last executing test programs: 19.72430363s ago: executing program 2 (id=1883): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x77, 0xfffffffffffffe2b, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) close(0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='cpu==0||!') r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0ff10"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1d38}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 18.752084847s ago: executing program 1 (id=1887): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (rerun: 32) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000440)=ANY=[@ANYRESOCT=r0, @ANYRES64=r1], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async, rerun: 64) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) (rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200080000ec00000000000000000085000000230000009500000000000000f2c0c2c8cb4616670bea6baa90230498"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, 0x0}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000a0850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4}, 0xc) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x0, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x4000}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast}) 18.323365672s ago: executing program 2 (id=1889): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x13, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[], 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7d, '\x00', 0x0, @fallback=0x12, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r4], 0x12) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xfffffffffffffffc}, 0x839, 0x0, 0x0, 0x2, 0x9, 0x6, 0x0, 0x0, 0x8000000, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000340)='devices.allow\x00', 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="33fe00004a00530c", @ANYRESHEX=0x0], 0xfe33) r7 = openat$cgroup_int(r5, &(0x7f0000000800)='cpuset.mems\x00', 0x2, 0x0) r8 = openat$cgroup_procs(r5, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000380), 0x12) write$cgroup_int(r7, &(0x7f0000000040), 0x1) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b9040220087c06007c06e8fe55a1bc0015400600142603600e120800060000000201a80016000800014003e01100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) 18.315187263s ago: executing program 1 (id=1890): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000000701000000ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x8004}, 0x94) 18.083991606s ago: executing program 3 (id=1893): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061110800000000000600002619000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="97d9deabea352018000000000000006761110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1, 0x2b4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000008c0), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = syz_clone(0x800, 0x0, 0x0, 0x0, &(0x7f0000000c00), 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$kcm(0x10, 0x100000000002, 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) r4 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x0, 0x480, 0x0, 0x0) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x35, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r5, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000000), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1400000000000000010000100100ad5d", @ANYRES32=r0, @ANYBLOB="000000001c00000000", @ANYRES32=r1, @ANYRES32=0xee00, @ANYBLOB], 0x98, 0x4}, 0x4000090) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000700)="b8b7f79c17953a4fde2279ec7ef413e23a709829788969ad86d77af11ab19f1ef07b2783ef602dd5975b6cfcc7b2fac21ee6dd15767377765e19021302fbe7f3dbf00d17c1052d8dd8af215230bea49a53741be3d18cdc4d635635223e9dd96ab3d7f80846aaf159807a53f24df27b0677b55f8e4f02e51b762fe40d84fdce7ea76a09b61c122fecc712f0", 0x8b}, {&(0x7f0000000240)="e1f5279ac88e2d2e9a64e5aa9a535ee70472456d2a63f305", 0x18}], 0x2, 0x0, 0x0, 0x4000}, 0x3500000020004804) 18.083640806s ago: executing program 1 (id=1894): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x31, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x106) r2 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x38}, 0x94) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x7}, 0x18852, 0x5, 0x43a1bd76, 0x7, 0x5, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(r2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x4000}, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0ff10"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1d38}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 17.914580586s ago: executing program 2 (id=1897): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x77, 0xfffffffffffffe2b, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) close(0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='cpu==0||!') r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0ff10"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1d38}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 17.741438636s ago: executing program 0 (id=1898): socket$kcm(0xa, 0x2, 0x3a) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_ext={0x1c, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000008c0)={0x5, 0x4, 0x2a, 0x37b}, 0x10, 0x11a81, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a00)}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xe, 0xdc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0xa, 0x3, 0x106) setsockopt$sock_attach_bpf(r2, 0x29, 0x1a, 0x0, 0x4) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000001c0)=r3, 0x4) sendmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000300009116144f782db44b904021d08000500142603600e120900210000000401a8001600a4000140060000f5036010fab94dcf4f0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e012dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5d00040000d6e4edef3d93452a92954b43370e970100"/216, 0xd8}], 0x1}, 0x0) 17.69272382s ago: executing program 1 (id=1899): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x77, 0xfffffffffffffe2b, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x31, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x106) r1 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x38}, 0x94) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x947, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x4000}, 0x0) socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xf4, 0x0, 0xfe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x3}, 0x6000, 0x0, 0x4, 0x6, 0x0, 0xa000000a, 0xfffc, 0x0, 0x5}, 0x0, 0xb, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0ff10"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1d38}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 17.489100612s ago: executing program 3 (id=1900): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1d38}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 17.368144019s ago: executing program 0 (id=1901): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x27, 0x9}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000580)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c", 0x28}], 0x1}, 0x8001) 16.952860133s ago: executing program 2 (id=1902): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000140)={'pim6reg\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000140)={'pim6reg\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10, 0x0}, 0x4000000) (async) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10, 0x0}, 0x4000000) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000000000}, 0x0, 0x0, 0x33e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) (async) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r2, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x27}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x4000001) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xd, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x115905, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r0, 0x1) (async) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xd, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x115905, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r0, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="1400000035000bfbd15a806c8c6f94f90924fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) 16.927834485s ago: executing program 0 (id=1903): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0xf, 0x0, 0x3, 0x80000001, 0x800000, 0x1, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, 0x0}, 0x8000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000e27f00000100000001000000", @ANYRES32, @ANYBLOB, @ANYRES32=r0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000200000000000000000000007e7b001685f5e24268d168bdb8a594d7c2a830dd2b4bb8ecf2ad4612fdeafc648e291d0186ca2a1b49380e9dfce9ef2d928df1eb412f52d387909f6a7d4cd5661d930609fa09f5fc9d6d9e1b38db89f36a00"/123], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00,M\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32], 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d08020a000000041296a1180002000000030000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 16.273812653s ago: executing program 3 (id=1904): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000000701000000ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x80ff}, 0x94) 16.241454395s ago: executing program 1 (id=1905): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x13, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[], 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7d, '\x00', 0x0, @fallback=0x12, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r4], 0x12) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xfffffffffffffffc}, 0x839, 0x0, 0x0, 0x2, 0x9, 0x6, 0x0, 0x0, 0x8000000, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000340)='devices.allow\x00', 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="33fe00004a00530c", @ANYRESHEX=0x0], 0xfe33) r7 = openat$cgroup_int(r5, &(0x7f0000000800)='cpuset.mems\x00', 0x2, 0x0) r8 = openat$cgroup_procs(r5, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000380), 0x12) write$cgroup_int(r7, &(0x7f0000000040), 0x1) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b9040220087c06007c06e8fe55a1bc0015400600142603600e120800060000000201a80016000800014003e01100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) 16.240682345s ago: executing program 0 (id=1906): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000154bd00850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) 16.160056159s ago: executing program 2 (id=1907): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x31, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x106) r2 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x38}, 0x94) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x7}, 0x18852, 0x5, 0x43a1bd76, 0x7, 0x5, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(r2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x4000}, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0ff10"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1d38}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 16.088259224s ago: executing program 3 (id=1908): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'netdevsim0\x00', @multicast}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000001d71185f000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'netdevsim0\x00', @multicast}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000001d71185f000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 16.061338655s ago: executing program 0 (id=1909): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061110800000000000600002619000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="97d9deabea352018000000000000006761110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1, 0x2b4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000008c0), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = syz_clone(0x800, 0x0, 0x0, 0x0, &(0x7f0000000c00), 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$kcm(0x10, 0x100000000002, 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) r4 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x0, 0x480, 0x0, 0x0) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x35, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r5, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000000), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1400000000000000010000100100ad5d", @ANYBLOB="000000001c0000000000", @ANYRES32=r1, @ANYRES32=0xee00, @ANYBLOB], 0x98, 0x4}, 0x4000090) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000700)="b8b7f79c17953a4fde2279ec7ef413e23a709829788969ad86d77af11ab19f1ef07b2783ef602dd5975b6cfcc7b2fac21ee6dd15767377765e19021302fbe7f3dbf00d17c1052d8dd8af215230bea49a53741be3d18cdc4d635635223e9dd96ab3d7f80846aaf159807a53f24df27b0677b55f8e4f02e51b762fe40d84fdce7ea76a09b61c122fecc712f0", 0x8b}, {&(0x7f0000000240)="e1f5279ac88e2d2e9a64e5aa9a535ee70472456d2a63f305", 0x18}], 0x2, 0x0, 0x0, 0x4000}, 0x3500000020004804) 15.920142664s ago: executing program 3 (id=1910): socket$kcm(0xa, 0x2, 0x3a) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_ext={0x1c, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000008c0)={0x5, 0x4, 0x2a, 0x37b}, 0x10, 0x11a81, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a00)}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xe, 0xdc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0xa, 0x3, 0x106) setsockopt$sock_attach_bpf(r2, 0x29, 0x1a, 0x0, 0x4) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000001c0)=r3, 0x4) sendmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000300009116144f782db44b904021d08000500142603600e120900210000000401a8001600a400014006000000036010fab94dcf4f0461c1d67f6f94f57134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e012dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5d00040000d6e4edef3d93452a92954b43370e970100"/216, 0xd8}], 0x1}, 0x0) 15.888609345s ago: executing program 1 (id=1911): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x77, 0xfffffffffffffe2b, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) close(0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xf4, 0x0, 0xfe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x3}, 0x6000, 0x0, 0x4, 0x6, 0x0, 0xa000000a, 0xfffc, 0x0, 0x5}, 0x0, 0xb, 0xffffffffffffffff, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0ff10"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1d38}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 15.841838458s ago: executing program 2 (id=1912): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x394}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x9, 0x10, 0x0, 0xb}, 0x94) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0xa2532, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) getpid() (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x2, 0x8}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000000000003c950000000000000000", @ANYRES32=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) (async) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c", 0xb}], 0x1}, 0x0) (async) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)}, 0x24000800) (async) socket$kcm(0x2b, 0x1, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'team_slave_1\x00', @random="000600"}) (async) socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000008c0)=r8, 0x4) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r10) 15.572715134s ago: executing program 0 (id=1913): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1d38}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 15.372061896s ago: executing program 3 (id=1914): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x77, 0xfffffffffffffe2b, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x31, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x106) r1 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x38}, 0x94) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x947, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x4000}, 0x0) socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xf4, 0x0, 0xfe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x3}, 0x6000, 0x0, 0x4, 0x6, 0x0, 0xa000000a, 0xfffc, 0x0, 0x5}, 0x0, 0xb, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0ff10"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1d38}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 318.410931ms ago: executing program 32 (id=1913): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1d38}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 238.835776ms ago: executing program 33 (id=1911): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x77, 0xfffffffffffffe2b, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) close(0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xf4, 0x0, 0xfe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x3}, 0x6000, 0x0, 0x4, 0x6, 0x0, 0xa000000a, 0xfffc, 0x0, 0x5}, 0x0, 0xb, 0xffffffffffffffff, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0ff10"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1d38}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 124.433653ms ago: executing program 34 (id=1912): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x394}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249f21c6eee84309e7a23c19a394830f2539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bfb1c0e6b1244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbb888b0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f94479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b844139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323478a9968100000005"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x9, 