last executing test programs: 4.275362185s ago: executing program 3 (id=552): r0 = syz_clone(0x1000, &(0x7f0000000000)="2de5ef43a4", 0x5, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="41f96b3e2e66eb0d8385c14db9a17a15c04bccb349be2614fb464233b95938dff9395e14f98704054a8c6c06b621d45bc7768c9c93629aba5c7789d88e15bef3f609ea1a4c40bf3054af4490193d37432385049ea8e0c08ec965f1480f21f874749b6b64ef5590d67bed1a") r1 = syz_open_procfs$namespace(r0, &(0x7f0000000140)='ns/pid_for_children\x00') r2 = socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000500)={&(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000240)="10ff9d542d5506dd051ee94ca18a6a39947aa644210d50d92fd3bf913e1397a7c2938bc84aa5c1bd9f7f70274d4be4033008a34e3a0205183e7038ad34f826a1b9d9e4e8a9f5a837a4b96088c492f8058eec4237be152b2a49573d8b019ac0a2462ea38934f0ace1ec877ff2f23f3d992c3f7134b24ec779832a803ca3f29fc90bdf701472f316ce36234b8bb6ab2a333c31ab2705f8afe475fe012d1c277cf7f76dda999ed6b14e9f3998b6fc1e921627e008bbc09cdf", 0xb7}, {&(0x7f0000000300)="f9d6461b4a9467b8d407509fed36605c11b8f977e5185968aa9a01bda94a161ea61080d8d9025b549128f625b36f30b27f34f37ff0be105ca515392950dceaaf17bd96c4c1e2431643178bb8e40e5aa03fee807b63633feba37aa78794bc21b8db9aac988832801be449f867d8c75ca88488dd377f21a2f539b215067b83c0ef349c6cf1c2bb9052ba689a936aa595628c3792a48628c351459a7b6171b910b7944e9097c0a187cbef21448f309caca24f43d1541e4d52ca43a25ee420ea9f667683518c17bda30dc8640332", 0xcc}, {&(0x7f0000000400)="9646a62a78004ad0036a457bd03fd95a0abffeb1d824d515f68660d63fd457ea3210d299d42da9dce7b07e8be7eae3b9e13204f52b847d24", 0x38}], 0x3, &(0x7f0000000480)=[@rights={{0x2c, 0x1, 0x1, [r2, r2, r2, r2, r2, r1, r1]}}, @rights={{0x20, 0x1, 0x1, [r2, r1, r2, r1]}}, @rights={{0x10}}], 0x60, 0x41}, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_clone(0x4000, &(0x7f00000017c0)="a047e40a7bf1242253b06fbf1f6a184c966806dc522fb88e2e7718711eaf4246aa23986666870e205747a2df259534d401cf60aa6b6ade640c6c9a23953409cd1ded28b7a37f2c76b4dbde54d5aa4651514e82ad684bf6df705fb12186cec76097579aff23b1d4", 0x67, &(0x7f0000001840), &(0x7f0000001880), &(0x7f00000018c0)="dee1b4ba2ae304b8c879e20d7f0880f80e865d56f43ba0dc7a734c8afb845379f42e") r7 = bpf$ITER_CREATE(0x21, &(0x7f0000001900), 0x8) sendmsg$unix(r5, &(0x7f00000019c0)={&(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001780)=[{&(0x7f0000000600)="82cf3caa526fd0f33abad9be74f337f9497b170adc08e7125b9f96ed91d1be5eef2b70ef167e78657aec1d221cc15eeea3072c8e16798bbcf83d948fcdbf41fe29bb06cdcefc5b972861a672f0813f77d7fa0335d9fad1551c2e10102e95695f706c338d5768fce0e1de928e4820a2c06a0f8dc3ce368f48c5475b0367094b594f71437a9f501aba23b4eb143b2408e493bb938491aadeb3c1572e457602691dae27bd126c597773d88070e56e38c9d66a39d3254433c5b1bc95df1818d0f2c085bea3bbb72959e5501977710a51d72f4a61e54d1bf7263b1bcacbfa0f", 0xdd}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)="ea1610ca113ff8fafc763dbb100619ca9c269db2b0e8f546a22a6663ff0ca3f32c29834d8d78a10035c5ef6e0203531f9a4d3eb56bbf8026467ae987ebf4d5b7553c8bee7e0b416d050ab6154e5b3028eee52ef30659eb52558bf50d8be1", 0x5e}], 0x3, &(0x7f0000001940)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xee00, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r7, r4]}}], 0x58, 0x20000005}, 0x1010) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001a40)=@o_path={&(0x7f0000001a00)='./file1\x00', 0x0, 0xc018, r5}, 0x18) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x11, 0x6, &(0x7f0000001a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf}, [@call={0x85, 0x0, 0x0, 0x50}, @map_fd={0x18, 0x1, 0x1, 0x0, r7}]}, &(0x7f0000001ac0)='GPL\x00', 0xa, 0x6b, &(0x7f0000001b00)=""/107, 0x41100, 0x9, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001b80)={0x3, 0xd, 0x3, 0x401}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001bc0)=[r7], &(0x7f0000001c00)=[{0x2, 0x3, 0x4, 0xc}, {0x3, 0x5, 0xd, 0xb}, {0x0, 0x2, 0x10, 0x2ec549ebe3ba7b63}], 0x10, 0x8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001fc0)={r8, 0xe0, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001d00)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9, &(0x7f0000001d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xae, &(0x7f0000001dc0)=[{}], 0x8, 0x10, &(0x7f0000001e00), &(0x7f0000001e40), 0x8, 0x90, 0x8, 0x8, &(0x7f0000001e80)}}, 0x10) r9 = syz_open_procfs$namespace(r0, &(0x7f0000002000)='ns/cgroup\x00') ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000002080)={r4}) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f00000020c0)={r2, r8}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002180)={r7, 0x58, &(0x7f0000002100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000021c0)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x4, '\x00', r10, r7, 0x4, 0x4, 0x2}, 0x50) openat$cgroup_procs(r9, &(0x7f0000002240)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_int(r7, &(0x7f0000002280)='cpu.weight\x00', 0x2, 0x0) r11 = openat$cgroup(r7, &(0x7f00000022c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r11, &(0x7f0000002300)='freezer.self_freezing\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002400)={&(0x7f00000023c0)='f2fs_iostat_latency\x00', r7, 0x0, 0x4}, 0x18) 3.863202918s ago: executing program 3 (id=557): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES8=r2], 0x12) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={r0, r1}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40}, 0x94) socketpair(0x1, 0x801, 0x0, 0x0) close(0xffffffffffffffff) socket$kcm(0x10, 0x400000007, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x891c, 0x0) r4 = socket$kcm(0x2, 0x5, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xf, 0x10, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) r10 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r10, 0x6, 0x17, &(0x7f0000000200)=r10, 0x21) sendmsg$inet(r4, &(0x7f0000000300)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1}, 0x3e8) 3.125135748s ago: executing program 0 (id=563): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5, 0x4, 0x5}, {0x10000002, 0x5, 0xc}]}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) getpid() r2 = socket$kcm(0x2c, 0x3, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000080), &(0x7f00000001c0)=r2}, 0x20) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0003000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400070404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) close(r6) close(r0) r8 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) close(r8) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r8, 0x84, 0x64, &(0x7f0000000000)=r11, 0x10) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0xdffb, @local}, 0x10, 0x0}, 0xc8802) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r12, 0x10) 3.016454976s ago: executing program 3 (id=564): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5, 0x4, 0x5}, {0x10000002, 0x5, 0xc}]}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) getpid() r2 = socket$kcm(0x2c, 0x3, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000080), &(0x7f00000001c0)=r2}, 0x20) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0003000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400070404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) close(r6) close(r0) r8 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) close(r8) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r8, 0x84, 0x64, &(0x7f0000000000)=r11, 0x10) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0xdffb, @local}, 0x10, 0x0}, 0xc8802) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r12, 0x10) 2.607885729s ago: executing program 2 (id=566): r0 = syz_clone(0x1000, &(0x7f0000000000)="2de5ef43a4", 0x5, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="41f96b3e2e66eb0d8385c14db9a17a15c04bccb349be2614fb464233b95938dff9395e14f98704054a8c6c06b621d45bc7768c9c93629aba5c7789d88e15bef3f609ea1a4c40bf3054af4490193d37432385049ea8e0c08ec965f1480f21f874749b6b64ef5590d67bed1a") r1 = syz_open_procfs$namespace(r0, &(0x7f0000000140)='ns/pid_for_children\x00') r2 = socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000500)={&(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000240)="10ff9d542d5506dd051ee94ca18a6a39947aa644210d50d92fd3bf913e1397a7c2938bc84aa5c1bd9f7f70274d4be4033008a34e3a0205183e7038ad34f826a1b9d9e4e8a9f5a837a4b96088c492f8058eec4237be152b2a49573d8b019ac0a2462ea38934f0ace1ec877ff2f23f3d992c3f7134b24ec779832a803ca3f29fc90bdf701472f316ce36234b8bb6ab2a333c31ab2705f8afe475fe012d1c277cf7f76dda999ed6b14e9f3998b6fc1e921627e008bbc09cdf", 