069] console_unlock+0xc4/0x270 [ 542.257836][T15069] ? __pfx_console_unlock+0x10/0x10 [ 542.257851][T15069] ? is_printk_cpu_sync_owner+0x32/0x40 [ 542.257871][T15069] vprintk_emit+0x5b7/0x7a0 [ 542.257886][T15069] ? __pfx_vprintk_emit+0x10/0x10 [ 542.257907][T15069] _printk+0xcf/0x120 [ 542.257923][T15069] ? __pfx__printk+0x10/0x10 [ 542.257938][T15069] ? __lock_acquire+0xaac/0xd20 [ 542.257968][T15069] should_fail_ex+0x3f5/0x560 [ 542.257984][T15069] strncpy_from_user+0x36/0x290 [ 542.257999][T15069] strncpy_from_user_nofault+0x72/0x140 [ 542.258018][T15069] bpf_probe_read_compat_str+0xe2/0x180 [ 542.258042][T15069] bpf_prog_c1796171ffc7efef+0x3e/0x40 [ 542.258054][T15069] bpf_trace_run4+0x28b/0x4a0 [ 542.258070][T15069] ? bpf_trace_run4+0x19c/0x4a0 [ 542.258086][T15069] ? __pfx_bpf_trace_run4+0x10/0x10 [ 542.258101][T15069] ? kvm_sched_clock_read+0x11/0x20 [ 542.258118][T15069] ? sched_clock_cpu+0x74/0x430 [ 542.258143][T15069] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 542.258162][T15069] __bpf_trace_sched_switch+0x17a/0x1e0 [ 542.258182][T15069] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 542.258199][T15069] ? psi_group_change+0xbc7/0x1210 [ 542.258213][T15069] ? rcu_read_lock_sched_held+0x89/0x100 [ 542.258238][T15069] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 542.258263][T15069] ? psi_task_switch+0x39e/0x6d0 [ 542.258280][T15069] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 542.258297][T15069] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 542.258315][T15069] __traceiter_sched_switch+0x9a/0xd0 [ 542.258335][T15069] __schedule+0x2303/0x4cd0 [ 542.258353][T15069] ? __lock_acquire+0xaac/0xd20 [ 542.258377][T15069] ? look_up_lock_class+0x74/0x170 [ 542.258394][T15069] ? schedule+0x165/0x360 [ 542.258411][T15069] ? __pfx___schedule+0x10/0x10 [ 542.258433][T15069] ? schedule+0x91/0x360 [ 542.258450][T15069] schedule+0x165/0x360 [ 542.258466][T15069] schedule_timeout+0x9a/0x270 [ 542.258479][T15069] ? __pfx_schedule_timeout+0x10/0x10 [ 542.258494][T15069] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 542.258511][T15069] ? prepare_to_wait_exclusive+0x8d/0x240 [ 542.258533][T15069] __skb_wait_for_more_packets+0x3a2/0x580 [ 542.258558][T15069] ? __pfx___skb_wait_for_more_packets+0x10/0x10 [ 542.258580][T15069] ? __pfx_receiver_wake_function+0x10/0x10 [ 542.258608][T15069] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 542.258628][T15069] skb_recv_datagram+0x119/0x190 [ 542.258653][T15069] netlink_recvmsg+0x11b/0xe00 [ 542.258672][T15069] ? aa_sk_perm+0x81e/0x950 [ 542.258687][T15069] ? __pfx_netlink_recvmsg+0x10/0x10 [ 542.258705][T15069] ? __pfx_aa_sk_perm+0x10/0x10 [ 542.258720][T15069] ? aa_sock_msg_perm+0x94/0x160 [ 542.258738][T15069] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 542.258756][T15069] ? security_socket_recvmsg+0x7e/0x2e0 [ 542.258777][T15069] ? __pfx_netlink_recvmsg+0x10/0x10 [ 542.258794][T15069] sock_recvmsg+0x229/0x270 [ 542.258810][T15069] ____sys_recvmsg+0x1c9/0x460 [ 542.258833][T15069] ? __pfx_____sys_recvmsg+0x10/0x10 [ 542.258860][T15069] ? import_iovec+0x74/0xa0 [ 542.258883][T15069] ___sys_recvmsg+0x1b5/0x510 [ 542.258905][T15069] ? __pfx____sys_recvmsg+0x10/0x10 [ 542.258935][T15069] ? __fget_files+0x3a0/0x420 [ 542.258961][T15069] __x64_sys_recvmsg+0x198/0x260 [ 542.258982][T15069] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 542.259010][T15069] ? do_syscall_64+0xba/0x210 [ 542.259030][T15069] do_syscall_64+0xf6/0x210 [ 542.259049][T15069] ? clear_bhb_loop+0x45/0xa0 [ 542.259067][T15069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.259081][T15069] RIP: 0033:0x7ff89fd8e969 [ 542.259094][T15069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.259108][T15069] RSP: 002b:00007ff8a0b47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 542.259124][T15069] RAX: ffffffffffffffda RBX: 00007ff89ffb5fa0 RCX: 