0x10, 0x0, 0xb}, 0x94) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0xa2532, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) getpid() (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x2, 0x8}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000000000003c950000000000000000", @ANYRES32=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) (async) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c", 0xb}], 0x1}, 0x0) (async) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)}, 0x24000800) (async) socket$kcm(0x2b, 0x1, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'team_slave_1\x00', @random="000600"}) (async) socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000008c0)=r8, 0x4) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r10) 0s ago: executing program 35 (id=1914): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x77, 0xfffffffffffffe2b, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x31, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x106) r1 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x38}, 0x94) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x947, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x4000}, 0x0) socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xf4, 0x0, 0xfe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x3}, 0x6000, 0x0, 0x4, 0x6, 0x0, 0xa000000a, 0xfffc, 0x0, 0x5}, 0x0, 0xb, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0ff10"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1d38}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): nd_write+0x250/0x250 [ 340.502443][ T9499] ? __fget_files+0x43d/0x4b0 [ 340.507180][ T9499] ? __fdget_pos+0x2a3/0x330 [ 340.512080][ T9499] ? ksys_write+0x75/0x260 [ 340.516580][ T9499] ksys_write+0x150/0x260 [ 340.521002][ T9499] ? __ia32_sys_read+0x90/0x90 [ 340.525831][ T9499] ? lockdep_hardirqs_on+0x98/0x150 [ 340.531085][ T9499] do_syscall_64+0x55/0xa0 [ 340.535554][ T9499] ? clear_bhb_loop+0x40/0x90 [ 340.540277][ T9499] ? clear_bhb_loop+0x40/0x90 [ 340.545007][ T9499] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 340.550945][ T9499] RIP: 0033:0x7f7a7fd9bf79 [ 340.555410][ T9499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.575129][ T9499] RSP: 002b:00007f7a80bce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 340.583619][ T9499] RAX: ffffffffffffffda RBX: 00007f7a80015fa0 RCX: 00007f7a7fd9bf79 [ 340.591650][ T9499] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000008 [ 340.599667][ T9499] RBP: 00007f7a80bce090 R08: 0000000000000000 R09: 0000000000000000 [ 340.607685][ T9499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 340.615701][ T9499] R13: 00007f7a80016038 R14: 00007f7a80015fa0 R15: 00007ffd25d6abb8 [ 340.623750][ T9499] [ 341.061545][ T9510] netlink: 'syz.0.1176': attribute type 10 has an invalid length. [ 341.260724][ T9510] team0: Port device hsr0 added [ 341.447477][ T9515] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1180'. [ 341.471542][ T9518] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1181'. [ 341.500611][ T9518] bridge_slave_1: default FDB implementation only supports local addresses [ 341.537825][ T9515] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 341.572405][ T9515] CPU: 0 PID: 9515 Comm: syz.2.1180 Not tainted syzkaller #0 [ 341.579958][ T9515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 341.590154][ T9515] Call Trace: [ 341.593485][ T9515] [ 341.596470][ T9515] dump_stack_lvl+0x18c/0x250 [ 341.601221][ T9515] ? show_regs_print_info+0x20/0x20 [ 341.606487][ T9515] ? load_image+0x400/0x400 [ 341.611149][ T9515] sysfs_warn_dup+0x8e/0xa0 [ 341.615725][ T9515] sysfs_do_create_link_sd+0xc0/0x110 [ 341.621177][ T9515] device_add_class_symlinks+0x1cf/0x240 [ 341.626877][ T9515] device_add+0x507/0xc20 [ 341.631260][ T9515] wiphy_register+0x1dad/0x2ae0 [ 341.636207][ T9515] ? cfg80211_event_work+0x40/0x40 [ 341.641366][ T9515] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 341.647605][ T9515] ieee80211_register_hw+0x3464/0x4250 [ 341.653140][ T9515] ? ieee80211_tasklet_handler+0x20/0x20 [ 341.658834][ T9515] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 341.664771][ T9515] ? __debug_object_init+0xec/0x450 [ 341.670015][ T9515] ? __asan_memset+0x22/0x40 [ 341.674677][ T9515] ? __hrtimer_init+0x186/0x270 [ 341.679589][ T9515] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 341.685568][ T9515] ? mac80211_hwsim_free+0x220/0x220 [ 341.690907][ T9515] ? rcu_is_watching+0x15/0xb0 [ 341.695722][ T9515] ? kstrndup+0xbd/0x140 [ 341.700027][ T9515] hwsim_new_radio_nl+0xdc9/0x1a90 [ 341.705197][ T9515] ? __nla_validate+0x50/0x50 [ 341.709933][ T9515] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 341.716316][ T9515] ? __nla_parse+0x40/0x50 [ 341.720794][ T9515] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 341.727188][ T9515] genl_family_rcv_msg_doit+0x211/0x310 [ 341.732808][ T9515] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 341.738755][ T9515] ? bpf_lsm_capable+0x9/0x10 [ 341.743473][ T9515] ? security_capable+0x89/0xb0 [ 341.748372][ T9515] genl_rcv_msg+0x619/0x7a0 [ 341.752927][ T9515] ? genl_bind+0x360/0x360 [ 341.757380][ T9515] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 341.763390][ T9515] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 341.769791][ T9515] ? ref_tracker_free+0x690/0x840 [ 341.774868][ T9515] netlink_rcv_skb+0x241/0x4d0 [ 341.779677][ T9515] ? genl_bind+0x360/0x360 [ 341.784143][ T9515] ? netlink_ack+0x1180/0x1180 [ 341.788960][ T9515] ? __lock_acquire+0x7d40/0x7d40 [ 341.794026][ T9515] ? down_read+0x1ac/0x2e0 [ 341.798490][ T9515] genl_rcv+0x28/0x40 [ 341.802515][ T9515] netlink_unicast+0x751/0x8d0 [ 341.807330][ T9515] netlink_sendmsg+0x8d0/0xbf0 [ 341.812146][ T9515] ? lockdep_hardirqs_on+0x98/0x150 [ 341.817384][ T9515] ? netlink_getsockopt+0x590/0x590 [ 341.822623][ T9515] ? aa_sock_msg_perm+0x94/0x150 [ 341.827610][ T9515] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 341.832940][ T9515] ? security_socket_sendmsg+0x80/0xa0 [ 341.838455][ T9515] ? netlink_getsockopt+0x590/0x590 [ 341.843712][ T9515] ____sys_sendmsg+0x5ba/0x960 [ 341.848528][ T9515] ? __asan_memset+0x22/0x40 [ 341.853171][ T9515] ? __sys_sendmsg_sock+0x30/0x30 [ 341.858235][ T9515] ? __import_iovec+0x5f2/0x850 [ 341.863151][ T9515] ? import_iovec+0x73/0xa0 [ 341.867702][ T9515] ___sys_sendmsg+0x2a6/0x360 [ 341.872423][ T9515] ? __sys_sendmsg+0x2a0/0x2a0 [ 341.877281][ T9515] __se_sys_sendmsg+0x1c2/0x2b0 [ 341.882183][ T9515] ? __x64_sys_sendmsg+0x80/0x80 [ 341.887173][ T9515] ? lockdep_hardirqs_on+0x98/0x150 [ 341.892405][ T9515] do_syscall_64+0x55/0xa0 [ 341.896920][ T9515] ? clear_bhb_loop+0x40/0x90 [ 341.901641][ T9515] ? clear_bhb_loop+0x40/0x90 [ 341.906444][ T9515] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 341.912377][ T9515] RIP: 0033:0x7ffac6f9bf79 [ 341.916982][ T9515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.936644][ T9515] RSP: 002b:00007ffac7e49028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.945181][ T9515] RAX: ffffffffffffffda RBX: 00007ffac7215fa0 RCX: 00007ffac6f9bf79 [ 341.953195][ T9515] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 341.961205][ T9515] RBP: 00007ffac70327e0 R08: 0000000000000000 R09: 0000000000000000 [ 341.969210][ T9515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 341.977307][ T9515] R13: 00007ffac7216038 R14: 00007ffac7215fa0 R15: 00007ffd336a1bd8 [ 341.985327][ T9515] [ 342.137949][ T9525] netlink: 'syz.0.1182': attribute type 10 has an invalid length. [ 342.157783][ T9525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.111813][ T9525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.139031][ T9525] batadv_slave_0: entered promiscuous mode [ 343.146308][ T9525] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 343.205529][ T9534] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1184'. [ 343.382511][ T9538] FAULT_INJECTION: forcing a failure. [ 343.382511][ T9538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.396296][ T9538] CPU: 0 PID: 9538 Comm: syz.2.1186 Not tainted syzkaller #0 [ 343.403737][ T9538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 343.413811][ T9538] Call Trace: [ 343.417139][ T9538] [ 343.420150][ T9538] dump_stack_lvl+0x18c/0x250 [ 343.424950][ T9538] ? show_regs_print_info+0x20/0x20 [ 343.430239][ T9538] ? load_image+0x400/0x400 [ 343.434790][ T9538] ? shmem_get_folio_gfp+0x138f/0x2aa0 [ 343.440306][ T9538] ? __lock_acquire+0x7d40/0x7d40 [ 343.445567][ T9538] ? __rwlock_init+0x150/0x150 [ 343.450417][ T9538] should_fail_ex+0x39d/0x4d0 [ 343.455170][ T9538] copy_page_from_iter_atomic+0x2a8/0x1580 [ 343.461036][ T9538] ? shmem_get_folio_gfp+0x26d8/0x2aa0 [ 343.466573][ T9538] ? iov_iter_zero+0x1170/0x1170 [ 343.471591][ T9538] ? shmem_write_begin+0x1cf/0x420 [ 343.476766][ T9538] generic_perform_write+0x353/0x5c0 [ 343.482129][ T9538] ? generic_file_direct_write+0x3e0/0x3e0 [ 343.487981][ T9538] ? down_write+0x16e/0x200 [ 343.492540][ T9538] ? file_update_time+0x98/0x1a0 [ 343.497516][ T9538] shmem_file_write_iter+0xfb/0x120 [ 343.502753][ T9538] vfs_write+0x46c/0x990 [ 343.507033][ T9538] ? file_end_write+0x250/0x250 [ 343.511931][ T9538] ? __fget_files+0x43d/0x4b0 [ 343.516659][ T9538] ? __fdget_pos+0x2a3/0x330 [ 343.521284][ T9538] ? ksys_write+0x75/0x260 [ 343.525738][ T9538] ksys_write+0x150/0x260 [ 343.530111][ T9538] ? __ia32_sys_read+0x90/0x90 [ 343.534925][ T9538] ? lockdep_hardirqs_on+0x98/0x150 [ 343.540169][ T9538] do_syscall_64+0x55/0xa0 [ 343.544622][ T9538] ? clear_bhb_loop+0x40/0x90 [ 343.549355][ T9538] ? clear_bhb_loop+0x40/0x90 [ 343.554072][ T9538] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 343.560005][ T9538] RIP: 0033:0x7ffac6f9bf79 [ 343.564458][ T9538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.584094][ T9538] RSP: 002b:00007ffac7e49028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 343.592555][ T9538] RAX: ffffffffffffffda RBX: 00007ffac7215fa0 RCX: 00007ffac6f9bf79 [ 343.600561][ T9538] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000008 [ 343.608566][ T9538] RBP: 00007ffac7e49090 R08: 0000000000000000 R09: 0000000000000000 [ 343.616568][ T9538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 343.624569][ T9538] R13: 00007ffac7216038 R14: 00007ffac7215fa0 R15: 00007ffd336a1bd8 [ 343.632594][ T9538] [ 345.148304][ T9558] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.1195'. [ 345.260740][ T9558] netlink: 'syz.0.1195': attribute type 4 has an invalid length. [ 345.296154][ T9558] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1195'. [ 346.000472][ T9558] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 346.036480][ T9562] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1196'. [ 346.165246][ T9567] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 346.327806][ T9571] FAULT_INJECTION: forcing a failure. [ 346.327806][ T9571] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 346.361295][ T9571] CPU: 0 PID: 9571 Comm: syz.1.1199 Not tainted syzkaller #0 [ 346.368775][ T9571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 346.378886][ T9571] Call Trace: [ 346.382304][ T9571] [ 346.385284][ T9571] dump_stack_lvl+0x18c/0x250 [ 346.390027][ T9571] ? show_regs_print_info+0x20/0x20 [ 346.395286][ T9571] ? load_image+0x400/0x400 [ 346.399850][ T9571] ? __lock_acquire+0x7d40/0x7d40 [ 346.405065][ T9571] should_fail_ex+0x39d/0x4d0 [ 346.409828][ T9571] prepare_alloc_pages+0x1e2/0x5f0 [ 346.414999][ T9571] __alloc_pages+0x134/0x460 [ 346.419635][ T9571] ? zone_statistics+0x170/0x170 [ 346.424625][ T9571] ? __dquot_alloc_space+0x27d/0xe80 [ 346.429980][ T9571] __folio_alloc+0x10/0x20 [ 346.434444][ T9571] vma_alloc_folio+0x47a/0x8f0 [ 346.439266][ T9571] ? mpol_shared_policy_lookup+0x14b/0x1e0 [ 346.445232][ T9571] shmem_alloc_folio+0x1a9/0x2a0 [ 346.450340][ T9571] ? folio_put+0xd0/0xd0 [ 346.454651][ T9571] ? __vm_enough_memory+0x11b/0x370 [ 346.459892][ T9571] ? shmem_inode_acct_block+0x35e/0x460 [ 346.465485][ T9571] shmem_alloc_and_acct_folio+0x1e6/0x6d0 [ 346.471259][ T9571] ? put_swap_device+0x230/0x230 [ 346.476252][ T9571] ? xas_load+0x12b/0x140 [ 346.480626][ T9571] ? filemap_get_entry+0xce/0x3f0 [ 346.485681][ T9571] ? filemap_get_entry+0xce/0x3f0 [ 346.490737][ T9571] ? filemap_get_entry+0x379/0x3f0 [ 346.495886][ T9571] ? page_cache_prev_miss+0x390/0x390 [ 346.501280][ T9571] ? mark_lock+0x94/0x320 [ 346.505646][ T9571] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 346.511687][ T9571] ? lock_chain_count+0x20/0x20 [ 346.516580][ T9571] shmem_get_folio_gfp+0xcde/0x2aa0 [ 346.521854][ T9571] shmem_write_begin+0xf2/0x420 [ 346.526772][ T9571] generic_perform_write+0x2fe/0x5c0 [ 346.532113][ T9571] ? generic_file_direct_write+0x3e0/0x3e0 [ 346.537965][ T9571] ? file_update_time+0x192/0x1a0 [ 346.543046][ T9571] shmem_file_write_iter+0xfb/0x120 [ 346.548278][ T9571] vfs_write+0x46c/0x990 [ 346.552657][ T9571] ? file_end_write+0x250/0x250 [ 346.557543][ T9571] ? __fget_files+0x43d/0x4b0 [ 346.562262][ T9571] ? __fdget_pos+0x2a3/0x330 [ 346.566879][ T9571] ? ksys_write+0x75/0x260 [ 346.571333][ T9571] ksys_write+0x150/0x260 [ 346.575700][ T9571] ? __ia32_sys_read+0x90/0x90 [ 346.580560][ T9571] ? lockdep_hardirqs_on+0x98/0x150 [ 346.585807][ T9571] do_syscall_64+0x55/0xa0 [ 346.590287][ T9571] ? clear_bhb_loop+0x40/0x90 [ 346.595002][ T9571] ? clear_bhb_loop+0x40/0x90 [ 346.599723][ T9571] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 346.606171][ T9571] RIP: 0033:0x7f7a7fd9bf79 [ 346.610702][ T9571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.630441][ T9571] RSP: 002b:00007f7a80bce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 346.638996][ T9571] RAX: ffffffffffffffda RBX: 00007f7a80015fa0 RCX: 00007f7a7fd9bf79 [ 346.647042][ T9571] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000008 [ 346.655061][ T9571] RBP: 00007f7a80bce090 R08: 0000000000000000 R09: 0000000000000000 [ 346.663077][ T9571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 346.671092][ T9571] R13: 00007f7a80016038 R14: 00007f7a80015fa0 R15: 00007ffd25d6abb8 [ 346.679129][ T9571] [ 349.156208][ T5778] Bluetooth: hci2: unexpected event 0x07 length: 15 < 255 [ 349.182020][ T9605] netlink: 'syz.0.1209': attribute type 21 has an invalid length. [ 349.301195][ T9607] FAULT_INJECTION: forcing a failure. [ 349.301195][ T9607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.325934][ T9607] CPU: 0 PID: 9607 Comm: syz.1.1210 Not tainted syzkaller #0 [ 349.333407][ T9607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 349.343513][ T9607] Call Trace: [ 349.346833][ T9607] [ 349.349808][ T9607] dump_stack_lvl+0x18c/0x250 [ 349.354545][ T9607] ? show_regs_print_info+0x20/0x20 [ 349.359782][ T9607] ? load_image+0x400/0x400 [ 349.364412][ T9607] ? shmem_get_folio_gfp+0x138f/0x2aa0 [ 349.369918][ T9607] ? __lock_acquire+0x7d40/0x7d40 [ 349.374993][ T9607] ? __rwlock_init+0x150/0x150 [ 349.379793][ T9607] should_fail_ex+0x39d/0x4d0 [ 349.384518][ T9607] copy_page_from_iter_atomic+0x2a8/0x1580 [ 349.390366][ T9607] ? shmem_get_folio_gfp+0x26d8/0x2aa0 [ 349.395880][ T9607] ? iov_iter_zero+0x1170/0x1170 [ 349.400911][ T9607] ? shmem_write_begin+0x1cf/0x420 [ 349.406080][ T9607] generic_perform_write+0x353/0x5c0 [ 349.411455][ T9607] ? generic_file_direct_write+0x3e0/0x3e0 [ 349.417315][ T9607] ? file_update_time+0x192/0x1a0 [ 349.422377][ T9607] shmem_file_write_iter+0xfb/0x120 [ 349.427626][ T9607] vfs_write+0x46c/0x990 [ 349.431937][ T9607] ? file_end_write+0x250/0x250 [ 349.436856][ T9607] ? __fget_files+0x43d/0x4b0 [ 349.441593][ T9607] ? __fdget_pos+0x2a3/0x330 [ 349.446230][ T9607] ? ksys_write+0x75/0x260 [ 349.450698][ T9607] ksys_write+0x150/0x260 [ 349.455099][ T9607] ? __ia32_sys_read+0x90/0x90 [ 349.459921][ T9607] ? lockdep_hardirqs_on+0x98/0x150 [ 349.465172][ T9607] do_syscall_64+0x55/0xa0 [ 349.469652][ T9607] ? clear_bhb_loop+0x40/0x90 [ 349.474380][ T9607] ? clear_bhb_loop+0x40/0x90 [ 349.479103][ T9607] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 349.485041][ T9607] RIP: 0033:0x7f7a7fd9bf79 [ 349.489496][ T9607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.509225][ T9607] RSP: 002b:00007f7a80bce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 349.517680][ T9607] RAX: ffffffffffffffda RBX: 00007f7a80015fa0 RCX: 00007f7a7fd9bf79 [ 349.525679][ T9607] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000008 [ 349.533684][ T9607] RBP: 00007f7a80bce090 R08: 0000000000000000 R09: 0000000000000000 [ 349.541739][ T9607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 349.549735][ T9607] R13: 00007f7a80016038 R14: 00007f7a80015fa0 R15: 00007ffd25d6abb8 [ 349.557756][ T9607] [ 349.899969][ T9617] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1214'. [ 350.964716][ T5778] Bluetooth: hci2: unexpected event 0x07 length: 15 < 255 [ 351.066410][ T9637] FAULT_INJECTION: forcing a failure. [ 351.066410][ T9637] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 351.081876][ T9637] CPU: 1 PID: 9637 Comm: syz.1.1222 Not tainted syzkaller #0 [ 351.089321][ T9637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 351.099417][ T9637] Call Trace: [ 351.102734][ T9637] [ 351.105707][ T9637] dump_stack_lvl+0x18c/0x250 [ 351.110448][ T9637] ? show_regs_print_info+0x20/0x20 [ 