0xb7}, {&(0x7f0000000300)="f9d6461b4a9467b8d407509fed36605c11b8f977e5185968aa9a01bda94a161ea61080d8d9025b549128f625b36f30b27f34f37ff0be105ca515392950dceaaf17bd96c4c1e2431643178bb8e40e5aa03fee807b63633feba37aa78794bc21b8db9aac988832801be449f867d8c75ca88488dd377f21a2f539b215067b83c0ef349c6cf1c2bb9052ba689a936aa595628c3792a48628c351459a7b6171b910b7944e9097c0a187cbef21448f309caca24f43d1541e4d52ca43a25ee420ea9f667683518c17bda30dc8640332", 0xcc}, {&(0x7f0000000400)="9646a62a78004ad0036a457bd03fd95a0abffeb1d824d515f68660d63fd457ea3210d299d42da9dce7b07e8be7eae3b9e13204f52b847d24", 0x38}], 0x3, &(0x7f0000000480)=[@rights={{0x2c, 0x1, 0x1, [r2, r2, r2, r2, r2, r1, r1]}}, @rights={{0x20, 0x1, 0x1, [r2, r1, r2, r1]}}, @rights={{0x10}}], 0x60, 0x41}, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_clone(0x4000, &(0x7f00000017c0)="a047e40a7bf1242253b06fbf1f6a184c966806dc522fb88e2e7718711eaf4246aa23986666870e205747a2df259534d401cf60aa6b6ade640c6c9a23953409cd1ded28b7a37f2c76b4dbde54d5aa4651514e82ad684bf6df705fb12186cec76097579aff23b1d4", 0x67, &(0x7f0000001840), &(0x7f0000001880), &(0x7f00000018c0)="dee1b4ba2ae304b8c879e20d7f0880f80e865d56f43ba0dc7a734c8afb845379f42e") r7 = bpf$ITER_CREATE(0x21, &(0x7f0000001900), 0x8) sendmsg$unix(r5, &(0x7f00000019c0)={&(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001780)=[{&(0x7f0000000600)="82cf3caa526fd0f33abad9be74f337f9497b170adc08e7125b9f96ed91d1be5eef2b70ef167e78657aec1d221cc15eeea3072c8e16798bbcf83d948fcdbf41fe29bb06cdcefc5b972861a672f0813f77d7fa0335d9fad1551c2e10102e95695f706c338d5768fce0e1de928e4820a2c06a0f8dc3ce368f48c5475b0367094b594f71437a9f501aba23b4eb143b2408e493bb938491aadeb3c1572e457602691dae27bd126c597773d88070e56e38c9d66a39d3254433c5b1bc95df1818d0f2c085bea3bbb72959e5501977710a51d72f4a61e54d1bf7263b1bcacbfa0f", 0xdd}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)="ea1610ca113ff8fafc763dbb100619ca9c269db2b0e8f546a22a6663ff0ca3f32c29834d8d78a10035c5ef6e0203531f9a4d3eb56bbf8026467ae987ebf4d5b7553c8bee7e0b416d050ab6154e5b3028eee52ef30659eb52558bf50d8be1", 0x5e}], 0x3, &(0x7f0000001940)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xee00, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r7, r4]}}], 0x58, 0x20000005}, 0x1010) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001a40)=@o_path={&(0x7f0000001a00)='./file1\x00', 0x0, 0xc018, r5}, 0x18) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x11, 0x6, &(0x7f0000001a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf}, [@call={0x85, 0x0, 0x0, 0x50}, @map_fd={0x18, 0x1, 0x1, 0x0, r7}]}, &(0x7f0000001ac0)='GPL\x00', 0xa, 0x6b, &(0x7f0000001b00)=""/107, 0x41100, 0x9, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001b80)={0x3, 0xd, 0x3, 0x401}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001bc0)=[r7], &(0x7f0000001c00)=[{0x2, 0x3, 0x4, 0xc}, {0x3, 0x5, 0xd, 0xb}, {0x0, 0x2, 0x10, 0x2ec549ebe3ba7b63}], 0x10, 0x8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001fc0)={r8, 0xe0, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001d00)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9, &(0x7f0000001d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xae, &(0x7f0000001dc0)=[{}], 0x8, 0x10, &(0x7f0000001e00), &(0x7f0000001e40), 0x8, 0x90, 0x8, 0x8, &(0x7f0000001e80)}}, 0x10) r9 = syz_open_procfs$namespace(r0, &(0x7f0000002000)='ns/cgroup\x00') ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000002080)={r4}) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f00000020c0)={r2, r8}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002180)={r7, 0x58, &(0x7f0000002100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000021c0)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x4, '\x00', r10, r7, 0x4, 0x4, 0x2}, 0x50) openat$cgroup_procs(r9, &(0x7f0000002240)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_int(r7, &(0x7f0000002280)='cpu.weight\x00', 0x2, 0x0) r11 = openat$cgroup(r7, &(0x7f00000022c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r11, &(0x7f0000002300)='freezer.self_freezing\x00', 0x0, 0x0) 2.46741881s ago: executing program 1 (id=567): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0xfe33) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000003680)=""/4097, 0x1001}, {&(0x7f0000004700)=""/4062, 0xfde}, {&(0x7f0000000b80)=""/4120, 0x1018}, {&(0x7f0000000200)=""/154, 0x9a}, {&(0x7f00000002c0)=""/90, 0x5a}, {&(0x7f0000000140)=""/129, 0x81}], 0x6}, 0x0) 2.303679214s ago: executing program 2 (id=568): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'io'}]}, 0x4) (fail_nth: 3) 2.183333464s ago: executing program 0 (id=569): socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000700)="6ed47158793a18c6a3901567910cfa646a35d046d4bed15c50a0dd1590aace6f9efa61848a7243e8c1e2fa8ef3f5c923550a2c4d3e297078e60a6485c7a1d2e9f4aa786a651ecc6dfd08722c72df900978fbbf857594b4d4701a42ed8e913eefd01fd1fccef9cb67fa67ad83f88b2e9abd09e3830960c064a6aa90da01c87671f53fed940cbb249a5bc5199c957fbee894cda6b554f41e933aedf680e8ec667b0e466446ef9148acc54716f1ca6d333b616e7a4cf7722c5f8f49f4845290ba24fc", 0xc1}, {&(0x7f0000000ac0)="d91d8b32ed499d00f5e183f74c234e273b7dca7ae48d2bbbb54b6e406daa45c05be8ec943eec10d0e19264d09f12fac698a54da00e6f5da20d586b2c5a363fa1c6da3a25153d91f741e899baeb2813c9087f3f6534647716136f31f6449a8ad4318dc7e5b71159cdb4c14a544c0e09daca2efb860b1ee2ad1774a01e3a78262e23920fcf5acf186752ebd96c29bfc3c863ebd565c0bcd829efce8fd8107db5401ce794c4ff11f1a23acf082ce0a3ddea076e26fb5f95e9140b4fdb76c9321dda89d7adbc2ce77e13fdd2bfa576bb76a12c937cb53dfb68bd0947f308", 0xdc}, {&(0x7f0000000200)="aae917860514518489cec3ab16bc4e7eb22ea76f5d0af05abaa539f067465739882df1940eacf00aa05bd064319b3e1cb60715", 0x33}, {&(0x7f0000000bc0)="ceeeb1f6a4f09a5cc332a94321b5d263a7cc7dadc727e108121849b2ae85ff954285ef7b6da73f7dde582874e5ce809985c72fab541830774880a921ea9fc409e7cf7a28e4f90d9146c820f6133134dbd7332655626810389fd6181e78b2d125dbf4b1d1d71535069b8fdb7ed034a9cc3a10c035e2500cba52428d8e27ce68acb41177c6e9ad48419b173d037bb278f6d5246a35e933fa", 0x97}, {&(0x7f0000000c80)="8afeee43e465dc27814d083ea6274127685d4a56e8dd5924dd0ad5723180f5805c04fa5094c7916d45b4cfbbb450ef25dbc0f80079bdaf27da9c9a506b04cb9ca93e9eecf620573e121b0db37c358d4b4cabfa0e6ac5b8745246d4d4ae7129da43e8ee563ab83cca0b69d2415a7089d329722cafc5d0b06b8330b58c84680379879e61b4f0bf5a27b469144335286d5908dbfb5b4b46ac33505cafa808aef82a509ba0445dc98e0a19c0667814fd97255ac6ac1d8c0da6e8c45cacdc4530e06d049ec18e", 0xc4}, {&(0x7f0000000240)="93e972c4a3d5bb", 0x7}, {&(0x7f0000000280)}, {&(0x7f0000001ac0)="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", 0x1000}, {&(0x7f0000000d80)="5c6aa35d2ef1828b2108ea111cadfe8be250a4585b61d4b13137cea057d51d758170a797df227f3ca09046494e9499e52f5e096513d72cf7178f486fa8159bd0aeca83073487f5f92d51661409ce434407dbe27fe429af1d6e5c5f6e90207bc1f5fc6322f1995e948380c666ce7b89fa38408795b4d513bb063ed873c396648f9c6daea21c92c23ee74dfadf4d2fff52f3b9a8ffed640b449b7320ca8d40d215db310e1310bb088a506089da2b8854caddc0297d989cad93a815f1bb97084ea8ad286bc39abf4497a6095ffccb1987659622ce390145ddd65798c833a7de75180f3c81cea4", 0xe5}], 0x9, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000000000008400000008000000941f6721cb57691d020000faffffff001800000000000000840000000700000062"], 0x38}, 0x4040851) syz_open_procfs$namespace(r1, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={0xffffffffffffffff, 0x0, 0x6f, 0x0, &(0x7f0000000840)="9c6e3297b519e59c30f173cb03641e5aa14d19e2d0acfe3960ad4c27487617d3aa9b08c017721b79e3617ecaa289fc74da22dae5b49d0089392229b93e57af05044c6ec1e601abdd25fcdf2f5503eab809145ac0b8f09e31a086dd6f0e7946a38843225cffb38881aa5416221c01d6", &(0x7f00000005c0), 0x6, 0x0, 0x38, 0x41, &(0x7f00000008c0)="9a40ca1850f986b69953bfd0b7c25cb0470604b9819771ff102aa1d6604d4176edf0d3be190a9f2d2ff79b8166885650472e7514f705cd4d", &(0x7f0000000900)="d48223d0f72e05c537b49786c090a29fa3a36cb2734a2383660434c291e7811696934edbbfaf4040374ee8b7dd145d2a12a4b46e83340af6ca0de1f921e14c60c1", 0x1, 0x0, 0x3}, 0x50) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0xfffc, @remote}, 0x10, 0x0, 0xfffffffffffffd6e}, 