last executing test programs: 5m7.059436807s ago: executing program 4 (id=5): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0xffffffffffffffe8, 0x0, 0x0, 0x6}, 0xf) 5m6.885580698s ago: executing program 4 (id=11): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000181100"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000001811"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) 4m51.700956631s ago: executing program 32 (id=11): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000181100"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000001811"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) 4m9.491186676s ago: executing program 0 (id=488): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 4m9.234282738s ago: executing program 0 (id=490): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 4m9.025449009s ago: executing program 0 (id=492): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 4m8.771708351s ago: executing program 0 (id=495): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000008c0)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 4m8.489777063s ago: executing program 0 (id=498): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x0, 0x8, 0x200007, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r0, 0x0, 0x0}, 0x20) 4m8.109768335s ago: executing program 0 (id=503): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r2, &(0x7f0000000180)=r3, 0x12) write$cgroup_freezer_state(r1, 0x0, 0x0) 3m52.978925757s ago: executing program 33 (id=503): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r2, &(0x7f0000000180)=r3, 0x12) write$cgroup_freezer_state(r1, 0x0, 0x0) 4.41306341s ago: executing program 5 (id=2114): socket$kcm(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x27, 0xe, 0x0, &(0x7f0000000040)="f8ad48c5fce216efcc244f7f86dd", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0xe40, 0x0, &(0x7f00000006c0)="ffffffff106c3ed990f77e9eb3cf", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.938589283s ago: executing program 5 (id=2116): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 3.838685714s ago: executing program 3 (id=2117): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000100), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.661709085s ago: executing program 6 (id=2119): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000010000000000000001000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000100000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000140)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r3 = perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100, 0x0, 0x0, 0x0, 0xab93}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x1) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="1400000016000b63d26a04000000b2e4522408bb", 0x14}], 0x1}, 0x54) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000840)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00047300005b686158bbcfe8875a060300000022000000000000000000000000ac1414aa"], 0xfdef) ioctl$TUNSETCARRIER(r7, 0x400454e2, &(0x7f00000002c0)=0x9) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002200356bd25a806f8c6394f91124fc60067411000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 3.581362186s ago: executing program 2 (id=2121): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) 3.574356396s ago: executing program 5 (id=2122): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5cce, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@o_path={&(0x7f00000003c0)='./file0\x00', 0x0, 0x4014, r1}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)="6407f7465f6ac2e2ff9fc7c83d471b9e41", 0x11}], 0x1, &(0x7f0000000240)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@generic={0x82, 0x9, "f57902de4d0e1c"}]}}}, @ip_retopts={{0x84, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0x45, [@remote, @local]}, @cipso={0x86, 0xf, 0x3, [{0x1, 0x9, "5acabc119a80ac"}]}, @timestamp_prespec={0x44, 0x3c, 0xb7, 0x3, 0xd, [{@multicast1, 0x3ff}, {@local, 0x5}, {@remote, 0x1a9000d5}, {@multicast2}, {@multicast2, 0x9}, {@empty, 0xfffffff8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffff7}]}, @lsrr={0x83, 0xb, 0x63, [@broadcast, @dev={0xac, 0x14, 0x14, 0x30}]}, @ssrr={0x89, 0x13, 0x89, [@multicast1, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0xc0}, 0x4800) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002c000b35d25a806f8c6394f91124fc602f1b02000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 3.470318597s ago: executing program 1 (id=2123): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) close(0x3) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 3.414543437s ago: executing program 2 (id=2124): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000540000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0xc0189436, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) (async, rerun: 32) r1 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="5c0000005f006bab9e3fe3010000000000050000000000007ea60664160af36504001a0038001d00b577a0e69ee517d34460bc24e1aab556a7e38f8586cc468ef483ed32c450251e6102949a3651f60a84c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async, rerun: 64) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000fc980a000063a16100000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000a300)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000020000085000000870000001801"], 0x0}, 0x94) (async) ioctl$SIOCSIFHWADDR(r5, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.events\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002240)={0x6, 0x2f, &(0x7f0000002480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x1, 0xd, 0x2, 0x9, 0xfffffffffffffff8, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x89}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3e2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x9aaebfd5eda1e263}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000fc0)='syzkaller\x00', 0xfff, 0xf8, &(0x7f0000002100)=""/248, 0x41000, 0x74d576a34c312e3e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001000)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000001040)={0x2, 0x10, 0x9, 0xc3}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)=[{0x3, 0x1, 0xe}], 0x10, 0x401, @value=r6}, 0x94) (async) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, r6, 0x4, 0x3, 0x3}, 0x50) (async, rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async, rerun: 32) r8 = socket$kcm(0x10, 0x400000002, 0x0) (rerun: 32) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="110000006a00"], 0xfe33) (async) syz_open_procfs$namespace(0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0) (async) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r9, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62043c00590200000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, &(0x7f0000000a00), &(0x7f0000000d80)='syzkaller\x00', 0x81, 0x1000, &(0x7f0000001100)=""/4096, 0x41100, 0xc, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000ac0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000b00)={0x0, 0xe, 0x5, 0x7fffffff}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000b80)=[r7, r3], &(0x7f0000000c80)=[{0x4, 0x1, 0x8, 0x5}, {0x0, 0x1, 0x8, 0x5}, {0x3, 0x1, 0xa, 0x4}, {0x3, 0x1}], 0x10, 0x200}, 0x94) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'macvlan0\x00', 0x2000}) 3.329036568s ago: executing program 5 (id=2125): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (fail_nth: 3) 3.265828458s ago: executing program 1 (id=2126): socket$kcm(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="bf16000000000000b70700000100e0ff5070000028000000770000000000000095000200000000007ae9413df8ff0af5aa35339f4b382c4cad9db67dc983134d04ef2fd6fa7a9b857b72abaca100af1ba23d69883c073ec10500000000000000000000000000ac0e064c27bdfbd301150500000000000000bfdc995279d64072aacbb0595b950600009ad3bf16a461e48e955a772d4062093f4cb1c3d9532abad2085401f098eb039ae4f4103699b9e079229c1a72cb6d47cef1595e84d21951010f0274b1445a2ad6a7ad73827cccc21842599e0ae7b91f0b858b7b67aa0b28d69a74ffdea61be892f0f9ff9468e42aea53ee0cb83ff180aa18b625d1667459c7cba77cedca0bff6d8370c33e2bd9cebd29c152ff9dc8c2772fe552fecfcd1778b08381000000c0b8e14631d521207e7423d86508416780983c2f380bc01cefe9773a9a5cd5b24aa24a561e72393c0ce2bf44825b05c1779fe74f884c2472ab45c2af60289cb199963312dd1929096c6f49d116f1612a7b97f77169fa5e8a66a372ef8e3ee7167f7d2a26fc6c3cfa4dc5860277223d6eb3460e3b10a0dc9400010000ca11d7beb5e700498b43bdadc916c01264d22d7969530633f94b257fbc5da7a96820e31044c0b0f62619c9e351996185e4015510875b774666ba5c0ba9845ad25b578d7d714ff3a85586b9b452301f5470d0e0ae5d7f82f178f0c7c9c8f44c390c8a2c5be9e24a125420912ec9a3149f87b35ef1169f05e49164a4944e7b4da2097f57020dd4f1f4f15edd7a0b1e24c6f79e1ea72a29c773f40f5bd9a6d7926c5c741f5aa85405273c7967d2c1a14efe0d5322cdcf2bc058ff9aab481926312f04008b1044e8c1c17d8c562edf69f4db96e059c49ec69a6086b5a3d24f4c7810ab5f6a9f9eb5c881883e5671bbca4614df48103ca6e408910000000000f784583b63fcd46293e1ea56bd87915783a144d41669cd2c52dbb03e2b7384f100000000000000000090bd4fa6a2d30dafd3a04d373eaf151dfbbb744f0f1ce962217b32ad159f41671f002c3a25b4efbc3b193e0954f71c7f240a7cdc5bf9be12ca0e82d2a408c8f882760331612a7c3d74786b3268e0c2a95396f6d16b8309cc192295fea2d0ce983baef6deecca6b6268b6cc965f2623bac861e31026a6aba7ebf78a614092257e3a4e52b7b1628dc33a425dce56fc939b96fbb66e131ba7651b542c86650336735d315c26bae977ff5a619b2534a5d1479e9090447aa860b81b905ded2f52ab9c741fc3a05030476b159690a811416d59f9d92c84fcbf0146be0330e1127cc4bb4e4c94d603f449279874e44113e9de94fbc14891af08e20a4701f0f8788b357815cf4ca3da2066ee6604ac6ab6ec54a111bd5b1887e74eb854010cc2dc95b06ceddfbc1b914be267fc29e6cf2301291ca8de0eed796d9e5e356861349b0fc217592e962360e714bb93a2e936f70873e773b9b6c056f28a36185bb8ecdcd3332528ab2d05be93bc69a373ac9d20fa087015481cfba74612d93104db153f89d03d6ce620f1f25be68b9cb2d225711c1b288ec6464111db1b40dbce06fd1bd887d7254476c9c70fe79be0fb7810e054b6e2205c2b4b27f13751639c581dac83889ed6eea54c798f2287c9d5345b0c49f78b9aa27a9c96ce5e43b6ca11bb6375ed390773315d19b596a60500330115bb100d0ea1511e29720d5f712eedd8e165af0c1d591fdbbd84e654b0e60c338c530a9e8ae1316a889134204f9db96e870bc1c5ffc1bdb2394d77e6c751f9d87ef42f6d53293f31ff4b60912fa0777c59db1ff74ba90026eed627e0f8ab250c8c6d51d86030e6be4a8982684c12c1c435d586ce106d0b4cd0f5fabcc5fbe30db5e715646867122ef50f767e215f92d407ad1c6575eccfe25f76aaf388008ec2217c9ba0f807edebe686b420287b6e0c6f14a48c82ec45f1aa7ac2508932d0e3a5834a1a4e20bc9bb2a802304900d6bef57bd9c081b45520e7bd491a0ee1bfec4721cc70962f4d55f01bae699cb3fe31c179f00dc79140333fa4e85ec393dd01bdc5bf79677453a30c63d1561a35c5e94e3cad80136e753052b08901"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x27, 0xe, 0x0, &(0x7f0000000040)="f8ad48c5fce216efcc244f7f86dd", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0xe40, 0x0, &(0x7f00000006c0)="ffffffff106c3ed990f77e9eb3cf", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.99745358s ago: executing program 2 (id=2127): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@ifindex=0x0, 0x15, 0x1, 0x401, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="180000c80000003c00000000010000ee6007dffe010000003e250846c300"], 0x18}, 0x20004004) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x31) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x54) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0}, 0x28) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)="1400000020000b0fd25a806ce4cd0a592dd73c128c6f94f90124fc60", 0x1c}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x29, @multicast2}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001040)="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", 0xffeb}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14869}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91024fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x9, &(0x7f0000000200)=ANY=[@ANYBLOB="950000000000000085100000080e0000a0100000feffffff62b130000400000095000000000000003f6a400000000000872b060004000000181b0000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000280)='syzkaller\x00', 0x9, 0xdb, &(0x7f00000005c0)=""/219, 0x41100, 0x1, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x1, 0xc, 0xa, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000300), &(0x7f0000000400)=[{0x4, 0x5, 0x4, 0xa}, {0x3, 0x5, 0xb, 0x4}, {0x4, 0x7, 0xb, 0x3}, {0x1, 0x4, 0x7, 0x9}, {0x0, 0x1, 0xa, 0x5}], 0x10, 0xd10}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x24000000, 0x100}, 0x18514, 0x0, 0x0, 0x0, 0x5a7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) 2.93039685s ago: executing program 3 (id=2128): socket$kcm(0x11, 0x3, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) socket$kcm(0xf, 0x3, 0x2) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62043c00590200000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)}], 0x3}, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000088000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fd43000000000055097ed4a0f6dad8dedd180c28c3c9000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='udp_fail_queue_rcv_skb\x00'}, 0x18) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x27, 0xe, 0x0, &(0x7f0000000040)="f8ad48c5fce216efcc244f7f86dd", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r6, 0x0, 0xe40, 0x0, &(0x7f00000006c0)="ffffffff106c3ed990f77e9eb3cf", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.849459971s ago: executing program 5 (id=2129): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500"], 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 2.835204381s ago: executing program 1 (id=2130): r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x28, &(0x7f0000000000), 0x4) recvmsg(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088a847", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'bond0\x00', @random="0f5daccfa161"}) 2.727414381s ago: executing program 6 (id=2131): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2a1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000001680)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000001c0)="9e36d449b388dd965f7ade1a86dd", 0x0, 0x10727, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES16=r0, @ANYRES32, @ANYBLOB], 0x48) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={r1, 0xe0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000a00)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000a40)=[0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb3, &(0x7f0000000ac0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000b00), &(0x7f0000000b40), 0x8, 0x72, 0x8, 0x8, &(0x7f0000000b80)}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x2a, &(0x7f0000000100)=r8, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xffbf, 0x9}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r9, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x11, 0x9, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000e8000000000000000002000009372f00f8000000183b000003000000000000532921af37839bc47274000000000018300000050000000000000000000000632000000400"], &(0x7f0000000940)='syzkaller\x00', 0x5, 0x52, &(0x7f0000000980)=""/82, 0x40f00, 0x51, '\x00', r6, 0x0, r8, 0x8, &(0x7f0000000e40)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x5, 0x431, 0x10001}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000ec0)=[r2, r2, r5, r2, r2, r9], &(0x7f0000000f00)=[{0x5, 0x1, 0x10, 0x2}, {0x2, 0x5, 0x1, 0xb}, {0x5, 0x2, 0x7, 0x7}, {0x1, 0x3, 0xe, 0x8}, {0x0, 0x3, 0xc, 0x7}], 0x10, 0xfffffff8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="186f0d0000ff0f000000ef2afc01278cd1342e40", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r11) recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r12, &(0x7f0000000180)=ANY=[@ANYRES8=r11, @ANYRES8=r13], 0x55) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r4, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0, 0x97, &(0x7f0000000340)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000380), &(0x7f0000000500), 0x8, 0xec, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x3, 0x8, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7e}, [@tail_call]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @sched_cls, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.597687482s ago: executing program 5 (id=2132): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800"/13, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.351112294s ago: executing program 3 (id=2133): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 2.201748145s ago: executing program 1 (id=2134): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) 1.764232158s ago: executing program 1 (id=2135): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) 1.565735369s ago: executing program 2 (id=2136): perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/1952], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b1b, &(0x7f0000000000)={'virt_wifi0\x00', @multicast}) 1.538121939s ago: executing program 3 (id=2137): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5cce, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@o_path={&(0x7f00000003c0)='./file0\x00', 0x0, 0x4014, r1}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)="6407f7465f6ac2e2ff9fc7c83d471b9e41", 0x11}], 0x1, &(0x7f0000000240)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@generic={0x82, 0x9, "f57902de4d0e1c"}]}}}, @ip_retopts={{0x84, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0x45, [@remote, @local]}, @cipso={0x86, 0xf, 0x3, [{0x1, 0x9, "5acabc119a80ac"}]}, @timestamp_prespec={0x44, 0x3c, 0xb7, 0x3, 0xd, [{@multicast1, 0x3ff}, {@local, 0x5}, {@remote, 0x1a9000d5}, {@multicast2}, {@multicast2, 0x9}, {@empty, 0xfffffff8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffff7}]}, @lsrr={0x83, 0xb, 0x63, [@broadcast, @dev={0xac, 0x14, 0x14, 0x30}]}, @ssrr={0x89, 0x13, 0x89, [@multicast1, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0xc0}, 0x4800) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002c000b35d25a806f8c6394f91124fc602f1b02000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.49362565s ago: executing program 6 (id=2138): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x97}, 0x100020, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x8a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0xc05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x8, r1, 0x2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) r3 = socket$kcm(0xa, 0x1, 0x0) socket$kcm(0x2c, 0x3, 0x0) r4 = socket$kcm(0x10, 0x3d0e6bd00775003, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x10) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000004c0)='ns/pid_for_children\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$TUNSETFILTEREBPF(r5, 0x40305839, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x6, &(0x7f0000000040), 0x3) setsockopt$sock_attach_bpf(r3, 0x29, 0x39, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x7, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r6}, 0x20) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7}, 0x0, &(0x7f00000002c0)}, 0x20) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000003000000010000000000000c02000000000000000200000d000000000800"/63], 0x0, 0x43}, 0x28) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r9, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x8}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, @sched_cls, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x20, &(0x7f0000000440)={&(0x7f00000001c0)=""/61, 0x3d, 0x0, &(0x7f00000005c0)=""/208, 0xd0}}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.usage_sys\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000790030000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x80) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2}) ioctl$TUNATTACHFILTER(r11, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x40, 0x0, 0xfffff030}, {0x6, 0x3, 0xa0, 0x800}]}) 1.318869251s ago: executing program 1 (id=2139): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405120000000000611004000000000063"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) write$cgroup_type(r0, &(0x7f0000000180), 0xfffffe51) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305829, &(0x7f0000000040)=0x1000000) 1.171112792s ago: executing program 2 (id=2140): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'rose0\x00', 0x112}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 32) ioctl$TUNSETLINK(r2, 0x400454cd, 0x30a) (async, rerun: 32) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000080)={0x3, 0x0, [0x0, 0x0, 0x0]}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) close(r3) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x1) (async, rerun: 32) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r4}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) (async, rerun: 32) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) (rerun: 32) 948.823564ms ago: executing program 3 (id=2141): socket$kcm(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x27, 0xe, 0x0, &(0x7f0000000040)="f8ad48c5fce216efcc244f7f86dd", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0xe40, 0x0, &(0x7f00000006c0)="ffffffff106c3ed990f77e9eb3cf", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 691.383545ms ago: executing program 6 (id=2142): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500"], 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 451.746297ms ago: executing program 3 (id=2143): socket$kcm(0x11, 0x3, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) socket$kcm(0xf, 0x3, 0x2) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62043c00590200000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)}], 0x3}, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000088000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fd43000000000055097ed4a0f6dad8dedd180c28c3c9000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='udp_fail_queue_rcv_skb\x00'}, 0x18) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x27, 0xe, 0x0, &(0x7f0000000040)="f8ad48c5fce216efcc244f7f86dd", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r6, 0x0, 0xe40, 0x0, &(0x7f00000006c0)="ffffffff106c3ed990f77e9eb3cf", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 383.738407ms ago: executing program 2 (id=2144): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) (fail_nth: 1) 335.437357ms ago: executing program 6 (id=2145): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) 0s ago: executing program 6 (id=2146): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="1808d0ffd0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000660a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a0000000000008500000006000000950000000000000084b6aff56b9ac0ab1bbbb0547d3c418ad12710c101cee321ccdc2d79af94c699eb33a3e6289dbfb09f5419ec77b684552dbf9e5868d1a0b3e5b3a1464a664953142415e55dfb2a9e442746d9d446dce0427805e1a5f65709cb7600840845521227c5308e34533a79193b67c2fc6ec4295521b1c196123593d8c39bb7f8624ed7e8c83e0caf28c2fc3f49"], &(0x7f0000000240)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xc, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x6000, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x80000000c8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102030400fef2000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000c00)="d800000018009903e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901223fc6ab007f6f94007100a007a290457f0189b316277ce06bf75c10dde13fb206b33b174e54980ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1000000730d7a5025ccca262f3d40fad956d2b6d5a3a6692ac217e11382e767e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6cc452a92307f00000e970300000000", 0xd8}], 0x1}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000070000fe00000000000000008500000041000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) kernel console output (not intermixed with test programs): mode [ 96.807346][ T4698] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.821564][ T4698] Cannot create hsr debugfs directory [ 97.789188][ T4698] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 97.860781][ T4698] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 97.972820][ T4698] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 98.051845][ T4698] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 98.737313][ T4275] Bluetooth: hci5: command 0x041b tx timeout [ 98.794104][ T4698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.886307][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.916584][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.059187][ T4698] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.230623][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.303606][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.369633][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.376853][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.494625][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.553259][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.595119][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.603021][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.728843][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.743513][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.766858][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.817130][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.834742][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.860014][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.938129][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.946833][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.031683][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.130636][ T4698] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.161434][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 100.170210][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 100.179831][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.349079][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.820199][ T4275] Bluetooth: hci5: command 0x040f tx timeout [ 102.736034][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 102.821464][ T4849] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 102.897317][ T4275] Bluetooth: hci5: command 0x0419 tx timeout [ 102.947154][ T4698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.029843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.038478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.530053][ T4355] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.859957][ T4355] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.320633][ T4355] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.666357][ T4355] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.242855][ T4902] netlink: 'syz.0.221': attribute type 10 has an invalid length. [ 105.254568][ T4902] netlink: 40 bytes leftover after parsing attributes in process `syz.0.221'. [ 105.361574][ T4902] team0: Port device geneve0 added [ 105.483676][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 105.517958][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 105.847832][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 105.867733][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 105.909882][ T4698] device veth0_vlan entered promiscuous mode [ 106.037557][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 106.082436][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 106.100883][ T4698] device veth1_vlan entered promiscuous mode [ 106.219717][ T4923] device syzkaller0 entered promiscuous mode [ 106.327178][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 106.347842][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 106.400517][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 106.426318][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 106.565641][ T4698] device veth0_macvtap entered promiscuous mode [ 106.623632][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 106.672563][ T4698] device veth1_macvtap entered promiscuous mode [ 106.835645][ T4698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.880041][ T4698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.913082][ T4698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.933999][ T4698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.958149][ T4698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.991753][ T4698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.017032][ T4698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.045492][ T4698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.064660][ T4698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.095107][ T4698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.130210][ T4698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.144492][ T4698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.155511][ T4698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.165458][ T4698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.176249][ T4698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.213120][ T4698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.244935][ T4698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.261274][ T4698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.282024][ T4698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.300174][ T4698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.318986][ T4698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.338829][ T4698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.352228][ T4949] netlink: 176 bytes leftover after parsing attributes in process `syz.2.237'. [ 107.376997][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 107.386330][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 107.447256][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 107.456484][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 107.578260][ T4698] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.607001][ T4698] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.615800][ T4698] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.637424][ T4698] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.224689][ T4367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.255713][ T4367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.305446][ T4355] device hsr_slave_0 left promiscuous mode [ 108.357813][ T4355] device hsr_slave_1 left promiscuous mode [ 108.373128][ T4355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.391038][ T4355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.426229][ T4355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.445560][ T4355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.475224][ T4355] device bridge_slave_1 left promiscuous mode [ 108.505427][ T4355] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.553319][ T4355] device bridge_slave_0 left promiscuous mode [ 108.562144][ T4355] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.656924][ T4355] device veth1_macvtap left promiscuous mode [ 108.663929][ T4355] device veth0_macvtap left promiscuous mode [ 108.670647][ T4355] device veth1_vlan left promiscuous mode [ 108.680169][ T4355] device veth0_vlan left promiscuous mode [ 110.153010][ T4355] team0 (unregistering): Port device team_slave_1 removed [ 110.214247][ T4355] team0 (unregistering): Port device team_slave_0 removed [ 110.270977][ T4355] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.309745][ T4355] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.693419][ T4355] bond0 (unregistering): Released all slaves [ 110.805899][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 110.824749][ T4985] netlink: 176 bytes leftover after parsing attributes in process `syz.2.253'. [ 110.841668][ T4994] netlink: 'syz.1.255': attribute type 10 has an invalid length. [ 110.857006][ T4994] netlink: 40 bytes leftover after parsing attributes in process `syz.1.255'. [ 110.928498][ T4994] team0: Port device geneve0 added [ 111.064010][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.174582][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.244631][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 111.539803][ T5032] netlink: 'syz.5.135': attribute type 21 has an invalid length. [ 111.874021][ T5048] netlink: 176 bytes leftover after parsing attributes in process `syz.5.272'. [ 112.183659][ T5056] netlink: 'syz.5.275': attribute type 10 has an invalid length. [ 112.255360][ T5056] netlink: 40 bytes leftover after parsing attributes in process `syz.5.275'. [ 112.344273][ T5056] team0: Port device geneve0 added [ 112.417729][ T5062] Driver unsupported XDP return value 0 on prog (id 141) dev N/A, expect packet loss! [ 113.209627][ T5085] netlink: 176 bytes leftover after parsing attributes in process `syz.5.286'. [ 114.768792][ T5107] pimreg1: tun_chr_ioctl cmd 1074025681 [ 115.628541][ T5122] netlink: 176 bytes leftover after parsing attributes in process `syz.5.299'. [ 116.464798][ T5158] netlink: 176 bytes leftover after parsing attributes in process `syz.0.313'. [ 117.803064][ T5203] netlink: 176 bytes leftover after parsing attributes in process `syz.0.329'. [ 119.207769][ T5230] IPv6: Can't replace route, no match found [ 119.716595][ T5249] netlink: 176 bytes leftover after parsing attributes in process `syz.0.347'. [ 120.053975][ T5265] IPv6: Can't replace route, no match found [ 121.568945][ T5297] netlink: 176 bytes leftover after parsing attributes in process `syz.2.366'. [ 121.927894][ T5305] IPv6: Can't replace route, no match found [ 130.697662][ T5482] device bond0 entered promiscuous mode [ 130.733828][ T5482] device bond_slave_0 entered promiscuous mode [ 130.821488][ T5482] device bond_slave_1 entered promiscuous mode [ 130.889980][ T5484] netlink: 176 bytes leftover after parsing attributes in process `syz.1.434'. [ 132.613905][ T5521] netlink: 176 bytes leftover after parsing attributes in process `syz.2.447'. [ 132.767365][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.773704][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.622058][ T5553] netlink: 176 bytes leftover after parsing attributes in process `syz.0.460'. [ 134.789500][ T5591] netlink: 176 bytes leftover after parsing attributes in process `syz.0.473'. [ 135.270620][ T5607] IPv6: Can't replace route, no match found [ 135.853670][ T5626] netlink: 176 bytes leftover after parsing attributes in process `syz.2.487'. [ 136.587228][ T5644] IPv6: Can't replace route, no match found [ 137.034192][ T5657] netlink: 176 bytes leftover after parsing attributes in process `syz.5.501'. [ 137.480775][ T5676] IPv6: Can't replace route, no match found [ 138.438629][ T5703] netlink: 176 bytes leftover after parsing attributes in process `syz.5.516'. [ 138.846513][ T5714] IPv6: Can't replace route, no match found [ 139.566495][ T5738] netlink: 176 bytes leftover after parsing attributes in process `syz.2.529'. [ 139.873300][ T5746] netlink: 'syz.5.533': attribute type 4 has an invalid length. [ 139.885133][ T5746] netlink: 152 bytes leftover after parsing attributes in process `syz.5.533'. [ 139.923996][ T5746] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 140.500770][ T5764] netlink: 176 bytes leftover after parsing attributes in process `syz.5.542'. [ 140.953922][ T5776] netlink: 60 bytes leftover after parsing attributes in process `syz.1.546'. [ 141.222634][ T5781] netlink: 'syz.3.548': attribute type 10 has an invalid length. [ 141.991873][ T5789] netlink: 'syz.2.550': attribute type 10 has an invalid length. [ 142.009082][ T5789] netlink: 65023 bytes leftover after parsing attributes in process `syz.2.550'. [ 142.934412][ T5800] netlink: 176 bytes leftover after parsing attributes in process `syz.1.555'. [ 143.157075][ T5798] syz.2.554 (5798) used greatest stack depth: 16640 bytes left [ 143.482114][ T5812] netlink: 60 bytes leftover after parsing attributes in process `syz.3.559'. [ 144.786533][ T5824] netlink: 'syz.3.564': attribute type 10 has an invalid length. [ 145.158775][ T5832] netlink: 176 bytes leftover after parsing attributes in process `syz.5.566'. [ 145.640001][ T5844] netlink: 60 bytes leftover after parsing attributes in process `syz.1.572'. [ 145.766460][ T5849] netlink: 'syz.3.575': attribute type 10 has an invalid length. [ 146.456035][ T5863] netlink: 176 bytes leftover after parsing attributes in process `syz.1.581'. [ 147.244968][ T5868] netlink: 60 bytes leftover after parsing attributes in process `syz.5.583'. [ 147.774454][ T5885] netlink: 'syz.1.590': attribute type 10 has an invalid length. [ 147.885598][ T5887] netlink: 60 bytes leftover after parsing attributes in process `syz.3.591'. [ 148.635338][ T5898] netlink: 'syz.2.594': attribute type 10 has an invalid length. [ 149.563323][ T5911] netlink: 'syz.3.602': attribute type 10 has an invalid length. [ 149.624522][ T5914] netlink: 'syz.5.603': attribute type 10 has an invalid length. [ 149.643732][ T5914] netlink: 65015 bytes leftover after parsing attributes in process `syz.5.603'. [ 149.982212][ T5922] netlink: 60 bytes leftover after parsing attributes in process `syz.5.606'. [ 151.577528][ T5944] netlink: 60 bytes leftover after parsing attributes in process `syz.1.613'. [ 151.996306][ T5947] netlink: 'syz.5.616': attribute type 10 has an invalid length. [ 152.005449][ T5947] netlink: 65015 bytes leftover after parsing attributes in process `syz.5.616'. [ 152.052907][ T5949] Zero length message leads to an empty skb [ 153.613729][ T4281] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.623728][ T4281] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.633006][ T4281] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.641570][ T4281] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.649963][ T4281] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.657493][ T4281] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 154.474527][ T5989] netlink: 176 bytes leftover after parsing attributes in process `syz.5.632'. [ 154.533271][ T5996] netlink: 'syz.3.631': attribute type 10 has an invalid length. [ 154.764131][ T5973] chnl_net:caif_netlink_parms(): no params data found [ 155.025229][ T5973] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.037066][ T5973] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.059416][ T5973] device bridge_slave_0 entered promiscuous mode [ 155.085509][ T5973] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.104523][ T5973] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.125020][ T5973] device bridge_slave_1 entered promiscuous mode [ 155.461160][ T5973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.548492][ T5973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.678814][ T5973] team0: Port device team_slave_0 added [ 155.697222][ T4281] Bluetooth: hci0: command 0x0409 tx timeout [ 155.712077][ T5973] team0: Port device team_slave_1 added [ 155.913884][ T5973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.954730][ T5973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.033779][ T5973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.060875][ T6022] netlink: 176 bytes leftover after parsing attributes in process `syz.5.647'. [ 156.115672][ T5973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.135228][ T5973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.361163][ T5973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.427803][ T6025] netlink: 176 bytes leftover after parsing attributes in process `syz.2.657'. [ 156.638482][ T5973] device hsr_slave_0 entered promiscuous mode [ 156.823913][ T5973] device hsr_slave_1 entered promiscuous mode [ 156.842685][ T5973] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.885252][ T5973] Cannot create hsr debugfs directory [ 156.909339][ T6027] netlink: 'syz.5.648': attribute type 10 has an invalid length. [ 157.796674][ T4281] Bluetooth: hci0: command 0x041b tx timeout [ 158.536840][ T6035] netlink: 176 bytes leftover after parsing