351.115698][ T9637] ? load_image+0x400/0x400 [ 351.120252][ T9637] ? __lock_acquire+0x7d40/0x7d40 [ 351.125334][ T9637] should_fail_ex+0x39d/0x4d0 [ 351.130075][ T9637] prepare_alloc_pages+0x1e2/0x5f0 [ 351.135250][ T9637] __alloc_pages+0x134/0x460 [ 351.139894][ T9637] ? zone_statistics+0x170/0x170 [ 351.144901][ T9637] ? lock_chain_count+0x20/0x20 [ 351.149806][ T9637] __folio_alloc+0x10/0x20 [ 351.154267][ T9637] vma_alloc_folio+0x47a/0x8f0 [ 351.159149][ T9637] ? mpol_shared_policy_lookup+0x14b/0x1e0 [ 351.165018][ T9637] shmem_alloc_folio+0x1a9/0x2a0 [ 351.170010][ T9637] ? percpu_counter_add_batch+0x24f/0x2a0 [ 351.175796][ T9637] ? folio_put+0xd0/0xd0 [ 351.180082][ T9637] ? percpu_counter_add_batch+0x259/0x2a0 [ 351.185878][ T9637] ? __vm_enough_memory+0x11b/0x370 [ 351.191139][ T9637] ? shmem_inode_acct_block+0x35e/0x460 [ 351.196731][ T9637] shmem_alloc_and_acct_folio+0x1e6/0x6d0 [ 351.202505][ T9637] ? put_swap_device+0x230/0x230 [ 351.207496][ T9637] ? xas_load+0x12b/0x140 [ 351.211872][ T9637] ? filemap_get_entry+0xce/0x3f0 [ 351.216945][ T9637] ? filemap_get_entry+0xce/0x3f0 [ 351.222027][ T9637] ? filemap_get_entry+0x379/0x3f0 [ 351.227196][ T9637] ? page_cache_prev_miss+0x390/0x390 [ 351.232616][ T9637] ? mark_lock+0x94/0x320 [ 351.236999][ T9637] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 351.243026][ T9637] ? lock_chain_count+0x20/0x20 [ 351.247927][ T9637] shmem_get_folio_gfp+0xcde/0x2aa0 [ 351.253244][ T9637] shmem_write_begin+0xf2/0x420 [ 351.258155][ T9637] generic_perform_write+0x2fe/0x5c0 [ 351.263509][ T9637] ? generic_file_direct_write+0x3e0/0x3e0 [ 351.269386][ T9637] ? file_update_time+0x192/0x1a0 [ 351.274474][ T9637] shmem_file_write_iter+0xfb/0x120 [ 351.279730][ T9637] vfs_write+0x46c/0x990 [ 351.284033][ T9637] ? file_end_write+0x250/0x250 [ 351.288949][ T9637] ? __fget_files+0x43d/0x4b0 [ 351.293687][ T9637] ? __fdget_pos+0x2a3/0x330 [ 351.298328][ T9637] ? ksys_write+0x75/0x260 [ 351.302800][ T9637] ksys_write+0x150/0x260 [ 351.307195][ T9637] ? __ia32_sys_read+0x90/0x90 [ 351.312008][ T9637] ? __x64_sys_write+0x1d/0x90 [ 351.316823][ T9637] ? __sanitizer_cov_trace_pc+0x5c/0x60 [ 351.322419][ T9637] do_syscall_64+0x55/0xa0 [ 351.326888][ T9637] ? clear_bhb_loop+0x40/0x90 [ 351.331613][ T9637] ? clear_bhb_loop+0x40/0x90 [ 351.336368][ T9637] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 351.342309][ T9637] RIP: 0033:0x7f7a7fd9bf79 [ 351.346767][ T9637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.366465][ T9637] RSP: 002b:00007f7a80bce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 351.374939][ T9637] RAX: ffffffffffffffda RBX: 00007f7a80015fa0 RCX: 00007f7a7fd9bf79 [ 351.382968][ T9637] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000008 [ 351.390990][ T9637] RBP: 00007f7a80bce090 R08: 0000000000000000 R09: 0000000000000000 [ 351.399094][ T9637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 351.407110][ T9637] R13: 00007f7a80016038 R14: 00007f7a80015fa0 R15: 00007ffd25d6abb8 [ 351.415165][ T9637] [ 351.483815][ T9641] netlink: 'syz.0.1220': attribute type 21 has an invalid length. [ 352.163768][ T9658] FAULT_INJECTION: forcing a failure. [ 352.163768][ T9658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.191560][ T9658] CPU: 0 PID: 9658 Comm: syz.3.1230 Not tainted syzkaller #0 [ 352.199118][ T9658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 352.209328][ T9658] Call Trace: [ 352.212747][ T9658] [ 352.215827][ T9658] dump_stack_lvl+0x18c/0x250 [ 352.220719][ T9658] ? show_regs_print_info+0x20/0x20 [ 352.226091][ T9658] ? load_image+0x400/0x400 [ 352.230794][ T9658] ? __might_fault+0xaa/0x120 [ 352.235637][ T9658] ? __lock_acquire+0x7d40/0x7d40 [ 352.240878][ T9658] should_fail_ex+0x39d/0x4d0 [ 352.245776][ T9658] _copy_from_user+0x2f/0xe0 [ 352.250547][ T9658] ___sys_sendmsg+0x1c7/0x360 [ 352.255364][ T9658] ? get_pid_task+0x20/0x1e0 [ 352.260169][ T9658] ? __sys_sendmsg+0x2a0/0x2a0 [ 352.265333][ T9658] ? __lock_acquire+0x7d40/0x7d40 [ 352.270808][ T9658] __se_sys_sendmsg+0x1c2/0x2b0 [ 352.275846][ T9658] ? __x64_sys_sendmsg+0x80/0x80 [ 352.281137][ T9658] ? lockdep_hardirqs_on+0x98/0x150 [ 352.286534][ T9658] do_syscall_64+0x55/0xa0 [ 352.291099][ T9658] ? clear_bhb_loop+0x40/0x90 [ 352.295933][ T9658] ? clear_bhb_loop+0x40/0x90 [ 352.300799][ T9658] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 352.306845][ T9658] RIP: 0033:0x7f76b9d9bf79 [ 352.311567][ T9658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.331331][ T9658] RSP: 002b:00007f76babbb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.339969][ T9658] RAX: ffffffffffffffda RBX: 00007f76ba015fa0 RCX: 00007f76b9d9bf79 [ 352.348100][ T9658] RDX: 0000000004008040 RSI: 0000200000000a00 RDI: 0000000000000005 [ 352.356222][ T9658] RBP: 00007f76babbb090 R08: 0000000000000000 R09: 0000000000000000 [ 352.364381][ T9658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.372495][ T9658] R13: 00007f76ba016038 R14: 00007f76ba015fa0 R15: 00007fff08c174f8 [ 352.380800][ T9658] [ 352.473578][ T9660] FAULT_INJECTION: forcing a failure. [ 352.473578][ T9660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.487231][ T9660] CPU: 1 PID: 9660 Comm: syz.0.1231 Not tainted syzkaller #0 [ 352.494672][ T9660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 352.504787][ T9660] Call Trace: [ 352.508566][ T9660] [ 352.511538][ T9660] dump_stack_lvl+0x18c/0x250 [ 352.516277][ T9660] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 352.522493][ T9660] ? show_regs_print_info+0x20/0x20 [ 352.527745][ T9660] ? load_image+0x400/0x400 [ 352.532309][ T9660] should_fail_ex+0x39d/0x4d0 [ 352.537047][ T9660] copy_page_from_iter_atomic+0x2a8/0x1580 [ 352.542925][ T9660] ? shmem_get_folio_gfp+0x26d8/0x2aa0 [ 352.548455][ T9660] ? iov_iter_zero+0x1170/0x1170 [ 352.553457][ T9660] ? shmem_write_begin+0x1cf/0x420 [ 352.558616][ T9660] generic_perform_write+0x353/0x5c0 [ 352.563966][ T9660] ? generic_file_direct_write+0x3e0/0x3e0 [ 352.569850][ T9660] ? shmem_file_write_iter+0xf0/0x120 [ 352.575297][ T9660] shmem_file_write_iter+0xfb/0x120 [ 352.580543][ T9660] vfs_write+0x46c/0x990 [ 352.584840][ T9660] ? file_end_write+0x250/0x250 [ 352.589759][ T9660] ? __fget_files+0x43d/0x4b0 [ 352.594539][ T9660] ? __fdget_pos+0x2a3/0x330 [ 352.599269][ T9660] ? ksys_write+0x75/0x260 [ 352.603736][ T9660] ksys_write+0x150/0x260 [ 352.608121][ T9660] ? __ia32_sys_read+0x90/0x90 [ 352.612944][ T9660] ? lockdep_hardirqs_on+0x98/0x150 [ 352.618195][ T9660] do_syscall_64+0x55/0xa0 [ 352.622659][ T9660] ? clear_bhb_loop+0x40/0x90 [ 352.627390][ T9660] ? clear_bhb_loop+0x40/0x90 [ 352.632122][ T9660] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 352.638066][ T9660] RIP: 0033:0x7f227979bf79 [ 352.642519][ T9660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.662171][ T9660] RSP: 002b:00007f227a6a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 352.670634][ T9660] RAX: ffffffffffffffda RBX: 00007f2279a15fa0 RCX: 00007f227979bf79 [ 352.678653][ T9660] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000008 [ 352.686661][ T9660] RBP: 00007f227a6a9090 R08: 0000000000000000 R09: 0000000000000000 [ 352.694674][ T9660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 352.702686][ T9660] R13: 00007f2279a16038 R14: 00007f2279a15fa0 R15: 00007ffd852a3f68 [ 352.710716][ T9660] [ 353.236112][ T5778] Bluetooth: hci3: unexpected event 0x07 length: 15 < 255 [ 353.433844][ T9683] netlink: 'syz.3.1236': attribute type 21 has an invalid length. [ 354.194562][ T9696] netlink: 'syz.3.1241': attribute type 21 has an invalid length. [ 354.204767][ T9696] netlink: 'syz.3.1241': attribute type 15 has an invalid length. [ 354.218302][ T9699] FAULT_INJECTION: forcing a failure. [ 354.218302][ T9699] name failslab, interval 1, probability 0, space 0, times 1 [ 354.231461][ T9699] CPU: 1 PID: 9699 Comm: syz.0.1242 Not tainted syzkaller #0 [ 354.238881][ T9699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 354.249074][ T9699] Call Trace: [ 354.252392][ T9699] [ 354.255360][ T9699] dump_stack_lvl+0x18c/0x250 [ 354.260104][ T9699] ? show_regs_print_info+0x20/0x20 [ 354.265366][ T9699] ? load_image+0x400/0x400 [ 354.269927][ T9699] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 354.275990][ T9699] should_fail_ex+0x39d/0x4d0 [ 354.280829][ T9699] should_failslab+0x9/0x20 [ 354.285382][ T9699] slab_pre_alloc_hook+0x59/0x310 [ 354.290469][ T9699] ? do_raw_spin_lock+0x11f/0x2c0 [ 354.295541][ T9699] ? reuseport_alloc+0x11f/0x430 [ 354.300541][ T9699] __kmem_cache_alloc_node+0x53/0x250 [ 354.306107][ T9699] ? __local_bh_enable_ip+0x13a/0x1c0 [ 354.311547][ T9699] ? reuseport_alloc+0x11f/0x430 [ 354.316568][ T9699] kmalloc_trace+0x2a/0xe0 [ 354.321045][ T9699] reuseport_alloc+0x11f/0x430 [ 354.325957][ T9699] udp_lib_get_port+0xe7a/0x1b00 [ 354.331069][ T9699] ? raw_sysctl_init+0x50/0x50 [ 354.335877][ T9699] ? __local_bh_enable_ip+0x13a/0x1c0 [ 354.341319][ T9699] ? _local_bh_enable+0xa0/0xa0 [ 354.346231][ T9699] ? udp_v4_get_port+0xb4/0x210 [ 354.351136][ T9699] inet_sendmsg+0x1ec/0x2f0 [ 354.355710][ T9699] ? inet_send_prepare+0x260/0x260 [ 354.360868][ T9699] ____sys_sendmsg+0x5ba/0x960 [ 354.365689][ T9699] ? __asan_memset+0x22/0x40 [ 354.370332][ T9699] ? __sys_sendmsg_sock+0x30/0x30 [ 354.375398][ T9699] ? __import_iovec+0x3fa/0x850 [ 354.380317][ T9699] ? import_iovec+0x73/0xa0 [ 354.384886][ T9699] ___sys_sendmsg+0x2a6/0x360 [ 354.389622][ T9699] ? get_pid_task+0x20/0x1e0 [ 354.394300][ T9699] ? __sys_sendmsg+0x2a0/0x2a0 [ 354.399136][ T9699] ? __lock_acquire+0x7d40/0x7d40 [ 354.404244][ T9699] __se_sys_sendmsg+0x1c2/0x2b0 [ 354.409141][ T9699] ? __x64_sys_sendmsg+0x80/0x80 [ 354.414140][ T9699] ? lockdep_hardirqs_on+0x98/0x150 [ 354.419397][ T9699] do_syscall_64+0x55/0xa0 [ 354.423870][ T9699] ? clear_bhb_loop+0x40/0x90 [ 354.428601][ T9699] ? clear_bhb_loop+0x40/0x90 [ 354.433330][ T9699] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 354.439276][ T9699] RIP: 0033:0x7f227979bf79 [ 354.443732][ T9699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.463487][ T9699] RSP: 002b:00007f227a688028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.471971][ T9699] RAX: ffffffffffffffda RBX: 00007f2279a16090 RCX: 00007f227979bf79 [ 354.480255][ T9699] RDX: 0000000004008040 RSI: 0000200000000a00 RDI: 0000000000000005 [ 354.488278][ T9699] RBP: 00007f227a688090 R08: 0000000000000000 R09: 0000000000000000 [ 354.496310][ T9699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.504342][ T9699] R13: 00007f2279a16128 R14: 00007f2279a16090 R15: 00007ffd852a3f68 [ 354.512411][ T9699] [ 355.872766][ T5778] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3 [ 356.271689][ T9727] netlink: 'syz.0.1250': attribute type 21 has an invalid length. [ 356.409916][ T9726] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1252'. [ 356.899413][ T9734] netlink: 'syz.1.1254': attribute type 9 has an invalid length. [ 356.930807][ T9734] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1254'. [ 357.552159][ T9757] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1262'. [ 357.855718][ T9757] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 358.045322][ T5778] Bluetooth: hci3: unexpected event 0x09 length: 15 > 3 [ 358.955114][ T9765] netlink: 'syz.3.1264': attribute type 21 has an invalid length. [ 361.373115][ T9768] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.1265'. [ 361.383294][ T9768] tc_dump_action: action bad kind [ 361.743203][ T9799] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1273'. [ 362.572074][ T5778] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3 [ 362.619291][ T9806] netlink: 'syz.0.1277': attribute type 21 has an invalid length. [ 363.779720][ T9820] FAULT_INJECTION: forcing a failure. [ 363.779720][ T9820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.795845][ T9820] CPU: 1 PID: 9820 Comm: syz.2.1283 Not tainted syzkaller #0 [ 363.803285][ T9820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 363.813384][ T9820] Call Trace: [ 363.816707][ T9820] [ 363.819682][ T9820] dump_stack_lvl+0x18c/0x250 [ 363.824428][ T9820] ? show_regs_print_info+0x20/0x20 [ 363.829675][ T9820] ? lockdep_hardirqs_on+0x98/0x150 [ 363.834907][ T9820] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 363.841104][ T9820] should_fail_ex+0x39d/0x4d0 [ 363.845912][ T9820] copy_page_from_iter_atomic+0x2a8/0x1580 [ 363.851754][ T9820] ? shmem_get_folio_gfp+0x26d8/0x2aa0 [ 363.857257][ T9820] ? iov_iter_zero+0x1170/0x1170 [ 363.862259][ T9820] ? shmem_write_begin+0x1cf/0x420 [ 363.867576][ T9820] generic_perform_write+0x353/0x5c0 [ 363.872902][ T9820] ? generic_file_direct_write+0x3e0/0x3e0 [ 363.878748][ T9820] ? down_write+0x16e/0x200 [ 363.883293][ T9820] ? file_update_time+0x98/0x1a0 [ 363.888266][ T9820] shmem_file_write_iter+0xfb/0x120 [ 363.893513][ T9820] vfs_write+0x46c/0x990 [ 363.897806][ T9820] ? file_end_write+0x250/0x250 [ 363.902724][ T9820] ? __fget_files+0x43d/0x4b0 [ 363.907456][ T9820] ? __fdget_pos+0x2a3/0x330 [ 363.912094][ T9820] ? ksys_write+0x75/0x260 [ 363.916549][ T9820] ksys_write+0x150/0x260 [ 363.921081][ T9820] ? __ia32_sys_read+0x90/0x90 [ 363.925886][ T9820] ? lockdep_hardirqs_on+0x98/0x150 [ 363.931120][ T9820] do_syscall_64+0x55/0xa0 [ 363.935619][ T9820] ? clear_bhb_loop+0x40/0x90 [ 363.940375][ T9820] ? clear_bhb_loop+0x40/0x90 [ 363.945117][ T9820] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 363.951042][ T9820] RIP: 0033:0x7ffac6f9bf79 [ 363.955501][ T9820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.975164][ T9820] RSP: 002b:00007ffac7e49028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 363.983613][ T9820] RAX: ffffffffffffffda RBX: 00007ffac7215fa0 RCX: 00007ffac6f9bf79 [ 363.991613][ T9820] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000008 [ 363.999615][ T9820] RBP: 00007ffac7e49090 R08: 0000000000000000 R09: 0000000000000000 [ 364.007781][ T9820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 364.015777][ T9820] R13: 00007ffac7216038 R14: 00007ffac7215fa0 R15: 00007ffd336a1bd8 [ 364.023818][ T9820] [ 364.370926][ T9831] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1286'. [ 364.752448][ T5778] Bluetooth: hci2: unexpected event 0x07 length: 15 < 255 [ 364.846526][ T9835] netlink: 'syz.0.1289': attribute type 21 has an invalid length. [ 365.126707][ T9850] netlink: 24419 bytes leftover after parsing attributes in process `syz.3.1295'. [ 365.177861][ T9855] netlink: 'syz.3.1295': attribute type 3 has an invalid length. [ 365.186025][ T9855] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1295'. [ 365.224573][ T9854] FAULT_INJECTION: forcing a failure. [ 365.224573][ T9854] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 365.305585][ T9854] CPU: 1 PID: 9854 Comm: syz.0.1296 Not tainted syzkaller #0 [ 365.313067][ T9854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 365.323168][ T9854] Call Trace: [ 365.326488][ T9854] [ 365.329455][ T9854] dump_stack_lvl+0x18c/0x250 [ 365.334198][ T9854] ? show_regs_print_info+0x20/0x20 [ 365.339451][ T9854] ? load_image+0x400/0x400 [ 365.344013][ T9854] ? __lock_acquire+0x7d40/0x7d40 [ 365.349079][ T9854] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 365.355108][ T9854] should_fail_ex+0x39d/0x4d0 [ 365.359919][ T9854] prepare_alloc_pages+0x1e2/0x5f0 [ 365.365082][ T9854] __alloc_pages+0x134/0x460 [ 365.369705][ T9854] ? zone_statistics+0x170/0x170 [ 365.374690][ T9854] ? lock_acquire+0x208/0x420 [ 365.379409][ T9854] __folio_alloc+0x10/0x20 [ 365.383844][ T9854] vma_alloc_folio+0x47a/0x8f0 [ 365.388637][ T9854] ? mpol_shared_policy_lookup+0x14b/0x1e0 [ 365.394476][ T9854] shmem_alloc_folio+0x1a9/0x2a0 [ 365.399443][ T9854] ? folio_put+0xd0/0xd0 [ 365.403769][ T9854] ? __vm_enough_memory+0x11b/0x370 [ 365.409007][ T9854] ? shmem_inode_acct_block+0x35e/0x460 [ 365.414585][ T9854] shmem_alloc_and_acct_folio+0x1e6/0x6d0 [ 365.420440][ T9854] ? put_swap_device+0x230/0x230 [ 365.425453][ T9854] ? xas_load+0x12b/0x140 [ 365.429818][ T9854] ? filemap_get_entry+0xce/0x3f0 [ 365.434873][ T9854] ? filemap_get_entry+0xce/0x3f0 [ 365.440014][ T9854] ? filemap_get_entry+0x379/0x3f0 [ 365.445171][ T9854] ? page_cache_prev_miss+0x390/0x390 [ 365.450583][ T9854] ? mark_lock+0x94/0x320 [ 365.454943][ T9854] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 365.460959][ T9854] shmem_get_folio_gfp+0xcde/0x2aa0 [ 365.466230][ T9854] shmem_write_begin+0xf2/0x420 [ 365.471125][ T9854] generic_perform_write+0x2fe/0x5c0 [ 365.476454][ T9854] ? generic_file_direct_write+0x3e0/0x3e0 [ 365.482297][ T9854] ? down_write+0x16e/0x200 [ 365.486843][ T9854] ? file_update_time+0x98/0x1a0 [ 365.491816][ T9854] shmem_file_write_iter+0xfb/0x120 [ 365.497049][ T9854] vfs_write+0x46c/0x990 [ 365.501356][ T9854] ? file_end_write+0x250/0x250 [ 365.506244][ T9854] ? __fget_files+0x43d/0x4b0 [ 365.510961][ T9854] ? __fdget_pos+0x2a3/0x330 [ 365.515579][ T9854] ? ksys_write+0x75/0x260 [ 365.520028][ T9854] ksys_write+0x150/0x260 [ 365.524396][ T9854] ? __ia32_sys_read+0x90/0x90 [ 365.529200][ T9854] ? lockdep_hardirqs_on+0x98/0x150 [ 365.534427][ T9854] do_syscall_64+0x55/0xa0 [ 365.538884][ T9854] ? clear_bhb_loop+0x40/0x90 [ 365.543589][ T9854] ? clear_bhb_loop+0x40/0x90 [ 365.548294][ T9854] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 365.554247][ T9854] RIP: 0033:0x7f227979bf79 [ 365.558691][ T9854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.578361][ T9854] RSP: 002b:00007f227a6a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 365.586816][ T9854] RAX: ffffffffffffffda RBX: 00007f2279a15fa0 RCX: 00007f227979bf79 [ 365.594819][ T9854] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000008 [ 365.602817][ T9854] RBP: 00007f227a6a9090 R08: 0000000000000000 R09: 0000000000000000 [ 365.610823][ T9854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 365.618820][ T9854] R13: 00007f2279a16038 R14: 00007f2279a15fa0 R15: 00007ffd852a3f68 [ 365.626856][ T9854] [ 366.421504][ T9868] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1301'. [ 366.637125][ T5778] Bluetooth: hci1: unexpected event 0x07 length: 15 < 255 [ 366.677552][ T9876] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1305'. [ 366.733304][ T9876] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 367.841902][ T9874] netlink: 'syz.1.1304': attribute type 21 has an invalid length. [ 368.197523][ T9885] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1308'. [ 368.696910][ T9904] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1313'. [ 369.345567][ T5778] Bluetooth: hci0: unexpected event 0x07 length: 15 < 255 [ 369.395142][ T9924] FAULT_INJECTION: forcing a failure. [ 369.395142][ T9924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.410075][ T9924] CPU: 1 PID: 9924 Comm: syz.3.1319 Not tainted syzkaller #0 [ 369.417483][ T9924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 369.427576][ T9924] Call Trace: [ 369.430886][ T9924] [ 369.433843][ T9924] dump_stack_lvl+0x18c/0x250 [ 369.438567][ T9924] ? show_regs_print_info+0x20/0x20 [ 369.443801][ T9924] ? load_image+0x400/0x400 [ 369.448343][ T9924] ? shmem_get_folio_gfp+0x138f/0x2aa0 [ 369.453832][ T9924] ? __lock_acquire+0x7d40/0x7d40 [ 369.458907][ T9924] ? __rwlock_init+0x150/0x150 [ 369.463720][ T9924] should_fail_ex+0x39d/0x4d0 [ 369.468435][ T9924] copy_page_from_iter_atomic+0x2a8/0x1580 [ 369.474368][ T9924] ? shmem_get_folio_gfp+0x26d8/0x2aa0 [ 369.479870][ T9924] ? iov_iter_zero+0x1170/0x1170 [ 369.484848][ T9924] ? shmem_write_begin+0x1cf/0x420 [ 369.489991][ T9924] generic_perform_write+0x353/0x5c0 [ 369.495318][ T9924] ? generic_file_direct_write+0x3e0/0x3e0 [ 369.501165][ T9924] ? file_update_time+0x192/0x1a0 [ 369.506222][ T9924] shmem_file_write_iter+0xfb/0x120 [ 369.511543][ T9924] vfs_write+0x46c/0x990 [ 369.515842][ T9924] ? file_end_write+0x250/0x250 [ 369.520729][ T9924] ? __fget_files+0x43d/0x4b0 [ 369.525453][ T9924] ? __fdget_pos+0x2a3/0x330 [ 369.530080][ T9924] ? ksys_write+0x75/0x260 [ 369.534556][ T9924] ksys_write+0x150/0x260 [ 369.538929][ T9924] ? __ia32_sys_read+0x90/0x90 [ 369.543727][ T9924] ? lockdep_hardirqs_on+0x98/0x150 [ 369.549067][ T9924] do_syscall_64+0x55/0xa0 [ 369.553520][ T9924] ? clear_bhb_loop+0x40/0x90 [ 369.558240][ T9924] ? clear_bhb_loop+0x40/0x90 [ 369.562941][ T9924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 369.568861][ T9924] RIP: 0033:0x7f76b9d9bf79 [ 369.573303][ T9924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.593111][ T9924] RSP: 002b:00007f76babbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 369.601636][ T9924] RAX: ffffffffffffffda RBX: 00007f76ba015fa0 RCX: 00007f76b9d9bf79 [ 369.609638][ T9924] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000008 [ 369.617667][ T9924] RBP: 00007f76babbb090 R08: 0000000000000000 R09: 0000000000000000 [ 369.625661][ T9924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 369.633668][ T9924] R13: 00007f76ba016038 R14: 00007f76ba015fa0 R15: 00007fff08c174f8 [ 369.641686][ T9924] [ 369.764074][ T9926] netlink: 'syz.2.1318': attribute type 21 has an invalid length. [ 370.329595][ T9931] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1322'. [ 370.456395][ T9933] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1323'. [ 370.863622][ T9948] FAULT_INJECTION: forcing a failure. [ 370.863622][ T9948] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 370.884257][ T9948] CPU: 1 PID: 9948 Comm: syz.0.1329 Not tainted syzkaller #0 [ 370.891714][ T9948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 370.901824][ T9948] Call Trace: [ 370.905147][ T9948] [ 370.908125][ T9948] dump_stack_lvl+0x18c/0x250 [ 370.912865][ T9948] ? show_regs_print_info+0x20/0x20 [ 370.918121][ T9948] ? load_image+0x400/0x400 [ 370.922686][ T9948] ? __lock_acquire+0x7d40/0x7d40 [ 370.927775][ T9948] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 370.933813][ T9948] should_fail_ex+0x39d/0x4d0 [ 370.938561][ T9948] prepare_alloc_pages+0x1e2/0x5f0 [ 370.943737][ T9948] __alloc_pages+0x134/0x460 [ 370.948382][ T9948] ? zone_statistics+0x170/0x170 [ 370.953405][ T9948] ? lockdep_hardirqs_on+0x98/0x150 [ 370.958654][ T9948] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 370.964856][ T9948] __folio_alloc+0x10/0x20 [ 370.969318][ T9948] vma_alloc_folio+0x47a/0x8f0 [ 370.974127][ T9948] ? mpol_shared_policy_lookup+0x14b/0x1e0 [ 370.979975][ T9948] shmem_alloc_folio+0x1a9/0x2a0 [ 370.984957][ T9948] ? folio_put+0xd0/0xd0 [ 370.989275][ T9948] ? __vm_enough_memory+0x11b/0x370 [ 370.994534][ T9948] ? shmem_inode_acct_block+0x35e/0x460 [ 371.000138][ T9948] shmem_alloc_and_acct_folio+0x1e6/0x6d0 [ 371.005918][ T9948] ? put_swap_device+0x230/0x230 [ 371.010917][ T9948] ? xas_load+0x12b/0x140 [ 371.015297][ T9948] ? filemap_get_entry+0xce/0x3f0 [ 371.020366][ T9948] ? filemap_get_entry+0xce/0x3f0 [ 371.025437][ T9948] ? filemap_get_entry+0x379/0x3f0 [ 371.030596][ T9948] ? page_cache_prev_miss+0x390/0x390 [ 371.036011][ T9948] ? mark_lock+0x94/0x320 [ 371.040388][ T9948] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 371.046417][ T9948] ? lock_chain_count+0x20/0x20 [ 371.051330][ T9948] shmem_get_folio_gfp+0xcde/0x2aa0 [ 371.056650][ T9948] shmem_write_begin+0xf2/0x420 [ 371.061572][ T9948] generic_perform_write+0x2fe/0x5c0 [ 371.066958][ T9948] ? generic_file_direct_write+0x3e0/0x3e0 [ 371.072827][ T9948] ? file_update_time+0x192/0x1a0 [ 371.077903][ T9948] shmem_file_write_iter+0xfb/0x120 [ 371.083155][ T9948] vfs_write+0x46c/0x990 [ 371.087471][ T9948] ? file_end_write+0x250/0x250 [ 371.092383][ T9948] ? __fget_files+0x43d/0x4b0 [ 371.097140][ T9948] ? __fdget_pos+0x2a3/0x330 [ 371.101778][ T9948] ? ksys_write+0x75/0x260 [ 371.106253][ T9948] ksys_write+0x150/0x260 [ 371.110641][ T9948] ? __ia32_sys_read+0x90/0x90 [ 371.115471][ T9948] ? lockdep_hardirqs_on+0x98/0x150 [ 371.120723][ T9948] do_syscall_64+0x55/0xa0 [ 371.125193][ T9948] ? clear_bhb_loop+0x40/0x90 [ 371.129915][ T9948] ? clear_bhb_loop+0x40/0x90 [ 371.134645][ T9948] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 371.140613][ T9948] RIP: 0033:0x7f227979bf79 [ 371.145060][ T9948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.164715][ T9948] RSP: 002b:00007f227a6a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 371.173163][ T9948] RAX: ffffffffffffffda RBX: 00007f2279a15fa0 RCX: 00007f227979bf79 [ 371.181165][ T9948] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000008 [ 371.189174][ T9948] RBP: 00007f227a6a9090 R08: 0000000000000000 R09: 0000000000000000 [ 371.197174][ T9948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 371.205187][ T9948] R13: 00007f2279a16038 R14: 00007f2279a15fa0 R15: 00007ffd852a3f68 [ 371.213314][ T9948] [ 371.581120][ T5778] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 371.777621][ T9965] netlink: 'syz.2.1333': attribute type 21 has an invalid length. [ 372.816164][ T9977] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1337'. [ 372.894837][ T9981] FAULT_INJECTION: forcing a failure. [ 372.894837][ T9981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.908756][ T9981] CPU: 0 PID: 9981 Comm: syz.3.1339 Not tainted syzkaller #0 [ 372.916185][ T9981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 372.926458][ T9981] Call Trace: [ 372.929776][ T9981] [ 372.932788][ T9981] dump_stack_lvl+0x18c/0x250 [ 372.937528][ T9981] ? show_regs_print_info+0x20/0x20 [ 372.942873][ T9981] ? load_image+0x400/0x400 [ 372.947445][ T9981] ? shmem_get_folio_gfp+0x138f/0x2aa0 [ 372.953042][ T9981] ? __lock_acquire+0x7d40/0x7d40 [ 372.958126][ T9981] ? __rwlock_init+0x150/0x150 [ 372.962960][ T9981] should_fail_ex+0x39d/0x4d0 [ 372.967736][ T9981] copy_page_from_iter_atomic+0x2a8/0x1580 [ 372.973603][ T9981] ? shmem_get_folio_gfp+0x26d8/0x2aa0 [ 372.979114][ T9981] ? iov_iter_zero+0x1170/0x1170 [ 372.984124][ T9981] ? shmem_write_begin+0x1cf/0x420 [ 372.989282][ T9981] generic_perform_write+0x353/0x5c0 [ 372.994622][ T9981] ? generic_file_direct_write+0x3e0/0x3e0 [ 373.000483][ T9981] ? file_update_time+0x192/0x1a0 [ 373.005552][ T9981] shmem_file_write_iter+0xfb/0x120 [ 373.010782][ T9981] vfs_write+0x46c/0x990 [ 373.015056][ T9981] ? file_end_write+0x250/0x250 [ 373.019964][ T9981] ? __fget_files+0x43d/0x4b0 [ 373.024704][ T9981] ? __fdget_pos+0x2a3/0x330 [ 373.029352][ T9981] ? ksys_write+0x75/0x260 [ 373.033800][ T9981] ksys_write+0x150/0x260 [ 373.038158][ T9981] ? __ia32_sys_read+0x90/0x90 [ 373.043001][ T9981] ? lockdep_hardirqs_on+0x98/0x150 [ 373.048261][ T9981] do_syscall_64+0x55/0xa0 [ 373.052735][ T9981] ? clear_bhb_loop+0x40/0x90 [ 373.057450][ T9981] ? clear_bhb_loop+0x40/0x90 [ 373.062155][ T9981] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 373.068093][ T9981] RIP: 0033:0x7f76b9d9bf79 [ 373.072539][ T9981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.092180][ T9981] RSP: 002b:00007f76babbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 373.100622][ T9981] RAX: ffffffffffffffda RBX: 00007f76ba015fa0 RCX: 00007f76b9d9bf79 [ 373.108623][ T9981] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000008 [ 373.116655][ T9981] RBP: 00007f76babbb090 R08: 0000000000000000 R09: 0000000000000000 [ 373.124664][ T9981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 373.132663][ T9981] R13: 00007f76ba016038 R14: 00007f76ba015fa0 R15: 00007fff08c174f8 [ 373.140710][ T9981] [ 373.173886][ T9983] netlink: 'syz.1.1340': attribute type 3 has an invalid length. [ 373.182158][ T9983] netlink: 'syz.1.1340': attribute type 1 has an invalid length. [ 373.191066][ T9983] netlink: 197476 bytes leftover after parsing attributes in process `syz.1.1340'. [ 373.673743][ T5778] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 373.871858][T10006] netlink: 'syz.1.1345': attribute type 21 has an invalid length. [ 374.595131][T10012] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1349'. [ 374.723493][T10018] FAULT_INJECTION: forcing a failure. [ 374.723493][T10018] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 374.743300][T10018] CPU: 0 PID: 10018 Comm: syz.1.1352 Not tainted syzkaller #0 [ 374.751118][T10018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 374.761220][T10018] Call Trace: [ 374.764625][T10018] [ 374.767598][T10018] dump_stack_lvl+0x18c/0x250 [ 374.772335][T10018] ? show_regs_print_info+0x20/0x20 [ 374.777592][T10018] ? load_image+0x400/0x400 [ 374.782163][T10018] ? __lock_acquire+0x7d40/0x7d40 [ 374.787261][T10018] ? mark_lock+0x94/0x320 [ 374.791646][T10018] should_fail_ex+0x39d/0x4d0 [ 374.796429][T10018] prepare_alloc_pages+0x1e2/0x5f0 [ 374.801611][T10018] __alloc_pages+0x134/0x460 [ 374.806250][T10018] ? zone_statistics+0x170/0x170 [ 374.811248][T10018] ? lock_chain_count+0x20/0x20 [ 374.816160][T10018] __folio_alloc+0x10/0x20 [ 374.820703][T10018] vma_alloc_folio+0x47a/0x8f0 [ 374.825516][T10018] ? mpol_shared_policy_lookup+0x14b/0x1e0 [ 374.831375][T10018] shmem_alloc_folio+0x1a9/0x2a0 [ 374.836366][T10018] ? percpu_counter_add_batch+0x24f/0x2a0 [ 374.842149][T10018] ? folio_put+0xd0/0xd0 [ 374.846433][T10018] ? percpu_counter_add_batch+0x259/0x2a0 [ 374.852232][T10018] ? __vm_enough_memory+0x11b/0x370 [ 374.857490][T10018] ? shmem_inode_acct_block+0x35e/0x460 [ 374.863119][T10018] shmem_alloc_and_acct_folio+0x1e6/0x6d0 [ 374.868890][T10018] ? put_swap_device+0x230/0x230 [ 374.873956][T10018] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 374.879985][T10018] ? lock_chain_count+0x20/0x20 [ 374.884890][T10018] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 374.891091][T10018] ? lockdep_hardirqs_on+0x98/0x150 [ 374.896334][T10018] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 374.902552][T10018] ? shmem_get_folio_gfp+0x164d/0x2aa0 [ 374.908060][T10018] ? shmem_alloc_and_acct_folio+0xa/0x6d0 [ 374.913854][T10018] shmem_get_folio_gfp+0xcde/0x2aa0 [ 374.919143][T10018] shmem_write_begin+0xf2/0x420 [ 374.924053][T10018] generic_perform_write+0x2fe/0x5c0 [ 374.929421][T10018] ? generic_file_direct_write+0x3e0/0x3e0 [ 374.935291][T10018] ? file_update_time+0x192/0x1a0 [ 374.940451][T10018] shmem_file_write_iter+0xfb/0x120 [ 374.945705][T10018] vfs_write+0x46c/0x990 [ 374.950008][T10018] ? file_end_write+0x250/0x250 [ 374.954921][T10018] ? __fget_files+0x43d/0x4b0 [ 374.959744][T10018] ? __fdget_pos+0x2a3/0x330 [ 374.964378][T10018] ? ksys_write+0x75/0x260 [ 374.968851][T10018] ksys_write+0x150/0x260 [ 374.973266][T10018] ? __ia32_sys_read+0x90/0x90 [ 374.978078][T10018] ? lockdep_hardirqs_on+0x98/0x150 [ 374.983320][T10018] do_syscall_64+0x55/0xa0 [ 374.987799][T10018] ? clear_bhb_loop+0x40/0x90 [ 374.992520][T10018] ? clear_bhb_loop+0x40/0x90 [ 374.997242][T10018] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 375.003174][T10018] RIP: 0033:0x7f7a7fd9bf79 [ 375.007629][T10018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.027277][T10018] RSP: 002b:00007f7a80bce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 375.035740][T10018] RAX: ffffffffffffffda RBX: 00007f7a80015fa0 RCX: 00007f7a7fd9bf79 [ 375.043765][T10018] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000008 [ 375.051809][T10018] RBP: 00007f7a80bce090 R08: 0000000000000000 R09: 0000000000000000 [ 375.059846][T10018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 375.068030][T10018] R13: 00007f7a80016038 R14: 00007f7a80015fa0 R15: 00007ffd25d6abb8 [ 375.076154][T10018] [ 376.722111][T10062] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1363'. [ 378.786003][T10099] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1373'. [ 378.864213][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.879856][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.412902][ T5778] Bluetooth: hci0: unexpected event 0x07 length: 15 < 255 [ 379.529369][T10116] netlink: 'syz.2.1380': attribute type 21 has an invalid length. [ 379.838025][ T5778] Bluetooth: hci1: unexpected event 0x07 length: 15 < 255 [ 379.874794][T10126] FAULT_INJECTION: forcing a failure. [ 379.874794][T10126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.890614][T10126] CPU: 0 PID: 10126 Comm: syz.2.1383 Not tainted syzkaller #0 [ 379.898140][T10126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 379.908238][T10126] Call Trace: [ 379.911557][T10126] [ 379.914523][T10126] dump_stack_lvl+0x18c/0x250 [ 379.919255][T10126] ? show_regs_print_info+0x20/0x20 [ 379.924502][T10126] ? load_image+0x400/0x400 [ 379.929066][T10126] ? shmem_get_folio_gfp+0x138f/0x2aa0 [ 379.934568][T10126] ? __lock_acquire+0x7d40/0x7d40 [ 379.939635][T10126] ? __rwlock_init+0x150/0x150 [ 379.944452][T10126] should_fail_ex+0x39d/0x4d0 [ 379.949190][T10126] copy_page_from_iter_atomic+0x2a8/0x1580 [ 379.955062][T10126] ? shmem_get_folio_gfp+0x26d8/0x2aa0 [ 379.960592][T10126] ? iov_iter_zero+0x1170/0x1170 [ 379.965590][T10126] ? shmem_write_begin+0x1cf/0x420 [ 379.970761][T10126] generic_perform_write+0x353/0x5c0 [ 379.976161][T10126] ? generic_file_direct_write+0x3e0/0x3e0 [ 379.982057][T10126] ? file_update_time+0x192/0x1a0 [ 379.987136][T10126] shmem_file_write_iter+0xfb/0x120 [ 379.992477][T10126] vfs_write+0x46c/0x990 [ 379.996807][T10126] ? file_end_write+0x250/0x250 [ 380.001720][T10126] ? __fget_files+0x43d/0x4b0 [ 380.006457][T10126] ? __fdget_pos+0x2a3/0x330 [ 380.011097][T10126] ? ksys_write+0x75/0x260 [ 380.015564][T10126] ksys_write+0x150/0x260 [ 380.020049][T10126] ? __ia32_sys_read+0x90/0x90 [ 380.024868][T10126] ? lockdep_hardirqs_on+0x98/0x150 [ 380.030126][T10126] do_syscall_64+0x55/0xa0 [ 380.034612][T10126] ? clear_bhb_loop+0x40/0x90 [ 380.039354][T10126] ? clear_bhb_loop+0x40/0x90 [ 380.044076][T10126] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 380.050020][T10126] RIP: 0033:0x7ffac6f9bf79 [ 380.054484][T10126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.074132][T10126] RSP: 002b:00007ffac7e49028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 380.082573][T10126] RAX: ffffffffffffffda RBX: 00007ffac7215fa0 RCX: 00007ffac6f9bf79 [ 380.091004][T10126] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000008 [ 380.099009][T10126] RBP: 00007ffac7e49090 R08: 0000000000000000 R09: 0000000000000000 [ 380.107019][T10126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 380.115281][T10126] R13: 00007ffac7216038 R14: 00007ffac7215fa0 R15: 00007ffd336a1bd8 [ 380.123314][T10126] [ 380.197701][T10124] netlink: 'syz.1.1382': attribute type 21 has an invalid length. [ 380.296853][T10131] syz.0.1384[10131] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 380.297003][T10131] syz.0.1384[10131] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 380.377281][T10133] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1385'. [ 380.446444][T10131] netlink: 'syz.0.1384': attribute type 3 has an invalid length. [ 380.454391][T10131] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1384'. [ 380.509367][T10131] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 380.698860][T10135] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1384'. [ 380.750371][T10135] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 381.026714][T10145] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1388'. [ 