0x40085) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="0213020902000000e4a17c4e2ca18baa", 0x10}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x7, 0xe, &(0x7f0000000a80)=ANY=[@ANYRES64=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000040)="b90103606989068c3c270040f0832f9e0ff008001f", 0x0, 0x104, 0x6000000000000000, 0x10c, 0x0, &(0x7f0000000400)="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", 0x0}, 0x50) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x4008240b, &(0x7f00000013c0)) socketpair(0x18, 0x5, 0x5, &(0x7f00000002c0)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) 1.795640925s ago: executing program 2 (id=570): socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0xc}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0xec, 0x5, 0x40, 0x7, 0x0, 0x7ffffffc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xa}, 0x800, 0x7ff, 0x7, 0x8, 0x81, 0x4, 0x5, 0x0, 0x4000000, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 1.661988746s ago: executing program 3 (id=571): socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x1400, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002140600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@o_path={0x0}, 0x18) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0xffffffffffffff82, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f921240685", 0x14}], 0x1}, 0x0) 1.538770646s ago: executing program 2 (id=572): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x32}, 0x20) setsockopt$sock_attach_bpf(r1, 0x84, 0x6e, &(0x7f0000000000)=r4, 0x10) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x180bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x23fd6b854b20bbab, 0x0, 0x3, 0x9, 0x0, 0x4, 0x3ffd, 0x0, 0x0, 0x0, 0x200000000004}, 0x0, 0xaffffff800000003, 0xffffffffffffffff, 0x2) r5 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_subtree(r4, &(0x7f00000002c0), 0x2, 0x0) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x54, 0x0, 0x0, &(0x7f0000000c40)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred]}, 0x40000002) setsockopt$sock_attach_bpf(r5, 0x84, 0x25, &(0x7f0000000000), 0x20000010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r11 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f90d24fc60", 0x14}], 0x1}, 0x0) r12 = gettid() r13 = gettid() r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000feffffff000000000000000085000000170000001801000020756c2500000000002020207b1ef8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b0000c15300000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40e00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r14, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$unix(r2, &(0x7f0000000780)={&(0x7f0000000440)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000940)="56e42409bee05f83dfe5fc73557e2f210245fcb49fe09b1cd09a1a96857ce811a10bc58722ef1ca18f541fe5cc2826c6f1b78b9df7af177c876893fee37d9762877a82bc4a4c7b59786667681ed945c21a048d7255ee55419c4c59983e7cec06ebc1fa604fca80e7d4879aa2a8fa8995dd4a1f8c8fba2948b70b10f3aa8bc213cb222cfd3656bcb3c793e2fae4cf1ecce9bca16ba28b0009e44d995c7d3fee03ee5f234e2e3b72b79039090dea658dae34afdc817a0fbf72b3d86de93acceb23f0afb6f0fc85b9e0f68ff35a27ea97330b45cf4fd06817ec5d334d7e2a17a414ee565d51c5eeba5deb0afc", 0xeb}, {&(0x7f0000000a40)="a61f4999054b7192dfaf9bf6a74597cf2c2d4f98837f75cbbd5b2fb1194f782a49f7755a6745e39bbc0e19a98c9ce632b08bf39cc7631ee6d64db70287dab9a77b4ba49f1c22ec0adf7f7f3fd7f12c89235b703217bb7a334ce0a16c8bbdb07939b89228506bab43a219a2de65113705ce16dc577093160486c2308d634451fec5a62bc5fdfa1c7c7138d4c78f87330a90d76a1c901db4b0ecc8e8b5fa5a42ec2f4f9b07a4d9ebbbf9dadf715eb2464b7b19f03a4fcdc2dcc4abd24f3108a83a14d3d31f8a92bde26e0f498ed82e0946ce1936", 0xd3}, {&(0x7f0000000b40)="10201fb559bc1274a86434161e8191ccc3f8398c1daf631387782af91964467d6f1887e07d80bc64fb94776fab4406264eb3a0e55b0dd83845dcb2903e8d816d8bd02d0c7daaadbb71cd09c4f597cd2cd7ce60f27baf96311362f7e6d4a358f4633acdc5c92fdef544f0464730f6c18c3bf0618ac3b9b09ca80ee5d2c413eb764c5ae1c3865b496481bbed0e1780799777f94034242b7784d65c648f9cb7320e4b0bc681ff9f52bb8f6626d15bd90b1073b221565c4b24e9c1391067b1f14c20e9391d008cf4ac5baf5ad0818ff6ba87cdcb", 0xd2}, {&(0x7f0000000500)="7bb4ded8d94eb6c91ec4ef266614714147da7d8c8c0d961d7eaca4bb181d60f72be86f8495400094cd80d95c3eca4297", 0x30}], 0x4, &(0x7f00000005c0)=[@cred={{0x1c, 0x1, 0x2, {r12, 0xffffffffffffffff, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r13, 0xffffffffffffffff, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}], 0x60, 0x4000004}, 0x4004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x4, 0x0, 0x8100348}, 0x18) recvmsg(r9, &(0x7f0000000000)={0x0, 0x63, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40000020) 1.47171682s ago: executing program 1 (id=573): write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='t\x00\x00\x00\x00\b'], 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x13, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) 1.399256887s ago: executing program 0 (id=574): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x100007, 0x4, 0x25, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240)="29b020", 0x2000cc0, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r0}, 0x38) 1.23277137s ago: executing program 1 (id=575): r0 = socket$kcm(0x2c, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x16, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x101}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8001}, @map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)=[r1, r1, r1, r1, r1, r1], &(0x7f0000000180)=[{0x5, 0x4, 0x3, 0xc}, {0x0, 0x2, 0x6, 0x2}, {0x0, 0x4, 0xa, 0xb}, {0x3, 0x4, 0x2, 0x3}], 0x10, 0x4}, 0x94) setsockopt$sock_attach_bpf(r0, 0x11b, 0x3, &(0x7f0000000280)=r2, 0x4) close(0x3) 1.183565904s ago: executing program 3 (id=576): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r2, &(0x7f0000000000)={0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) 1.119695039s ago: executing program 1 (id=577): r0 = syz_clone(0x1000, &(0x7f0000000000)="2de5ef43a4", 0x5, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="41f96b3e2e66eb0d8385c14db9a17a15c04bccb349be2614fb464233b95938dff9395e14f98704054a8c6c06b621d45bc7768c9c93629aba5c7789d88e15bef3f609ea1a4c40bf3054af4490193d37432385049ea8e0c08ec965f1480f21f874749b6b64ef5590d67bed1a") r1 = syz_open_procfs$namespace(r0, &(0x7f0000000140)='ns/pid_for_children\x00') r2 = socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000500)={&(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000240)="10ff9d542d5506dd051ee94ca18a6a39947aa644210d50d92fd3bf913e1397a7c2938bc84aa5c1bd9f7f70274d4be4033008a34e3a0205183e7038ad34f826a1b9d9e4e8a9f5a837a4b96088c492f8058eec4237be152b2a49573d8b019ac0a2462ea38934f0ace1ec877ff2f23f3d992c3f7134b24ec779832a803ca3f29fc90bdf701472f316ce36234b8bb6ab2a333c31ab2705f8afe475fe012d1c277cf7f76dda999ed6b14e9f3998b6fc1e921627e008bbc09cdf", 0xb7}, {&(0x7f0000000300)="f9d6461b4a9467b8d407509fed36605c11b8f977e5185968aa9a01bda94a161ea61080d8d9025b549128f625b36f30b27f34f37ff0be105ca515392950dceaaf17bd96c4c1e2431643178bb8e40e5aa03fee807b63633feba37aa78794bc21b8db9aac988832801be449f867d8c75ca88488dd377f21a2f539b215067b83c0ef349c6cf1c2bb9052ba689a936aa595628c3792a48628c351459a7b6171b910b7944e9097c0a187cbef21448f309caca24f43d1541e4d52ca43a25ee420ea9f667683518c17bda30dc8640332", 0xcc}, {&(0x7f0000000400)="9646a62a78004ad0036a457bd03fd95a0abffeb1d824d515f68660d63fd457ea3210d299d42da9dce7b07e8be7eae3b9e13204f52b847d24", 0x38}], 0x3, &(0x7f0000000480)=[@rights={{0x2c, 0x1, 0x1, [r2, r2, r2, r2, r2, r1, r1]}}, @rights={{0x20, 0x1, 0x1, [r2, r1, r2, r1]}}, @rights={{0x10}}], 0x60, 0x41}, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_clone(0x4000, &(0x7f00000017c0)="a047e40a7bf1242253b06fbf1f6a184c966806dc522fb88e2e7718711eaf4246aa23986666870e205747a2df259534d401cf60aa6b6ade640c6c9a23953409cd1ded28b7a37f2c76b4dbde54d5aa4651514e82ad684bf6df705fb12186cec76097579aff23b1d4", 0x67, &(0x7f0000001840), &(0x7f0000001880), &(0x7f00000018c0)="dee1b4ba2ae304b8c879e20d7f0880f80e865d56f43ba0dc7a734c8afb845379f42e") r7 = bpf$ITER_CREATE(0x21, &(0x7f0000001900), 