attributes in process `syz.2.651'. [ 159.072193][ T6049] netlink: 176 bytes leftover after parsing attributes in process `syz.3.659'. [ 159.213295][ T5973] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 159.243727][ T5973] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 159.366721][ T5973] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 159.448343][ T5973] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 159.661956][ T6056] netlink: 'syz.3.662': attribute type 10 has an invalid length. [ 159.858866][ T4281] Bluetooth: hci0: command 0x040f tx timeout [ 160.098606][ T5973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.190586][ T5973] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.277527][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.285602][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.370788][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 160.408002][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.448075][ T4982] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.455239][ T4982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.484627][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 160.507919][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 160.585736][ T4982] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.592950][ T4982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.643999][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 160.662889][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.686840][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.729402][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 160.774688][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 160.806589][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 160.848207][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 160.886070][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 160.914738][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 160.955786][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 160.996485][ T5973] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 161.034541][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 161.074603][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 161.090294][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 161.563931][ T6085] netlink: 176 bytes leftover after parsing attributes in process `syz.1.671'. [ 161.839025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 161.846608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 161.861654][ T5973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.937092][ T4281] Bluetooth: hci0: command 0x0419 tx timeout [ 162.712992][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 162.726414][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 162.792726][ T5973] device veth0_vlan entered promiscuous mode [ 162.830549][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 162.851326][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 162.900468][ T5973] device veth1_vlan entered promiscuous mode [ 162.936003][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 162.951648][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 163.045354][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 163.084508][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 163.133535][ T5973] device veth0_macvtap entered promiscuous mode [ 163.165084][ T5973] device veth1_macvtap entered promiscuous mode [ 163.249571][ T5973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.299730][ T5973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.347484][ T5973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.388940][ T5973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.434663][ T5973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.481908][ T5973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.529009][ T5973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.586908][ T5973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.627084][ T5973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.699920][ T5973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.774306][ T5973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.829053][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 163.864622][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 163.935358][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 163.987597][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 164.058189][ T5973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.167029][ T5973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.196417][ T5973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.239016][ T5973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.248975][ T5973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.276958][ T5973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.286847][ T5973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.352064][ T5973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.383327][ T5973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.449708][ T5973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.474525][ T5973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.497190][ T6118] netlink: 176 bytes leftover after parsing attributes in process `syz.1.682'. [ 164.535523][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 164.557848][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 164.592260][ T5973] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.668891][ T5973] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.731401][ T5973] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.824771][ T5973] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.266612][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.314573][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.404342][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 165.455348][ T4355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.486762][ T4355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.625986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 166.560044][ T6141] netlink: 60 bytes leftover after parsing attributes in process `syz.6.619'. [ 167.023655][ T6152] netlink: 176 bytes leftover after parsing attributes in process `syz.1.694'. [ 167.465008][ T6167] netlink: 188 bytes leftover after parsing attributes in process `syz.6.701'. [ 167.982327][ T6175] netlink: 176 bytes leftover after parsing attributes in process `syz.6.705'. [ 168.244795][ T6181] netlink: 176 bytes leftover after parsing attributes in process `syz.2.708'. [ 168.612301][ T6189] netlink: 60 bytes leftover after parsing attributes in process `syz.2.711'. [ 169.365232][ T6202] netlink: 188 bytes leftover after parsing attributes in process `syz.5.717'. [ 170.380344][ T6210] netlink: 176 bytes leftover after parsing attributes in process `syz.2.721'. [ 170.450978][ T6214] netlink: 176 bytes leftover after parsing attributes in process `syz.3.723'. [ 170.483501][ T6216] IPv6: Can't replace route, no match found [ 170.800641][ T6225] netlink: 176 bytes leftover after parsing attributes in process `syz.6.730'. [ 170.953760][ T6231] netlink: 60 bytes leftover after parsing attributes in process `syz.5.729'. [ 172.898436][ T6253] IPv6: Can't replace route, no match found [ 173.224713][ T6257] netlink: 176 bytes leftover after parsing attributes in process `syz.6.738'. [ 173.313469][ T6259] IPv6: Can't replace route, no match found [ 174.899188][ T6270] netlink: 176 bytes leftover after parsing attributes in process `syz.3.747'. [ 176.284256][ T6283] IPv6: Can't replace route, no match found [ 176.590738][ T6287] netlink: 176 bytes leftover after parsing attributes in process `syz.6.755'. [ 176.645022][ T6289] IPv6: Can't replace route, no match found [ 178.319063][ T6306] IPv6: Can't replace route, no match found [ 179.110909][ T6322] IPv6: Can't replace route, no match found [ 179.943022][ T6324] netlink: 176 bytes leftover after parsing attributes in process `syz.5.768'. [ 180.357867][ T6334] IPv6: Can't replace route, no match found [ 180.525228][ T6336] IPv6: Can't replace route, no match found [ 181.291438][ T6346] IPv6: Can't replace route, no match found [ 183.330114][ T6366] IPv6: Can't replace route, no match found [ 183.814398][ T6374] IPv6: Can't replace route, no match found [ 184.020183][ T6381] IPv6: Can't replace route, no match found [ 187.046738][ T6421] IPv6: Can't replace route, no match found [ 190.445385][ T6460] IPv6: Can't replace route, no match found [ 194.182067][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.189006][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.257237][ T4275] Bluetooth: hci4: command 0x0406 tx timeout [ 196.263436][ T4275] Bluetooth: hci3: command 0x0406 tx timeout [ 196.270057][ T4281] Bluetooth: hci1: command 0x0406 tx timeout [ 196.276105][ T4281] Bluetooth: hci2: command 0x0406 tx timeout [ 196.744134][ T6501] netlink: 60 bytes leftover after parsing attributes in process `syz.5.845'. [ 197.079747][ T6512] netlink: 'syz.6.848': attribute type 10 has an invalid length. [ 198.227235][ T6524] netlink: 60 bytes leftover after parsing attributes in process `syz.3.853'. [ 199.799109][ T6535] netlink: 'syz.5.856': attribute type 10 has an invalid length. [ 200.350587][ T6545] netlink: 'syz.3.860': attribute type 10 has an invalid length. [ 201.325628][ T6556] netlink: 60 bytes leftover after parsing attributes in process `syz.5.865'. [ 201.620263][ T6562] netlink: 'syz.3.866': attribute type 10 has an invalid length. [ 202.562711][ T6572] netlink: 60 bytes leftover after parsing attributes in process `syz.5.870'. [ 203.018865][ T6578] netlink: 176 bytes leftover after parsing attributes in process `syz.2.873'. [ 203.400123][ T6587] netlink: 'syz.5.877': attribute type 10 has an invalid length. [ 204.489120][ T6603] netlink: 60 bytes leftover after parsing attributes in process `syz.6.880'. [ 206.058360][ T6617] netlink: 'syz.2.889': attribute type 10 has an invalid length. [ 206.627863][ T6630] netlink: 'syz.2.893': attribute type 10 has an invalid length. [ 207.274084][ T6645] netlink: 60 bytes leftover after parsing attributes in process `syz.1.897'. [ 210.065884][ T6665] netlink: 'syz.1.907': attribute type 10 has an invalid length. [ 211.411817][ T6686] netlink: 'syz.1.916': attribute type 10 has an invalid length. [ 216.501985][ T6717] netlink: 60 bytes leftover after parsing attributes in process `syz.1.928'. [ 216.738457][ T4281] Bluetooth: hci5: command 0x0406 tx timeout [ 218.310530][ T6738] netlink: 'syz.5.938': attribute type 10 has an invalid length. [ 220.275720][ T6756] netlink: 60 bytes leftover after parsing attributes in process `syz.5.945'. [ 220.373651][ T6762] netlink: 176 bytes leftover after parsing attributes in process `syz.3.944'. [ 224.679324][ T6790] netlink: 176 bytes leftover after parsing attributes in process `syz.1.959'. [ 225.223265][ T6794] netlink: 'syz.3.960': attribute type 10 has an invalid length. [ 225.930374][ T6801] netlink: 60 bytes leftover after parsing attributes in process `syz.2.962'. [ 226.599970][ T6812] netlink: 'syz.6.968': attribute type 10 has an invalid length. [ 227.189652][ T6818] netlink: 176 bytes leftover after parsing attributes in process `syz.1.972'. [ 227.915104][ T6835] netlink: 'syz.6.979': attribute type 10 has an invalid length. [ 228.152618][ T6839] netlink: 60 bytes leftover after parsing attributes in process `syz.2.980'. [ 228.294764][ T6841] netlink: 'syz.5.981': attribute type 10 has an invalid length. [ 229.218044][ T6852] netlink: 'syz.1.985': attribute type 10 has an invalid length. [ 229.825666][ T6856] netlink: 176 bytes leftover after parsing attributes in process `syz.1.986'. [ 231.141525][ T6872] netlink: 'syz.1.994': attribute type 10 has an invalid length. [ 232.159707][ T6885] netlink: 176 bytes leftover after parsing attributes in process `syz.5.999'. [ 232.204023][ T6886] netlink: 60 bytes leftover after parsing attributes in process `syz.1.998'. [ 233.035367][ T6903] netlink: 'syz.6.1006': attribute type 10 has an invalid length. [ 234.060267][ T6912] netlink: 176 bytes leftover after parsing attributes in process `syz.6.1011'. [ 234.320548][ T6914] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1022'. [ 234.553127][ T6918] netlink: 'syz.6.1012': attribute type 10 has an invalid length. [ 237.296008][ T6938] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1020'. [ 239.079609][ T6965] netlink: 'syz.3.1033': attribute type 21 has an invalid length. [ 239.095875][ T6965] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1033'. [ 239.125868][ T6965] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1033'. [ 239.383796][ T6969] netlink: 'syz.6.1035': attribute type 10 has an invalid length. [ 240.369588][ T6976] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1038'. [ 241.735164][ T6988] netlink: 'syz.1.1043': attribute type 10 has an invalid length. [ 242.576191][ T7001] netlink: 'syz.5.1047': attribute type 10 has an invalid length. [ 243.396027][ T7013] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1051'. [ 245.514716][ T7037] netlink: 'syz.1.1059': attribute type 10 has an invalid length. [ 245.853823][ T7049] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1067'. [ 248.415488][ T7071] netlink: 'syz.2.1077': attribute type 10 has an invalid length. [ 248.643109][ T7079] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1079'. [ 249.217284][ T7089] netlink: 'syz.5.1084': attribute type 10 has an invalid length. [ 250.705289][ T7114] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1093'. [ 250.832744][ T7116] netlink: 'syz.3.1092': attribute type 10 has an invalid length. [ 251.500445][ T7125] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1096'. [ 251.622533][ T7129] netlink: 'syz.3.1098': attribute type 10 has an invalid length. [ 253.013385][ T7172] netlink: 'syz.5.1116': attribute type 10 has an invalid length. [ 253.721203][ T7194] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1124'. [ 253.775645][ T7193] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1122'. [ 255.459850][ T7208] netlink: 'syz.6.1130': attribute type 10 has an invalid length. [ 255.512062][ T7210] netlink: 'syz.1.1131': attribute type 10 has an invalid length. [ 255.542564][ T7210] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1131'. [ 255.621493][ T7210] device batadv0 entered promiscuous mode [ 255.636634][ T7210] bridge0: port 3(batadv0) entered blocking state [ 255.644668][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.651086][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.730845][ T7210] bridge0: port 3(batadv0) entered disabled state [ 255.824743][ T7210] bridge0: port 3(batadv0) entered blocking state [ 255.831988][ T7210] bridge0: port 3(batadv0) entered forwarding state [ 255.894658][ T4355] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 255.904675][ T4355] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 257.527939][ T7230] netlink: 'syz.2.1136': attribute type 27 has an invalid length. [ 257.570776][ T7228] FAULT_INJECTION: forcing a failure. [ 257.570776][ T7228] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 257.600254][ T7228] CPU: 1 PID: 7228 Comm: syz.6.1137 Not tainted syzkaller #0 [ 257.607701][ T7228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 257.617791][ T7228] Call Trace: [ 257.621085][ T7228] [ 257.624114][ T7228] dump_stack_lvl+0x168/0x22e [ 257.628820][ T7228] ? lockdep_hardirqs_on+0x94/0x140 [ 257.634035][ T7228] ? show_regs_print_info+0x12/0x12 [ 257.639253][ T7228] ? audit_tree_destroy_watch+0x20/0x20 [ 257.644918][ T7228] should_fail_ex+0x399/0x4d0 [ 257.649633][ T7228] _copy_to_user+0x2c/0x130 [ 257.654164][ T7228] simple_read_from_buffer+0xe3/0x150 [ 257.659561][ T7228] proc_fail_nth_read+0x19a/0x210 [ 257.664601][ T7228] ? proc_fault_inject_write+0x2f0/0x2f0 [ 257.670269][ T7228] ? fsnotify_perm+0x248/0x550 [ 257.675044][ T7228] ? proc_fault_inject_write+0x2f0/0x2f0 [ 257.680691][ T7228] vfs_read+0x2c0/0x920 [ 257.684875][ T7228] ? kernel_read+0x1e0/0x1e0 [ 257.689476][ T7228] ? __fget_files+0x28/0x4d0 [ 257.694076][ T7228] ? __fget_files+0x44a/0x4d0 [ 257.698783][ T7228] ? __fdget_pos+0x2ae/0x360 [ 257.703390][ T7228] ? ksys_read+0x71/0x240 [ 257.707748][ T7228] ksys_read+0x143/0x240 [ 257.712011][ T7228] ? vfs_write+0x960/0x960 [ 257.716463][ T7228] ? syscall_enter_from_user_mode+0x2a/0x80 [ 257.722378][ T7228] do_syscall_64+0x4c/0xa0 [ 257.726806][ T7228] ? clear_bhb_loop+0x60/0xb0 [ 257.731498][ T7228] ? clear_bhb_loop+0x60/0xb0 [ 257.736186][ T7228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 257.742090][ T7228] RIP: 0033:0x7f4f1af8e0dc [ 257.746553][ T7228] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 257.766170][ T7228] RSP: 002b:00007f4f1bee6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 257.774601][ T7228] RAX: ffffffffffffffda RBX: 00007f4f1b1e5fa0 RCX: 00007f4f1af8e0dc [ 257.782587][ T7228] RDX: 000000000000000f RSI: 00007f4f1bee60a0 RDI: 0000000000000006 [ 257.790566][ T7228] RBP: 00007f4f1bee6090 R08: 0000000000000000 R09: 0000000000000000 [ 257.798567][ T7228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.806559][ T7228] R13: 00007f4f1b1e6038 R14: 00007f4f1b1e5fa0 R15: 00007ffd696d73b8 [ 257.814555][ T7228] [ 257.880246][ T7234] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1138'. [ 257.941191][ T7230] bond0: (slave bond_slave_0): Releasing backup interface [ 258.834371][ T7255] netlink: 'syz.2.1147': attribute type 10 has an invalid length. [ 259.532106][ T7271] netlink: 'syz.5.1153': attribute type 27 has an invalid length. [ 259.611829][ T7273] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1154'. [ 259.867401][ T7271] bond0: (slave bond_slave_0): Releasing backup interface [ 259.887600][ T7271] device bond_slave_0 left promiscuous mode [ 260.007071][ T7276] netlink: 'syz.2.1155': attribute type 10 has an invalid length. [ 260.249131][ T7280] netlink: 188 bytes leftover after parsing attributes in process `syz.6.1157'. [ 260.434934][ T7282] netlink: 'syz.5.1158': attribute type 10 has an invalid length. [ 260.457948][ T7282] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1158'. [ 260.496674][ T7282] device team0 entered promiscuous mode [ 260.523265][ T7282] device team_slave_0 entered promiscuous mode [ 260.548019][ T7282] device team_slave_1 entered promiscuous mode [ 260.554541][ T7282] device geneve0 entered promiscuous mode [ 260.562880][ T7282] bridge0: port 3(team0) entered blocking state [ 260.569398][ T7282] bridge0: port 3(team0) entered disabled state [ 260.582225][ T7282] bridge0: port 3(team0) entered blocking state [ 260.588755][ T7282] bridge0: port 3(team0) entered forwarding state [ 260.747836][ T7289] netlink: 'syz.1.1161': attribute type 10 has an invalid length. [ 261.587051][ T7306] device bond0 entered promiscuous mode [ 261.610963][ T7306] device bond_slave_0 entered promiscuous mode [ 261.663909][ T7306] device bond_slave_1 entered promiscuous mode [ 261.720912][ T7297] À: port 1(vlan0) entered blocking state [ 261.767199][ T7297] À: port 1(vlan0) entered disabled state [ 261.807496][ T7297] device vlan0 entered promiscuous mode [ 261.848121][ T7297] À: port 1(vlan0) entered blocking state [ 261.854395][ T7297] À: port 1(vlan0) entered forwarding state [ 261.891208][ T7304] netlink: 'syz.5.1167': attribute type 10 has an invalid length. [ 261.990258][ T7313] netlink: 'syz.1.1170': attribute type 27 has an invalid length. [ 262.276059][ T7313] bond0: (slave bond_slave_0): Releasing backup interface [ 262.333939][ T7323] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1172'. [ 262.347724][ T7313] device bond_slave_0 left promiscuous mode [ 262.458656][ T7316] netlink: 188 bytes leftover after parsing attributes in process `syz.6.1171'. [ 262.762206][ T7332] netlink: 'syz.6.1177': attribute type 10 has an invalid length. [ 262.832699][ T7334] netlink: 'syz.1.1178': attribute type 10 has an invalid length. [ 262.862897][ T7334] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1178'. [ 262.895738][ T7334] device team0 entered promiscuous mode [ 262.937358][ T7334] device team_slave_0 entered promiscuous mode [ 262.945651][ T7334] device team_slave_1 entered promiscuous mode [ 262.959628][ T7334] device geneve0 entered promiscuous mode [ 262.967792][ T7334] bridge0: port 4(team0) entered blocking state [ 262.992254][ T7334] bridge0: port 4(team0) entered disabled state [ 263.022185][ T7334] bridge0: port 4(team0) entered blocking state [ 263.029484][ T7334] bridge0: port 4(team0) entered forwarding state [ 263.211871][ T7340] netlink: 'syz.6.1182': attribute type 21 has an invalid length. [ 263.264576][ T7341] device bond0 entered promiscuous mode [ 263.299752][ T7341] device bond_slave_0 entered promiscuous mode [ 263.346359][ T7341] device bond_slave_1 entered promiscuous mode [ 264.189931][ T7362] FAULT_INJECTION: forcing a failure. [ 264.189931][ T7362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.212908][ T7362] CPU: 0 PID: 7362 Comm: syz.5.1189 Not tainted syzkaller #0 [ 264.220477][ T7362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 264.230579][ T7362] Call Trace: [ 264.233896][ T7362] [ 264.236858][ T7362] dump_stack_lvl+0x168/0x22e [ 264.241585][ T7362] ? show_regs_print_info+0x12/0x12 [ 264.246833][ T7362] ? load_image+0x3b0/0x3b0 [ 264.251395][ T7362] ? __lock_acquire+0x7c50/0x7c50 [ 264.256469][ T7362] should_fail_ex+0x399/0x4d0 [ 264.261208][ T7362] _copy_from_user+0x2c/0x170 [ 264.265935][ T7362] __sys_bpf+0x265/0x6d0 [ 264.270226][ T7362] ? bpf_link_show_fdinfo+0x340/0x340 [ 264.275659][ T7362] ? lock_chain_count+0x20/0x20 [ 264.280570][ T7362] __x64_sys_bpf+0x78/0x90 [ 264.285036][ T7362] do_syscall_64+0x4c/0xa0 [ 264.289499][ T7362] ? clear_bhb_loop+0x60/0xb0 [ 264.293179][ T7360] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1188'. [ 264.294196][ T7362] ? clear_bhb_loop+0x60/0xb0 [ 264.307940][ T7362] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 264.313879][ T7362] RIP: 0033:0x7f69e018f6c9 [ 264.318331][ T7362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.337990][ T7362] RSP: 002b:00007f69e0ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 264.346453][ T7362] RAX: ffffffffffffffda RBX: 00007f69e03e5fa0 RCX: 00007f69e018f6c9 [ 264.354467][ T7362] RDX: 0000000000000048 RSI: 00002000000002c0 RDI: 000000000000000a [ 264.362480][ T7362] RBP: 00007f69e0ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 264.370503][ T7362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.378513][ T7362] R13: 00007f69e03e6038 R14: 00007f69e03e5fa0 R15: 00007ffd53332158 [ 264.386546][ T7362] [ 264.611462][ T7370] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1192'. [ 264.867694][ T7382] netlink: 'syz.3.1197': attribute type 10 has an invalid length. [ 264.877231][ T7382] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1197'. [ 264.886261][ T7382] device team0 entered promiscuous mode [ 264.892621][ T7382] device team_slave_0 entered promiscuous mode [ 264.901280][ T7382] device team_slave_1 entered promiscuous mode [ 264.910969][ T7382] bridge0: port 3(team0) entered blocking state [ 264.927485][ T7382] bridge0: port 3(team0) entered disabled state [ 264.936035][ T7382] bridge0: port 3(team0) entered blocking state [ 264.942515][ T7382] bridge0: port 3(team0) entered forwarding state [ 265.139932][ T7389] netlink: 'syz.1.1198': attribute type 16 has an invalid length. [ 265.157134][ T7389] netlink: 'syz.1.1198': attribute type 4 has an invalid length. [ 265.180949][ T7389] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1198'. [ 265.551762][ T7398] IPv6: Can't replace route, no match found [ 265.750179][ T7398] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 265.790979][ T7401] netlink: 'syz.1.1202': attribute type 21 has an invalid length. [ 265.813482][ T7401] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1202'. [ 265.854434][ T7401] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1202'. [ 265.916101][ T7404] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1203'. [ 266.997344][ T7429] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1212'. [ 267.042597][ T7427] netlink: 'syz.6.1213': attribute type 10 has an invalid length. [ 267.348331][ T7435] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1217'. [ 267.949980][ T7450] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1224'. [ 268.569675][ T7466] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1230'. [ 268.689777][ T7468] netlink: 'syz.5.1231': attribute type 10 has an invalid length. [ 269.078787][ T7475] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1232'. [ 269.385839][ T7481] device wg2 left promiscuous mode [ 269.439448][ T7487] syz.5.1239 uses obsolete (PF_INET,SOCK_PACKET) [ 269.787861][ T56] wlan1: Trigger new scan to find an IBSS to join [ 270.377622][ T7507] netlink: 'syz.3.1245': attribute type 10 has an invalid length. [ 270.907736][ T7516] FAULT_INJECTION: forcing a failure. [ 270.907736][ T7516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.967508][ T7516] CPU: 0 PID: 7516 Comm: syz.5.1249 Not tainted syzkaller #0 [ 270.974958][ T7516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 270.985043][ T7516] Call Trace: [ 270.988344][ T7516] [ 270.991276][ T7516] dump_stack_lvl+0x168/0x22e [ 270.996406][ T7516] ? show_regs_print_info+0x12/0x12 [ 271.001616][ T7516] ? load_image+0x3b0/0x3b0 [ 271.006140][ T7516] ? __lock_acquire+0x7c50/0x7c50 [ 271.011206][ T7516] ? verify_lock_unused+0x140/0x140 [ 271.016518][ T7516] should_fail_ex+0x399/0x4d0 [ 271.021230][ T7516] _copy_from_user+0x2c/0x170 [ 271.025942][ T7516] ___sys_sendmsg+0x155/0x290 [ 271.030656][ T7516] ? __sys_sendmsg+0x270/0x270 [ 271.035447][ T7516] ? __lock_acquire+0x7c50/0x7c50 [ 271.040526][ T7516] ? __fdget+0x17c/0x200 [ 271.044783][ T7516] __se_sys_sendmsg+0x19e/0x270 [ 271.049646][ T7516] ? __x64_sys_sendmsg+0x80/0x80 [ 271.054605][ T7516] ? lockdep_hardirqs_on+0x94/0x140 [ 271.059824][ T7516] do_syscall_64+0x4c/0xa0 [ 271.064247][ T7516] ? clear_bhb_loop+0x60/0xb0 [ 271.068933][ T7516] ? clear_bhb_loop+0x60/0xb0 [ 271.073623][ T7516] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 271.079530][ T7516] RIP: 0033:0x7f69e018f6c9 [ 271.083951][ T7516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.103561][ T7516] RSP: 002b:00007f69e0ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 271.111978][ T7516] RAX: ffffffffffffffda RBX: 00007f69e03e5fa0 RCX: 00007f69e018f6c9 [ 271.119953][ T7516] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 271.127925][ T7516] RBP: 00007f69e0ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 271.135895][ T7516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.143866][ T7516] R13: 00007f69e03e6038 R14: 00007f69e03e5fa0 R15: 00007ffd53332158 [ 271.151865][ T7516] [ 272.320045][ T7529] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1254'. [ 272.787731][ T7534] device syzkaller0 entered promiscuous mode [ 272.816574][ T7537] mac80211_hwsim hwsim4 wlan1: refused to change device tx_queue_len [ 273.785533][ T9] wlan1: Trigger new scan to find an IBSS to join [ 273.879951][ T9] wlan1: Creating new IBSS network, BSSID 8e:c1:43:eb:bf:80 [ 274.672774][ T7569] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1270'. [ 277.347857][ T7541] netlink: 'syz.5.1260': attribute type 10 has an invalid length. [ 277.364702][ T7593] netlink: 'syz.1.1278': attribute type 10 has an invalid length. [ 277.380601][ T7593] netlink: 56823 bytes leftover after parsing attributes in process `syz.1.1278'. [ 277.655732][ T7599] netlink: 'syz.2.1280': attribute type 10 has an invalid length. [ 277.678879][ T7603] FAULT_INJECTION: forcing a failure. [ 277.678879][ T7603] name failslab, interval 1, probability 0, space 0, times 1 [ 277.754609][ T7603] CPU: 0 PID: 7603 Comm: syz.5.1284 Not tainted syzkaller #0 [ 277.762052][ T7603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 277.772142][ T7603] Call Trace: [ 277.775451][ T7603] [ 277.778430][ T7603] dump_stack_lvl+0x168/0x22e [ 277.783149][ T7603] ? show_regs_print_info+0x12/0x12 [ 277.788387][ T7603] ? load_image+0x3b0/0x3b0 [ 277.792937][ T7603] ? __might_sleep+0xd0/0xd0 [ 277.797574][ T7603] ? __lock_acquire+0x7c50/0x7c50 [ 277.802636][ T7603] ? verify_lock_unused+0x140/0x140 [ 277.807853][ T7603] should_fail_ex+0x399/0x4d0 [ 277.812552][ T7603] should_failslab+0x5/0x20 [ 277.817071][ T7603] slab_pre_alloc_hook+0x59/0x310 [ 277.822104][ T7603] ? __get_vm_area_node+0x122/0x330 [ 277.827400][ T7603] __kmem_cache_alloc_node+0x4f/0x260 [ 277.832781][ T7603] ? __get_vm_area_node+0x122/0x330 [ 277.837986][ T7603] kmalloc_node_trace+0x22/0xe0 [ 277.842933][ T7603] __get_vm_area_node+0x122/0x330 [ 277.848047][ T7603] ? __local_bh_enable_ip+0x12a/0x1b0 [ 277.853430][ T7603] __vmalloc_node_range+0x357/0x1390 [ 277.858718][ T7603] ? netlink_sendmsg+0x5dd/0xbc0 [ 277.863664][ T7603] ? release_sock+0x2b/0x1b0 [ 277.868267][ T7603] ? netlink_insert+0x101f/0x13b0 [ 277.873344][ T7603] ? netlink_insert+0x274/0x13b0 [ 277.878300][ T7603] ? free_vm_area+0x50/0x50 [ 277.882813][ T7603] ? netlink_sendmsg+0x5dd/0xbc0 [ 277.887760][ T7603] vmalloc+0x75/0x80 [ 277.891660][ T7603] ? netlink_sendmsg+0x5dd/0xbc0 [ 277.896618][ T7603] netlink_sendmsg+0x5dd/0xbc0 [ 277.901397][ T7603] ? netlink_getsockopt+0x540/0x540 [ 277.906604][ T7603] ? aa_file_perm+0x3ef/0xec0 [ 277.911288][ T7603] ? aa_file_perm+0x117/0xec0 [ 277.915981][ T7603] ? aa_sock_msg_perm+0x94/0x150 [ 277.921018][ T7603] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 277.926308][ T7603] ? security_socket_sendmsg+0x7c/0xa0 [ 277.931782][ T7603] sock_write_iter+0x2b5/0x3a0 [ 277.936561][ T7603] ? sock_read_iter+0x370/0x370 [ 277.941443][ T7603] ? common_file_perm+0x171/0x1c0 [ 277.946497][ T7603] ? fsnotify_perm+0x5a/0x550 [ 277.951183][ T7603] vfs_write+0x44c/0x960 [ 277.955445][ T7603] ? file_end_write+0x250/0x250 [ 277.960309][ T7603] ? __fget_files+0x44a/0x4d0 [ 277.964993][ T7603] ? __fdget_pos+0x1d4/0x360 [ 277.969591][ T7603] ? ksys_write+0x71/0x240 [ 277.974015][ T7603] ksys_write+0x143/0x240 [ 277.978444][ T7603] ? __ia32_sys_read+0x80/0x80 [ 277.983217][ T7603] ? lockdep_hardirqs_on+0x94/0x140 [ 277.988429][ T7603] do_syscall_64+0x4c/0xa0 [ 277.992856][ T7603] ? clear_bhb_loop+0x60/0xb0 [ 277.997544][ T7603] ? clear_bhb_loop+0x60/0xb0 [ 278.002228][ T7603] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 278.008129][ T7603] RIP: 0033:0x7f69e018f6c9 [ 278.012554][ T7603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.032171][ T7603] RSP: 002b:00007f69e0ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 278.040597][ T7603] RAX: ffffffffffffffda RBX: 00007f69e03e5fa0 RCX: 00007f69e018f6c9 [ 278.048577][ T7603] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000004 [ 278.056991][ T7603] RBP: 00007f69e0ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 278.064969][ T7603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.072975][ T7603] R13: 00007f69e03e6038 R14: 00007f69e03e5fa0 R15: 00007ffd53332158 [ 278.080966][ T7603] [ 278.099490][ T7603] syz.5.1284: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 278.161223][ T7603] CPU: 1 PID: 7603 Comm: syz.5.1284 Not tainted syzkaller #0 [ 278.168672][ T7603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 278.178758][ T7603] Call Trace: [ 278.182072][ T7603] [ 278.185026][ T7603] dump_stack_lvl+0x168/0x22e [ 278.189738][ T7603] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 278.196175][ T7603] ? show_regs_print_info+0x12/0x12 [ 278.201387][ T7603] ? load_image+0x3b0/0x3b0 [ 278.205911][ T7603] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 278.212343][ T7603] ? cpuset_print_current_mems_allowed+0x2df/0x360 [ 278.218868][ T7603] warn_alloc+0x20c/0x300 [ 278.223219][ T7603] ? zone_watermark_ok_safe+0x270/0x270 [ 278.228784][ T7603] ? __get_vm_area_node+0x318/0x330 [ 278.234003][ T7603] ? __local_bh_enable_ip+0x12a/0x1b0 [ 278.239397][ T7603] __vmalloc_node_range+0x37c/0x1390 [ 278.244690][ T7603] ? release_sock+0x2b/0x1b0 [ 278.249301][ T7603] ? netlink_insert+0x101f/0x13b0 [ 278.254343][ T7603] ? netlink_insert+0x274/0x13b0 [ 278.259295][ T7603] ? free_vm_area+0x50/0x50 [ 278.263810][ T7603] ? netlink_sendmsg+0x5dd/0xbc0 [ 278.268755][ T7603] vmalloc+0x75/0x80 [ 278.272657][ T7603] ? netlink_sendmsg+0x5dd/0xbc0 [ 278.277607][ T7603] netlink_sendmsg+0x5dd/0xbc0 [ 278.282387][ T7603] ? netlink_getsockopt+0x540/0x540 [ 278.287600][ T7603] ? aa_file_perm+0x3ef/0xec0 [ 278.292285][ T7603] ? aa_file_perm+0x117/0xec0 [ 278.296971][ T7603] ? aa_sock_msg_perm+0x94/0x150 [ 278.301934][ T7603] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 278.307225][ T7603] ? security_socket_sendmsg+0x7c/0xa0 [ 278.312695][ T7603] sock_write_iter+0x2b5/0x3a0 [ 278.317478][ T7603] ? sock_read_iter+0x370/0x370 [ 278.322344][ T7603] ? common_file_perm+0x171/0x1c0 [ 278.327381][ T7603] ? fsnotify_perm+0x5a/0x550 [ 278.332070][ T7603] vfs_write+0x44c/0x960 [ 278.336331][ T7603] ? file_end_write+0x250/0x250 [ 278.341200][ T7603] ? __fget_files+0x44a/0x4d0 [ 278.345919][ T7603] ? __fdget_pos+0x1d4/0x360 [ 278.350513][ T7603] ? ksys_write+0x71/0x240 [ 278.354938][ T7603] ksys_write+0x143/0x240 [ 278.359284][ T7603] ? __ia32_sys_read+0x80/0x80 [ 278.364057][ T7603] ? lockdep_hardirqs_on+0x94/0x140 [ 278.369281][ T7603] do_syscall_64+0x4c/0xa0 [ 278.373702][ T7603] ? clear_bhb_loop+0x60/0xb0 [ 278.378384][ T7603] ? clear_bhb_loop+0x60/0xb0 [ 278.383066][ T7603] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 278.388974][ T7603] RIP: 0033:0x7f69e018f6c9 [ 278.393390][ T7603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.412996][ T7603] RSP: 002b:00007f69e0ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 278.421416][ T7603] RAX: ffffffffffffffda RBX: 00007f69e03e5fa0 RCX: 00007f69e018f6c9 [ 278.429390][ T7603] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000004 [ 278.437360][ T7603] RBP: 00007f69e0ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 278.445347][ T7603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.453320][ T7603] R13: 00007f69e03e6038 R14: 00007f69e03e5fa0 R15: 00007ffd53332158 [ 278.461327][ T7603] [ 278.473606][ T7603] Mem-Info: [ 278.477879][ T7603] active_anon:5867 inactive_anon:0 isolated_anon:0 [ 278.477879][ T7603] active_file:11228 inactive_file:39959 isolated_file:0 [ 278.477879][ T7603] unevictable:768 dirty:175 writeback:0 [ 278.477879][ T7603] slab_reclaimable:20878 slab_unreclaimable:96259 [ 278.477879][ T7603] mapped:34447 shmem:1373 pagetables:527 [ 278.477879][ T7603] sec_pagetables:0 bounce:0 [ 278.477879][ T7603] kernel_misc_reclaimable:0 [ 278.477879][ T7603] free:1318766 free_pcp:8056 free_cma:0 [ 278.528813][ T4279] Bluetooth: hci0: command 0x0406 tx timeout [ 278.547859][ T7614] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.1286'. [ 278.601285][ T7611] netlink: 'syz.1.1287': attribute type 10 has an invalid length. [ 278.627246][ T7611] netlink: 56823 bytes leftover after parsing attributes in process `syz.1.1287'. [ 278.637143][ T7603] Node 0 active_anon:23668kB inactive_anon:0kB active_file:44912kB inactive_file:159636kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:137788kB dirty:700kB writeback:0kB shmem:3956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11488kB pagetables:2208kB sec_pagetables:0kB all_unreclaimable? no [ 278.670741][ T7603] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 278.703306][ T7603] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 278.730941][ T7603] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 278.736758][ T7603] Node 0 DMA32 free:1362700kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:23668kB inactive_anon:0kB active_file:44912kB inactive_file:159636kB unevictable:1536kB writepending:700kB present:3129332kB managed:2593344kB mlocked:0kB bounce:0kB free_pcp:11400kB local_pcp:5844kB free_cma:0kB [ 278.767861][ T7603] lowmem_reserve[]: 0 0 1 1 1 [ 278.772907][ T7603] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 278.816094][ T7603] lowmem_reserve[]: 0 0 0 0 0 [ 278.820981][ T7603] Node 1 Normal free:3896752kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:21344kB local_pcp:13120kB free_cma:0kB [ 278.855500][ T7603] lowmem_reserve[]: 0 0 0 0 0 [ 278.863629][ T7616] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1288'. [ 278.870291][ T7603] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 278.892982][ T7603] Node 0 DMA32: 1945*4kB (UME) 1227*8kB (UM) 627*16kB (UM) 635*32kB (UME) 311*64kB (UME) 132*128kB (UME) 38*256kB (UME) 15*512kB (UME) 5*1024kB (UM) 5*2048kB (UM) 304*4096kB (UM) = 1362700kB [ 278.913532][ T7603] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 278.958697][ T7603] Node 1 Normal: 220*4kB (UME) 48*8kB (UME) 18*16kB (UME) 31*32kB (UME) 17*64kB (UME) 9*128kB (UM) 3*256kB (U) 4*512kB (UME) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3896752kB [ 279.001280][ T7603] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 279.036616][ T7603] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 279.088680][ T7603] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 279.117119][ T7603] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 279.141263][ T7620] netlink: 'syz.3.1290': attribute type 10 has an invalid length. [ 279.152658][ T7603] 52560 total pagecache pages [ 279.158513][ T7603] 0 pages in swap cache [ 279.162704][ T7603] Free swap = 124996kB [ 279.194295][ T7603] Total swap = 124996kB [ 279.206955][ T7603] 2097051 pages RAM [ 279.211548][ T7603] 0 pages HighMem/MovableOnly [ 279.216256][ T7603] 415114 pages reserved [ 279.222870][ T7603] 0 pages cma reserved [ 279.876660][ T7645] netlink: 'syz.2.1299': attribute type 10 has an invalid length. [ 280.226161][ T7652] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1302'. [ 280.522640][ T7658] netlink: 'syz.2.1306': attribute type 10 has an invalid length. [ 280.753953][ T7660] raw_sendmsg: syz.6.1305 forgot to set AF_INET. Fix it! [ 281.073781][ T7674] netlink: 'syz.5.1313': attribute type 10 has an invalid length. [ 281.326276][ T7685] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1317'. [ 281.536777][ T7690] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1319'. [ 281.604335][ T7695] netlink: 'syz.1.1322': attribute type 10 has an invalid length. [ 281.883031][ T7704] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1323'. [ 282.647753][ T7724] netlink: 'syz.6.1331': attribute type 10 has an invalid length. [ 283.264976][ T7730] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1334'. [ 283.355326][ T7736] netlink: 188 bytes leftover after parsing attributes in process `syz.6.1333'. [ 283.423477][ T7737] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1336'. [ 283.586669][ T7739] netlink: 'syz.1.1337': attribute type 10 has an invalid length. [ 284.171339][ T7753] netlink: 'syz.6.1344': attribute type 10 has an invalid length. [ 284.344859][ T7760] netlink: 'syz.2.1347': attribute type 10 has an invalid length. [ 284.363791][ T7760] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1347'. [ 284.383818][ T7760] device team0 entered promiscuous mode [ 284.394020][ T7760] device team_slave_0 entered promiscuous mode [ 284.410073][ T7760] device team_slave_1 entered promiscuous mode [ 284.428672][ T7760] bridge0: port 3(team0) entered blocking state [ 284.447909][ T7760] bridge0: port 3(team0) entered disabled state [ 284.483569][ T7760] bridge0: port 3(team0) entered blocking state [ 284.490385][ T7760] bridge0: port 3(team0) entered forwarding state [ 284.759126][ T7764] netlink: 188 bytes leftover after parsing attributes in process `syz.6.1348'. [ 285.020338][ T7772] netlink: 'syz.3.1352': attribute type 10 has an invalid length. [ 285.380223][ T7783] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1353'. [ 285.492085][ T7784] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1356'. [ 285.593203][ T7787] netlink: 'syz.2.1359': attribute type 10 has an invalid length. [ 285.631265][ T7790] FAULT_INJECTION: forcing a failure. [ 285.631265][ T7790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.679783][ T7790] CPU: 0 PID: 7790 Comm: syz.1.1360 Not tainted syzkaller #0 [ 285.687242][ T7790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 285.697333][ T7790] Call Trace: [ 285.700662][ T7790] [ 285.703625][ T7790] dump_stack_lvl+0x168/0x22e [ 285.708342][ T7790] ? show_regs_print_info+0x12/0x12 [ 285.713572][ T7790] ? load_image+0x3b0/0x3b0 [ 285.718115][ T7790] ? __lock_acquire+0x7c50/0x7c50 [ 285.723210][ T7790] should_fail_ex+0x399/0x4d0 [ 285.727943][ T7790] _copy_from_user+0x2c/0x170 [ 285.732660][ T7790] __sys_bpf+0x265/0x6d0 [ 285.736940][ T7790] ? bpf_link_show_fdinfo+0x340/0x340 [ 285.742371][ T7790] ? lock_chain_count+0x20/0x20 [ 285.747266][ T7790] __x64_sys_bpf+0x78/0x90 [ 285.751722][ T7790] do_syscall_64+0x4c/0xa0 [ 285.756170][ T7790] ? clear_bhb_loop+0x60/0xb0 [ 285.760883][ T7790] ? clear_bhb_loop+0x60/0xb0 [ 285.765600][ T7790] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 285.771531][ T7790] RIP: 0033:0x7fea9fd8f6c9 [ 285.775978][ T7790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.795623][ T7790] RSP: 002b:00007feaa0c02038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 285.804104][ T7790] RAX: ffffffffffffffda RBX: 00007fea9ffe5fa0 RCX: 00007fea9fd8f6c9 [ 285.812119][ T7790] RDX: 000000000000000c RSI: 0000200000000080 RDI: 000000000000000a [ 285.820123][ T7790] RBP: 00007feaa0c02090 R08: 0000000000000000 R09: 0000000000000000 [ 285.828132][ T7790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.836144][ T7790] R13: 00007fea9ffe6038 R14: 00007fea9ffe5fa0 R15: 00007ffeaf5a5288 [ 285.844174][ T7790] [ 286.014806][ T7792] netlink: 'syz.6.1361': attribute type 10 has an invalid length. [ 286.183089][ T7792] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.304179][ T7792] device team0 entered promiscuous mode [ 286.388063][ T7792] device team_slave_0 entered promiscuous mode [ 286.394464][ T7792] device team_slave_1 entered promiscuous mode [ 286.472893][ T7792] bond0: (slave team0): Enslaving as an active interface with an up link [ 286.517527][ T7804] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1365'. [ 286.618356][ T7808] netlink: 'syz.5.1367': attribute type 10 has an invalid length. [ 287.172725][ T7822] netlink: 'syz.5.1373': attribute type 10 has an invalid length. [ 287.481013][ T7833] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1376'. [ 287.590651][ T7839] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1378'. [ 288.153571][ T7855] netlink: 'syz.5.1384': attribute type 10 has an invalid length. [ 288.429975][ T7862] FAULT_INJECTION: forcing a failure. [ 288.429975][ T7862] name failslab, interval 1, probability 0, space 0, times 0 [ 288.487265][ T7862] CPU: 1 PID: 7862 Comm: syz.3.1387 Not tainted syzkaller #0 [ 288.494712][ T7862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 288.504808][ T7862] Call Trace: [ 288.508116][ T7862] [ 288.511059][ T7862] dump_stack_lvl+0x168/0x22e [ 288.515789][ T7862] ? show_regs_print_info+0x12/0x12 [ 288.521000][ T7862] ? load_image+0x3b0/0x3b0 [ 288.525521][ T7862] ? __might_sleep+0xd0/0xd0 [ 288.530129][ T7862] ? __lock_acquire+0x7c50/0x7c50 [ 288.535168][ T7862] should_fail_ex+0x399/0x4d0 [ 288.539871][ T7862] should_failslab+0x5/0x20 [ 288.544391][ T7862] slab_pre_alloc_hook+0x59/0x310 [ 288.549428][ T7862] ? bpf_prog_test_run_skb+0x22b/0x11b0 [ 288.554984][ T7862] __kmem_cache_alloc_node+0x4f/0x260 [ 288.560367][ T7862] ? bpf_prog_test_run_skb+0x22b/0x11b0 [ 288.565921][ T7862] __kmalloc+0xa0/0x240 [ 288.570116][ T7862] bpf_prog_test_run_skb+0x22b/0x11b0 [ 288.575491][ T7862] ? __fget_files+0x28/0x4d0 [ 288.580095][ T7862] ? __fget_files+0x44a/0x4d0 [ 288.584801][ T7862] ? cpu_online+0xa0/0xa0 [ 288.589135][ T7862] bpf_prog_test_run+0x31e/0x390 [ 288.594090][ T7862] __sys_bpf+0x593/0x6d0 [ 288.598341][ T7862] ? bpf_link_show_fdinfo+0x340/0x340 [ 288.603732][ T7862] ? lock_chain_count+0x20/0x20 [ 288.608601][ T7862] __x64_sys_bpf+0x78/0x90 [ 288.613026][ T7862] do_syscall_64+0x4c/0xa0 [ 288.617452][ T7862] ? clear_bhb_loop+0x60/0xb0 [ 288.622134][ T7862] ? clear_bhb_loop+0x60/0xb0 [ 288.626822][ T7862] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 288.632720][ T7862] RIP: 0033:0x7fe71b18f6c9 [ 288.637135][ T7862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.656741][ T7862] RSP: 002b:00007fe71c056038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 288.665158][ T7862] RAX: ffffffffffffffda RBX: 00007fe71b3e5fa0 RCX: 00007fe71b18f6c9 [ 288.673137][ T7862] RDX: 0000000000000048 RSI: 00002000000002c0 RDI: 000000000000000a [ 288.681155][ T7862] RBP: 00007fe71c056090 R08: 0000000000000000 R09: 0000000000000000 [ 288.689149][ T7862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.697128][ T7862] R13: 00007fe71b3e6038 R14: 00007fe71b3e5fa0 R15: 00007ffc7df62c78 [ 288.705115][ T7862] [ 288.749053][ T7864] netlink: 'syz.5.1388': attribute type 10 has an invalid length. [ 288.834058][ T7868] netlink: 'syz.2.1390': attribute type 10 has an invalid length. [ 289.058912][ T7873] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1390'. [ 289.495778][ T7886] netlink: 'syz.6.1396': attribute type 21 has an invalid length. [ 289.506273][ T7886] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1396'. [ 289.521706][ T7886] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1396'. [ 289.683544][ T7889] netlink: 'syz.5.1398': attribute type 10 has an invalid length. [ 289.869588][ T7891] netlink: 'syz.6.1399': attribute type 10 has an invalid length. [ 290.236316][ T7903] netlink: 'syz.6.1404': attribute type 10 has an invalid length. [ 290.746713][ T7911] netlink: 'syz.3.1407': attribute type 10 has an invalid length. [ 290.786311][ T7911] bridge0: port 3(team0) entered disabled state [ 290.828412][ T7911] device team0 left promiscuous mode [ 290.833781][ T7911] device team_slave_0 left promiscuous mode [ 290.846242][ T7911] device team_slave_1 left promiscuous mode [ 290.855812][ T7911] bridge0: port 3(team0) entered disabled state [ 290.906332][ T7911] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.924954][ T7911] bond0: (slave team0): Enslaving as an active interface with an up link [ 291.213558][ T7922] netlink: 'syz.5.1410': attribute type 10 has an invalid length. [ 292.054910][ T7937] netlink: 'syz.5.1416': attribute type 10 has an invalid length. [ 292.995221][ T7949] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1420'. [ 293.470947][ T7960] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1426'. [ 293.531575][ T7962] netlink: 'syz.3.1425': attribute type 10 has an invalid length. [ 294.003999][ T7974] netlink: 'syz.5.1431': attribute type 10 has an invalid length. [ 294.043780][ T7977] netlink: 'syz.2.1432': attribute type 10 has an invalid length. [ 294.052140][ T7977] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1432'. [ 294.085882][ T7979] FAULT_INJECTION: forcing a failure. [ 294.085882][ T7979] name failslab, interval 1, probability 0, space 0, times 0 [ 294.101121][ T7979] CPU: 0 PID: 7979 Comm: syz.6.1433 Not tainted syzkaller #0 [ 294.108558][ T7979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 294.118640][ T7979] Call Trace: [ 294.121947][ T7979] [ 294.124901][ T7979] dump_stack_lvl+0x168/0x22e [ 294.129617][ T7979] ? show_regs_print_info+0x12/0x12 [ 294.134837][ T7979] ? load_image+0x3b0/0x3b0 [ 294.139378][ T7979] ? __might_sleep+0xd0/0xd0 [ 294.144090][ T7979] ? __lock_acquire+0x7c50/0x7c50 [ 294.149143][ T7979] ? verify_lock_unused+0x140/0x140 [ 294.154394][ T7979] should_fail_ex+0x399/0x4d0 [ 294.159131][ T7979] should_failslab+0x5/0x20 [ 294.163692][ T7979] slab_pre_alloc_hook+0x59/0x310 [ 294.168752][ T7979] ? __get_vm_area_node+0x122/0x330 [ 294.173987][ T7979] __kmem_cache_alloc_node+0x4f/0x260 [ 294.179390][ T7979] ? __get_vm_area_node+0x122/0x330 [ 294.184607][ T7979] kmalloc_node_trace+0x22/0xe0 [ 294.189500][ T7979] __get_vm_area_node+0x122/0x330 [ 294.194533][ T7979] ? __local_bh_enable_ip+0x12a/0x1b0 [ 294.199936][ T7979] __vmalloc_node_range+0x357/0x1390 [ 294.205239][ T7979] ? netlink_sendmsg+0x5dd/0xbc0 [ 294.210209][ T7979] ? release_sock+0x2b/0x1b0 [ 294.214810][ T7979] ? netlink_insert+0x101f/0x13b0 [ 294.219855][ T7979] ? netlink_insert+0x274/0x13b0 [ 294.224840][ T7979] ? free_vm_area+0x50/0x50 [ 294.229383][ T7979] ? netlink_sendmsg+0x5dd/0xbc0 [ 294.234330][ T7979] vmalloc+0x75/0x80 [ 294.238241][ T7979] ? netlink_sendmsg+0x5dd/0xbc0 [ 294.243277][ T7979] netlink_sendmsg+0x5dd/0xbc0 [ 294.248061][ T7979] ? netlink_getsockopt+0x540/0x540 [ 294.253283][ T7979] ? aa_file_perm+0x3ef/0xec0 [ 294.257961][ T7979] ? aa_file_perm+0x117/0xec0 [ 294.262644][ T7979] ? aa_sock_msg_perm+0x94/0x150 [ 294.267606][ T7979] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 294.272892][ T7979] ? security_socket_sendmsg+0x7c/0xa0 [ 294.278369][ T7979] sock_write_iter+0x2b5/0x3a0 [ 294.283167][ T7979] ? sock_read_iter+0x370/0x370 [ 294.288052][ T7979] ? common_file_perm+0x171/0x1c0 [ 294.293090][ T7979] ? fsnotify_perm+0x5a/0x550 [ 294.297784][ T7979] vfs_write+0x44c/0x960 [ 294.302056][ T7979] ? file_end_write+0x250/0x250 [ 294.306916][ T7979] ? __fget_files+0x44a/0x4d0 [ 294.311608][ T7979] ? __fdget_pos+0x1d4/0x360 [ 294.316228][ T7979] ? ksys_write+0x71/0x240 [ 294.320692][ T7979] ksys_write+0x143/0x240 [ 294.325088][ T7979] ? __ia32_sys_read+0x80/0x80 [ 294.329862][ T7979] ? lockdep_hardirqs_on+0x94/0x140 [ 294.335070][ T7979] do_syscall_64+0x4c/0xa0 [ 294.339492][ T7979] ? clear_bhb_loop+0x60/0xb0 [ 294.344169][ T7979] ? clear_bhb_loop+0x60/0xb0 [ 294.348849][ T7979] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 294.354756][ T7979] RIP: 0033:0x7f4f1af8f6c9 [ 294.359170][ T7979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.378785][ T7979] RSP: 002b:00007f4f1bee6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 294.387215][ T7979] RAX: ffffffffffffffda RBX: 00007f4f1b1e5fa0 RCX: 00007f4f1af8f6c9 [ 294.395200][ T7979] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000003 [ 294.403259][ T7979] RBP: 00007f4f1bee6090 R08: 0000000000000000 R09: 0000000000000000 [ 294.411230][ T7979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.419203][ T7979] R13: 00007f4f1b1e6038 R14: 00007f4f1b1e5fa0 R15: 00007ffd696d73b8 [ 294.427204][ T7979] [ 294.441282][ T7979] syz.6.1433: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz6,mems_allowed=0-1 [ 294.455713][ T7979] CPU: 0 PID: 7979 Comm: syz.6.1433 Not tainted syzkaller #0 [ 294.463125][ T7979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 294.473200][ T7979] Call Trace: [ 294.476493][ T7979] [ 294.479436][ T7979] dump_stack_lvl+0x168/0x22e [ 294.484130][ T7979] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 294.490577][ T7979] ? show_regs_print_info+0x12/0x12 [ 294.495787][ T7979] ? load_image+0x3b0/0x3b0 [ 294.500314][ T7979] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 294.506764][ T7979] ? cpuset_print_current_mems_allowed+0x2df/0x360 [ 294.513287][ T7979] warn_alloc+0x20c/0x300 [ 294.517638][ T7979] ? zone_watermark_ok_safe+0x270/0x270 [ 294.523202][ T7979] ? __get_vm_area_node+0x318/0x330 [ 294.528413][ T7979] ? __local_bh_enable_ip+0x12a/0x1b0 [ 294.533809][ T7979] __vmalloc_node_range+0x37c/0x1390 [ 294.539120][ T7979] ? release_sock+0x2b/0x1b0 [ 294.543759][ T7979] ? netlink_insert+0x101f/0x13b0 [ 294.548818][ T7979] ? netlink_insert+0x274/0x13b0 [ 294.553776][ T7979] ? free_vm_area+0x50/0x50 [ 294.558300][ T7979] ? netlink_sendmsg+0x5dd/0xbc0 [ 294.563249][ T7979] vmalloc+0x75/0x80 [ 294.567179][ T7979] ? netlink_sendmsg+0x5dd/0xbc0 [ 294.572133][ T7979] netlink_sendmsg+0x5dd/0xbc0 [ 294.576922][ T7979] ? netlink_getsockopt+0x540/0x540 [ 294.582133][ T7979] ? aa_file_perm+0x3ef/0xec0 [ 294.586820][ T7979] ? aa_file_perm+0x117/0xec0 [ 294.591505][ T7979] ? aa_sock_msg_perm+0x94/0x150 [ 294.596460][ T7979] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 294.601750][ T7979] ? security_socket_sendmsg+0x7c/0xa0 [ 294.607236][ T7979] sock_write_iter+0x2b5/0x3a0 [ 294.612025][ T7979] ? sock_read_iter+0x370/0x370 [ 294.616896][ T7979] ? common_file_perm+0x171/0x1c0 [ 294.621935][ T7979] ? fsnotify_perm+0x5a/0x550 [ 294.626646][ T7979] vfs_write+0x44c/0x960 [ 294.630918][ T7979] ? file_end_write+0x250/0x250 [ 294.635789][ T7979] ? __fget_files+0x44a/0x4d0 [ 294.640485][ T7979] ? __fdget_pos+0x1d4/0x360 [ 294.645083][ T7979] ? ksys_write+0x71/0x240 [ 294.649506][ T7979] ksys_write+0x143/0x240 [ 294.653853][ T7979] ? __ia32_sys_read+0x80/0x80 [ 294.658631][ T7979] ? lockdep_hardirqs_on+0x94/0x140 [ 294.663847][ T7979] do_syscall_64+0x4c/0xa0 [ 294.668274][ T7979] ? clear_bhb_loop+0x60/0xb0 [ 294.672956][ T7979] ? clear_bhb_loop+0x60/0xb0 [ 294.677641][ T7979] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 294.683549][ T7979] RIP: 0033:0x7f4f1af8f6c9 [ 294.687969][ T7979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.707619][ T7979] RSP: 002b:00007f4f1bee6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 294.716149][ T7979] RAX: ffffffffffffffda RBX: 00007f4f1b1e5fa0 RCX: 00007f4f1af8f6c9 [ 294.724144][ T7979] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000003 [ 294.732123][ T7979] RBP: 00007f4f1bee6090 R08: 0000000000000000 R09: 0000000000000000 [ 294.740113][ T7979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.748100][ T7979] R13: 00007f4f1b1e6038 R14: 00007f4f1b1e5fa0 R15: 00007ffd696d73b8 [ 294.756098][ T7979] [ 294.791860][ T7979] Mem-Info: [ 294.805274][ T7979] active_anon:5934 inactive_anon:0 isolated_anon:0 [ 294.805274][ T7979] active_file:13298 inactive_file:39967 isolated_file:0 [ 294.805274][ T7979] unevictable:768 dirty:335 writeback:0 [ 294.805274][ T7979] slab_reclaimable:21038 slab_unreclaimable:95997 [ 294.805274][ T7979] mapped:34600 shmem:1373 pagetables:554 [ 294.805274][ T7979] sec_pagetables:0 bounce:0 [ 294.805274][ T7979] kernel_misc_reclaimable:0 [ 294.805274][ T7979] free:1309829 free_pcp:13855 free_cma:0 [ 294.945735][ T7979] Node 0 active_anon:23496kB inactive_anon:0kB active_file:53192kB inactive_file:159668kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138336kB dirty:640kB writeback:0kB shmem:3956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11416kB pagetables:2084kB sec_pagetables:0kB all_unreclaimable? no [ 294.989688][ T7979] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 295.028628][ T7979] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 295.065066][ T7979] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 295.072889][ T7979] Node 0 DMA32 free:1314380kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:23696kB inactive_anon:0kB active_file:53192kB inactive_file:159668kB unevictable:1536kB writepending:740kB present:3129332kB managed:2593344kB mlocked:0kB bounce:0kB free_pcp:33928kB local_pcp:16288kB free_cma:0kB [ 295.113060][ T7979] lowmem_reserve[]: 0 0 1 1 1 [ 295.119238][ T7979] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 295.157442][ T7979] lowmem_reserve[]: 0 0 0 0 0 [ 295.162238][ T7979] Node 1 Normal free:3896752kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:21344kB local_pcp:8224kB free_cma:0kB [ 295.200173][ T7979] lowmem_reserve[]: 0 0 0 0 0 [ 295.205058][ T7979] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 295.242351][ T7979] Node 0 DMA32: 227*4kB (ME) 247*8kB (UME) 646*16kB (UME) 330*32kB (UM) 196*64kB (UM) 49*128kB (UME) 51*256kB (UME) 20*512kB (UME) 1*1024kB (U) 2*2048kB (UM) 299*4096kB (UM) = 1295716kB [ 295.317897][ T7979] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 295.363479][ T7979] Node 1 Normal: 220*4kB (UME) 48*8kB (UME) 18*16kB (UME) 31*32kB (UME) 17*64kB (UME) 9*128kB (UM) 3*256kB (U) 4*512kB (UME) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3896752kB [ 295.415686][ T7979] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 295.438159][ T7993] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1438'. [ 295.448364][ T7979] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 295.483505][ T7979] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 295.515778][ T7979] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 295.545110][ T7979] 56913 total pagecache pages [ 295.555669][ T7979] 0 pages in swap cache [ 295.562134][ T7979] Free swap = 124996kB [ 295.566377][ T7979] Total swap = 124996kB [ 295.602224][ T7979] 2097051 pages RAM [ 295.606140][ T7979] 0 pages HighMem/MovableOnly [ 295.621250][ T7979] 415114 pages reserved [ 295.625514][ T7979] 0 pages cma reserved [ 295.967932][ T8000] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1440'. [ 296.484787][ T8015] netlink: 'syz.1.1447': attribute type 10 has an invalid length. [ 296.560316][ T8014] netlink: 'syz.5.1448': attribute type 1 has an invalid length. [ 297.415182][ T8042] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1456'. [ 298.262825][ T8055] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1463'. [ 299.468669][ T8065] netlink: 'syz.1.1467': attribute type 1 has an invalid length. [ 299.559932][ T8035] netlink: 'syz.3.1456': attribute type 10 has an invalid length. [ 299.664878][ T8054] netlink: 'syz.5.1464': attribute type 10 has an invalid length. [ 299.809280][ T8069] sctp: [Deprecated]: syz.2.1469 (pid 8069) Use of int in maxseg socket option. [ 299.809280][ T8069] Use struct sctp_assoc_value instead [ 299.941470][ T8077] sctp: [Deprecated]: syz.2.1469 (pid 8077) Use of struct sctp_assoc_value in delayed_ack socket option. [ 299.941470][ T8077] Use struct sctp_sack_info instead [ 300.145387][ T8086] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1475'. [ 300.404604][ T8092] netlink: 188 bytes leftover after parsing attributes in process `syz.6.1478'. [ 300.696469][ T8096] netlink: 'syz.6.1480': attribute type 10 has an invalid length. [ 300.723167][ T8098] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1481'. [ 301.550738][ T8120] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1491'. [ 301.763998][ T8125] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1495'. [ 301.813848][ T8126] netlink: 'syz.1.1494': attribute type 10 has an invalid length. [ 302.108392][ T8137] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1497'. [ 302.267877][ T8146] IPv6: Can't replace route, no match found [ 302.676798][ T8153] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1507'. [ 303.011718][ T8161] netlink: 188 bytes leftover after parsing attributes in process `syz.6.1509'. [ 303.383106][ T8170] netlink: 'syz.3.1513': attribute type 10 has an invalid length. [ 303.732798][ T8183] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1519'. [ 303.855596][ T8187] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1522'. [ 304.119587][ T8195] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1523'. [ 305.429522][ T8207] netlink: 'syz.1.1530': attribute type 10 has an invalid length. [ 306.019604][ T8217] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1534'. [ 306.402033][ T8229] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1539'. [ 306.496508][ T8235] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1537'. [ 308.039579][ T8269] FAULT_INJECTION: forcing a failure. [ 308.039579][ T8269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.067056][ T8269] CPU: 1 PID: 8269 Comm: syz.2.1556 Not tainted syzkaller #0 [ 308.074497][ T8269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 308.084588][ T8269] Call Trace: [ 308.087895][ T8269] [ 308.090849][ T8269] dump_stack_lvl+0x168/0x22e [ 308.095570][ T8269] ? show_regs_print_info+0x12/0x12 [ 308.100804][ T8269] ? load_image+0x3b0/0x3b0 [ 308.105353][ T8269] ? __lock_acquire+0x7c50/0x7c50 [ 308.110430][ T8269] ? __bpf_prog_test_run_raw_tp+0x29f/0x400 [ 308.116366][ T8269] should_fail_ex+0x399/0x4d0 [ 