381.116687][T10145] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1388'. [ 381.344997][ T5778] Bluetooth: hci2: unexpected event 0x07 length: 15 < 255 [ 381.357018][T10155] FAULT_INJECTION: forcing a failure. [ 381.357018][T10155] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 381.375978][T10155] CPU: 0 PID: 10155 Comm: syz.1.1393 Not tainted syzkaller #0 [ 381.383508][T10155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 381.393607][T10155] Call Trace: [ 381.396931][T10155] [ 381.399905][T10155] dump_stack_lvl+0x18c/0x250 [ 381.404649][T10155] ? show_regs_print_info+0x20/0x20 [ 381.409940][T10155] ? load_image+0x400/0x400 [ 381.414502][T10155] ? __lock_acquire+0x7d40/0x7d40 [ 381.419567][T10155] should_fail_ex+0x39d/0x4d0 [ 381.424315][T10155] prepare_alloc_pages+0x1e2/0x5f0 [ 381.429508][T10155] __alloc_pages+0x134/0x460 [ 381.434146][T10155] ? zone_statistics+0x170/0x170 [ 381.439159][T10155] __folio_alloc+0x10/0x20 [ 381.443612][T10155] vma_alloc_folio+0x47a/0x8f0 [ 381.448432][T10155] ? mpol_shared_policy_lookup+0x14b/0x1e0 [ 381.454290][T10155] shmem_alloc_folio+0x1a9/0x2a0 [ 381.459279][T10155] ? folio_put+0xd0/0xd0 [ 381.463597][T10155] ? __vm_enough_memory+0x11b/0x370 [ 381.468855][T10155] ? shmem_inode_acct_block+0x35e/0x460 [ 381.474476][T10155] shmem_alloc_and_acct_folio+0x1e6/0x6d0 [ 381.480242][T10155] ? put_swap_device+0x230/0x230 [ 381.485215][T10155] ? xas_load+0x12b/0x140 [ 381.489581][T10155] ? filemap_get_entry+0xce/0x3f0 [ 381.494638][T10155] ? filemap_get_entry+0xce/0x3f0 [ 381.499688][T10155] ? filemap_get_entry+0x379/0x3f0 [ 381.504829][T10155] ? page_cache_prev_miss+0x390/0x390 [ 381.510223][T10155] ? mark_lock+0x94/0x320 [ 381.514583][T10155] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 381.520593][T10155] ? lock_chain_count+0x20/0x20 [ 381.525497][T10155] shmem_get_folio_gfp+0xcde/0x2aa0 [ 381.530750][T10155] shmem_write_begin+0xf2/0x420 [ 381.535636][T10155] generic_perform_write+0x2fe/0x5c0 [ 381.540973][T10155] ? generic_file_direct_write+0x3e0/0x3e0 [ 381.546817][T10155] ? file_update_time+0x192/0x1a0 [ 381.551869][T10155] shmem_file_write_iter+0xfb/0x120 [ 381.557101][T10155] vfs_write+0x46c/0x990 [ 381.561377][T10155] ? file_end_write+0x250/0x250 [ 381.566266][T10155] ? __fget_files+0x43d/0x4b0 [ 381.571000][T10155] ? __fdget_pos+0x2a3/0x330 [ 381.575617][T10155] ? ksys_write+0x75/0x260 [ 381.580069][T10155] ksys_write+0x150/0x260 [ 381.584438][T10155] ? __ia32_sys_read+0x90/0x90 [ 381.589240][T10155] ? lockdep_hardirqs_on+0x98/0x150 [ 381.594470][T10155] do_syscall_64+0x55/0xa0 [ 381.598928][T10155] ? clear_bhb_loop+0x40/0x90 [ 381.603626][T10155] ? clear_bhb_loop+0x40/0x90 [ 381.608335][T10155] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 381.614279][T10155] RIP: 0033:0x7f7a7fd9bf79 [ 381.618731][T10155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.638365][T10155] RSP: 002b:00007f7a80bce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 381.646811][T10155] RAX: ffffffffffffffda RBX: 00007f7a80015fa0 RCX: 00007f7a7fd9bf79 [ 381.654890][T10155] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000008 [ 381.662889][T10155] RBP: 00007f7a80bce090 R08: 0000000000000000 R09: 0000000000000000 [ 381.670904][T10155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 381.678894][T10155] R13: 00007f7a80016038 R14: 00007f7a80015fa0 R15: 00007ffd25d6abb8 [ 381.686916][T10155] [ 381.732468][T10158] netlink: 'syz.3.1394': attribute type 25 has an invalid length. [ 381.753937][T10158] netlink: 'syz.3.1394': attribute type 28 has an invalid length. [ 381.770465][T10157] netlink: 'syz.0.1391': attribute type 21 has an invalid length. [ 381.960298][T10164] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1396'. [ 383.605249][T10191] netlink: 'syz.2.1403': attribute type 25 has an invalid length. [ 383.635644][T10191] netlink: 'syz.2.1403': attribute type 28 has an invalid length. [ 383.818630][T10193] FAULT_INJECTION: forcing a failure. [ 383.818630][T10193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.832260][T10193] CPU: 1 PID: 10193 Comm: syz.0.1404 Not tainted syzkaller #0 [ 383.839763][T10193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 383.849870][T10193] Call Trace: [ 383.853184][T10193] [ 383.856153][T10193] dump_stack_lvl+0x18c/0x250 [ 383.860915][T10193] ? show_regs_print_info+0x20/0x20 [ 383.866173][T10193] ? load_image+0x400/0x400 [ 383.870730][T10193] ? shmem_get_folio_gfp+0x138f/0x2aa0 [ 383.876281][T10193] ? __lock_acquire+0x7d40/0x7d40 [ 383.881352][T10193] ? __rwlock_init+0x150/0x150 [ 383.886185][T10193] should_fail_ex+0x39d/0x4d0 [ 383.890937][T10193] copy_page_from_iter_atomic+0x2a8/0x1580 [ 383.896808][T10193] ? shmem_get_folio_gfp+0x26d8/0x2aa0 [ 383.902332][T10193] ? iov_iter_zero+0x1170/0x1170 [ 383.907333][T10193] ? shmem_write_begin+0x1cf/0x420 [ 383.912505][T10193] generic_perform_write+0x353/0x5c0 [ 383.917871][T10193] ? generic_file_direct_write+0x3e0/0x3e0 [ 383.923738][T10193] ? file_update_time+0x98/0x1a0 [ 383.928732][T10193] shmem_file_write_iter+0xfb/0x120 [ 383.933990][T10193] vfs_write+0x46c/0x990 [ 383.938285][T10193] ? file_end_write+0x250/0x250 [ 383.943187][T10193] ? __fget_files+0x43d/0x4b0 [ 383.947925][T10193] ? __fdget_pos+0x2a3/0x330 [ 383.952567][T10193] ? ksys_write+0x75/0x260 [ 383.957037][T10193] ksys_write+0x150/0x260 [ 383.961415][T10193] ? __ia32_sys_read+0x90/0x90 [ 383.966236][T10193] ? lockdep_hardirqs_on+0x98/0x150 [ 383.971506][T10193] do_syscall_64+0x55/0xa0 [ 383.975987][T10193] ? clear_bhb_loop+0x40/0x90 [ 383.980720][T10193] ? clear_bhb_loop+0x40/0x90 [ 383.985489][T10193] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 383.991461][T10193] RIP: 0033:0x7f227979bf79 [ 383.995932][T10193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.015619][T10193] RSP: 002b:00007f227a6a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 384.024080][T10193] RAX: ffffffffffffffda RBX: 00007f2279a15fa0 RCX: 00007f227979bf79 [ 384.032088][T10193] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000008 [ 384.040188][T10193] RBP: 00007f227a6a9090 R08: 0000000000000000 R09: 0000000000000000 [ 384.048206][T10193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 384.056228][T10193] R13: 00007f2279a16038 R14: 00007f2279a15fa0 R15: 00007ffd852a3f68 [ 384.064303][T10193] [ 384.277495][T10201] FAULT_INJECTION: forcing a failure. [ 384.277495][T10201] name failslab, interval 1, probability 0, space 0, times 0 [ 384.301369][T10201] CPU: 1 PID: 10201 Comm: syz.0.1406 Not tainted syzkaller #0 [ 384.308915][T10201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 384.319015][T10201] Call Trace: [ 384.322339][T10201] [ 384.325302][T10201] dump_stack_lvl+0x18c/0x250 [ 384.330035][T10201] ? show_regs_print_info+0x20/0x20 [ 384.335288][T10201] ? load_image+0x400/0x400 [ 384.339842][T10201] ? __might_sleep+0xe0/0xe0 [ 384.344487][T10201] ? __lock_acquire+0x7d40/0x7d40 [ 384.349566][T10201] should_fail_ex+0x39d/0x4d0 [ 384.354320][T10201] should_failslab+0x9/0x20 [ 384.358873][T10201] slab_pre_alloc_hook+0x59/0x310 [ 384.363947][T10201] ? __lock_acquire+0x7d40/0x7d40 [ 384.369024][T10201] kmem_cache_alloc_node+0x60/0x320 [ 384.374275][T10201] ? __alloc_skb+0x103/0x2c0 [ 384.378920][T10201] __alloc_skb+0x103/0x2c0 [ 384.383392][T10201] netlink_sendmsg+0x66a/0xbf0 [ 384.388213][T10201] ? netlink_getsockopt+0x590/0x590 [ 384.393500][T10201] ? aa_sock_msg_perm+0x94/0x150 [ 384.398526][T10201] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 384.403872][T10201] ? security_socket_sendmsg+0x80/0xa0 [ 384.409370][T10201] ? netlink_getsockopt+0x590/0x590 [ 384.414642][T10201] ____sys_sendmsg+0x5ba/0x960 [ 384.419468][T10201] ? __asan_memset+0x22/0x40 [ 384.424102][T10201] ? __sys_sendmsg_sock+0x30/0x30 [ 384.429163][T10201] ? __import_iovec+0x5f2/0x850 [ 384.434094][T10201] ? import_iovec+0x73/0xa0 [ 384.438662][T10201] ___sys_sendmsg+0x2a6/0x360 [ 384.443375][T10201] ? get_pid_task+0x20/0x1e0 [ 384.448019][T10201] ? __sys_sendmsg+0x2a0/0x2a0 [ 384.452875][T10201] ? __lock_acquire+0x7d40/0x7d40 [ 384.457972][T10201] __se_sys_sendmsg+0x1c2/0x2b0 [ 384.462867][T10201] ? __x64_sys_sendmsg+0x80/0x80 [ 384.467864][T10201] ? lockdep_hardirqs_on+0x98/0x150 [ 384.473108][T10201] do_syscall_64+0x55/0xa0 [ 384.477573][T10201] ? clear_bhb_loop+0x40/0x90 [ 384.482291][T10201] ? clear_bhb_loop+0x40/0x90 [ 384.487014][T10201] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 384.492948][T10201] RIP: 0033:0x7f227979bf79 [ 384.497503][T10201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.517254][T10201] RSP: 002b:00007f227a688028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.525716][T10201] RAX: ffffffffffffffda RBX: 00007f2279a16090 RCX: 00007f227979bf79 [ 384.533734][T10201] RDX: 0000000004004004 RSI: 0000200000000040 RDI: 0000000000000003 [ 384.541741][T10201] RBP: 00007f227a688090 R08: 0000000000000000 R09: 0000000000000000 [ 384.549745][T10201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.557776][T10201] R13: 00007f2279a16128 R14: 00007f2279a16090 R15: 00007ffd852a3f68 [ 384.565822][T10201] [ 384.671515][T10200] netlink: 'syz.2.1405': attribute type 21 has an invalid length. [ 384.877505][T10204] netlink: 'syz.0.1407': attribute type 25 has an invalid length. [ 384.896193][T10204] netlink: 'syz.0.1407': attribute type 28 has an invalid length. [ 385.042039][T10208] FAULT_INJECTION: forcing a failure. [ 385.042039][T10208] name failslab, interval 1, probability 0, space 0, times 0 [ 385.075645][T10208] CPU: 0 PID: 10208 Comm: syz.3.1409 Not tainted syzkaller #0 [ 385.083200][T10208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 385.093302][T10208] Call Trace: [ 385.096634][T10208] [ 385.099604][T10208] dump_stack_lvl+0x18c/0x250 [ 385.104390][T10208] ? show_regs_print_info+0x20/0x20 [ 385.109640][T10208] ? load_image+0x400/0x400 [ 385.114285][T10208] ? __might_sleep+0xe0/0xe0 [ 385.118940][T10208] ? __lock_acquire+0x7d40/0x7d40 [ 385.124123][T10208] should_fail_ex+0x39d/0x4d0 [ 385.128869][T10208] should_failslab+0x9/0x20 [ 385.133490][T10208] slab_pre_alloc_hook+0x59/0x310 [ 385.138583][T10208] ? __lock_acquire+0x7d40/0x7d40 [ 385.143676][T10208] kmem_cache_alloc_node+0x60/0x320 [ 385.148913][T10208] ? __alloc_skb+0x103/0x2c0 [ 385.153568][T10208] __alloc_skb+0x103/0x2c0 [ 385.158047][T10208] netlink_sendmsg+0x66a/0xbf0 [ 385.162863][T10208] ? netlink_getsockopt+0x590/0x590 [ 385.168104][T10208] ? aa_sock_msg_perm+0x94/0x150 [ 385.173159][T10208] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 385.178479][T10208] ? security_socket_sendmsg+0x80/0xa0 [ 385.183960][T10208] ? netlink_getsockopt+0x590/0x590 [ 385.189191][T10208] ____sys_sendmsg+0x5ba/0x960 [ 385.193993][T10208] ? __asan_memset+0x22/0x40 [ 385.198701][T10208] ? __sys_sendmsg_sock+0x30/0x30 [ 385.203740][T10208] ? __import_iovec+0x5f2/0x850 [ 385.208634][T10208] ? import_iovec+0x73/0xa0 [ 385.213181][T10208] ___sys_sendmsg+0x2a6/0x360 [ 385.217912][T10208] ? lock_release+0xa6/0x8c0 [ 385.222532][T10208] ? __sys_sendmsg+0x2a0/0x2a0 [ 385.227348][T10208] ? __lock_acquire+0x7d40/0x7d40 [ 385.232417][T10208] __se_sys_sendmsg+0x1c2/0x2b0 [ 385.237330][T10208] ? __x64_sys_sendmsg+0x80/0x80 [ 385.242320][T10208] ? lockdep_hardirqs_on+0x98/0x150 [ 385.247545][T10208] do_syscall_64+0x55/0xa0 [ 385.252083][T10208] ? clear_bhb_loop+0x40/0x90 [ 385.256794][T10208] ? clear_bhb_loop+0x40/0x90 [ 385.261524][T10208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 385.269530][T10208] RIP: 0033:0x7f76b9d9bf79 [ 385.273980][T10208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.293698][T10208] RSP: 002b:00007f76babbb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 385.302135][T10208] RAX: ffffffffffffffda RBX: 00007f76ba015fa0 RCX: 00007f76b9d9bf79 [ 385.310126][T10208] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000007 [ 385.318120][T10208] RBP: 00007f76babbb090 R08: 0000000000000000 R09: 0000000000000000 [ 385.326105][T10208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.334096][T10208] R13: 00007f76ba016038 R14: 00007f76ba015fa0 R15: 00007fff08c174f8 [ 385.342192][T10208] [ 386.270715][T10214] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1411'. [ 386.562705][T10221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1421'. [ 386.605741][T10221] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1421'. [ 386.687401][T10225] netlink: 'syz.2.1414': attribute type 25 has an invalid length. [ 386.695316][T10225] netlink: 'syz.2.1414': attribute type 28 has an invalid length. [ 386.903262][T10229] netlink: 'syz.0.1416': attribute type 21 has an invalid length. [ 387.073350][T10232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1418'. [ 387.085794][T10232] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1418'. [ 388.053910][T10245] FAULT_INJECTION: forcing a failure. [ 388.053910][T10245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.067984][T10245] CPU: 1 PID: 10245 Comm: syz.1.1422 Not tainted syzkaller #0 [ 388.075506][T10245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 388.085662][T10245] Call Trace: [ 388.088990][T10245] [ 388.091960][T10245] dump_stack_lvl+0x18c/0x250 [ 388.096699][T10245] ? show_regs_print_info+0x20/0x20 [ 388.101949][T10245] ? load_image+0x400/0x400 [ 388.106595][T10245] ? shmem_get_folio_gfp+0x138f/0x2aa0 [ 388.112122][T10245] ? __lock_acquire+0x7d40/0x7d40 [ 388.117203][T10245] ? __rwlock_init+0x150/0x150 [ 388.122023][T10245] should_fail_ex+0x39d/0x4d0 [ 388.126850][T10245] copy_page_from_iter_atomic+0x2a8/0x1580 [ 388.132710][T10245] ? shmem_get_folio_gfp+0x26d8/0x2aa0 [ 388.138217][T10245] ? iov_iter_zero+0x1170/0x1170 [ 388.143199][T10245] ? shmem_write_begin+0x1cf/0x420 [ 388.148344][T10245] generic_perform_write+0x353/0x5c0 [ 388.153667][T10245] ? generic_file_direct_write+0x3e0/0x3e0 [ 388.159535][T10245] ? file_update_time+0x192/0x1a0 [ 388.164587][T10245] shmem_file_write_iter+0xfb/0x120 [ 388.169838][T10245] vfs_write+0x46c/0x990 [ 388.174116][T10245] ? file_end_write+0x250/0x250 [ 388.179005][T10245] ? __fget_files+0x43d/0x4b0 [ 388.183722][T10245] ? __fdget_pos+0x2a3/0x330 [ 388.188355][T10245] ? ksys_write+0x75/0x260 [ 388.192805][T10245] ksys_write+0x150/0x260 [ 388.197185][T10245] ? __ia32_sys_read+0x90/0x90 [ 388.201979][T10245] ? lockdep_hardirqs_on+0x98/0x150 [ 388.207214][T10245] do_syscall_64+0x55/0xa0 [ 388.211659][T10245] ? clear_bhb_loop+0x40/0x90 [ 388.216363][T10245] ? clear_bhb_loop+0x40/0x90 [ 388.221062][T10245] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 388.226978][T10245] RIP: 0033:0x7f7a7fd9bf79 [ 388.231416][T10245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.251049][T10245] RSP: 002b:00007f7a80bce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 388.259489][T10245] RAX: ffffffffffffffda RBX: 00007f7a80015fa0 RCX: 00007f7a7fd9bf79 [ 388.267488][T10245] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000008 [ 388.275480][T10245] RBP: 00007f7a80bce090 R08: 0000000000000000 R09: 0000000000000000 [ 388.283471][T10245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 388.291481][T10245] R13: 00007f7a80016038 R14: 00007f7a80015fa0 R15: 00007ffd25d6abb8 [ 388.299497][T10245] [ 388.791159][T10263] netlink: 'syz.2.1427': attribute type 25 has an invalid length. [ 388.819719][T10263] netlink: 'syz.2.1427': attribute type 28 has an invalid length. [ 390.254583][T10274] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1431'. [ 390.283857][T10274] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1431'. [ 390.528714][T10284] FAULT_INJECTION: forcing a failure. [ 390.528714][T10284] name failslab, interval 1, probability 0, space 0, times 0 [ 390.558373][T10284] CPU: 1 PID: 10284 Comm: syz.3.1433 Not tainted syzkaller #0 [ 390.565955][T10284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 390.576430][T10284] Call Trace: [ 390.579775][T10284] [ 390.582754][T10284] dump_stack_lvl+0x18c/0x250 [ 390.587505][T10284] ? show_regs_print_info+0x20/0x20 [ 390.592769][T10284] ? load_image+0x400/0x400 [ 390.597345][T10284] ? verify_lock_unused+0x140/0x140 [ 390.602612][T10284] ? perf_trace_lock+0x304/0x3b0 [ 390.607637][T10284] should_fail_ex+0x39d/0x4d0 [ 390.612486][T10284] should_failslab+0x9/0x20 [ 390.617056][T10284] slab_pre_alloc_hook+0x59/0x310 [ 390.622157][T10284] kmem_cache_alloc+0x5a/0x2d0 [ 390.627003][T10284] ? skb_clone+0x1eb/0x370 [ 390.631489][T10284] skb_clone+0x1eb/0x370 [ 390.635803][T10284] __netlink_deliver_tap+0x41c/0x830 [ 390.641196][T10284] ? netlink_deliver_tap+0x2e/0x1b0 [ 390.646466][T10284] netlink_deliver_tap+0x19c/0x1b0 [ 390.651647][T10284] netlink_unicast+0x72c/0x8d0 [ 390.656517][T10284] netlink_sendmsg+0x8d0/0xbf0 [ 390.661348][T10284] ? perf_trace_lock+0x304/0x3b0 [ 390.666374][T10284] ? netlink_getsockopt+0x590/0x590 [ 390.671643][T10284] ? aa_sock_msg_perm+0x94/0x150 [ 390.676996][T10284] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 390.682337][T10284] ? security_socket_sendmsg+0x80/0xa0 [ 390.687848][T10284] ? netlink_getsockopt+0x590/0x590 [ 390.693163][T10284] ____sys_sendmsg+0x5ba/0x960 [ 390.698001][T10284] ? __asan_memset+0x22/0x40 [ 390.702659][T10284] ? __sys_sendmsg_sock+0x30/0x30 [ 390.707743][T10284] ? __import_iovec+0x5f2/0x850 [ 390.712681][T10284] ? import_iovec+0x73/0xa0 [ 390.717258][T10284] ___sys_sendmsg+0x2a6/0x360 [ 390.722003][T10284] ? __sys_sendmsg+0x2a0/0x2a0 [ 390.726865][T10284] ? __lock_acquire+0x7d40/0x7d40 [ 390.732061][T10284] __se_sys_sendmsg+0x1c2/0x2b0 [ 390.736979][T10284] ? __x64_sys_sendmsg+0x80/0x80 [ 