0x8) sendmsg$unix(r5, &(0x7f00000019c0)={&(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001780)=[{&(0x7f0000000600)="82cf3caa526fd0f33abad9be74f337f9497b170adc08e7125b9f96ed91d1be5eef2b70ef167e78657aec1d221cc15eeea3072c8e16798bbcf83d948fcdbf41fe29bb06cdcefc5b972861a672f0813f77d7fa0335d9fad1551c2e10102e95695f706c338d5768fce0e1de928e4820a2c06a0f8dc3ce368f48c5475b0367094b594f71437a9f501aba23b4eb143b2408e493bb938491aadeb3c1572e457602691dae27bd126c597773d88070e56e38c9d66a39d3254433c5b1bc95df1818d0f2c085bea3bbb72959e5501977710a51d72f4a61e54d1bf7263b1bcacbfa0f", 0xdd}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)="ea1610ca113ff8fafc763dbb100619ca9c269db2b0e8f546a22a6663ff0ca3f32c29834d8d78a10035c5ef6e0203531f9a4d3eb56bbf8026467ae987ebf4d5b7553c8bee7e0b416d050ab6154e5b3028eee52ef30659eb52558bf50d8be1", 0x5e}], 0x3, &(0x7f0000001940)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xee00, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r7, r4]}}], 0x58, 0x20000005}, 0x1010) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001a40)=@o_path={&(0x7f0000001a00)='./file1\x00', 0x0, 0xc018, r5}, 0x18) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x11, 0x6, &(0x7f0000001a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf}, [@call={0x85, 0x0, 0x0, 0x50}, @map_fd={0x18, 0x1, 0x1, 0x0, r7}]}, &(0x7f0000001ac0)='GPL\x00', 0xa, 0x6b, &(0x7f0000001b00)=""/107, 0x41100, 0x9, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001b80)={0x3, 0xd, 0x3, 0x401}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001bc0)=[r7], &(0x7f0000001c00)=[{0x2, 0x3, 0x4, 0xc}, {0x3, 0x5, 0xd, 0xb}, {0x0, 0x2, 0x10, 0x2ec549ebe3ba7b63}], 0x10, 0x8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001fc0)={r8, 0xe0, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001d00)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9, &(0x7f0000001d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xae, &(0x7f0000001dc0)=[{}], 0x8, 0x10, &(0x7f0000001e00), &(0x7f0000001e40), 0x8, 0x90, 0x8, 0x8, &(0x7f0000001e80)}}, 0x10) r9 = syz_open_procfs$namespace(r0, &(0x7f0000002000)='ns/cgroup\x00') ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000002080)={r4}) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f00000020c0)={r2, r8}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002180)={r7, 0x58, &(0x7f0000002100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000021c0)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x4, '\x00', r10, r7, 0x4, 0x4, 0x2}, 0x50) openat$cgroup_procs(r9, &(0x7f0000002240)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_int(r7, &(0x7f0000002280)='cpu.weight\x00', 0x2, 0x0) r11 = openat$cgroup(r7, &(0x7f00000022c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r11, &(0x7f0000002300)='freezer.self_freezing\x00', 0x0, 0x0) 970.311721ms ago: executing program 0 (id=578): write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='t\x00\x00\x00\x00\b'], 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x13, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) (fail_nth: 3) 379.734979ms ago: executing program 2 (id=579): r0 = socket$kcm(0x2, 0x5, 0x84) close(0x3) socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000), 0x8) 344.050762ms ago: executing program 1 (id=580): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1edbe19591e0506b00473456ab52e370fa5d16cee83b46d46b5d793cafc8b19f81f4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r1, r1, 0x2f, 0x10}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000020c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000003000000020000000000000300000000000000000200000000000000000000d44c3a1f6f7b3157c2dbfcd16e78c8a901c8ebe6d9d54d9dfb29893bbab2240f9a5dd557403b029d0269b8fe6491128c248b7c18ed0fa593997e796dcd165d1b3a306dedad028cf8927e3f2fcd142078881a51b6b0dd294359ad58a617bcdeff261945a984aaec4f557e1f2767997529019f4c1810"], 0x0, 0x33, 0x0, 0x0, 0x10}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402", 0x11}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x33fe0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400000000004, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r7, 0x3, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) close(r5) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e000000000000000000000001047028be0e0000368d4c0521f7c1614bb4e86b7d0c1d8a0c15478780101d12b2a232cf923a3b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 336.794322ms ago: executing program 0 (id=581): socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0xec, 0x5, 0x40, 0x7, 0x0, 0x7ffffffc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xa}, 0x800, 0x7ff, 0x7, 0x8, 0x81, 0x4, 0x5, 0x0, 0x4000000, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 155.544097ms ago: executing program 0 (id=582): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0xfe33) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000003680)=""/4097, 0x1001}, {&(0x7f0000004700)=""/4062, 0xfde}, {&(0x7f0000000b80)=""/4120, 0x1018}, {&(0x7f0000000200)=""/154, 0x9a}, {&(0x7f00000002c0)=""/90, 0x5a}, {&(0x7f0000000140)=""/129, 0x81}], 0x6}, 0x0) 84.102073ms ago: executing program 2 (id=583): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe326c2ed0a432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1edbe19591e0506b00473456ab52e370fa5d16cee83b46d46b5d793cafc8b19f81f4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r1, r1, 0x2f, 0x10}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000020c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000003000000020000000000000300000000000000000200000000000000000000d44c3a1f6f7b3157c2dbfcd16e78c8a901c8ebe6d9d54d9dfb29893bbab2240f9a5dd557403b029d0269b8fe6491128c248b7c18ed0fa593997e796dcd165d1b3a306dedad028cf8927e3f2fcd142078881a51b6b0dd294359ad58a617bcdeff261945a984aaec4f557e1f2767997529019f4c1810"], 0x0, 0x33, 0x0, 0x0, 0x10}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402", 0x11}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x33fe0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400000000004, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r7, 0x3, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) close(r5) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e000000000000000000000001047028be0e0000368d4c0521f7c1614bb4e86b7d0c1d8a0c15478780101d12b2a232cf923a3b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 62.168184ms ago: executing program 3 (id=584): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="0219020902000000", 0x8}, {&(0x7f0000000780)="a112fde440109737", 0x8}], 0x2}, 0x400c010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$inet(r2, &(0x7f00000005c0)={&(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000d40)="da0fcd68b31bfaf9744804ef0ead70ce718433cf19b9c41c48057aa07e03871a235077f1e728a8e777cbcd0f96f7934ca113ff3bfd06aa8a2ac6c8c9397c4c3adaaa3cd8acfda14e12f3a0f41d3382c859545822375e224a7638430669802f66db4d2d5f5267882567812c4486b1bb671ce9a1b9f2548c6b42ab66ea6ee7d43b002402c589083924a6dea27801eb34c1e0193936d2481ae7b6f7c94e2d208beb92aa3474eaa5c535f4f2f4008b74cf81b155cdf2f82fdb38eadfb20e6ab30d117cac6748df537ddcf6999a823bc25ba5ba4313697eb753e92b04a291aa6b7ea11273598b73c80202b352012ef60608c4e9cb99c5a0d2a1ec9de133ae0c282f5230030e5fd086b9b79561f44ee5ccad83acbdac65d1ccdf07005b2b0e23806fcde8da019c9a8415a41f0960dd5790e867fa77251b9736693fd3761748c86407c54af285dce45f6d84eb1ccd8f78", 0x14d}], 0x1}, 0x80d0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1843121e20c8d415ad00000000000000000000950000000000000000000100007fa44bc950ec050c3842d4f4d11c46daed5001b33c28d244fa39ab44e60a45d1ba4112c749c706bc74d716c2a3ad409b4346860e532191c78d2dd652fa3a40c158d2a68a70d8c41d4073e7d624c611c4602b793672067585fafd1643278c0b3bcadcc4129f67f6b09b94f37556b3daab39a2ba8b8801cd8d465e5b5a5c54c5956a77501f142c6c4a7a11654909933e53c6aca2387bbcb9e1d8578d6c4c36c95911"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x94) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', r3, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x50) r6 = getpid() setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000600)=r4, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x1c, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @jmp={0x5, 0x0, 0x9, 0x8, 0x0, 0xfffffffffffffffe, 0x8}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000680)='GPL\x00', 0x7, 0xcf, &(0x7f0000000b40)=""/207, 0x41100, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000a40)={0x4, 