308.121078][ T8269] _copy_to_user+0x2c/0x130 [ 308.125594][ T8269] bpf_prog_test_run_raw_tp+0x4b8/0x640 [ 308.131152][ T8269] ? trace_bpf_test_finish+0x220/0x220 [ 308.136626][ T8269] ? trace_bpf_test_finish+0x220/0x220 [ 308.142094][ T8269] bpf_prog_test_run+0x31e/0x390 [ 308.147052][ T8269] __sys_bpf+0x593/0x6d0 [ 308.151313][ T8269] ? bpf_link_show_fdinfo+0x340/0x340 [ 308.156714][ T8269] ? lock_chain_count+0x20/0x20 [ 308.161584][ T8269] __x64_sys_bpf+0x78/0x90 [ 308.166013][ T8269] do_syscall_64+0x4c/0xa0 [ 308.170444][ T8269] ? clear_bhb_loop+0x60/0xb0 [ 308.175220][ T8269] ? clear_bhb_loop+0x60/0xb0 [ 308.179908][ T8269] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 308.185812][ T8269] RIP: 0033:0x7fbb0eb8f6c9 [ 308.190241][ T8269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.209861][ T8269] RSP: 002b:00007fbb0fac6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 308.218292][ T8269] RAX: ffffffffffffffda RBX: 00007fbb0ede5fa0 RCX: 00007fbb0eb8f6c9 [ 308.226274][ T8269] RDX: 000000000000000c RSI: 0000200000000080 RDI: 000000000000000a [ 308.234250][ T8269] RBP: 00007fbb0fac6090 R08: 0000000000000000 R09: 0000000000000000 [ 308.242232][ T8269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.250213][ T8269] R13: 00007fbb0ede6038 R14: 00007fbb0ede5fa0 R15: 00007ffc7dec65e8 [ 308.258205][ T8269] [ 308.923357][ T8282] netlink: 'syz.1.1563': attribute type 10 has an invalid length. [ 309.203494][ T8286] netlink: 'syz.2.1564': attribute type 13 has an invalid length. [ 310.193073][ T8308] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1572'. [ 310.555811][ T8320] netlink: 'syz.2.1578': attribute type 10 has an invalid length. [ 310.642691][ T8320] team0: Device ipvlan1 failed to register rx_handler [ 310.901874][ T8329] netlink: 'syz.6.1581': attribute type 10 has an invalid length. [ 311.256867][ T8333] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1583'. [ 311.615625][ T8340] netlink: 'syz.6.1586': attribute type 13 has an invalid length. [ 311.876564][ T8349] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1590'. [ 312.325972][ T8358] netlink: 'syz.2.1594': attribute type 10 has an invalid length. [ 312.736762][ T8367] netlink: 'syz.6.1607': attribute type 10 has an invalid length. [ 312.813853][ T8369] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1598'. [ 313.057800][ T8374] netlink: 192156 bytes leftover after parsing attributes in process `syz.5.1600'. [ 313.074939][ T8374] netlink: zone id is out of range [ 313.083389][ T8374] netlink: 14568 bytes leftover after parsing attributes in process `syz.5.1600'. [ 313.224446][ T8381] device bond0 entered promiscuous mode [ 313.230775][ T8381] device bond_slave_1 entered promiscuous mode [ 313.491341][ T8389] netlink: 176 bytes leftover after parsing attributes in process `syz.6.1609'. [ 313.586585][ T8393] netlink: 'syz.3.1608': attribute type 13 has an invalid length. [ 313.760078][ T8401] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1612'. [ 314.118749][ T8405] netlink: 'syz.2.1614': attribute type 10 has an invalid length. [ 314.363959][ T8415] bridge0: port 3(team0) entered disabled state [ 314.370479][ T8415] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.378664][ T8415] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.512961][ T8420] bridge0: port 3(team0) entered disabled state [ 314.553279][ T8420] device bridge_slave_1 left promiscuous mode [ 314.589279][ T8420] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.753548][ T8420] device bridge_slave_0 left promiscuous mode [ 314.762336][ T8420] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.966518][ T8423] netlink: 'syz.3.1622': attribute type 10 has an invalid length. [ 315.180404][ T8434] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1626'. [ 315.763892][ T8446] netlink: 'syz.5.1631': attribute type 10 has an invalid length. [ 315.848899][ T8450] netlink: 'syz.3.1634': attribute type 13 has an invalid length. [ 315.933875][ T8450] netlink: 24643 bytes leftover after parsing attributes in process `syz.3.1634'. [ 316.029029][ T8450] device vcan0 entered promiscuous mode [ 316.045317][ T8450] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 316.101504][ T3638] udevd[3638]: worker [4702] terminated by signal 33 (Unknown signal 33) [ 316.110694][ T3638] udevd[3638]: worker [4702] failed while handling '/devices/virtual/block/loop6' [ 316.239286][ T8460] netlink: 'syz.6.1637': attribute type 10 has an invalid length. [ 316.276004][ T8462] FAULT_INJECTION: forcing a failure. [ 316.276004][ T8462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 316.290532][ T8462] CPU: 0 PID: 8462 Comm: syz.5.1638 Not tainted syzkaller #0 [ 316.297970][ T8462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 316.308052][ T8462] Call Trace: [ 316.311332][ T8462] [ 316.314286][ T8462] dump_stack_lvl+0x168/0x22e [ 316.318995][ T8462] ? show_regs_print_info+0x12/0x12 [ 316.324231][ T8462] ? load_image+0x3b0/0x3b0 [ 316.328758][ T8462] ? __lock_acquire+0x7c50/0x7c50 [ 316.333814][ T8462] should_fail_ex+0x399/0x4d0 [ 316.338521][ T8462] _copy_from_user+0x2c/0x170 [ 316.343225][ T8462] bpf_prog_test_run_skb+0x258/0x11b0 [ 316.348656][ T8462] ? __fget_files+0x28/0x4d0 [ 316.353294][ T8462] ? __fget_files+0x44a/0x4d0 [ 316.358015][ T8462] ? cpu_online+0xa0/0xa0 [ 316.362355][ T8462] bpf_prog_test_run+0x31e/0x390 [ 316.367310][ T8462] __sys_bpf+0x593/0x6d0 [ 316.371566][ T8462] ? bpf_link_show_fdinfo+0x340/0x340 [ 316.376961][ T8462] ? lock_chain_count+0x20/0x20 [ 316.381850][ T8462] __x64_sys_bpf+0x78/0x90 [ 316.386285][ T8462] do_syscall_64+0x4c/0xa0 [ 316.390712][ T8462] ? clear_bhb_loop+0x60/0xb0 [ 316.395396][ T8462] ? clear_bhb_loop+0x60/0xb0 [ 316.400094][ T8462] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 316.406027][ T8462] RIP: 0033:0x7f69e018f6c9 [ 316.410483][ T8462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.430133][ T8462] RSP: 002b:00007f69e0ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 316.438557][ T8462] RAX: ffffffffffffffda RBX: 00007f69e03e5fa0 RCX: 00007f69e018f6c9 [ 316.446550][ T8462] RDX: 0000000000000048 RSI: 00002000000002c0 RDI: 000000000000000a [ 316.454549][ T8462] RBP: 00007f69e0ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 316.462554][ T8462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.470561][ T8462] R13: 00007f69e03e6038 R14: 00007f69e03e5fa0 R15: 00007ffd53332158 [ 316.478555][ T8462] [ 316.663105][ T8471] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1641'. [ 316.724697][ T8475] netlink: 'syz.6.1643': attribute type 21 has an invalid length. [ 316.747245][ T8475] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1643'. [ 316.756591][ T8475] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1643'. [ 316.829027][ T8479] delete_channel: no stack [ 317.094116][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.100624][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.118054][ T8495] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1646'. [ 317.127471][ T8496] netlink: 'syz.5.1650': attribute type 10 has an invalid length. [ 317.179521][ T8497] netlink: 'syz.3.1649': attribute type 10 has an invalid length. [ 317.483912][ T8499] netlink: 'syz.3.1651': attribute type 3 has an invalid length. [ 317.510824][ T8499] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1651'. [ 317.912893][ T8513] netlink: 188 bytes leftover after parsing attributes in process `syz.6.1656'. [ 318.490446][ T8525] netlink: 'syz.6.1662': attribute type 10 has an invalid length. [ 319.095434][ T8541] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1667'. [ 319.206098][ T8546] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1671'. [ 319.714068][ T8549] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1672'. [ 320.117139][ T8559] netlink: 830 bytes leftover after parsing attributes in process `syz.5.1676'. [ 320.244819][ T8563] netlink: 'syz.3.1677': attribute type 10 has an invalid length. [ 320.347753][ T8560] netlink: 'syz.6.1675': attribute type 10 has an invalid length. [ 320.470507][ T8560] team0: Device ipvlan1 failed to register rx_handler [ 321.783143][ T8588] __nla_validate_parse: 1 callbacks suppressed [ 321.783179][ T8588] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1685'. [ 321.977994][ T8594] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.985542][ T8594] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.057025][ T8596] device bridge_slave_1 left promiscuous mode [ 322.070392][ T8596] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.096145][ T8596] device bridge_slave_0 left promiscuous mode [ 322.106487][ T8596] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.703593][ T8608] netlink: 'syz.2.1693': attribute type 10 has an invalid length. [ 322.729973][ T8608] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1693'. [ 322.878726][ T8614] netlink: 'syz.6.1696': attribute type 10 has an invalid length. [ 322.899986][ T8614] device geneve0 entered promiscuous mode [ 323.014751][ T8614] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 323.024971][ T8613] netlink: 'syz.3.1695': attribute type 10 has an invalid length. [ 323.213702][ T8613] team0: Device ipvlan1 failed to register rx_handler [ 323.384393][ T8620] FAULT_INJECTION: forcing a failure. [ 323.384393][ T8620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.509347][ T8620] CPU: 0 PID: 8620 Comm: syz.6.1698 Not tainted syzkaller #0 [ 323.516797][ T8620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 323.526887][ T8620] Call Trace: [ 323.530194][ T8620] [ 323.533151][ T8620] dump_stack_lvl+0x168/0x22e [ 323.537875][ T8620] ? show_regs_print_info+0x12/0x12 [ 323.543112][ T8620] ? load_image+0x3b0/0x3b0 [ 323.547664][ T8620] ? __lock_acquire+0x7c50/0x7c50 [ 323.552741][ T8620] should_fail_ex+0x399/0x4d0 [ 323.557473][ T8620] _copy_from_user+0x2c/0x170 [ 323.562193][ T8620] iovec_from_user+0x143/0x360 [ 323.567002][ T8620] __import_iovec+0x6d/0x500 [ 323.571633][ T8620] ? __might_fault+0xc2/0x120 [ 323.576352][ T8620] import_iovec+0x6f/0xa0 [ 323.580734][ T8620] ___sys_sendmsg+0x1e4/0x290 [ 323.585454][ T8620] ? __sys_sendmsg+0x270/0x270 [ 323.590278][ T8620] ? __lock_acquire+0x7c50/0x7c50 [ 323.595357][ T8620] ? __fdget+0x17c/0x200 [ 323.599653][ T8620] __se_sys_sendmsg+0x19e/0x270 [ 323.604603][ T8620] ? __x64_sys_sendmsg+0x80/0x80 [ 323.609595][ T8620] ? lockdep_hardirqs_on+0x94/0x140 [ 323.614851][ T8620] do_syscall_64+0x4c/0xa0 [ 323.619302][ T8620] ? clear_bhb_loop+0x60/0xb0 [ 323.624007][ T8620] ? clear_bhb_loop+0x60/0xb0 [ 323.628723][ T8620] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 323.634654][ T8620] RIP: 0033:0x7f4f1af8f6c9 [ 323.639096][ T8620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.658733][ T8620] RSP: 002b:00007f4f1bee6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 323.667183][ T8620] RAX: ffffffffffffffda RBX: 00007f4f1b1e5fa0 RCX: 00007f4f1af8f6c9 [ 323.675190][ T8620] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 323.683221][ T8620] RBP: 00007f4f1bee6090 R08: 0000000000000000 R09: 0000000000000000 [ 323.691222][ T8620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.699221][ T8620] R13: 00007f4f1b1e6038 R14: 00007f4f1b1e5fa0 R15: 00007ffd696d73b8 [ 323.707236][ T8620] [ 323.986615][ T8622] netlink: 'syz.1.1699': attribute type 10 has an invalid length. [ 325.655116][ T8634] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1702'. [ 326.012190][ T8641] netlink: 'syz.3.1705': attribute type 10 has an invalid length. [ 326.082109][ T8643] netlink: 'syz.5.1706': attribute type 10 has an invalid length. [ 326.438023][ T8649] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1708'. [ 326.974530][ T8663] netlink: 'syz.6.1714': attribute type 10 has an invalid length. [ 327.547356][ T8677] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1717'. [ 327.636343][ T8679] netlink: 188 bytes leftover after parsing attributes in process `syz.6.1721'. [ 327.785104][ T8681] netlink: 'syz.1.1722': attribute type 10 has an invalid length. [ 329.467939][ T8697] netlink: 'syz.2.1729': attribute type 10 has an invalid length. [ 330.890838][ T8721] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1737'. [ 331.256752][ T8729] netlink: 'syz.6.1739': attribute type 10 has an invalid length. [ 331.458879][ T8740] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1746'. [ 331.624181][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 331.645639][ T8744] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 331.708049][ T8749] netlink: 'syz.3.1750': attribute type 29 has an invalid length. [ 331.732733][ T8749] netlink: 'syz.3.1750': attribute type 29 has an invalid length. [ 331.788235][ T8749] netlink: 'syz.3.1750': attribute type 29 has an invalid length. [ 332.814741][ T8766] netlink: 'syz.2.1758': attribute type 10 has an invalid length. [ 332.964377][ T8772] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1760'. [ 333.977298][ T8786] netlink: 'syz.6.1766': attribute type 10 has an invalid length. [ 334.644580][ T8800] netlink: 'syz.6.1770': attribute type 10 has an invalid length. [ 335.864033][ T8842] netlink: 'syz.2.1788': attribute type 22 has an invalid length. [ 335.934360][ T8842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1788'. [ 335.951597][ T8842] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1788'. [ 336.022571][ T8845] netlink: 'syz.3.1790': attribute type 3 has an invalid length. [ 336.051274][ T8845] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.1790'. [ 342.548703][ T8890] FAULT_INJECTION: forcing a failure. [ 342.548703][ T8890] name failslab, interval 1, probability 0, space 0, times 0 [ 342.643025][ T8890] CPU: 1 PID: 8890 Comm: syz.3.1805 Not tainted syzkaller #0 [ 342.650474][ T8890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 342.660565][ T8890] Call Trace: [ 342.663869][ T8890] [ 342.666821][ T8890] dump_stack_lvl+0x168/0x22e [ 342.671559][ T8890] ? show_regs_print_info+0x12/0x12 [ 342.676793][ T8890] ? load_image+0x3b0/0x3b0 [ 342.681340][ T8890] ? __might_sleep+0xd0/0xd0 [ 342.685983][ T8890] ? __lock_acquire+0x7c50/0x7c50 [ 342.691051][ T8890] should_fail_ex+0x399/0x4d0 [ 342.695775][ T8890] should_failslab+0x5/0x20 [ 342.700317][ T8890] slab_pre_alloc_hook+0x59/0x310 [ 342.705374][ T8890] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 342.711144][ T8890] __kmem_cache_alloc_node+0x4f/0x260 [ 342.716551][ T8890] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 342.722307][ T8890] __kmalloc+0xa0/0x240 [ 342.726502][ T8890] tomoyo_realpath_from_path+0xdf/0x5d0 [ 342.732101][ T8890] tomoyo_path_number_perm+0x1e3/0x600 [ 342.737605][ T8890] ? tomoyo_path_number_perm+0x1b6/0x600 [ 342.743283][ T8890] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 342.748865][ T8890] ? ksys_write+0x1bd/0x240 [ 342.753412][ T8890] ? common_file_perm+0x171/0x1c0 [ 342.758508][ T8890] ? __fget_files+0x28/0x4d0 [ 342.763145][ T8890] security_file_ioctl+0x6c/0xa0 [ 342.768113][ T8890] __se_sys_ioctl+0x48/0x170 [ 342.772732][ T8890] do_syscall_64+0x4c/0xa0 [ 342.777175][ T8890] ? clear_bhb_loop+0x60/0xb0 [ 342.781895][ T8890] ? clear_bhb_loop+0x60/0xb0 [ 342.786620][ T8890] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 342.792535][ T8890] RIP: 0033:0x7fe71b18f6c9 [ 342.796975][ T8890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.816615][ T8890] RSP: 002b:00007fe71c056038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 342.825062][ T8890] RAX: ffffffffffffffda RBX: 00007fe71b3e5fa0 RCX: 00007fe71b18f6c9 [ 342.833060][ T8890] RDX: 000000110e22fff6 RSI: 00000000c004743e RDI: 0000000000000003 [ 342.841060][ T8890] RBP: 00007fe71c056090 R08: 0000000000000000 R09: 0000000000000000 [ 342.849060][ T8890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.857065][ T8890] R13: 00007fe71b3e6038 R14: 00007fe71b3e5fa0 R15: 00007ffc7df62c78 [ 342.865078][ T8890] [ 342.897292][ T8890] ERROR: Out of memory at tomoyo_realpath_from_path. [ 343.155888][ T8896] netlink: 188 bytes leftover after parsing attributes in process `syz.6.1808'. [ 343.201224][ T8900] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1807'. [ 343.524916][ T8912] netlink: 'syz.2.1816': attribute type 10 has an invalid length. [ 343.979877][ T8921] netlink: 'syz.5.1821': attribute type 10 has an invalid length. [ 344.475864][ T8930] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1824'. [ 345.396344][ T8940] netlink: 'syz.3.1829': attribute type 10 has an invalid length. [ 345.877678][ T8955] netlink: 'syz.1.1836': attribute type 10 has an invalid length. [ 345.922901][ T8957] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1833'. [ 346.324924][ T8966] netlink: 'syz.5.1838': attribute type 22 has an invalid length. [ 346.395802][ T8966] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1838'. [ 346.483790][ T8967] netlink: 172 bytes leftover after parsing attributes in process `syz.5.1838'. [ 346.563888][ T8973] netlink: 'syz.1.1841': attribute type 2 has an invalid length. [ 346.646147][ T8973] device 0 entered promiscuous mode [ 346.847158][ T8979] netlink: 'syz.6.1844': attribute type 10 has an invalid length. [ 347.191856][ T8985] netlink: 'syz.3.1847': attribute type 10 has an invalid length. [ 348.193163][ T9010] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1855'. [ 348.554992][ T9024] netlink: 'syz.1.1861': attribute type 22 has an invalid length. [ 348.644258][ T9024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1861'. [ 348.748931][ T9025] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1861'. [ 349.219963][ T9030] netlink: 'syz.5.1865': attribute type 10 has an invalid length. [ 349.611149][ T9042] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1870'. [ 349.661673][ T9038] netlink: 'syz.3.1869': attribute type 10 has an invalid length. [ 350.329744][ T9055] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1875'. [ 350.706689][ T9067] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1882'. [ 350.743673][ T9065] netlink: 'syz.2.1881': attribute type 10 has an invalid length. [ 351.053643][ T9075] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1886'. [ 351.453133][ T9083] netlink: 'syz.5.1890': attribute type 10 has an invalid length. [ 352.018054][ T9095] netlink: 'syz.1.1896': attribute type 10 has an invalid length. [ 352.163090][ T9099] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1895'. [ 352.374237][ T9109] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1902'. [ 352.462071][ T9113] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1900'. [ 352.555755][ T9116] FAULT_INJECTION: forcing a failure. [ 352.555755][ T9116] name failslab, interval 1, probability 0, space 0, times 0 [ 352.596515][ T9116] CPU: 1 PID: 9116 Comm: syz.2.1904 Not tainted syzkaller #0 [ 352.603969][ T9116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 352.614068][ T9116] Call Trace: [ 352.617388][ T9116] [ 352.620351][ T9116] dump_stack_lvl+0x168/0x22e [ 352.625088][ T9116] ? show_regs_print_info+0x12/0x12 [ 352.630337][ T9116] ? load_image+0x3b0/0x3b0 [ 352.634903][ T9116] ? __might_sleep+0xd0/0xd0 [ 352.639541][ T9116] ? __lock_acquire+0x7c50/0x7c50 [ 352.644614][ T9116] ? __lock_acquire+0x12e5/0x7c50 [ 352.649691][ T9116] should_fail_ex+0x399/0x4d0 [ 352.654436][ T9116] should_failslab+0x5/0x20 [ 352.658981][ T9116] slab_pre_alloc_hook+0x59/0x310 [ 352.664059][ T9116] kmem_cache_alloc_node+0x5a/0x320 [ 352.669306][ T9116] ? __alloc_skb+0xfc/0x7e0 [ 352.673861][ T9116] __alloc_skb+0xfc/0x7e0 [ 352.678237][ T9116] alloc_skb_with_frags+0xa7/0x710 [ 352.683394][ T9116] ? trace_event_raw_event_lock+0x230/0x230 [ 352.689333][ T9116] sock_alloc_send_pskb+0x853/0x980 [ 352.694601][ T9116] ? sock_kzfree_s+0x50/0x50 [ 352.699256][ T9116] ? dev_get_by_index+0x1e/0x2d0 [ 352.704234][ T9116] ? dev_get_by_index+0x1e/0x2d0 [ 352.709221][ T9116] packet_sendmsg+0x32e2/0x4ea0 [ 352.714127][ T9116] ? perf_trace_lock+0xf3/0x370 [ 352.719009][ T9116] ? __might_sleep+0xd0/0xd0 [ 352.723632][ T9116] ? trace_event_raw_event_lock+0x230/0x230 [ 352.729569][ T9116] ? aa_sk_perm+0x7e5/0x920 [ 352.734105][ T9116] ? packet_getsockopt+0x950/0x950 [ 352.739270][ T9116] ? aa_sock_msg_perm+0x94/0x150 [ 352.744246][ T9116] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 352.749558][ T9116] ? security_socket_sendmsg+0x7c/0xa0 [ 352.755051][ T9116] ? packet_getsockopt+0x950/0x950 [ 352.760205][ T9116] ____sys_sendmsg+0x59b/0x970 [ 352.765010][ T9116] ? __sys_sendmsg_sock+0x30/0x30 [ 352.770061][ T9116] ? __import_iovec+0x315/0x500 [ 352.774947][ T9116] ? import_iovec+0x6f/0xa0 [ 352.779484][ T9116] ___sys_sendmsg+0x21c/0x290 [ 352.784198][ T9116] ? __sys_sendmsg+0x270/0x270 [ 352.789010][ T9116] ? __lock_acquire+0x7c50/0x7c50 [ 352.794094][ T9116] ? __fdget+0x17c/0x200 [ 352.798392][ T9116] __se_sys_sendmsg+0x19e/0x270 [ 352.803292][ T9116] ? __x64_sys_sendmsg+0x80/0x80 [ 352.808297][ T9116] ? lockdep_hardirqs_on+0x94/0x140 [ 352.813538][ T9116] do_syscall_64+0x4c/0xa0 [ 352.817982][ T9116] ? clear_bhb_loop+0x60/0xb0 [ 352.822679][ T9116] ? clear_bhb_loop+0x60/0xb0 [ 352.827386][ T9116] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 352.833297][ T9116] RIP: 0033:0x7fbb0eb8f6c9 [ 352.837734][ T9116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.857377][ T9116] RSP: 002b:00007fbb0fac6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.865831][ T9116] RAX: ffffffffffffffda RBX: 00007fbb0ede5fa0 RCX: 00007fbb0eb8f6c9 [ 352.873826][ T9116] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 352.881833][ T9116] RBP: 00007fbb0fac6090 R08: 0000000000000000 R09: 0000000000000000 [ 352.889847][ T9116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.897863][ T9116] R13: 00007fbb0ede6038 R14: 00007fbb0ede5fa0 R15: 00007ffc7dec65e8 [ 352.905901][ T9116] [ 353.077865][ T9126] netlink: 'syz.2.1907': attribute type 10 has an invalid length. [ 353.310140][ T9134] netlink: 'syz.1.1912': attribute type 10 has an invalid length. [ 353.350505][ T9134] team0: Device hsr_slave_0 failed to register rx_handler [ 353.437873][ T9137] netlink: 'syz.3.1913': attribute type 10 has an invalid length. [ 353.610581][ T9143] netlink: 188 bytes leftover after parsing attributes in process `syz.6.1916'. [ 354.232421][ T9156] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1921'. [ 354.773880][ T9172] netlink: 'syz.1.1930': attribute type 10 has an invalid length. [ 354.895889][ T9174] device syzkaller0 entered promiscuous mode [ 357.328887][ T9208] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1944'. [ 358.459746][ T9179] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1933'. [ 358.471047][ T9183] netlink: 'syz.6.1934': attribute type 10 has an invalid length. [ 358.479891][ T9210] netlink: 'syz.5.1945': attribute type 10 has an invalid length. [ 359.453147][ T9238] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1955'. [ 359.860482][ T9244] netlink: 'syz.2.1957': attribute type 10 has an invalid length. [ 360.125492][ T9248] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1959'. [ 360.327358][ T9250] netlink: 'syz.5.1960': attribute type 10 has an invalid length. [ 360.989990][ T9276] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1970'. [ 361.025972][ T9275] netlink: 'syz.3.1972': attribute type 10 has an invalid length. [ 361.556092][ T9291] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1976'. [ 361.730652][ T9294] netlink: 'syz.3.1978': attribute type 10 has an invalid length. [ 362.822200][ T9327] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1991'. [ 363.398668][ T9339] netlink: 'syz.3.1995': attribute type 10 has an invalid length. [ 365.094014][ T9367] netlink: 'syz.6.2006': attribute type 10 has an invalid length. [ 366.320528][ T9374] netlink: 'syz.3.2010': attribute type 10 has an invalid length. [ 366.334493][ T9375] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2009'. [ 367.829260][ T9405] netlink: 'syz.2.2021': attribute type 10 has an invalid length. [ 368.203572][ T9418] netlink: 'syz.2.2025': attribute type 10 has an invalid length. [ 368.325097][ T9425] FAULT_INJECTION: forcing a failure. [ 368.325097][ T9425] name failslab, interval 1, probability 0, space 0, times 0 [ 368.377018][ T9425] CPU: 0 PID: 9425 Comm: syz.5.2027 Not tainted syzkaller #0 [ 368.384477][ T9425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 368.394576][ T9425] Call Trace: [ 368.397884][ T9425] [ 368.400852][ T9425] dump_stack_lvl+0x168/0x22e [ 368.405574][ T9425] ? show_regs_print_info+0x12/0x12 [ 368.410809][ T9425] ? load_image+0x3b0/0x3b0 [ 368.415355][ T9425] ? __might_sleep+0xd0/0xd0 [ 368.419991][ T9425] ? __lock_acquire+0x7c50/0x7c50 [ 368.425072][ T9425] should_fail_ex+0x399/0x4d0 [ 368.429802][ T9425] should_failslab+0x5/0x20 [ 368.434351][ T9425] slab_pre_alloc_hook+0x59/0x310 [ 368.439415][ T9425] ? prepend_path+0xa6b/0xc20 [ 368.444139][ T9425] ? tomoyo_encode+0x27e/0x540 [ 368.448941][ T9425] __kmem_cache_alloc_node+0x4f/0x260 [ 368.454355][ T9425] ? tomoyo_encode+0x27e/0x540 [ 368.459163][ T9425] __kmalloc+0xa0/0x240 [ 368.463374][ T9425] tomoyo_encode+0x27e/0x540 [ 368.468018][ T9425] tomoyo_realpath_from_path+0x58e/0x5d0 [ 368.473712][ T9425] tomoyo_path_number_perm+0x1e3/0x600 [ 368.479212][ T9425] ? tomoyo_path_number_perm+0x1b6/0x600 [ 368.484897][ T9425] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 368.490409][ T9425] ? ksys_write+0x1bd/0x240 [ 368.494955][ T9425] ? common_file_perm+0x171/0x1c0 [ 368.500030][ T9425] ? __fget_files+0x28/0x4d0 [ 368.504654][ T9425] security_file_ioctl+0x6c/0xa0 [ 368.509609][ T9425] __se_sys_ioctl+0x48/0x170 [ 368.514217][ T9425] do_syscall_64+0x4c/0xa0 [ 368.518643][ T9425] ? clear_bhb_loop+0x60/0xb0 [ 368.523330][ T9425] ? clear_bhb_loop+0x60/0xb0 [ 368.528017][ T9425] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 368.533921][ T9425] RIP: 0033:0x7f69e018f6c9 [ 368.538359][ T9425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.557974][ T9425] RSP: 002b:00007f69e0ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 368.566389][ T9425] RAX: ffffffffffffffda RBX: 00007f69e03e5fa0 RCX: 00007f69e018f6c9 [ 368.574362][ T9425] RDX: 000000110e22fff6 RSI: 00000000c004743e RDI: 0000000000000003 [ 368.582339][ T9425] RBP: 00007f69e0ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 368.590320][ T9425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.598298][ T9425] R13: 00007f69e03e6038 R14: 00007f69e03e5fa0 R15: 00007ffd53332158 [ 368.606299][ T9425] [ 368.632685][ T9425] ERROR: Out of memory at tomoyo_realpath_from_path. [ 368.924340][ T9436] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2031'. [ 369.108941][ T9448] netlink: 'syz.6.2036': attribute type 21 has an invalid length. [ 369.133674][ T9448] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2036'. [ 369.143951][ T9448] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2036'. [ 369.160383][ T9446] netlink: 'syz.5.2037': attribute type 10 has an invalid length. [ 369.500292][ T9453] netlink: 63632 bytes leftover after parsing attributes in process `syz.3.2040'. [ 369.907723][ T9457] netlink: 'syz.5.2041': attribute type 10 has an invalid length. [ 369.989359][ T9457] device netdevsim0 entered promiscuous mode [ 370.014829][ T9457] team0: Port device netdevsim0 added [ 370.053074][ T9459] netlink: 'syz.5.2041': attribute type 10 has an invalid length. [ 370.097861][ T9459] device netdevsim0 left promiscuous mode [ 370.245848][ T9459] team0: Port device netdevsim0 removed [ 370.317614][ T9459] device netdevsim0 entered promiscuous mode [ 370.350193][ T9459] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 370.367459][ T9462] netlink: 'syz.6.2042': attribute type 10 has an invalid length. [ 370.836415][ T9477] FAULT_INJECTION: forcing a failure. [ 370.836415][ T9477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.863899][ T9477] CPU: 1 PID: 9477 Comm: syz.1.2048 Not tainted syzkaller #0 [ 370.871340][ T9477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 370.881422][ T9477] Call Trace: [ 370.884723][ T9477] [ 370.887674][ T9477] dump_stack_lvl+0x168/0x22e [ 370.892394][ T9477] ? show_regs_print_info+0x12/0x12 [ 370.897629][ T9477] ? load_image+0x3b0/0x3b0 [ 370.902163][ T9477] ? __lock_acquire+0x7c50/0x7c50 [ 370.907228][ T9477] should_fail_ex+0x399/0x4d0 [ 370.911943][ T9477] _copy_from_user+0x2c/0x170 [ 370.916656][ T9477] bpf_prog_test_run_xdp+0xbbe/0xe50 [ 370.921983][ T9477] ? dev_put+0x80/0x80 [ 370.926086][ T9477] ? dev_put+0x80/0x80 [ 370.930185][ T9477] bpf_prog_test_run+0x31e/0x390 [ 370.935156][ T9477] __sys_bpf+0x593/0x6d0 [ 370.939441][ T9477] ? bpf_link_show_fdinfo+0x340/0x340 [ 370.944865][ T9477] ? lock_chain_count+0x20/0x20 [ 370.949766][ T9477] __x64_sys_bpf+0x78/0x90 [ 370.954222][ T9477] do_syscall_64+0x4c/0xa0 [ 370.958662][ T9477] ? clear_bhb_loop+0x60/0xb0 [ 370.963364][ T9477] ? clear_bhb_loop+0x60/0xb0 [ 370.968084][ T9477] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 370.974028][ T9477] RIP: 0033:0x7fea9fd8f6c9 [ 370.978477][ T9477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.998120][ T9477] RSP: 002b:00007feaa0c02038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 371.006599][ T9477] RAX: ffffffffffffffda RBX: 00007fea9ffe5fa0 RCX: 00007fea9fd8f6c9 [ 371.014599][ T9477] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 371.022594][ T9477] RBP: 00007feaa0c02090 R08: 0000000000000000 R09: 0000000000000000 [ 371.030586][ T9477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.038583][ T9477] R13: 00007fea9ffe6038 R14: 00007fea9ffe5fa0 R15: 00007ffeaf5a5288 [ 371.046593][ T9477] [ 371.160736][ T9479] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2049'. [ 371.332856][ T9490] netlink: 'syz.3.2051': attribute type 10 has an invalid length. [ 371.548816][ T9497] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2054'. [ 371.571712][ T9498] netlink: 'syz.5.2056': attribute type 10 has an invalid length. [ 373.259996][ T9524] netlink: 'syz.6.2067': attribute type 10 has an invalid length. [ 374.374219][ T9541] netlink: 'syz.2.2074': attribute type 10 has an invalid length. [ 374.652042][ T9543] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2075'. [ 375.502787][ T9554] FAULT_INJECTION: forcing a failure. [ 375.502787][ T9554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.554411][ T9554] CPU: 0 PID: 9554 Comm: syz.6.2078 Not tainted syzkaller #0 [ 375.561868][ T9554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 375.571980][ T9554] Call Trace: [ 375.575293][ T9554] [ 375.578255][ T9554] dump_stack_lvl+0x168/0x22e [ 375.582978][ T9554] ? show_regs_print_info+0x12/0x12 [ 375.588218][ T9554] ? load_image+0x3b0/0x3b0 [ 375.592769][ T9554] ? __lock_acquire+0x7c50/0x7c50 [ 375.597826][ T9554] ? verify_lock_unused+0x140/0x140 [ 375.603062][ T9554] should_fail_ex+0x399/0x4d0 [ 375.607774][ T9554] _copy_from_user+0x2c/0x170 [ 375.612482][ T9554] ___sys_sendmsg+0x155/0x290 [ 375.617204][ T9554] ? __sys_sendmsg+0x270/0x270 [ 375.621991][ T9554] ? irqentry_enter+0x33/0x50 [ 375.626706][ T9554] ? rcu_is_watching+0x11/0xa0 [ 375.631524][ T9554] __se_sys_sendmsg+0x19e/0x270 [ 375.636399][ T9554] ? perf_trace_preemptirq_template+0x287/0x330 [ 375.642666][ T9554] ? __x64_sys_sendmsg+0x80/0x80 [ 375.647654][ T9554] ? lockdep_hardirqs_on+0x94/0x140 [ 375.652884][ T9554] do_syscall_64+0x4c/0xa0 [ 375.657325][ T9554] ? clear_bhb_loop+0x60/0xb0 [ 375.662028][ T9554] ? clear_bhb_loop+0x60/0xb0 [ 375.666769][ T9554] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 375.672685][ T9554] RIP: 0033:0x7f4f1af8f6c9 [ 375.677124][ T9554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.696751][ T9554] RSP: 002b:00007f4f1bee6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.705191][ T9554] RAX: ffffffffffffffda RBX: 00007f4f1b1e5fa0 RCX: 00007f4f1af8f6c9 [ 375.713180][ T9554] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000007 [ 375.721177][ T9554] RBP: 00007f4f1bee6090 R08: 0000000000000000 R09: 0000000000000000 [ 375.729172][ T9554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.737168][ T9554] R13: 00007f4f1b1e6038 R14: 00007f4f1b1e5fa0 R15: 00007ffd696d73b8 [ 375.745185][ T9554] [ 375.890574][ T9565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2083'. [ 376.002917][ T9567] netlink: 105124 bytes leftover after parsing attributes in process `syz.1.2083'. [ 376.125672][ T9569] netlink: 'syz.3.2085': attribute type 10 has an invalid length. [ 376.463624][ T9577] netlink: 'syz.3.2087': attribute type 10 has an invalid length. [ 376.873995][ T9584] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2089'. [ 377.872998][ T9599] netlink: 'syz.2.2097': attribute type 10 has an invalid length. [ 378.139134][ T9609] FAULT_INJECTION: forcing a failure. [ 378.139134][ T9609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.268737][ T9609] CPU: 1 PID: 9609 Comm: syz.5.2099 Not tainted syzkaller #0 [ 378.276188][ T9609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 378.286272][ T9609] Call Trace: [ 378.289568][ T9609] [ 378.292518][ T9609] dump_stack_lvl+0x168/0x22e [ 378.297239][ T9609] ? show_regs_print_info+0x12/0x12 [ 378.302468][ T9609] ? load_image+0x3b0/0x3b0 [ 378.307012][ T9609] ? __lock_acquire+0x7c50/0x7c50 [ 378.312070][ T9609] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 378.318282][ T9609] should_fail_ex+0x399/0x4d0 [ 378.323029][ T9609] _copy_from_user+0x2c/0x170 [ 378.327747][ T9609] ___sys_recvmsg+0x12b/0x510 [ 378.332462][ T9609] ? __sys_recvmsg+0x270/0x270 [ 378.337262][ T9609] ? trace_call_bpf+0xbf/0x680 [ 378.342064][ T9609] ? trace_call_bpf+0x5a7/0x680 [ 378.346963][ T9609] ? __fget_files+0x44a/0x4d0 [ 378.351679][ T9609] ? __fdget+0x17c/0x200 [ 378.355963][ T9609] __x64_sys_recvmsg+0x1eb/0x2b0 [ 378.360934][ T9609] ? perf_trace_preemptirq_template+0x287/0x330 [ 378.367214][ T9609] ? ___sys_recvmsg+0x510/0x510 [ 378.372115][ T9609] ? lockdep_hardirqs_on+0x94/0x140 [ 378.377348][ T9609] do_syscall_64+0x4c/0xa0 [ 378.381799][ T9609] ? clear_bhb_loop+0x60/0xb0 [ 378.386506][ T9609] ? clear_bhb_loop+0x60/0xb0 [ 378.391212][ T9609] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 378.397133][ T9609] RIP: 0033:0x7f69e018f6c9 [ 378.401575][ T9609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.421301][ T9609] RSP: 002b:00007f69e0ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 378.429752][ T9609] RAX: ffffffffffffffda RBX: 00007f69e03e5fa0 RCX: 00007f69e018f6c9 [ 378.437748][ T9609] RDX: 0000000000000002 RSI: 0000200000000680 RDI: 0000000000000006 [ 378.445743][ T9609] RBP: 00007f69e0ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 378.453753][ T9609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.461751][ T9609] R13: 00007f69e03e6038 R14: 00007f69e03e5fa0 R15: 00007ffd53332158 [ 378.469767][ T9609] [ 378.493367][ T9613] netlink: 'syz.1.2101': attribute type 10 has an invalid length. [ 378.510342][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.516745][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.385504][ T9617] netlink: 'syz.6.2102': attribute type 3 has an invalid length. [ 379.443539][ T9617] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.2102'. [ 379.625881][ T9626] netpci0: tun_chr_ioctl cmd 2147767511 [ 380.932490][ T9642] netlink: 'syz.5.2114': attribute type 10 has an invalid length. [ 381.005673][ T9644] netlink: 'syz.1.2113': attribute type 10 has an invalid length. [ 381.639782][ T9664] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2119'. [ 381.730514][ T9663] netlink: 105124 bytes leftover after parsing attributes in process `syz.6.2119'. [ 381.757338][ T9668] netlink: 127868 bytes leftover after parsing attributes in process `syz.5.2122'. [ 381.935210][ T9677] FAULT_INJECTION: forcing a failure. [ 381.935210][ T9677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.955475][ T9677] CPU: 0 PID: 9677 Comm: syz.5.2125 Not tainted syzkaller #0 [ 381.962919][ T9677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 381.973016][ T9677] Call Trace: [ 381.976328][ T9677] [ 381.979306][ T9677] dump_stack_lvl+0x168/0x22e [ 381.984040][ T9677] ? show_regs_print_info+0x12/0x12 [ 381.989280][ T9677] ? load_image+0x3b0/0x3b0 [ 381.993858][ T9677] ? __lock_acquire+0x7c50/0x7c50 [ 381.998994][ T9677] should_fail_ex+0x399/0x4d0 [ 382.003727][ T9677] _copy_from_user+0x2c/0x170 [ 382.008455][ T9677] __tun_chr_ioctl+0x1ff/0x1e10 [ 382.013348][ T9677] ? tun_flow_create+0x310/0x310 [ 382.018345][ T9677] ? bpf_lsm_file_ioctl+0x5/0x10 [ 382.021521][ T9680] netlink: 'syz.1.2126': attribute type 10 has an invalid length. [ 382.023311][ T9677] ? security_file_ioctl+0x7c/0xa0 [ 382.023344][ T9677] ? tun_chr_poll+0x630/0x630 [ 382.041000][ T9677] __se_sys_ioctl+0xfa/0x170 [ 382.045637][ T9677] do_syscall_64+0x4c/0xa0 [ 382.050093][ T9677] ? clear_bhb_loop+0x60/0xb0 [ 382.054806][ T9677] ? clear_bhb_loop+0x60/0xb0 [ 382.059525][ T9677] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 382.065452][ T9677] RIP: 0033:0x7f69e018f6c9 [ 382.069898][ T9677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.089542][ T9677] RSP: 002b:00007f69e0ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 382.097995][ T9677] RAX: ffffffffffffffda RBX: 00007f69e03e5fa0 RCX: 00007f69e018f6c9 [ 382.105997][ T9677] RDX: 0000200000000200 RSI: 00000000400454ca RDI: 0000000000000003 [ 382.114003][ T9677] RBP: 00007f69e0ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 382.122017][ T9677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.130023][ T9677] R13: 00007f69e03e6038 R14: 00007f69e03e5fa0 R15: 00007ffd53332158 [ 382.138046][ T9677] [ 382.467646][ T9688] netlink: 'syz.3.2128': attribute type 10 has an invalid length. [ 382.595664][ T9682] netlink: 'syz.2.2127': attribute type 3 has an invalid length. [ 382.625399][ T9682] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2127'. [ 383.964638][ T9707] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.2137'. [ 385.132213][ T9725] netlink: 'syz.3.2143': attribute type 10 has an invalid length. [ 385.320755][ T9724] FAULT_INJECTION: forcing a failure. [ 385.320755][ T9724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.321329][ T9724] [ 385.321334][ T9724] ====================================================== [ 385.321341][ T9724] WARNING: possible circular locking dependency detected [ 385.321360][ T9724] syzkaller #0 Not tainted [ 385.321369][ T9724] ------------------------------------------------------ [ 385.321374][ T9724] syz.2.2144/9724 is trying to acquire lock: [ 385.321383][ T9724] ffffffff8cb1ee60 (console_owner){-...}-{0:0}, at: console_emit_next_record+0x82d/0xc90 [ 385.321441][ T9724] [ 385.321441][ T9724] but task is already holding lock: [ 385.321446][ T9724] ffff8880b8f3aad8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 385.321488][ T9724] [ 385.321488][ T9724] which lock already depends on the new lock. [ 385.321488][ T9724] [ 385.321493][ T9724] [ 385.321493][ T9724] the existing dependency chain (in reverse order) is: [ 385.321498][ T9724] [ 385.321498][ T9724] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 385.321520][ T9724] _raw_spin_lock_nested+0x2e/0x40 [ 385.321537][ T9724] raw_spin_rq_lock_nested+0x26/0x140 [ 385.321565][ T9724] task_fork_fair+0x5c/0x350 [ 385.321587][ T9724] sched_cgroup_fork+0x32c/0x3c0 [ 385.321608][ T9724] copy_process+0x24b8/0x4020 [ 385.321626][ T9724] kernel_clone+0x225/0x8b0 [ 385.321642][ T9724] user_mode_thread+0xda/0x130 [ 385.321659][ T9724] rest_init+0x23/0x300 [ 385.321685][ T9724] start_kernel+0x0/0x539 [ 385.321711][ T9724] start_kernel+0x490/0x539 [ 385.321736][ T9724] secondary_startup_64_no_verify+0xcf/0xdb [ 385.321761][ T9724] [ 385.321761][ T9724] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 385.321783][ T9724] _raw_spin_lock_irqsave+0xa4/0xf0 [ 385.321812][ T9724] try_to_wake_up+0x5c/0x1080 [ 385.321833][ T9724] __wake_up_common+0x2a4/0x4e0 [ 385.321857][ T9724] __wake_up+0x10e/0x190 [ 385.321878][ T9724] tty_port_default_wakeup+0x9e/0xf0 [ 385.321907][ T9724] serial8250_tx_chars+0x629/0x830 [ 385.321925][ T9724] serial8250_handle_irq+0x516/0x6d0 [ 385.321943][ T9724] serial8250_default_handle_irq+0xb4/0x1a0 [ 385.321964][ T9724] serial8250_interrupt+0x9b/0x1c0 [ 385.321980][ T9724] __handle_irq_event_percpu+0x298/0xa30 [ 385.321997][ T9724] handle_irq_event+0x87/0x1e0 [ 385.322012][ T9724] handle_edge_irq+0x243/0xb20 [ 385.322033][ T9724] __common_interrupt+0xd7/0x1e0 [ 385.322057][ T9724] common_interrupt+0xb0/0xd0 [ 385.322078][ T9724] asm_common_interrupt+0x22/0x40 [ 385.322095][ T9724] folio_memcg+0x22/0x130 [ 385.322113][ T9724] unlock_page_memcg+0x3d/0xb0 [ 385.322131][ T9724] page_add_file_rmap+0x8d8/0x1500 [ 385.322147][ T9724] do_set_pte+0x2f4/0x460 [ 385.322172][ T9724] filemap_map_pages+0xcab/0x10d0 [ 385.322194][ T9724] handle_mm_fault+0x287e/0x3e60 [ 385.322220][ T9724] do_user_addr_fault+0x51f/0xb10 [ 385.322240][ T9724] exc_page_fault+0x60/0x100 [ 385.322263][ T9724] asm_exc_page_fault+0x22/0x30 [ 385.322280][ T9724] [ 385.322280][ T9724] -> #2 (&tty->write_wait){-.