390.742002][T10284] ? lockdep_hardirqs_on+0x98/0x150 [ 390.747268][T10284] do_syscall_64+0x55/0xa0 [ 390.751750][T10284] ? clear_bhb_loop+0x40/0x90 [ 390.756482][T10284] ? clear_bhb_loop+0x40/0x90 [ 390.761230][T10284] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 390.767182][T10284] RIP: 0033:0x7f76b9d9bf79 [ 390.771658][T10284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.791419][T10284] RSP: 002b:00007f76babbb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.799913][T10284] RAX: ffffffffffffffda RBX: 00007f76ba015fa0 RCX: 00007f76b9d9bf79 [ 390.807950][T10284] RDX: 0000000004004004 RSI: 0000200000000040 RDI: 0000000000000003 [ 390.815973][T10284] RBP: 00007f76babbb090 R08: 0000000000000000 R09: 0000000000000000 [ 390.824026][T10284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.832062][T10284] R13: 00007f76ba016038 R14: 00007f76ba015fa0 R15: 00007fff08c174f8 [ 390.840128][T10284] [ 390.854593][T10284] netlink: 'syz.3.1433': attribute type 25 has an invalid length. [ 390.863019][T10284] netlink: 'syz.3.1433': attribute type 28 has an invalid length. [ 390.987491][T10286] netlink: 'syz.1.1434': attribute type 10 has an invalid length. [ 391.177732][T10286] hsr_slave_0 (unregistering): left promiscuous mode [ 391.226555][T10289] FAULT_INJECTION: forcing a failure. [ 391.226555][T10289] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 391.246538][T10289] CPU: 1 PID: 10289 Comm: syz.3.1435 Not tainted syzkaller #0 [ 391.254081][T10289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 391.264189][T10289] Call Trace: [ 391.267533][T10289] [ 391.270497][T10289] dump_stack_lvl+0x18c/0x250 [ 391.275203][T10289] ? show_regs_print_info+0x20/0x20 [ 391.280422][T10289] ? load_image+0x400/0x400 [ 391.284954][T10289] ? __lock_acquire+0x7d40/0x7d40 [ 391.290111][T10289] should_fail_ex+0x39d/0x4d0 [ 391.294839][T10289] prepare_alloc_pages+0x1e2/0x5f0 [ 391.299999][T10289] __alloc_pages+0x134/0x460 [ 391.304617][T10289] ? zone_statistics+0x170/0x170 [ 391.309609][T10289] __folio_alloc+0x10/0x20 [ 391.314070][T10289] vma_alloc_folio+0x47a/0x8f0 [ 391.318899][T10289] ? mpol_shared_policy_lookup+0x14b/0x1e0 [ 391.324744][T10289] shmem_alloc_folio+0x1a9/0x2a0 [ 391.329715][T10289] ? folio_put+0xd0/0xd0 [ 391.333999][T10289] ? __vm_enough_memory+0x11b/0x370 [ 391.339246][T10289] ? shmem_inode_acct_block+0x35e/0x460 [ 391.344822][T10289] shmem_alloc_and_acct_folio+0x1e6/0x6d0 [ 391.350581][T10289] ? put_swap_device+0x230/0x230 [ 391.355553][T10289] ? xas_load+0x12b/0x140 [ 391.359954][T10289] ? filemap_get_entry+0xce/0x3f0 [ 391.365002][T10289] ? filemap_get_entry+0xce/0x3f0 [ 391.370089][T10289] ? filemap_get_entry+0x379/0x3f0 [ 391.375232][T10289] ? page_cache_prev_miss+0x390/0x390 [ 391.380629][T10289] ? mark_lock+0x94/0x320 [ 391.385075][T10289] ? mark_lock+0x94/0x320 [ 391.389444][T10289] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 391.395570][T10289] shmem_get_folio_gfp+0xcde/0x2aa0 [ 391.400834][T10289] shmem_write_begin+0xf2/0x420 [ 391.405719][T10289] generic_perform_write+0x2fe/0x5c0 [ 391.411050][T10289] ? generic_file_direct_write+0x3e0/0x3e0 [ 391.416886][T10289] ? down_write+0x16e/0x200 [ 391.421436][T10289] ? file_update_time+0x98/0x1a0 [ 391.426406][T10289] shmem_file_write_iter+0xfb/0x120 [ 391.431637][T10289] vfs_write+0x46c/0x990 [ 391.435918][T10289] ? file_end_write+0x250/0x250 [ 391.440799][T10289] ? __fget_files+0x43d/0x4b0 [ 391.445523][T10289] ? __fdget_pos+0x2a3/0x330 [ 391.450149][T10289] ? ksys_write+0x75/0x260 [ 391.454630][T10289] ksys_write+0x150/0x260 [ 391.459027][T10289] ? __ia32_sys_read+0x90/0x90 [ 391.463829][T10289] ? lockdep_hardirqs_on+0x98/0x150 [ 391.469493][T10289] do_syscall_64+0x55/0xa0 [ 391.473947][T10289] ? clear_bhb_loop+0x40/0x90 [ 391.478654][T10289] ? clear_bhb_loop+0x40/0x90 [ 391.483355][T10289] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 391.489274][T10289] RIP: 0033:0x7f76b9d9bf79 [ 391.493716][T10289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.513348][T10289] RSP: 002b:00007f76babbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 391.521793][T10289] RAX: ffffffffffffffda RBX: 00007f76ba015fa0 RCX: 00007f76b9d9bf79 [ 391.529799][T10289] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000008 [ 391.537808][T10289] RBP: 00007f76babbb090 R08: 0000000000000000 R09: 0000000000000000 [ 391.545807][T10289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 391.553820][T10289] R13: 00007f76ba016038 R14: 00007f76ba015fa0 R15: 00007fff08c174f8 [ 391.561843][T10289] [ 391.745565][T10296] netlink: 'syz.3.1437': attribute type 46 has an invalid length. [ 391.966488][T10304] netlink: 'syz.3.1441': attribute type 10 has an invalid length. [ 392.026542][T10304] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.034200][T10304] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.107497][T10304] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.114820][T10304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.123552][T10304] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.131006][T10304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.169934][T10304] bridge0: entered promiscuous mode [ 392.185824][T10304] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 392.607893][T10319] FAULT_INJECTION: forcing a failure. [ 392.607893][T10319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 392.621856][T10319] CPU: 0 PID: 10319 Comm: syz.3.1446 Not tainted syzkaller #0 [ 392.629365][T10319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 392.639456][T10319] Call Trace: [ 392.642777][T10319] [ 392.645752][T10319] dump_stack_lvl+0x18c/0x250 [ 392.650489][T10319] ? shmem_get_folio_gfp+0x138f/0x2aa0 [ 392.656005][T10319] ? show_regs_print_info+0x20/0x20 [ 392.661272][T10319] ? load_image+0x400/0x400 [ 392.665827][T10319] ? shmem_get_folio_gfp+0x138f/0x2aa0 [ 392.671432][T10319] ? __lock_acquire+0x7d40/0x7d40 [ 392.676524][T10319] ? __rwlock_init+0x150/0x150 [ 392.681347][T10319] should_fail_ex+0x39d/0x4d0 [ 392.686090][T10319] copy_page_from_iter_atomic+0x2a8/0x1580 [ 392.691954][T10319] ? shmem_get_folio_gfp+0x26d8/0x2aa0 [ 392.697512][T10319] ? iov_iter_zero+0x1170/0x1170 [ 392.702515][T10319] ? shmem_write_begin+0x1cf/0x420 [ 392.707774][T10319] generic_perform_write+0x353/0x5c0 [ 392.713135][T10319] ? generic_file_direct_write+0x3e0/0x3e0 [ 392.719000][T10319] ? file_update_time+0x192/0x1a0 [ 392.724071][T10319] shmem_file_write_iter+0xfb/0x120 [ 392.729329][T10319] vfs_write+0x46c/0x990 [ 392.733634][T10319] ? file_end_write+0x250/0x250 [ 392.738538][T10319] ? __fget_files+0x43d/0x4b0 [ 392.743278][T10319] ? __fdget_pos+0x2a3/0x330 [ 392.747942][T10319] ? ksys_write+0x75/0x260 [ 392.752425][T10319] ksys_write+0x150/0x260 [ 392.756850][T10319] ? __ia32_sys_read+0x90/0x90 [ 392.761671][T10319] ? lockdep_hardirqs_on+0x98/0x150 [ 392.766926][T10319] do_syscall_64+0x55/0xa0 [ 392.771489][T10319] ? clear_bhb_loop+0x40/0x90 [ 392.776209][T10319] ? clear_bhb_loop+0x40/0x90 [ 392.780939][T10319] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 392.786877][T10319] RIP: 0033:0x7f76b9d9bf79 [ 392.791335][T10319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.811017][T10319] RSP: 002b:00007f76babbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 392.819478][T10319] RAX: ffffffffffffffda RBX: 00007f76ba015fa0 RCX: 00007f76b9d9bf79 [ 392.827495][T10319] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000008 [ 392.835521][T10319] RBP: 00007f76babbb090 R08: 0000000000000000 R09: 0000000000000000 [ 392.843623][T10319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 392.851639][T10319] R13: 00007f76ba016038 R14: 00007f76ba015fa0 R15: 00007fff08c174f8 [ 392.859676][T10319] [ 392.896391][T10320] netlink: 'syz.1.1445': attribute type 25 has an invalid length. [ 392.904282][T10320] netlink: 'syz.1.1445': attribute type 28 has an invalid length. [ 392.944016][T10320] FAULT_INJECTION: forcing a failure. [ 392.944016][T10320] name failslab, interval 1, probability 0, space 0, times 0 [ 392.968528][T10320] CPU: 0 PID: 10320 Comm: syz.1.1445 Not tainted syzkaller #0 [ 392.976102][T10320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 392.986200][T10320] Call Trace: [ 392.989512][T10320] [ 392.992479][T10320] dump_stack_lvl+0x18c/0x250 [ 392.997224][T10320] ? show_regs_print_info+0x20/0x20 [ 393.002467][T10320] ? load_image+0x400/0x400 [ 393.007043][T10320] ? __might_sleep+0xe0/0xe0 [ 393.011716][T10320] ? __lock_acquire+0x7d40/0x7d40 [ 393.016828][T10320] should_fail_ex+0x39d/0x4d0 [ 393.021567][T10320] should_failslab+0x9/0x20 [ 393.026128][T10320] slab_pre_alloc_hook+0x59/0x310 [ 393.031217][T10320] ? lockdep_hardirqs_on+0x98/0x150 [ 393.036468][T10320] kmem_cache_alloc_node+0x60/0x320 [ 393.041722][T10320] ? __alloc_skb+0x103/0x2c0 [ 393.046371][T10320] __alloc_skb+0x103/0x2c0 [ 393.050846][T10320] netlink_ack+0x376/0x1180 [ 393.055394][T10320] ? __dev_queue_xmit+0x26b/0x36b0 [ 393.060672][T10320] ? netlink_dump+0xe50/0xe50 [ 393.065394][T10320] ? perf_trace_lock+0xfc/0x3b0 [ 393.070305][T10320] netlink_rcv_skb+0x2c5/0x4d0 [ 393.075127][T10320] ? rtnetlink_bind+0x80/0x80 [ 393.079847][T10320] ? netlink_ack+0x1180/0x1180 [ 393.084680][T10320] ? __lock_acquire+0x7d40/0x7d40 [ 393.089761][T10320] ? netlink_deliver_tap+0x2e/0x1b0 [ 393.095027][T10320] netlink_unicast+0x751/0x8d0 [ 393.099848][T10320] netlink_sendmsg+0x8d0/0xbf0 [ 393.104680][T10320] ? netlink_getsockopt+0x590/0x590 [ 393.109934][T10320] ? aa_sock_msg_perm+0x94/0x150 [ 393.114973][T10320] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 393.120308][T10320] ? security_socket_sendmsg+0x80/0xa0 [ 393.125810][T10320] ? netlink_getsockopt+0x590/0x590 [ 393.131062][T10320] ____sys_sendmsg+0x5ba/0x960 [ 393.135901][T10320] ? __asan_memset+0x22/0x40 [ 393.140545][T10320] ? __sys_sendmsg_sock+0x30/0x30 [ 393.145606][T10320] ? __import_iovec+0x5f2/0x850 [ 393.150526][T10320] ? import_iovec+0x73/0xa0 [ 393.155083][T10320] ___sys_sendmsg+0x2a6/0x360 [ 393.159820][T10320] ? __sys_sendmsg+0x2a0/0x2a0 [ 393.164738][T10320] ? __lock_acquire+0x7d40/0x7d40 [ 393.169855][T10320] __se_sys_sendmsg+0x1c2/0x2b0 [ 393.174750][T10320] ? __x64_sys_sendmsg+0x80/0x80 [ 393.179763][T10320] ? lockdep_hardirqs_on+0x98/0x150 [ 393.185019][T10320] do_syscall_64+0x55/0xa0 [ 393.189490][T10320] ? clear_bhb_loop+0x40/0x90 [ 393.194220][T10320] ? clear_bhb_loop+0x40/0x90 [ 393.198951][T10320] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 393.204886][T10320] RIP: 0033:0x7f7a7fd9bf79 [ 393.209338][T10320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.229069][T10320] RSP: 002b:00007f7a80bad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.237533][T10320] RAX: ffffffffffffffda RBX: 00007f7a80016090 RCX: 00007f7a7fd9bf79 [ 393.245545][T10320] RDX: 0000000004004004 RSI: 0000200000000040 RDI: 0000000000000003 [ 393.253553][T10320] RBP: 00007f7a80bad090 R08: 0000000000000000 R09: 0000000000000000 [ 393.261563][T10320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.269574][T10320] R13: 00007f7a80016128 R14: 00007f7a80016090 R15: 00007ffd25d6abb8 [ 393.277608][T10320] [ 393.852407][T10338] netlink: 'syz.3.1454': attribute type 3 has an invalid length. [ 393.863886][T10338] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1454'. [ 393.903358][T10336] netlink: 'syz.2.1453': attribute type 25 has an invalid length. [ 393.912093][T10336] netlink: 'syz.2.1453': attribute type 28 has an invalid length. [ 394.424399][T10352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1457'. [ 394.445839][T10352] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1457'. [ 394.583018][T10356] syzkaller0: left promiscuous mode [ 394.589400][T10356] syzkaller0: left allmulticast mode [ 395.533271][T10372] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1463'. [ 395.547187][T10372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.554697][T10372] bridge0: port 3(bond0) entered blocking state [ 395.564797][T10372] bridge0: port 3(bond0) entered disabled state [ 395.579014][T10372] bond0: entered allmulticast mode [ 395.584225][T10372] bond_slave_0: entered allmulticast mode [ 395.623009][T10372] bond_slave_1: entered allmulticast mode [ 395.638604][T10372] batadv0: entered allmulticast mode [ 395.644000][T10372] batadv_slave_0: entered allmulticast mode [ 395.673953][T10372] bridge0: port 3(bond0) entered blocking state [ 395.680532][T10372] bridge0: port 3(bond0) entered forwarding state [ 395.999533][T10383] validate_nla: 2 callbacks suppressed [ 395.999551][T10383] netlink: 'syz.0.1467': attribute type 29 has an invalid length. [ 396.025200][ T9457] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 396.035044][ T9457] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 396.045064][T10383] netlink: 'syz.0.1467': attribute type 29 has an invalid length. [ 396.063794][T10383] netlink: 'syz.0.1467': attribute type 29 has an invalid length. [ 396.137250][T10383] netlink: 'syz.0.1467': attribute type 25 has an invalid length. [ 396.173905][T10383] netlink: 'syz.0.1467': attribute type 28 has an invalid length. [ 396.405597][T10389] netlink: 205812 bytes leftover after parsing attributes in process `syz.3.1469'. [ 396.651843][T10407] syzkaller0: entered promiscuous mode [ 396.657579][T10407] syzkaller0: entered allmulticast mode [ 397.770053][T10416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1477'. [ 397.780844][T10416] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1477'. [ 397.796759][T10416] FAULT_INJECTION: forcing a failure. [ 397.796759][T10416] name failslab, interval 1, probability 0, space 0, times 0 [ 397.821105][T10416] CPU: 1 PID: 10416 Comm: syz.2.1477 Not tainted syzkaller #0 [ 397.828647][T10416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 397.838838][T10416] Call Trace: [ 397.842195][T10416] [ 397.845340][T10416] dump_stack_lvl+0x18c/0x250 [ 397.850070][T10416] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 397.856273][T10416] ? show_regs_print_info+0x20/0x20 [ 397.861520][T10416] ? load_image+0x400/0x400 [ 397.866086][T10416] should_fail_ex+0x39d/0x4d0 [ 397.870829][T10416] should_failslab+0x9/0x20 [ 397.875392][T10416] slab_pre_alloc_hook+0x59/0x310 [ 397.880484][T10416] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 397.886536][T10416] kmem_cache_alloc+0x5a/0x2d0 [ 397.891362][T10416] ? skb_clone+0x1eb/0x370 [ 397.895826][T10416] skb_clone+0x1eb/0x370 [ 397.900109][T10416] ? netlink_trim+0x133/0x220 [ 397.904843][T10416] netlink_trim+0x14a/0x220 [ 397.909395][T10416] netlink_broadcast_filtered+0x80/0x1110 [ 397.915162][T10416] ? __asan_memset+0x22/0x40 [ 397.919802][T10416] ? tcf_action_dump+0x20a/0x290 [ 397.924813][T10416] nlmsg_notify+0xf0/0x1a0 [ 397.929304][T10416] tc_ctl_action+0x856/0xbc0 [ 397.933959][T10416] ? tca_get_fill+0x590/0x590 [ 397.938699][T10416] ? trace_raw_output_contention_end+0xd0/0xd0 [ 397.944903][T10416] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 397.950976][T10416] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 397.956164][T10416] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 397.961339][T10416] ? tca_get_fill+0x590/0x590 [ 397.966066][T10416] rtnetlink_rcv_msg+0x869/0xfa0 [ 397.971081][T10416] ? rtnetlink_bind+0x80/0x80 [ 397.975804][T10416] ? perf_trace_preemptirq_template+0x269/0x330 [ 397.982107][T10416] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 397.988140][T10416] ? lock_chain_count+0x20/0x20 [ 397.993303][T10416] ? __local_bh_enable_ip+0x13a/0x1c0 [ 397.998727][T10416] ? lockdep_hardirqs_on+0x98/0x150 [ 398.003988][T10416] ? __local_bh_enable_ip+0x13a/0x1c0 [ 398.009418][T10416] ? _local_bh_enable+0xa0/0xa0 [ 398.014321][T10416] ? __dev_queue_xmit+0x26b/0x36b0 [ 398.019545][T10416] ? __dev_queue_xmit+0x26b/0x36b0 [ 398.024736][T10416] ? __dev_queue_xmit+0x124f/0x36b0 [ 398.030085][T10416] ? __dev_queue_xmit+0x26b/0x36b0 [ 398.035281][T10416] ? ref_tracker_free+0x690/0x840 [ 398.040365][T10416] netlink_rcv_skb+0x241/0x4d0 [ 398.045188][T10416] ? rtnetlink_bind+0x80/0x80 [ 398.049916][T10416] ? netlink_ack+0x1180/0x1180 [ 398.054747][T10416] ? __lock_acquire+0x7d40/0x7d40 [ 398.059828][T10416] ? netlink_deliver_tap+0x2e/0x1b0 [ 398.065092][T10416] netlink_unicast+0x751/0x8d0 [ 398.069934][T10416] netlink_sendmsg+0x8d0/0xbf0 [ 398.074765][T10416] ? lockdep_hardirqs_on+0x98/0x150 [ 398.080009][T10416] ? netlink_getsockopt+0x590/0x590 [ 398.085258][T10416] ? aa_sock_msg_perm+0x94/0x150 [ 398.090228][T10416] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 398.095547][T10416] ? security_socket_sendmsg+0x80/0xa0 [ 398.101137][T10416] ? netlink_getsockopt+0x590/0x590 [ 398.106397][T10416] ____sys_sendmsg+0x5ba/0x960 [ 398.111216][T10416] ? __asan_memset+0x22/0x40 [ 398.115854][T10416] ? __sys_sendmsg_sock+0x30/0x30 [ 398.120911][T10416] ? __import_iovec+0x5f2/0x850 [ 398.125799][T10416] ? import_iovec+0x73/0xa0 [ 398.130348][T10416] ___sys_sendmsg+0x2a6/0x360 [ 398.135055][T10416] ? __sys_sendmsg+0x2a0/0x2a0 [ 398.139845][T10416] ? perf_trace_preemptirq_template+0x269/0x330 [ 398.146159][T10416] __se_sys_sendmsg+0x1c2/0x2b0 [ 398.151043][T10416] ? __x64_sys_sendmsg+0x80/0x80 [ 398.156013][T10416] ? lockdep_hardirqs_on+0x98/0x150 [ 398.161249][T10416] do_syscall_64+0x55/0xa0 [ 398.165713][T10416] ? clear_bhb_loop+0x40/0x90 [ 398.170413][T10416] ? clear_bhb_loop+0x40/0x90 [ 398.175287][T10416] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 398.181216][T10416] RIP: 0033:0x7ffac6f9bf79 [ 398.185660][T10416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.205344][T10416] RSP: 