0x3, 0xfff, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c40)=[r5, r5], 0x0, 0x10, 0x1}, 0x94) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x2, 0xf, 0x6, 0x8, 0x0, 0x0, 0x60, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x101, 0x9}, 0x4000, 0x7, 0x0, 0x0, 0x6, 0x2, 0x1, 0x0, 0x3, 0x0, 0x7}, r6, 0xe, 0xffffffffffffffff, 0x8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'\x00', 0x400}) socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8}, 0x100904}, 0x0, 0xf, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000ec0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r11}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') 0s ago: executing program 1 (id=585): r0 = socket$kcm(0x2, 0x5, 0x84) close(0x3) socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000), 0x8) (fail_nth: 3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.31' (ED25519) to the list of known hosts. [ 59.835713][ T5770] cgroup: Unknown subsys name 'net' [ 60.000170][ T5770] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.341967][ T5770] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.186499][ T5793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.196852][ T5793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.205409][ T5793] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.208655][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.215749][ T5793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.225307][ T5789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.228375][ T5793] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.234038][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.242651][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.249479][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.255717][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.262242][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.270288][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.277619][ T5789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.283602][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 63.289413][ T5795] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.305122][ T5795] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.305591][ T5789] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 63.321975][ T5103] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.325260][ T5789] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 63.330424][ T5103] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.336612][ T5786] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 63.350797][ T5103] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.352281][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.712614][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 63.875003][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 63.887053][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.894277][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.901566][ T5781] bridge_slave_0: entered allmulticast mode [ 63.908944][ T5781] bridge_slave_0: entered promiscuous mode [ 63.938781][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 63.948048][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.955395][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.962515][ T5781] bridge_slave_1: entered allmulticast mode [ 63.969470][ T5781] bridge_slave_1: entered promiscuous mode [ 64.014468][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.051367][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.111566][ T5781] team0: Port device team_slave_0 added [ 64.120174][ T5781] team0: Port device team_slave_1 added [ 64.144702][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 64.198243][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.205760][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.212951][ T5783] bridge_slave_0: entered allmulticast mode [ 64.220447][ T5783] bridge_slave_0: entered promiscuous mode [ 64.249155][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.256355][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.263762][ T5782] bridge_slave_0: entered allmulticast mode [ 64.270423][ T5782] bridge_slave_0: entered promiscuous mode [ 64.289197][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.296672][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.303940][ T5783] bridge_slave_1: entered allmulticast mode [ 64.310580][ T5783] bridge_slave_1: entered promiscuous mode [ 64.330067][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.337213][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.363978][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.375794][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.382879][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.390147][ T5782] bridge_slave_1: entered allmulticast mode [ 64.396927][ T5782] bridge_slave_1: entered promiscuous mode [ 64.418737][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.425918][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.452283][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.491246][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.503702][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.529256][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.571420][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.602080][ T5783] team0: Port device team_slave_0 added [ 64.619344][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.626670][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.633924][ T5780] bridge_slave_0: entered allmulticast mode [ 64.640574][ T5780] bridge_slave_0: entered promiscuous mode [ 64.661038][ T5783] team0: Port device team_slave_1 added [ 64.678680][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.686183][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.693338][ T5780] bridge_slave_1: entered allmulticast mode [ 64.701300][ T5780] bridge_slave_1: entered promiscuous mode [ 64.710753][ T5781] hsr_slave_0: entered promiscuous mode [ 64.717155][ T5781] hsr_slave_1: entered promiscuous mode [ 64.758645][ T5782] team0: Port device team_slave_0 added [ 64.767373][ T5782] team0: Port device team_slave_1 added [ 64.795665][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.802639][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.828933][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.880905][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.888029][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.914035][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.931777][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.938841][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.965119][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.978524][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.990783][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.019278][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.026365][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.053221][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.122757][ T5780] team0: Port device team_slave_0 added [ 65.131314][ T5780] team0: Port device team_slave_1 added [ 65.170870][ T5783] hsr_slave_0: entered promiscuous mode [ 65.178104][ T5783] hsr_slave_1: entered promiscuous mode [ 65.184590][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.192396][ T5783] Cannot create hsr debugfs directory [ 65.224063][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.231043][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.257111][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.269670][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.276731][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.302895][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.361221][ T5782] hsr_slave_0: entered promiscuous mode [ 65.368782][ T5782] hsr_slave_1: entered promiscuous mode [ 65.375161][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.382721][ T5782] Cannot create hsr debugfs directory [ 65.404827][ T5790] Bluetooth: hci1: command tx timeout [ 65.410594][ T5790] Bluetooth: hci2: command tx timeout [ 65.416786][ T5788] Bluetooth: hci0: command tx timeout [ 65.417609][ T5786] Bluetooth: hci3: command tx