00007ff89fd8e969 [ 542.259136][T15069] RDX: 0000000000010002 RSI: 0000200000001b80 RDI: 0000000000000003 [ 542.259146][T15069] RBP: 00007ff8a0b47090 R08: 0000000000000000 R09: 0000000000000000 [ 542.259156][T15069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.259165][T15069] R13: 0000000000000000 R14: 00007ff89ffb5fa0 R15: 00007fffaba85b78 [ 542.259182][T15069] [ 543.600546][T15069] CPU: 1 UID: 0 PID: 15069 Comm: syz.2.2885 Not tainted 6.15.0-rc4-syzkaller-gf4efc73b1ee7 #0 PREEMPT(full) [ 543.600569][T15069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 543.600579][T15069] Call Trace: [ 543.600587][T15069] [ 543.600593][T15069] dump_stack_lvl+0x189/0x250 [ 543.600623][T15069] ? __pfx_dump_stack_lvl+0x10/0x10 [ 543.600645][T15069] ? __pfx__printk+0x10/0x10 [ 543.600661][T15069] ? __lock_acquire+0xaac/0xd20 [ 543.600685][T15069] should_fail_ex+0x414/0x560 [ 543.600703][T15069] strncpy_from_user+0x36/0x290 [ 543.600719][T15069] strncpy_from_user_nofault+0x72/0x140 [ 543.600739][T15069] bpf_probe_read_compat_str+0xe2/0x180 [ 543.600764][T15069] bpf_prog_c1796171ffc7efef+0x3e/0x40 [ 543.600778][T15069] bpf_trace_run4+0x28b/0x4a0 [ 543.600795][T15069] ? bpf_trace_run4+0x19c/0x4a0 [ 543.600811][T15069] ? __pfx_bpf_trace_run4+0x10/0x10 [ 543.600826][T15069] ? kvm_sched_clock_read+0x11/0x20 [ 543.600844][T15069] ? sched_clock_cpu+0x74/0x430 [ 543.600869][T15069] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 543.600890][T15069] __bpf_trace_sched_switch+0x17a/0x1e0 [ 543.600909][T15069] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 543.600927][T15069] ? psi_group_change+0xbc7/0x1210 [ 543.600941][T15069] ? rcu_read_lock_sched_held+0x89/0x100 [ 543.600966][T15069] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 543.600992][T15069] ? psi_task_switch+0x39e/0x6d0 [ 543.601008][T15069] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 543.601025][T15069] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 543.601044][T15069] __traceiter_sched_switch+0x9a/0xd0 [ 543.601065][T15069] __schedule+0x2303/0x4cd0 [ 543.601084][T15069] ? __lock_acquire+0xaac/0xd20 [ 543.601108][T15069] ? look_up_lock_class+0x74/0x170 [ 543.601125][T15069] ? schedule+0x165/0x360 [ 543.601141][T15069] ? __pfx___schedule+0x10/0x10 [ 543.601164][T15069] ? schedule+0x91/0x360 [ 543.601180][T15069] schedule+0x165/0x360 [ 543.601197][T15069] schedule_timeout+0x9a/0x270 [ 543.601210][T15069] ? __pfx_schedule_timeout+0x10/0x10 [ 543.601225][T15069] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 543.601248][T15069] ? prepare_to_wait_exclusive+0x8d/0x240 [ 543.601270][T15069] __skb_wait_for_more_packets+0x3a2/0x580 [ 543.601296][T15069] ? __pfx___skb_wait_for_more_packets+0x10/0x10 [ 543.601319][T15069] ? __pfx_receiver_wake_function+0x10/0x10 [ 543.601341][T15069] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 543.601361][T15069] skb_recv_datagram+0x119/0x190 [ 543.601386][T15069] netlink_recvmsg+0x11b/0xe00 [ 543.601407][T15069] ? aa_sk_perm+0x81e/0x950 [ 543.601421][T15069] ? __pfx_netlink_recvmsg+0x10/0x10 [ 543.601439][T15069] ? __pfx_aa_sk_perm+0x10/0x10 [ 543.601455][T15069] ? aa_sock_msg_perm+0x94/0x160 [ 543.601472][T15069] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 543.601491][T15069] ? security_socket_recvmsg+0x7e/0x2e0 [ 543.601513][T15069] ? __pfx_netlink_recvmsg+0x10/0x10 [ 543.601530][T15069] sock_recvmsg+0x229/0x270 [ 543.601546][T15069] ____sys_recvmsg+0x1c9/0x460 [ 543.601571][T15069] ? __pfx_____sys_recvmsg+0x10/0x10 [ 543.601597][T15069] ? import_iovec+0x74/0xa0 [ 543.601620][T15069] ___sys_recvmsg+0x1b5/0x510 [ 543.601643][T15069] ? __pfx____sys_recvmsg+0x10/0x10 [ 543.601673][T15069] ? __fget_files+0x3a0/0x420 [ 543.601699][T15069] __x64_sys_recvmsg+0x198/0x260 [ 543.601721][T15069] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 543.601749][T15069] ? do_syscall_64+0xba/0x210 [ 