002b:00007ffac7e49028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.213796][T10416] RAX: ffffffffffffffda RBX: 00007ffac7215fa0 RCX: 00007ffac6f9bf79 [ 398.221821][T10416] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000007 [ 398.229814][T10416] RBP: 00007ffac7e49090 R08: 0000000000000000 R09: 0000000000000000 [ 398.237804][T10416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.245794][T10416] R13: 00007ffac7216038 R14: 00007ffac7215fa0 R15: 00007ffd336a1bd8 [ 398.253798][T10416] [ 398.479727][T10427] netlink: 'syz.1.1481': attribute type 25 has an invalid length. [ 398.505580][T10427] netlink: 'syz.1.1481': attribute type 28 has an invalid length. [ 398.846836][T10440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1484'. [ 398.884716][T10440] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1484'. [ 402.044582][T10454] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1490'. [ 402.069761][T10454] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1490'. [ 402.216558][T10460] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.1493'. [ 403.878600][T10493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1503'. [ 403.896876][T10493] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1503'. [ 404.971175][T10524] netlink: 'syz.0.1510': attribute type 39 has an invalid length. [ 405.707097][T10529] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1512'. [ 405.717903][T10529] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1512'. [ 405.941198][T10536] netlink: 'syz.3.1515': attribute type 21 has an invalid length. [ 405.953519][T10536] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.1515'. [ 406.029713][T10533] netlink: 'syz.0.1514': attribute type 21 has an invalid length. [ 406.245766][T10542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1517'. [ 406.273315][T10543] netlink: 'syz.2.1513': attribute type 9 has an invalid length. [ 406.278067][T10542] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1517'. [ 406.296097][T10543] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1513'. [ 406.423481][T10545] syzkaller0: entered promiscuous mode [ 406.440244][T10545] syzkaller0: entered allmulticast mode [ 406.711985][T10551] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 406.858465][T10558] netlink: 'syz.2.1523': attribute type 3 has an invalid length. [ 406.872124][T10558] netlink: 'syz.2.1523': attribute type 16 has an invalid length. [ 406.891076][T10558] netlink: 'syz.2.1523': attribute type 18 has an invalid length. [ 406.907319][T10558] netlink: 'syz.2.1523': attribute type 20 has an invalid length. [ 407.015499][T10558] netlink: 'syz.2.1523': attribute type 25 has an invalid length. [ 407.268668][T10567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1524'. [ 407.334781][T10567] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1524'. [ 407.410614][T10569] netlink: 'syz.1.1527': attribute type 21 has an invalid length. [ 408.014610][T10577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1529'. [ 408.214323][T10579] FAULT_INJECTION: forcing a failure. [ 408.214323][T10579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.252723][T10579] CPU: 1 PID: 10579 Comm: syz.0.1530 Not tainted syzkaller #0 [ 408.260273][T10579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 408.270373][T10579] Call Trace: [ 408.273694][T10579] [ 408.276665][T10579] dump_stack_lvl+0x18c/0x250 [ 408.281389][T10579] ? show_regs_print_info+0x20/0x20 [ 408.286631][T10579] ? load_image+0x400/0x400 [ 408.291166][T10579] ? __lock_acquire+0x7d40/0x7d40 [ 408.296223][T10579] ? snprintf+0xe9/0x140 [ 408.300497][T10579] should_fail_ex+0x39d/0x4d0 [ 408.305301][T10579] _copy_to_user+0x2f/0xa0 [ 408.309841][T10579] simple_read_from_buffer+0xe7/0x150 [ 408.315290][T10579] proc_fail_nth_read+0x1e8/0x260 [ 408.320355][T10579] ? proc_fault_inject_write+0x360/0x360 [ 408.326025][T10579] ? fsnotify_perm+0x271/0x5e0 [ 408.330820][T10579] ? proc_fault_inject_write+0x360/0x360 [ 408.336509][T10579] vfs_read+0x28b/0x970 [ 408.340708][T10579] ? kernel_read+0x1e0/0x1e0 [ 408.345337][T10579] ? __fget_files+0x28/0x4b0 [ 408.350136][T10579] ? __fget_files+0x28/0x4b0 [ 408.354768][T10579] ? __fget_files+0x43d/0x4b0 [ 408.359481][T10579] ? __fdget_pos+0x2a3/0x330 [ 408.364100][T10579] ? ksys_read+0x75/0x260 [ 408.368480][T10579] ksys_read+0x150/0x260 [ 408.372754][T10579] ? vfs_write+0x990/0x990 [ 408.377224][T10579] ? lockdep_hardirqs_on+0x98/0x150 [ 408.382449][T10579] do_syscall_64+0x55/0xa0 [ 408.386916][T10579] ? clear_bhb_loop+0x40/0x90 [ 408.391632][T10579] ? clear_bhb_loop+0x40/0x90 [ 408.396338][T10579] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 408.402263][T10579] RIP: 0033:0x7f227975c84e [ 408.406724][T10579] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 408.426390][T10579] RSP: 002b:00007f227a6a8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 408.434832][T10579] RAX: ffffffffffffffda RBX: 00007f227a6a96c0 RCX: 00007f227975c84e [ 408.442999][T10579] RDX: 000000000000000f RSI: 00007f227a6a90a0 RDI: 0000000000000009 [ 408.450991][T10579] RBP: 00007f227a6a9090 R08: 0000000000000000 R09: 0000000000000000 [ 408.459115][T10579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 408.467110][T10579] R13: 00007f2279a16038 R14: 00007f2279a15fa0 R15: 00007ffd852a3f68 [ 408.475120][T10579] [ 409.192156][T10604] __nla_validate_parse: 3 callbacks suppressed [ 409.192175][T10604] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.1539'. [ 409.237295][T10604] openvswitch: netlink: Flow key attr not present in new flow. [ 409.565200][T10624] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.1545'. [ 409.654407][T10625] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1545'. [ 410.081439][T10631] validate_nla: 10 callbacks suppressed [ 410.081459][T10631] netlink: 'syz.3.1547': attribute type 21 has an invalid length. [ 410.263964][T10641] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1551'. [ 410.286252][T10641] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1551'. [ 410.327422][T10642] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1551'. [ 410.400592][T10646] netlink: 'syz.0.1548': attribute type 9 has an invalid length. [ 410.422834][T10646] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1548'. [ 410.435845][T10641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1551'. [ 410.468980][T10641] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1551'. [ 410.931084][T10643] delete_channel: no stack [ 410.942849][T10643] delete_channel: no stack [ 410.974933][T10651] syzkaller0: entered promiscuous mode [ 410.983572][T10651] syzkaller0: entered allmulticast mode [ 412.291987][T10666] netlink: 203492 bytes leftover after parsing attributes in process `syz.1.1558'. [ 414.930261][T10670] netlink: 'syz.0.1560': attribute type 21 has an invalid length. [ 415.149159][T10676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1561'. [ 415.185825][T10676] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1561'. [ 415.226689][T10679] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1563'. [ 415.294263][T10679] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1563'. [ 416.445739][T10693] syzkaller0: left promiscuous mode [ 416.451059][T10693] syzkaller0: left allmulticast mode [ 416.660860][T10700] netlink: 'syz.0.1569': attribute type 9 has an invalid length. [ 416.669375][T10700] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1569'. [ 417.052663][T10704] netlink: 'syz.0.1569': attribute type 9 has an invalid length. [ 417.065569][T10704] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1569'. [ 417.372455][T10708] netlink: 'syz.1.1570': attribute type 21 has an invalid length. [ 418.899597][T10717] sock: sock_set_timeout: `syz.3.1572' (pid 10717) tries to set negative timeout [ 423.131975][T10751] netlink: 'syz.3.1582': attribute type 21 has an invalid length. [ 423.185276][T10755] netlink: 'syz.1.1583': attribute type 9 has an invalid length. [ 423.202417][T10755] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1583'. [ 423.350756][T10759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1584'. [ 423.436505][T10759] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1584'. [ 423.638200][T10757] netlink: 'syz.1.1583': attribute type 9 has an invalid length. [ 423.716126][T10757] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1583'. [ 423.863187][T10766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1586'. [ 423.873272][T10766] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1586'. [ 425.028288][T10781] netlink: 'syz.0.1589': attribute type 1 has an invalid length. [ 425.043971][T10781] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1589'. [ 425.770347][T10794] netlink: 'syz.2.1594': attribute type 21 has an invalid length. [ 426.859623][T10797] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1596'. [ 426.907476][T10799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1597'. [ 426.926263][T10799] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1597'. [ 426.941113][T10799] tc_dump_action: action bad kind [ 427.074346][T10805] netlink: 'syz.3.1600': attribute type 9 has an invalid length. [ 427.120735][T10807] netlink: 'syz.1.1601': attribute type 33 has an invalid length. [ 427.497263][T10811] netlink: 'syz.3.1600': attribute type 9 has an invalid length. [ 428.458639][T10820] __nla_validate_parse: 5 callbacks suppressed [ 428.458655][T10820] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1604'. [ 433.931730][T10834] netlink: 'syz.0.1608': attribute type 21 has an invalid length. [ 433.940564][T10837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1609'. [ 433.954115][T10837] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1609'. [ 433.963684][T10839] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1610'. [ 433.993140][T10839] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1610'. [ 434.666892][T10858] netlink: 'syz.3.1616': attribute type 29 has an invalid length. [ 434.701808][T10858] netlink: 'syz.3.1616': attribute type 29 has an invalid length. [ 434.720370][T10863] netlink: 'syz.3.1616': attribute type 29 has an invalid length. [ 434.811466][T10862] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1618'. [ 434.997252][T10868] delete_channel: no stack [ 435.002836][T10868] delete_channel: no stack [ 435.199740][ T5778] Bluetooth: hci1: unexpected event 0x16 length: 151 > 6 [ 436.402671][T10882] netlink: 'syz.2.1623': attribute type 21 has an invalid length. [ 436.870071][T10890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1626'. [ 436.910476][T10890] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1626'. [ 436.951307][T10890] tc_dump_action: action bad kind [ 437.147217][T10896] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1628'. [ 437.171794][T10896] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1628'. [ 437.561869][T10911] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1631'. [ 437.974366][T10913] netlink: 'syz.0.1634': attribute type 21 has an invalid length. [ 437.996941][T10913] netlink: 'syz.0.1634': attribute type 6 has an invalid length. [ 439.228872][T10924] netlink: 'syz.2.1637': attribute type 21 has an invalid length. [ 439.370419][T10930] dummy0: entered promiscuous mode [ 439.639435][T10936] __nla_validate_parse: 1 callbacks suppressed [ 439.639544][T10936] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1643'. [ 440.305712][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.312114][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.937113][T10957] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1649'. [ 441.062406][T10959] netlink: 'syz.2.1652': attribute type 10 has an invalid length. [ 441.141691][T10959] dummy0: entered promiscuous mode [ 441.171602][T10959] dummy0: entered allmulticast mode [ 441.202627][T10959] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 441.228107][T10960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1650'. [ 441.237693][T10960] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1650'. [ 441.250427][T10956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1650'. [ 441.275217][T10956] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1650'. [ 441.301280][T10954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1651'. [ 441.325690][T10954] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1651'. [ 441.462698][T10969] netlink: 'syz.3.1654': attribute type 21 has an invalid length. [ 441.659703][T10973] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1655'. [ 442.802076][T11001] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1663'. [ 442.856006][T11003] netlink: 'syz.3.1664': attribute type 21 has an invalid length. [ 443.432274][T11011] netlink: 'syz.0.1666': attribute type 21 has an invalid length. [ 444.918334][T11030] __nla_validate_parse: 3 callbacks suppressed [ 444.918375][T11030] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1675'. [ 445.036795][T11040] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.1678'. [ 445.094124][T11040] netlink: 'syz.3.1678': attribute type 23 has an invalid length. [ 445.195807][T11045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1678'. [ 445.205160][T11045] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1678'. [ 445.311938][T11047] netlink: 'syz.0.1679': attribute type 21 has an invalid length. [ 445.733890][T11051] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1681'. [ 446.492096][T11067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1688'. [ 446.504706][T11067] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1688'. [ 447.473811][T11081] netlink: 'syz.1.1690': attribute type 10 has an invalid length. [ 447.482844][T11081] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1690'. [ 448.472251][T11084] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1692'. [ 448.490815][T11085] netlink: 'syz.0.1693': attribute type 21 has an invalid length. [ 448.730339][T11100] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1695'. [ 449.862161][T11117] can: request_module (can-proto-0) failed. [ 450.406370][T11122] __nla_validate_parse: 3 callbacks suppressed [ 450.406443][T11122] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1705'. [ 450.953900][T11129] netlink: 'syz.0.1706': attribute type 21 has an invalid length. [ 451.243327][T11133] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1707'. [ 451.268694][T11133] netlink: 'syz.1.1707': attribute type 21 has an invalid length. [ 451.279976][T11133] netlink: 'syz.1.1707': attribute type 6 has an invalid length. [ 451.291019][T11133] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1707'. [ 451.519663][T11142] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1712'. [ 451.531860][T11142] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1712'. [ 452.904327][T11157] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1717'. [ 453.561701][T11162] netlink: 'syz.0.1719': attribute type 21 has an invalid length. [ 453.623958][T11164] netlink: 'syz.2.1720': attribute type 10 has an invalid length. [ 453.957373][T11179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1725'. [ 453.971542][T11179] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1725'. [ 454.451875][T11190] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1728'. [ 454.961744][T11193] netlink: 'syz.0.1729': attribute type 5 has an invalid length. [ 455.466404][T11206] netlink: 'syz.2.1731': attribute type 21 has an invalid length. [ 456.462555][T11213] netlink: 'syz.0.1737': attribute type 4 has an invalid length. [ 456.500417][T11213] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1737'. [ 456.542093][T11210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1735'. [ 456.596180][T11210] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1735'. [ 456.632147][T11213] netlink: 'syz.0.1737': attribute type 12 has an invalid length. [ 456.651625][T11213] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1737'. [ 456.674209][T11217] netlink: 'syz.2.1738': attribute type 153 has an invalid length. [ 456.686946][T11217] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1738'. [ 457.226162][T11238] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1742'. [ 458.056356][T11243] netlink: 'syz.2.1746': attribute type 21 has an invalid length. [ 458.209650][T11254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1748'. [ 458.221608][T11254] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1748'. [ 459.156488][T11262] pim6reg1: entered promiscuous mode [ 459.161885][T11262] pim6reg1: entered allmulticast mode [ 459.182474][T11266] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1753'. [ 459.363219][T11269] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1752'. [ 460.578269][T11287] netlink: 'syz.1.1760': attribute type 21 has an invalid length. [ 461.508988][T11297] netlink: 'syz.0.1763': attribute type 21 has an invalid length. [ 461.535497][T11297] IPv6: NLM_F_CREATE should be specified when creating new route [ 461.794129][T11308] __nla_validate_parse: 6 callbacks suppressed [ 461.794152][T11308] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1766'. [ 462.245107][T11315] netlink: 'syz.0.1768': attribute type 29 has an invalid length. [ 462.259074][T11315] netlink: 'syz.0.1768': attribute type 29 has an invalid length. [ 463.835611][ T5778] Bluetooth: hci0: unexpected event 0x07 length: 15 < 255 [ 463.890725][T11331] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.1775'. [ 463.924423][T11326] netlink: 'syz.2.1773': attribute