timeout [ 65.443257][ T5780] hsr_slave_0: entered promiscuous mode [ 65.449979][ T5780] hsr_slave_1: entered promiscuous mode [ 65.456257][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.463880][ T5780] Cannot create hsr debugfs directory [ 65.668320][ T5781] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.680305][ T5781] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.715013][ T5781] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.730298][ T5781] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.820618][ T5783] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.832111][ T5783] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.841667][ T5783] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.851440][ T5783] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.948927][ T5782] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.987765][ T5782] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.997911][ T5782] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.024143][ T5782] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.054351][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.086713][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.141486][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.162847][ T5780] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.177158][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.194640][ T5780] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.206752][ T5780] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.217386][ T5780] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.242764][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.250109][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.260462][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.267586][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.289520][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.296773][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.327373][ T3861] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.334576][ T3861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.427144][ T5783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.452055][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.556023][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.577919][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.585109][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.610978][ T3861] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.618180][ T3861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.632863][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.736453][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.796497][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.803706][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.828048][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.835214][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.869563][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.972101][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.013627][ T5780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.032509][ T5783] veth0_vlan: entered promiscuous mode [ 67.066568][ T5783] veth1_vlan: entered promiscuous mode [ 67.159745][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.170914][ T5781] veth0_vlan: entered promiscuous mode [ 67.191279][ T5783] veth0_macvtap: entered promiscuous mode [ 67.219891][ T5781] veth1_vlan: entered promiscuous mode [ 67.240690][ T5783] veth1_macvtap: entered promiscuous mode [ 67.318802][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.334090][ T5782] veth0_vlan: entered promiscuous mode [ 67.349660][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.361385][ T5783] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.371427][ T5783] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.382082][ T5783] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.390940][ T5783] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.412073][ T5781] veth0_macvtap: entered promiscuous mode [ 67.430282][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.446392][ T5782] veth1_vlan: entered promiscuous mode [ 67.453386][ T5781] veth1_macvtap: entered promiscuous mode [ 67.485577][ T5786] Bluetooth: hci2: command tx timeout [ 67.491042][ T5788] Bluetooth: hci3: command tx timeout [ 67.491075][ T5103] Bluetooth: hci1: command tx timeout [ 67.501826][ T5790] Bluetooth: hci0: command tx timeout [ 67.525705][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.538818][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.551921][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.564249][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.575324][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.586839][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.624951][ T5781] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.634906][ T5781] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.645138][ T5781] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.653932][ T5781] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.702008][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.707264][ T5782] veth0_macvtap: entered promiscuous mode [ 67.723319][ T5782] veth1_macvtap: entered promiscuous mode [ 67.730409][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.771985][ T5780] veth0_vlan: entered promiscuous mode [ 67.811775][ T5780] veth1_vlan: entered promiscuous mode [ 67.828255][ T3861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.838486][ T3861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.844511][ T1334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.876282][ T1334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.888957][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.902105][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.912436][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.925200][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.937430][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.958066][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.970004][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.981153][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.992168][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.009098][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.051247][ T5782] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.062153][ T5782] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.072734][ T5782] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.110569][ T5782] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.167314][ T5780] veth0_macvtap: entered promiscuous mode [ 68.190380][ C1] hrtimer: interrupt took 74760 ns [ 68.198617][ T1334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.221074][ T5780] veth1_macvtap: entered promiscuous mode [ 68.234788][ T1334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.311108][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.335469][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.345831][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.357516][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.367960][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.378736][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.391378][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.426904][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.440818][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.452110][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.465340][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.475221][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.486516][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.498413][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.519337][ T5780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.555529][ T5780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.573943][ T5780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.582692][ T5780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.649373][ T1348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.671428][ T1348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.759791][ T5871] netlink: 