543.601770][T15069] do_syscall_64+0xf6/0x210 [ 543.601789][T15069] ? clear_bhb_loop+0x45/0xa0 [ 543.601807][T15069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.601822][T15069] RIP: 0033:0x7ff89fd8e969 [ 543.601837][T15069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 543.601851][T15069] RSP: 002b:00007ff8a0b47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 543.601868][T15069] RAX: ffffffffffffffda RBX: 00007ff89ffb5fa0 RCX: 00007ff89fd8e969 [ 543.601880][T15069] RDX: 0000000000010002 RSI: 0000200000001b80 RDI: 0000000000000003 [ 543.601890][T15069] RBP: 00007ff8a0b47090 R08: 0000000000000000 R09: 0000000000000000 [ 543.601900][T15069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.601909][T15069] R13: 0000000000000000 R14: 00007ff89ffb5fa0 R15: 00007fffaba85b78 [ 543.601927][T15069] [ 544.051204][T14903] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 544.115276][ T5833] Bluetooth: hci5: command tx timeout [ 544.123702][T14903] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 544.153315][T15067] netlink: 'syz.1.2884': attribute type 17 has an invalid length. [ 544.156197][T15073] ieee80211 phy24: Selected rate control algorithm 'minstrel_ht' [ 544.162780][T15067] netlink: 'syz.1.2884': attribute type 41 has an invalid length. [ 544.187692][T14903] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 544.197567][T14903] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 544.204476][T15067] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2884'. [ 544.252125][T15073] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2886'. [ 544.261704][T15073] tc_dump_action: action bad kind [ 544.321780][T14903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.337752][T14903] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.350136][ T3017] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.357291][ T3017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.372172][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.379316][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.505679][T14903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.534309][T14903] veth0_vlan: entered promiscuous mode [ 544.548878][T14903] veth1_vlan: entered promiscuous mode [ 544.569250][T14903] veth0_macvtap: entered promiscuous mode [ 544.578852][T14903] veth1_macvtap: entered promiscuous mode [ 544.592529][T14903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.603037][T14903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.613260][T14903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.624002][T14903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.634948][T14903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.646996][T14903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.657587][T14903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.667659][T14903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.678455][T14903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.689890][T14903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 544.702058][T14903] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.712511][T14903] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.721537][T14903] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.730639][T14903] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.757685][T14903] ieee80211 phy25: Selected rate control algorithm 'minstrel_ht' [ 544.774094][T14903] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 544.784204][T14903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.800278][ T3017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.801063][T14903] ieee80211 phy26: Selected rate control algorithm 'minstrel_ht' [ 544.808623][ T3017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.833572][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.841573][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50