type 21 has an invalid length. [ 463.971418][T11328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1772'. [ 463.990170][T11328] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1772'. [ 464.851245][T11334] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1777'. [ 466.484935][ T5778] Bluetooth: hci3: unexpected event 0x07 length: 15 < 255 [ 466.500854][T11359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1785'. [ 466.510853][T11359] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1785'. [ 466.597084][T11361] netlink: 'syz.3.1786': attribute type 21 has an invalid length. [ 466.899916][T11369] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1789'. [ 467.923024][T11374] netlink: 'syz.2.1792': attribute type 1 has an invalid length. [ 467.932730][T11374] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1792'. [ 469.212115][ T5778] Bluetooth: hci3: unexpected event 0x07 length: 15 < 255 [ 469.258818][T11395] netlink: 'syz.3.1798': attribute type 21 has an invalid length. [ 469.310423][T11399] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1799'. [ 469.501421][T11405] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1801'. [ 471.270501][T11430] netlink: 'syz.3.1809': attribute type 10 has an invalid length. [ 471.302331][ T5778] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 471.672869][T11430] team0: Port device geneve1 added [ 471.687094][T11437] netlink: 'syz.0.1811': attribute type 21 has an invalid length. [ 471.796376][T11440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1812'. [ 471.813019][T11440] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1812'. [ 471.887014][T11442] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1813'. [ 473.876445][ T5778] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 473.937334][T11468] netlink: 'syz.2.1823': attribute type 21 has an invalid length. [ 473.984522][T11473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1825'. [ 474.006616][T11473] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1825'. [ 474.038324][T11475] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1826'. [ 474.116578][T11477] netlink: 'syz.3.1827': attribute type 64 has an invalid length. [ 474.314934][T11483] C: renamed from team_slave_0 [ 474.339707][T11483] netlink: 'syz.1.1831': attribute type 3 has an invalid length. [ 474.356591][T11483] netlink: 'syz.1.1831': attribute type 1 has an invalid length. [ 474.365842][T11483] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1831'. [ 474.385070][T11483] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 476.052203][ T5778] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 476.094182][T11499] netlink: 'syz.1.1836': attribute type 21 has an invalid length. [ 476.126036][T11503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1838'. [ 476.163157][T11503] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1838'. [ 476.351510][T11510] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1840'. [ 477.659550][T11530] netlink: 'syz.1.1846': attribute type 10 has an invalid length. [ 478.819493][T11530] ` (unregistering): Port device C removed [ 478.879621][T11530] ` (unregistering): Port device team_slave_1 removed [ 478.941084][T11536] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 478.955722][T11536] pim6reg1: linktype set to 774 [ 478.996366][ T5778] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 479.038121][T11542] netlink: 'syz.0.1850': attribute type 21 has an invalid length. [ 479.105614][T11544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1851'. [ 479.124142][T11544] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1851'. [ 479.316418][T11549] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1853'. [ 480.954280][ T5778] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 480.982925][T11570] netlink: 'syz.0.1862': attribute type 21 has an invalid length. [ 481.111992][T11575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1864'. [ 481.140069][T11575] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1864'. [ 481.277165][T11584] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1867'. [ 482.666825][T11605] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1874'. [ 482.697451][T11605] veth0_to_bond: entered promiscuous mode [ 482.774941][ T5778] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 482.837498][T11609] netlink: 'syz.3.1875': attribute type 21 has an invalid length. [ 483.177110][T11618] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1880'. [ 483.590131][T11628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1884'. [ 483.623771][T11628] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1884'. [ 484.865549][ T5778] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 484.924541][T11650] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1892'. [ 484.955610][T11651] netlink: 'syz.2.1889': attribute type 21 has an invalid length. [ 485.526020][T11664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1898'. [ 485.545505][T11664] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1898'. [ 486.355239][T11681] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1903'. [ 486.890922][ T5778] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 486.959058][T11684] netlink: 'syz.1.1905': attribute type 21 has an invalid length. [ 487.057691][T11693] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 487.065403][T11693] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 487.078164][T11693] batman_adv: batadv0: Interface activated: netdevsim0 [ 487.361904][T11700] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1910'. [ 487.465608][T11700] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1910'. [ 501.729774][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.741671][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.977491][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 505.000134][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 505.010013][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 505.025839][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 505.033711][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 505.042632][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 505.287805][ T5778] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 505.298123][ T5778] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 505.306482][ T5778] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 505.315351][ T5778] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 505.323716][ T5778] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 505.331752][ T5778] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 505.531370][ T5778] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 505.540891][ T5778] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 505.549369][ T5778] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 505.557716][ T5778] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 505.566361][ T5777] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 505.579758][ T5777] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 505.782306][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 505.792086][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 505.805252][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 505.824973][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 505.833013][ T51] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 505.845961][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 506.485099][T11721] chnl_net:caif_netlink_parms(): no params data found [ 506.645917][T11724] chnl_net:caif_netlink_parms(): no params data found [ 506.902472][T11728] chnl_net:caif_netlink_parms(): no params data found [ 506.984602][T11730] chnl_net:caif_netlink_parms(): no params data found [ 507.085647][ T51] Bluetooth: hci4: command tx timeout [ 507.162782][T11721] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.171098][T11721] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.186023][T11721] bridge_slave_0: entered allmulticast mode [ 507.193612][T11721] bridge_slave_0: entered promiscuous mode [ 507.304283][T11721] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.325230][T11721] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.334442][T11721] bridge_slave_1: entered allmulticast mode [ 507.347249][T11721] bridge_slave_1: entered promiscuous mode [ 507.405561][ T51] Bluetooth: hci5: command tx timeout [ 507.551931][T11728] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.568172][T11728] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.577592][T11728] bridge_slave_0: entered allmulticast mode [ 507.594949][T11728] bridge_slave_0: entered promiscuous mode [ 507.616952][T11721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.643541][T11721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.653263][ T51] Bluetooth: hci6: command tx timeout [ 507.672993][T11724] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.683492][T11724] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.697045][T11724] bridge_slave_0: entered allmulticast mode [ 507.712855][T11724] bridge_slave_0: entered promiscuous mode [ 507.730853][T11728] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.749163][T11728] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.765902][T11728] bridge_slave_1: entered allmulticast mode [ 507.773372][T11728] bridge_slave_1: entered promiscuous mode [ 507.842767][T11724] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.862191][T11724] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.870038][T11724] bridge_slave_1: entered allmulticast mode [ 507.887107][ T51] Bluetooth: hci7: command tx timeout [ 507.895161][T11724] bridge_slave_1: entered promiscuous mode [ 507.990411][T11721] team0: Port device team_slave_0 added [ 508.086985][T11730] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.103815][T11730] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.111917][T11730] bridge_slave_0: entered allmulticast mode [ 508.128891][T11730] bridge_slave_0: entered promiscuous mode [ 508.150784][T11721] team0: Port device team_slave_1 added [ 508.207666][T11724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.231487][T11728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.252849][T11730] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.264414][T11730] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.282287][T11730] bridge_slave_1: entered allmulticast mode [ 508.290560][T11730] bridge_slave_1: entered promiscuous mode [ 508.342380][T11724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.363546][T11728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.165481][ T51] Bluetooth: hci4: command tx timeout [ 509.485490][ T51] Bluetooth: hci5: command tx timeout [ 509.725549][ T51] Bluetooth: hci6: command tx timeout [ 509.965609][ T51] Bluetooth: hci7: command tx timeout [ 511.245557][ T51] Bluetooth: hci4: command tx timeout [ 511.565570][ T51] Bluetooth: hci5: command tx timeout [ 511.805501][ T51] Bluetooth: hci6: command tx timeout [ 512.045563][ T51] Bluetooth: hci7: command tx timeout [ 513.330752][ T51] Bluetooth: hci4: command tx timeout [ 513.645643][ T51] Bluetooth: hci5: command tx timeout [ 513.890406][ T51] Bluetooth: hci6: command tx timeout [ 514.125719][ T51] Bluetooth: hci7: command tx timeout [ 563.174068][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.180855][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.597422][ T5777] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 565.609037][ T5777] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 565.617426][ T5777] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 565.625839][ T5777] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 565.633996][ T5777] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 565.645638][ T5777] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 565.750916][ T51] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 565.760423][ T51] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 565.769087][ T51] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 565.777337][ T51] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 565.785167][ T51] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 565.793555][ T51] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 565.936421][ T5777] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 565.946913][ T5777] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 565.955066][ T5777] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 565.963862][ T5777] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 565.972258][ T5777] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 565.980226][ T5777] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 566.102938][ T51] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 566.112585][ T51] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 566.125974][ T51] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 566.134284][ T51] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 566.147767][ T51] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 566.155612][ T51] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 567.725689][ T5777] Bluetooth: hci8: command tx timeout [ 567.888102][ T5777] Bluetooth: hci9: command tx timeout [ 568.045865][ T5777] Bluetooth: hci10: command tx timeout [ 568.205749][ T5777] Bluetooth: hci11: command tx timeout [ 569.805588][ T5777] Bluetooth: hci8: command tx timeout [ 569.967923][ T5777] Bluetooth: hci9: command tx timeout [ 570.125679][ T5777] Bluetooth: hci10: command tx timeout [ 570.285562][ T5777] Bluetooth: hci11: command tx timeout [ 571.885592][ T5777] Bluetooth: hci8: command tx timeout [ 572.051774][ T5777] Bluetooth: hci9: command tx timeout [ 572.205661][ T5777] Bluetooth: hci10: command tx timeout [ 572.365534][ T5777] Bluetooth: hci11: command tx timeout [ 573.965510][ T5777] Bluetooth: hci8: command tx timeout [ 574.132078][ T5777] Bluetooth: hci9: command tx timeout [ 574.285630][ T5777] Bluetooth: hci10: command tx timeout [ 574.445511][ T5777] Bluetooth: hci11: command tx timeout [ 592.335320][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 592.342342][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11698/1:b..l [ 592.350813][ C1] rcu: (detected by 1, t=10502 jiffies, g=39061, q=2734 ncpus=2) [ 592.358828][ C1] task:syz.1.1911 state:R running task stack:24616 pid:11698 ppid:5772 flags:0x00004006 [ 592.370640][ C1] Call Trace: [ 592.373976][ C1] [ 592.376951][ C1] __schedule+0x1553/0x45a0 [ 592.381525][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 592.387578][ C1] ? asan.module_dtor+0x20/0x20 [ 592.392488][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 592.397754][ C1] preempt_schedule_irq+0xbf/0x150 [ 592.402917][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 592.408695][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 592.414566][ C1] irqentry_exit+0x67/0x70 [ 592.419020][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 592.425034][ C1] RIP: 0010:__local_bh_enable_ip+0x142/0x1c0 [ 592.431140][ C1] Code: 8a e8 92 0e 32 09 65 66 8b 05 ca 51 b1 7e 66 85 c0 75 54 bf 01 00 00 00 e8 cb 1a 0a 00 e8 46 1f 3b 00 fb 65 8b 05 96 51 b1 7e <85> c0 75 05 e8 15 39 ae ff 48 c7 04 24 0e 36 e0 45 4b c7 04 37 00 [ 592.450876][ C1] RSP: 0018:ffffc9001a38f7e0 EFLAGS: 00000282 [ 592.456984][ C1] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 68d94d7eac440800 [ 592.464990][ C1] RDX: dffffc0000000000 RSI: ffffffff8acac900 RDI: ffffffff8b1c81e0 [ 592.472996][ C1] RBP: ffffc9001a38f870 R08: ffffffff8e8addaf R09: 1ffffffff1d15bb5 [ 592.481049][ C1] R10: dffffc0000000000 R11: fffffbfff1d15bb6 R12: ffffffff88b4bdc6 [ 592.489065][ C1] R13: dffffc0000000000 R14: dffffc0000000000 R15: 1ffff92003471efc [ 592.497087][ C1] ? bpf_test_run_xdp_live+0x4d6/0x1b20 [ 592.502700][ C1] ? _local_bh_enable+0xa0/0xa0 [ 592.507605][ C1] ? rcu_is_watching+0x15/0xb0 [ 592.512420][ C1] ? netif_receive_skb_list+0xc0/0x3f0 [ 592.517936][ C1] bpf_test_run_xdp_live+0x18bc/0x1b20 [ 592.523468][ C1] ? bpf_test_run_xdp_live+0x4d6/0x1b20 [ 592.529094][ C1] ? xdp_convert_md_to_buff+0x330/0x330 [ 592.534742][ C1] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 592.541040][ C1] ? bpf_prog_change_xdp+0x12/0x30 [ 592.546203][ C1] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 592.551674][ C1] ? dev_put+0x80/0x80 [ 592.555799][ C1] ? dev_put+0x80/0x80 [ 592.559912][ C1] bpf_prog_test_run+0x321/0x390 [ 592.564899][ C1] __sys_bpf+0x49d/0x890 [ 592.569183][ C1] ? bpf_link_show_fdinfo+0x390/0x390 [ 592.574625][ C1] ? lock_chain_count+0x20/0x20 [ 592.579510][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 592.585630][ C1] __x64_sys_bpf+0x7c/0x90 [ 592.590096][ C1] do_syscall_64+0x55/0xa0 [ 592.594589][ C1] ? clear_bhb_loop+0x40/0x90 [ 592.599312][ C1] ? clear_bhb_loop+0x40/0x90 [ 592.604033][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 592.609977][ C1] RIP: 0033:0x7f7a7fd9bf79 [ 592.614527][ C1] RSP: 002b:00007f7a80bce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 592.623185][ C1] RAX: ffffffffffffffda RBX: 00007f7a80015fa0 RCX: 00007f7a7fd9bf79 [ 592.631212][ C1] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 592.639226][ C1] RBP: 00007f7a7fe327e0 R08: 0000000000000000 R09: 0000000000000000 [ 592.647238][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 592.655246][ C1] R13: 00007f7a80016038 R14: 00007f7a80015fa0 R15: 00007ffd25d6abb8 [ 592.663277][ C1] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)