-.}-{2:2}: [ 385.322303][ T9724] _raw_spin_lock_irqsave+0xa4/0xf0 [ 385.322331][ T9724] __wake_up+0xf4/0x190 [ 385.322352][ T9724] tty_port_default_wakeup+0x9e/0xf0 [ 385.322402][ T9724] serial8250_tx_chars+0x629/0x830 [ 385.322420][ T9724] serial8250_handle_irq+0x516/0x6d0 [ 385.322439][ T9724] serial8250_default_handle_irq+0xb4/0x1a0 [ 385.322460][ T9724] serial8250_interrupt+0x9b/0x1c0 [ 385.322476][ T9724] __handle_irq_event_percpu+0x298/0xa30 [ 385.322493][ T9724] handle_irq_event+0x87/0x1e0 [ 385.322508][ T9724] handle_edge_irq+0x243/0xb20 [ 385.322528][ T9724] __common_interrupt+0xd7/0x1e0 [ 385.322565][ T9724] common_interrupt+0xb0/0xd0 [ 385.322587][ T9724] asm_common_interrupt+0x22/0x40 [ 385.322605][ T9724] default_idle+0xb/0x10 [ 385.322630][ T9724] default_idle_call+0x84/0xc0 [ 385.322656][ T9724] do_idle+0x1fc/0x570 [ 385.322679][ T9724] cpu_startup_entry+0x3f/0x60 [ 385.322704][ T9724] rest_init+0x2dc/0x300 [ 385.322729][ T9724] start_kernel+0x0/0x539 [ 385.322754][ T9724] start_kernel+0x490/0x539 [ 385.322779][ T9724] secondary_startup_64_no_verify+0xcf/0xdb [ 385.322804][ T9724] [ 385.322804][ T9724] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 385.322827][ T9724] _raw_spin_lock_irqsave+0xa4/0xf0 [ 385.322855][ T9724] serial8250_console_write+0x169/0x17a0 [ 385.322875][ T9724] console_emit_next_record+0x947/0xc90 [ 385.322902][ T9724] console_unlock+0x223/0x630 [ 385.322925][ T9724] vprintk_emit+0x489/0x680 [ 385.322948][ T9724] _printk+0xcc/0x110 [ 385.322974][ T9724] register_console+0x6c6/0x9c0 [ 385.322999][ T9724] univ8250_console_init+0x41/0x43 [ 385.323018][ T9724] console_init+0x1bc/0x78e [ 385.323040][ T9724] start_kernel+0x303/0x539 [ 385.323063][ T9724] secondary_startup_64_no_verify+0xcf/0xdb [ 385.323086][ T9724] [ 385.323086][ T9724] -> #0 (console_owner){-...}-{0:0}: [ 385.323108][ T9724] __lock_acquire+0x2cf8/0x7c50 [ 385.323132][ T9724] lock_acquire+0x1b4/0x490 [ 385.323154][ T9724] console_emit_next_record+0x84c/0xc90 [ 385.323182][ T9724] console_unlock+0x223/0x630 [ 385.323205][ T9724] vprintk_emit+0x489/0x680 [ 385.323228][ T9724] _printk+0xcc/0x110 [ 385.323253][ T9724] should_fail_ex+0x37a/0x4d0 [ 385.323279][ T9724] strncpy_from_user+0x32/0x350 [ 385.323301][ T9724] strncpy_from_user_nofault+0x6d/0x140 [ 385.323318][ T9724] bpf_probe_read_compat_str+0xdd/0x170 [ 385.323343][ T9724] bpf_prog_2d403b9db727cc7e+0x3d/0x41 [ 385.323361][ T9724] bpf_trace_run4+0x1f5/0x420 [ 385.323387][ T9724] __traceiter_sched_switch+0x8f/0xc0 [ 385.323413][ T9724] __schedule+0x1d18/0x40b0 [ 385.323432][ T9724] schedule+0xb9/0x180 [ 385.323449][ T9724] exit_to_user_mode_loop+0x47/0x110 [ 385.323474][ T9724] exit_to_user_mode_prepare+0xee/0x180 [ 385.323498][ T9724] irqentry_exit_to_user_mode+0x5/0x30 [ 385.323522][ T9724] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 385.323541][ T9724] [ 385.323541][ T9724] other info that might help us debug this: [ 385.323541][ T9724] [ 385.323553][ T9724] Chain exists of: [ 385.323553][ T9724] console_owner --> &p->pi_lock --> &rq->__lock [ 385.323553][ T9724] [ 385.323580][ T9724] Possible unsafe locking scenario: [ 385.323580][ T9724] [ 385.323584][ T9724] CPU0 CPU1 [ 385.323600][ T9724] ---- ---- [ 385.323605][ T9724] lock(&rq->__lock); [ 385.323614][ T9724] lock(&p->pi_lock); [ 385.323626][ T9724] lock(&rq->__lock); [ 385.323637][ T9724] lock(console_owner); [ 385.323647][ T9724] [ 385.323647][ T9724] *** DEADLOCK *** [ 385.323647][ T9724] [ 385.323651][ T9724] 3 locks held by syz.2.2144/9724: [ 385.323661][ T9724] #0: ffff8880b8f3aad8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 385.323704][ T9724] #1: ffffffff8cb2aca0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0xf9/0x420 [ 385.323772][ T9724] #2: ffffffff8cb1ef40 (console_lock){+.+.}-{0:0}, at: _printk+0xcc/0x110 [ 385.323822][ T9724] [ 385.323822][ T9724] stack backtrace: [ 385.323826][ T9724] CPU: 1 PID: 9724 Comm: syz.2.2144 Not tainted syzkaller #0 [ 385.323844][ T9724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 385.323854][ T9724] Call Trace: [ 385.323860][ T9724] [ 385.323867][ T9724] dump_stack_lvl+0x168/0x22e [ 385.323901][ T9724] ? load_image+0x3b0/0x3b0 [ 385.323929][ T9724] ? show_regs_print_info+0x12/0x12 [ 385.323955][ T9724] ? print_circular_bug+0x12b/0x1a0 [ 385.323983][ T9724] check_noncircular+0x274/0x310 [ 385.324012][ T9724] ? add_chain_block+0x940/0x940 [ 385.324055][ T9724] ? lockdep_lock+0xdc/0x1e0 [ 385.324081][ T9724] ? add_lock_to_list+0x191/0x280 [ 385.324109][ T9724] ? _find_first_zero_bit+0xcf/0x100 [ 385.324141][ T9724] __lock_acquire+0x2cf8/0x7c50 [ 385.324180][ T9724] ? verify_lock_unused+0x140/0x140 [ 385.324218][ T9724] lock_acquire+0x1b4/0x490 [ 385.324242][ T9724] ? console_emit_next_record+0x82d/0xc90 [ 385.324275][ T9724] ? __lock_acquire+0x7c50/0x7c50 [ 385.324300][ T9724] ? do_raw_spin_lock+0x11d/0x280 [ 385.324329][ T9724] ? read_lock_is_recursive+0x10/0x10 [ 385.324355][ T9724] ? __rwlock_init+0x140/0x140 [ 385.324382][ T9724] ? memcpy+0x3c/0x60 [ 385.324411][ T9724] ? do_raw_spin_unlock+0x11d/0x230 [ 385.324441][ T9724] ? console_emit_next_record+0x82d/0xc90 [ 385.324470][ T9724] console_emit_next_record+0x84c/0xc90 [ 385.324499][ T9724] ? console_emit_next_record+0x82d/0xc90 [ 385.324530][ T9724] ? __lock_acquire+0x7c50/0x7c50 [ 385.324564][ T9724] ? info_print_prefix+0x300/0x300 [ 385.324594][ T9724] ? do_raw_spin_unlock+0x11d/0x230 [ 385.324624][ T9724] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 385.324654][ T9724] ? _raw_spin_unlock+0x40/0x40 [ 385.324690][ T9724] ? __down_trylock_console_sem+0x184/0x1e0 [ 385.324718][ T9724] ? _printk+0xcc/0x110 [ 385.324745][ T9724] ? _printk+0xcc/0x110 [ 385.324772][ T9724] ? console_trylock+0x160/0x160 [ 385.324806][ T9724] console_unlock+0x223/0x630 [ 385.324834][ T9724] ? _printk+0xcc/0x110 [ 385.324862][ T9724] vprintk_emit+0x489/0x680 [ 385.324889][ T9724] ? printk_sprint+0x460/0x460 [ 385.324921][ T9724] _printk+0xcc/0x110 [ 385.324952][ T9724] ? load_image+0x3b0/0x3b0 [ 385.324981][ T9724] ? verify_lock_unused+0x140/0x140 [ 385.325011][ T9724] should_fail_ex+0x37a/0x4d0 [ 385.325042][ T9724] strncpy_from_user+0x32/0x350 [ 385.325066][ T9724] ? __set_printk_clr_event+0x70/0x70 [ 385.325098][ T9724] strncpy_from_user_nofault+0x6d/0x140 [ 385.325119][ T9724] bpf_probe_read_compat_str+0xdd/0x170 [ 385.325147][ T9724] bpf_prog_2d403b9db727cc7e+0x3d/0x41 [ 385.325166][ T9724] bpf_trace_run4+0x1f5/0x420 [ 385.325194][ T9724] ? bpf_trace_run4+0xf9/0x420 [ 385.325223][ T9724] ? bpf_trace_run3+0x400/0x400 [ 385.325253][ T9724] ? task_psi_group+0x50/0x1a0 [ 385.325294][ T9724] ? tracing_record_taskinfo_sched_switch+0x79/0x360 [ 385.325318][ T9724] ? __bpf_trace_sched_wakeup_template+0x10/0x10 [ 385.325338][ T9724] __traceiter_sched_switch+0x8f/0xc0 [ 385.325386][ T9724] __schedule+0x1d18/0x40b0 [ 385.325411][ T9724] ? kvm_sched_clock_read+0x14/0x40 [ 385.325428][ T9724] ? sched_clock_cpu+0x6e/0x250 [ 385.325451][ T9724] ? __sched_clock_gtod_offset+0xe0/0xe0 [ 385.325477][ T9724] ? __sched_text_start+0x8/0x8 [ 385.325498][ T9724] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 385.325526][ T9724] ? lock_chain_count+0x20/0x20 [ 385.325556][ T9724] ? __irq_exit_rcu+0x13b/0x220 [ 385.325588][ T9724] schedule+0xb9/0x180 [ 385.325609][ T9724] exit_to_user_mode_loop+0x47/0x110 [ 385.325636][ T9724] exit_to_user_mode_prepare+0xee/0x180 [ 385.325664][ T9724] irqentry_exit_to_user_mode+0x5/0x30 [ 385.325691][ T9724] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 385.325713][ T9724] RIP: 0033:0x7fbb0eba9c60 [ 385.325728][ T9724] Code: 44 89 c1 23 48 0c 48 8d 0c 88 8b 14 11 85 d2 74 0a 23 70 10 48 8d 04 b0 8b 3c 10 89 f8 c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 89 1f 48 89 e8 64 48 33 04 25 30 00 00 00 48 c1 c0 11 48 89 47 [ 385.325745][ T9724] RSP: 002b:00007fbb0fac6058 EFLAGS: 00000246 [ 385.325759][ T9724] RAX: 00007fbb0fac66c0 RBX: 0000000000000008 RCX: 0000000000000000 [ 385.325772][ T9724] RDX: 00007fbb0fac6090 RSI: 0000000000000000 RDI: 00007fbb0fac6588 [ 385.325784][ T9724] RBP: 00007fbb0fac6090 R08: 0000000000000000 R09: 00007fbb0fac5df7 [ 385.325797][ T9724] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 385.325809][ T9724] R13: 00007fbb0ede6038 R14: 00007fbb0ede5fa0 R15: 00007ffc7dec65e8 [ 385.325831][ T9724] [ 386.452128][ T9724] CPU: 1 PID: 9724 Comm: syz.2.2144 Not tainted syzkaller #0 [ 386.459503][ T9724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 386.469564][ T9724] Call Trace: [ 386.472934][ T9724] [ 386.475870][ T9724] dump_stack_lvl+0x168/0x22e [ 386.480565][ T9724] ? show_regs_print_info+0x12/0x12 [ 386.485768][ T9724] ? load_image+0x3b0/0x3b0 [ 386.490290][ T9724] ? verify_lock_unused+0x140/0x140 [ 386.495501][ T9724] should_fail_ex+0x399/0x4d0 [ 386.500199][ T9724] strncpy_from_user+0x32/0x350 [ 386.505058][ T9724] ? __set_printk_clr_event+0x70/0x70 [ 386.510444][ T9724] strncpy_from_user_nofault+0x6d/0x140 [ 386.516002][ T9724] bpf_probe_read_compat_str+0xdd/0x170 [ 386.521568][ T9724] bpf_prog_2d403b9db727cc7e+0x3d/0x41 [ 386.527034][ T9724] bpf_trace_run4+0x1f5/0x420 [ 386.531728][ T9724] ? bpf_trace_run4+0xf9/0x420 [ 386.536503][ T9724] ? bpf_trace_run3+0x400/0x400 [ 386.541372][ T9724] ? task_psi_group+0x50/0x1a0 [ 386.546152][ T9724] ? tracing_record_taskinfo_sched_switch+0x79/0x360 [ 386.552835][ T9724] ? __bpf_trace_sched_wakeup_template+0x10/0x10 [ 386.559169][ T9724] __traceiter_sched_switch+0x8f/0xc0 [ 386.564558][ T9724] __schedule+0x1d18/0x40b0 [ 386.569072][ T9724] ? kvm_sched_clock_read+0x14/0x40 [ 386.574269][ T9724] ? sched_clock_cpu+0x6e/0x250 [ 386.579131][ T9724] ? __sched_clock_gtod_offset+0xe0/0xe0 [ 386.584772][ T9724] ? __sched_text_start+0x8/0x8 [ 386.589626][ T9724] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 386.595615][ T9724] ? lock_chain_count+0x20/0x20 [ 386.600478][ T9724] ? __irq_exit_rcu+0x13b/0x220 [ 386.605347][ T9724] schedule+0xb9/0x180 [ 386.609429][ T9724] exit_to_user_mode_loop+0x47/0x110 [ 386.614731][ T9724] exit_to_user_mode_prepare+0xee/0x180 [ 386.620289][ T9724] irqentry_exit_to_user_mode+0x5/0x30 [ 386.625761][ T9724] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 386.631750][ T9724] RIP: 0033:0x7fbb0eba9c60 [ 386.636174][ T9724] Code: 44 89 c1 23 48 0c 48 8d 0c 88 8b 14 11 85 d2 74 0a 23 70 10 48 8d 04 b0 8b 3c 10 89 f8 c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 89 1f 48 89 e8 64 48 33 04 25 30 00 00 00 48 c1 c0 11 48 89 47 [ 386.655786][ T9724] RSP: 002b:00007fbb0fac6058 EFLAGS: 00000246 [ 386.661858][ T9724] RAX: 00007fbb0fac66c0 RBX: 0000000000000008 RCX: 0000000000000000 [ 386.669834][ T9724] RDX: 00007fbb0fac6090 RSI: 0000000000000000 RDI: 00007fbb0fac6588 [ 386.677808][ T9724] RBP: 00007fbb0fac6090 R08: 0000000000000000 R09: 00007fbb0fac5df7 [ 386.685782][ T9724] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 386.693774][ T9724] R13: 00007fbb0ede6038 R14: 00007fbb0ede5fa0 R15: 00007ffc7dec65e8 [ 386.701757][ T9724] [ 386.811668][ T9731] IPv6: Can't replace route, no match found [ 387.905420][ T9724] ------------[ cut here ]------------ [ 387.911036][ T9724] WARNING: CPU: 0 PID: 9724 at kernel/events/core.c:6592 perf_pending_task+0x358/0x470 [ 387.920845][ T9724] Modules linked in: [ 387.924768][ T9724] CPU: 0 PID: 9724 Comm: syz.2.2144 Not tainted syzkaller #0 [ 387.932182][ T9724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 387.942338][ T9724] RIP: 0010:perf_pending_task+0x358/0x470 [ 387.948193][ T9724] Code: ff 84 db 75 14 e8 b8 d1 da ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 a4 d1 da ff e8 f7 7b 5a ff eb e5 e8 98 d1 da ff <0f> 0b e9 f3 fe ff ff e8 8c d1 da ff 48 c7 c7 d0 03 bc 8c 4c 89 f6 [ 387.968260][ T9724] RSP: 0018:ffffc9000d8ef900 EFLAGS: 00010293 [ 387.974375][ T9724] RAX: ffffffff81a604c8 RBX: ffff88805708fc58 RCX: ffff8880500d0000 [ 387.982443][ T9724] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 387.990486][ T9724] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed100a01a141 [ 387.998548][ T9724] R10: ffffed100a01a141 R11: 1ffff1100a01a140 R12: ffff8880500d0000 [ 388.006563][ T9724] R13: ffff888056177960 R14: ffff88805708fa20 R15: 1ffff1100ae11f44 [ 388.014602][ T9724] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 388.023613][ T9724] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 388.030272][ T9724] CR2: 000000000000000b CR3: 000000005f1c2000 CR4: 00000000003506f0 [ 388.038306][ T9724] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 388.046309][ T9724] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 388.054358][ T9724] Call Trace: [ 388.057711][ T9724] [ 388.060996][ T9724] task_work_run+0x1ca/0x250 [ 388.065697][ T9724] ? task_work_cancel+0x230/0x230 [ 388.070798][ T9724] ? do_raw_spin_unlock+0x11d/0x230 [ 388.076045][ T9724] do_exit+0x93e/0x2400 [ 388.080293][ T9724] ? lock_chain_count+0x20/0x20 [ 388.085182][ T9724] ? put_task_struct+0x80/0x80 [ 388.090030][ T9724] ? trace_hardirqs_off_finish+0x86/0x180 [ 388.095793][ T9724] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 388.102043][ T9724] do_group_exit+0x217/0x2d0 [ 388.106677][ T9724] ? _raw_spin_unlock_irq+0x25/0x40 [ 388.111989][ T9724] get_signal+0x1272/0x1350 [ 388.116554][ T9724] ? fpu__clear_user_states+0x36/0x260 [ 388.122118][ T9724] arch_do_signal_or_restart+0xb7/0x1240 [ 388.127857][ T9724] ? perf_trace_preemptirq_template+0x287/0x330 [ 388.134142][ T9724] ? irqentry_enter+0x33/0x50 [ 388.138903][ T9724] ? trace_event_raw_event_preemptirq_template+0x1d0/0x1d0 [ 388.146141][ T9724] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 388.151949][ T9724] ? get_sigframe_size+0x10/0x10 [ 388.156979][ T9724] ? lock_chain_count+0x20/0x20 [ 388.161886][ T9724] ? rcu_is_watching+0x11/0xa0 [ 388.167049][ T9724] exit_to_user_mode_loop+0x70/0x110 [ 388.172390][ T9724] exit_to_user_mode_prepare+0xee/0x180 [ 388.178062][ T9724] syscall_exit_to_user_mode+0x16/0x40 [ 388.183566][ T9724] do_syscall_64+0x58/0xa0 [ 388.188065][ T9724] ? clear_bhb_loop+0x60/0xb0 [ 388.192776][ T9724] ? clear_bhb_loop+0x60/0xb0 [ 388.197518][ T9724] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 388.203447][ T9724] RIP: 0033:0x7fbb0ebb7e00 [ 388.207930][ T9724] Code: Unable to access opcode bytes at 0x7fbb0ebb7dd6. [ 388.214971][ T9724] RSP: 002b:00007fbb0fac4c78 EFLAGS: 00000283 [ 388.221117][ T9724] RAX: 0000000000000000 RBX: 00007fbb0fac5d30 RCX: 00007fbb0eda8120 [ 388.229155][ T9724] RDX: 00007fbb0fac4c80 RSI: 00007fbb0fac4db0 RDI: 0000000000000021 [ 388.237241][ T9724] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000 [ 388.245249][ T9724] R10: 00000000ffffffff R11: 0000000000000000 R12: 0000000000000073 [ 388.253297][ T9724] R13: 00007fbb0fac5eb0 R14: 9999999999999999 R15: 0000000000000000 [ 388.261509][ T9724] [ 388.264578][ T9724] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 388.271902][ T9724] CPU: 0 PID: 9724 Comm: syz.2.2144 Not tainted syzkaller #0 [ 388.279296][ T9724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 388.289377][ T9724] Call Trace: [ 388.292686][ T9724] [ 388.295638][ T9724] dump_stack_lvl+0x168/0x22e [ 388.300352][ T9724] ? memcpy+0x3c/0x60 [ 388.304369][ T9724] ? show_regs_print_info+0x12/0x12 [ 388.309599][ T9724] ? load_image+0x3b0/0x3b0 [ 388.314151][ T9724] panic+0x2c9/0x710 [ 388.318082][ T9724] ? bpf_jit_dump+0xd0/0xd0 [ 388.322642][ T9724] __warn+0x2f8/0x4f0 [ 388.326653][ T9724] ? perf_pending_task+0x358/0x470 [ 388.331798][ T9724] ? perf_pending_task+0x358/0x470 [ 388.336955][ T9724] report_bug+0x2ba/0x4f0 [ 388.341312][ T9724] ? perf_pending_task+0x358/0x470 [ 388.346454][ T9724] handle_bug+0x3a/0x70 [ 388.350646][ T9724] exc_invalid_op+0x16/0x40 [ 388.355207][ T9724] asm_exc_invalid_op+0x16/0x20 [ 388.360093][ T9724] RIP: 0010:perf_pending_task+0x358/0x470 [ 388.365844][ T9724] Code: ff 84 db 75 14 e8 b8 d1 da ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 a4 d1 da ff e8 f7 7b 5a ff eb e5 e8 98 d1 da ff <0f> 0b e9 f3 fe ff ff e8 8c d1 da ff 48 c7 c7 d0 03 bc 8c 4c 89 f6 [ 388.385484][ T9724] RSP: 0018:ffffc9000d8ef900 EFLAGS: 00010293 [ 388.391587][ T9724] RAX: ffffffff81a604c8 RBX: ffff88805708fc58 RCX: ffff8880500d0000 [ 388.399591][ T9724] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 388.407586][ T9724] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed100a01a141 [ 388.415583][ T9724] R10: ffffed100a01a141 R11: 1ffff1100a01a140 R12: ffff8880500d0000 [ 388.423627][ T9724] R13: ffff888056177960 R14: ffff88805708fa20 R15: 1ffff1100ae11f44 [ 388.431632][ T9724] ? perf_pending_task+0x358/0x470 [ 388.436780][ T9724] task_work_run+0x1ca/0x250 [ 388.441404][ T9724] ? task_work_cancel+0x230/0x230 [ 388.446467][ T9724] ? do_raw_spin_unlock+0x11d/0x230 [ 388.451711][ T9724] do_exit+0x93e/0x2400 [ 388.455904][ T9724] ? lock_chain_count+0x20/0x20 [ 388.460781][ T9724] ? put_task_struct+0x80/0x80 [ 388.465575][ T9724] ? trace_hardirqs_off_finish+0x86/0x180 [ 388.471343][ T9724] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 388.477538][ T9724] do_group_exit+0x217/0x2d0 [ 388.482175][ T9724] ? _raw_spin_unlock_irq+0x25/0x40 [ 388.487409][ T9724] get_signal+0x1272/0x1350 [ 388.491958][ T9724] ? fpu__clear_user_states+0x36/0x260 [ 388.497447][ T9724] arch_do_signal_or_restart+0xb7/0x1240 [ 388.503131][ T9724] ? perf_trace_preemptirq_template+0x287/0x330 [ 388.509413][ T9724] ? irqentry_enter+0x33/0x50 [ 388.514135][ T9724] ? trace_event_raw_event_preemptirq_template+0x1d0/0x1d0 [ 388.521371][ T9724] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 388.527309][ T9724] ? get_sigframe_size+0x10/0x10 [ 388.532277][ T9724] ? lock_chain_count+0x20/0x20 [ 388.537164][ T9724] ? rcu_is_watching+0x11/0xa0 [ 388.542022][ T9724] exit_to_user_mode_loop+0x70/0x110 [ 388.547350][ T9724] exit_to_user_mode_prepare+0xee/0x180 [ 388.552932][ T9724] syscall_exit_to_user_mode+0x16/0x40 [ 388.558425][ T9724] do_syscall_64+0x58/0xa0 [ 388.562875][ T9724] ? clear_bhb_loop+0x60/0xb0 [ 388.567579][ T9724] ? clear_bhb_loop+0x60/0xb0 [ 388.572282][ T9724] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 388.578203][ T9724] RIP: 0033:0x7fbb0ebb7e00 [ 388.582641][ T9724] Code: Unable to access opcode bytes at 0x7fbb0ebb7dd6. [ 388.589679][ T9724] RSP: 002b:00007fbb0fac4c78 EFLAGS: 00000283 [ 388.595771][ T9724] RAX: 0000000000000000 RBX: 00007fbb0fac5d30 RCX: 00007fbb0eda8120 [ 388.603763][ T9724] RDX: 00007fbb0fac4c80 RSI: 00007fbb0fac4db0 RDI: 0000000000000021 [ 388.611757][ T9724] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000 [ 388.619756][ T9724] R10: 00000000ffffffff R11: 0000000000000000 R12: 0000000000000073 [ 388.627750][ T9724] R13: 00007fbb0fac5eb0 R14: 9999999999999999 R15: 0000000000000000 [ 388.635775][ T9724] [ 388.639152][ T9724] Kernel Offset: disabled [ 388.643486][ T9724] Rebooting in 86400 seconds..