'syz.1.5': attribute type 9 has an invalid length. [ 68.819497][ T5871] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5'. [ 68.874259][ T1348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.909327][ T1348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.146220][ T1334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.178052][ T1334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.196373][ T5878] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3'. [ 69.369802][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.471777][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.492873][ T5887] warning: `syz.1.7' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 69.576884][ T5790] Bluetooth: hci0: command tx timeout [ 69.576910][ T5103] Bluetooth: hci2: command tx timeout [ 69.582318][ T5790] Bluetooth: hci3: command tx timeout [ 69.591648][ T5103] Bluetooth: hci1: command tx timeout [ 69.798983][ T5887] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 69.874059][ T5891] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 70.022921][ T5895] Zero length message leads to an empty skb [ 70.037546][ T5893] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1'. [ 70.210726][ T5900] netlink: 'syz.3.10': attribute type 9 has an invalid length. [ 70.230456][ T5900] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.10'. [ 70.323269][ T5903] netlink: 'syz.2.11': attribute type 9 has an invalid length. [ 70.342836][ T5903] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.11'. [ 70.550692][ T5908] netlink: 'syz.0.12': attribute type 9 has an invalid length. [ 70.593526][ T5908] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.12'. [ 70.693484][ T5914] netlink: 188 bytes leftover after parsing attributes in process `syz.3.14'. [ 70.903478][ T5920] netlink: 'syz.2.16': attribute type 9 has an invalid length. [ 70.944707][ T5920] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.16'. [ 71.109389][ T5924] netlink: 'syz.0.17': attribute type 9 has an invalid length. [ 71.128624][ T5924] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.17'. [ 71.277774][ T5929] netlink: 'syz.3.19': attribute type 9 has an invalid length. [ 71.315834][ T5929] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.19'. [ 71.510061][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.516909][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.644869][ T5103] Bluetooth: hci3: command tx timeout [ 71.651201][ T5103] Bluetooth: hci1: command tx timeout [ 71.653721][ T5790] Bluetooth: hci0: command tx timeout [ 71.661276][ T5786] Bluetooth: hci2: command tx timeout [ 71.788220][ T5940] netlink: 'syz.0.21': attribute type 9 has an invalid length. [ 71.961073][ T5944] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 71.980383][ T5947] netlink: 'syz.1.23': attribute type 9 has an invalid length. [ 72.016722][ T5945] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 72.267343][ T5955] netlink: 'syz.2.25': attribute type 9 has an invalid length. [ 72.413694][ T5953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.451084][ T5953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.470188][ T5953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.478436][ T5953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.885551][ T5953] syz.0.24 (5953) used greatest stack depth: 19560 bytes left [ 73.770431][ T5998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.781998][ T5998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.792127][ T5998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.800349][ T5998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.088455][ T6004] __nla_validate_parse: 7 callbacks suppressed [ 74.088472][ T6004] netlink: 188 bytes leftover after parsing attributes in process `syz.1.40'. [ 74.632668][ T6019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.652342][ T6019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.671505][ T6019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.687500][ T6019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.772040][ T6021] netlink: 188 bytes leftover after parsing attributes in process `syz.2.46'. [ 75.119837][ T6026] validate_nla: 3 callbacks suppressed [ 75.119852][ T6026] netlink: 'syz.2.47': attribute type 9 has an invalid length. [ 75.135864][ T6026] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.47'. [ 75.885783][ T6057] netlink: 188 bytes leftover after parsing attributes in process `syz.2.54'. [ 76.016212][ T6059] netlink: 188 bytes leftover after parsing attributes in process `syz.1.55'. [ 76.410535][ T6068] netlink: 188 bytes leftover after parsing attributes in process `syz.2.59'. [ 76.427663][ T6066] netlink: 188 bytes leftover after parsing attributes in process `syz.1.58'. [ 76.926761][ T6082] netlink: 188 bytes leftover after parsing attributes in process `syz.3.65'. [ 77.318032][ T6088] netlink: 'syz.0.74': attribute type 9 has an invalid length. [ 77.339726][ T6088] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.74'. [ 77.897840][ T6104] netlink: 'syz.0.72': attribute type 9 has an invalid length. [ 77.933534][ T6104] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.72'. [ 78.616687][ T6120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.634385][ T6120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.661762][ T6120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.673756][ T6120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.128159][ T6134] netlink: 'syz.0.81': attribute type 9 has an invalid length. [ 79.146388][ T6134] __nla_validate_parse: 1 callbacks suppressed [ 79.146405][ T6134] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.81'. [ 79.442692][ T6143] netlink: 'syz.0.83': attribute type 9 has an invalid length. [ 79.445464][ T6141] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 79.461512][ T6143] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.83'. [ 79.785333][ T6152] netlink: 'syz.2.86': attribute type 9 has an invalid length. [ 79.807885][ T6152] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.86'. [ 79.906272][ T6153] netlink: 'syz.1.84': attribute type 9 has an invalid length. [ 79.926628][ T6153] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.84'. [ 80.205402][ T6166] netlink: 'syz.1.89': attribute type 9 has an invalid length. [ 80.213165][ T6166] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.89'. [ 80.432593][ T6174] netlink: 'syz.2.93': attribute type 9 has an invalid length. [ 80.448411][ T6174] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.93'. [ 81.032284][ T6185] netlink: 'syz.3.95': attribute type 9 has an invalid length. [ 81.040320][ T6185] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.95'. [ 81.281909][ T6193] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 81.590960][ T6202] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 81.673743][ T6206] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 81.731571][ T1193] cfg80211: failed to load regulatory.db [ 81.970329][ T6218] netlink: 'syz.3.106': attribute type 9 has an invalid length. [ 81.984062][ T6218] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.106'. [ 82.182992][ T6226] netlink: 188 bytes leftover after parsing attributes in process `syz.0.107'. [ 83.347540][ T6240] netlink: 188 bytes leftover after parsing attributes in process `syz.1.120'. [ 83.454726][ T6242] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 83.724743][ T6257] netlink: 'syz.3.118': attribute type 9 has an invalid length. [ 83.734981][ T6253] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 84.076049][ T6270] netlink: 'syz.1.122': attribute type 9 has an invalid length. [ 85.248649][ T6294] netlink: 'syz.2.138': attribute type 9 has an invalid length. [ 85.256575][ T6294] __nla_validate_parse: 5 callbacks suppressed [ 85.256587][ T6294] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.138'. [ 85.264855][ T6293] netlink: 188 bytes leftover after parsing attributes in process `syz.3.129'. [ 85.699302][ T6307] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 85.780094][ T6309] netlink: 'syz.0.134': attribute type 9 has an invalid length. [ 85.795483][ T6309] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.134'. [ 86.001332][ T6320] netlink: 188 bytes leftover after parsing attributes in process `syz.3.139'. [ 86.304083][ T6331] netlink: 'syz.2.142': attribute type 9 has an invalid length. [ 86.311898][ T6331] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.142'. [ 86.461762][ T6334] netlink: 'syz.3.144': attribute type 9 has an invalid length. [ 86.469805][ T6334] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.144'. [ 87.077954][ T6351] netlink: 188 bytes leftover after parsing attributes in process `syz.3.150'. [ 87.097493][ T6352] netlink: 188 bytes leftover after parsing attributes in process `syz.0.151'. [ 87.770776][ T6361] netlink: 'syz.3.155': attribute type 9 has an invalid length. [ 87.788826][ T6361] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.155'. [ 87.859234][ T6362] netlink: 'syz.1.154': attribute type 9 has an invalid length. [ 87.870715][ T6362] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.154'. [ 88.651570][ T6390] netlink: 'syz.3.169': attribute type 9 has an invalid length. [ 90.482762][ T6441] __nla_validate_parse: 6 callbacks suppressed [ 90.482778][ T6441] netlink: 188 bytes leftover after parsing attributes in process `syz.1.174'. [ 90.668807][ T6445] netlink: 'syz.2.175': attribute type 9 has an invalid length. [ 90.684199][ T6445] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.175'. [ 90.750679][ T6450] netlink: 188 bytes leftover after parsing attributes in process `syz.1.178'. [ 91.034399][ T6456] netlink: 188 bytes leftover after parsing attributes in process `syz.1.181'. [ 91.312040][ T6471] FAULT_INJECTION: forcing a failure. [ 91.312040][ T6471] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 91.340161][ T6471] CPU: 0 PID: 6471 Comm: syz.2.187 Not tainted 6.6.101-syzkaller #0 [ 91.348272][ T6471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 91.358380][ T6471] Call Trace: [ 91.361714][ T6471] [ 91.364696][ T6471] dump_stack_lvl+0x16c/0x230 [ 91.369445][ T6471] ? show_regs_print_info+0x20/0x20 [ 91.374680][ T6471] ? load_image+0x3b0/0x3b0 [ 91.379226][ T6471] ? __might_fault+0xaa/0x120 [ 91.383921][ T6471] ? __lock_acquire+0x7c80/0x7c80 [ 91.389218][ T6471] should_fail_ex+0x39d/0x4d0 [ 91.394035][ T6471] _copy_from_user+0x2f/0xe0 [ 91.398652][ T6471] ____sys_sendmsg+0x30d/0x950 [ 91.403463][ T6471] ? __sys_sendmsg_sock+0x30/0x30 [ 91.408522][ T6471] ? __import_iovec+0x3fa/0x860 [ 91.413446][ T6471] ? import_iovec+0x73/0xa0 [ 91.418015][ T6471] ___sys_sendmsg+0x220/0x290 [ 91.422763][ T6471] ? __sys_sendmsg+0x270/0x270 [ 91.427656][ T6471] ? __lock_acquire+0x7c80/0x7c80 [ 91.432794][ T6471] __se_sys_sendmsg+0x1a5/0x270 [ 91.437695][ T6471] ? __x64_sys_sendmsg+0x80/0x80 [ 91.442676][ T6471] ? lockdep_hardirqs_on+0x98/0x150 [ 91.447894][ T6471] do_syscall_64+0x55/0xb0 [ 91.452316][ T6471] ? clear_bhb_loop+0x40/0x90 [ 91.457018][ T6471] ? clear_bhb_loop+0x40/0x90 [ 91.461733][ T6471] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.467660][ T6471] RIP: 0033:0x7f43cfb8eb69 [ 91.472092][ T6471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.491728][ T6471] RSP: 002b:00007f43d09b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.500181][ T6471] RAX: ffffffffffffffda RBX: 00007f43cfdb5fa0 RCX: 00007f43cfb8eb69 [ 91.508161][ T6471] RDX: 000000000000fc00 RSI: 0000200000000080 RDI: 0000000000000005 [ 91.516142][ T6471] RBP: 00007f43d09b2090 R08: 0000000000000000 R09: 0000000000000000 [ 91.524145][ T6471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.532138][ T6471] R13: 0000000000000000 R14: 00007f43cfdb5fa0 R15: 00007ffd3866ae68 [ 91.540142][ T6471] [ 92.040886][ T6488] netlink: 188 bytes leftover after parsing attributes in process `syz.3.191'. [ 92.056750][ T6490] netlink: 'syz.1.190': attribute type 9 has an invalid length. [ 92.073565][ T6490] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.190'. [ 92.562626][ T6500] netlink: 188 bytes leftover after parsing attributes in process `syz.3.195'. [ 92.671364][ T6508] FAULT_INJECTION: forcing a failure. [ 92.671364][ T6508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.685246][ T6508] CPU: 1 PID: 6508 Comm: syz.1.197 Not tainted 6.6.101-syzkaller #0 [ 92.693267][ T6508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 92.703328][ T6508] Call Trace: [ 92.706602][ T6508] [ 92.709523][ T6508] dump_stack_lvl+0x16c/0x230 [ 92.714207][ T6508] ? show_regs_print_info+0x20/0x20 [ 92.719408][ T6508] ? load_image+0x3b0/0x3b0 [ 92.723917][ T6508] ? __lock_acquire+0x7c80/0x7c80 [ 92.728939][ T6508] should_fail_ex+0x39d/0x4d0 [ 92.733661][ T6508] _copy_from_user+0x2f/0xe0 [ 92.738261][ T6508] __copy_msghdr+0x3bb/0x580 [ 92.742850][ T6508] ___sys_sendmsg+0x1a6/0x290 [ 92.747533][ T6508] ? __sys_sendmsg+0x270/0x270 [ 92.752313][ T6508] ? __lock_acquire+0x7c80/0x7c80 [ 92.757338][ T6508] __se_sys_sendmsg+0x1a5/0x270 [ 92.762269][ T6508] ? __x64_sys_sendmsg+0x80/0x80 [ 92.767213][ T6508] ? lockdep_hardirqs_on+0x98/0x150 [ 92.772413][ T6508] do_syscall_64+0x55/0xb0 [ 92.776820][ T6508] ? clear_bhb_loop+0x40/0x90 [ 92.781505][ T6508] ? clear_bhb_loop+0x40/0x90 [ 92.786190][ T6508] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 92.792091][ T6508] RIP: 0033:0x7f2779f8eb69 [ 92.796502][ T6508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.816101][ T6508] RSP: 002b:00007f277ad9a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.824508][ T6508] RAX: ffffffffffffffda RBX: 00007f277a1b5fa0 RCX: 00007f2779f8eb69 [ 92.832470][ T6508] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 92.840518][ T6508] RBP: 00007f277ad9a090 R08: 0000000000000000 R09: 0000000000000000 [ 92.848474][ T6508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.856435][ T6508] R13: 0000000000000000 R14: 00007f277a1b5fa0 R15: 00007ffe683a2478 [ 92.864404][ T6508] [ 93.413884][ T6525] FAULT_INJECTION: forcing a failure. [ 93.413884][ T6525] name failslab, interval 1, probability 0, space 0, times 1 [ 93.437055][ T6525] CPU: 1 PID: 6525 Comm: syz.1.203 Not tainted 6.6.101-syzkaller #0 [ 93.445112][ T6525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 93.455190][ T6525] Call Trace: [ 93.458470][ T6525] [ 93.461397][ T6525] dump_stack_lvl+0x16c/0x230 [ 93.466082][ T6525] ? show_regs_print_info+0x20/0x20 [ 93.471280][ T6525] ? load_image+0x3b0/0x3b0 [ 93.475791][ T6525] ? __might_sleep+0xe0/0xe0 [ 93.480380][ T6525] ? __lock_acquire+0x7c80/0x7c80 [ 93.485413][ T6525] should_fail_ex+0x39d/0x4d0 [ 93.490098][ T6525] should_failslab+0x9/0x20 [ 93.494603][ T6525] slab_pre_alloc_hook+0x59/0x310 [ 93.499637][ T6525] ? tomoyo_encode+0x28b/0x540 [ 93.504403][ T6525] ? tomoyo_encode+0x28b/0x540 [ 93.509166][ T6525] __kmem_cache_alloc_node+0x53/0x260 [ 93.514546][ T6525] ? tomoyo_encode+0x28b/0x540 [ 93.519308][ T6525] __kmalloc+0xa4/0x240 [ 93.523467][ T6525] tomoyo_encode+0x28b/0x540 [ 93.528065][ T6525] tomoyo_realpath_from_path+0x592/0x5d0 [ 93.533719][ T6525] tomoyo_path_number_perm+0x1ea/0x590 [ 93.539177][ T6525] ? tomoyo_path_number_perm+0x1ba/0x590 [ 93.544814][ T6525] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 93.550278][ T6525] ? ksys_write+0x1c1/0x250 [ 93.554861][ T6525] ? __fget_files+0x28/0x4d0 [ 93.559466][ T6525] security_file_ioctl+0x70/0xa0 [ 93.564427][ T6525] __se_sys_ioctl+0x48/0x170 [ 93.569020][ T6525] do_syscall_64+0x55/0xb0 [ 93.573434][ T6525] ? clear_bhb_loop+0x40/0x90 [ 93.578106][ T6525] ? clear_bhb_loop+0x40/0x90 [ 93.582781][ T6525] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.588673][ T6525] RIP: 0033:0x7f2779f8eb69 [ 93.593084][ T6525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.612686][ T6525] RSP: 002b:00007f277ad9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 93.621102][ T6525] RAX: ffffffffffffffda RBX: 00007f277a1b5fa0 RCX: 00007f2779f8eb69 [ 93.629069][ T6525] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000019 [ 93.637036][ T6525] RBP: 00007f277ad9a090 R08: 0000000000000000 R09: 0000000000000000 [ 93.645005][ T6525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.652971][ T6525] R13: 0000000000000000 R14: 00007f277a1b5fa0 R15: 00007ffe683a2478 [ 93.661047][ T6525] [ 93.675805][ T6525] ERROR: Out of memory at tomoyo_realpath_from_path. [ 93.842993][ T6534] netlink: 188 bytes leftover after parsing attributes in process `syz.0.205'. [ 94.283331][ T6541] delete_channel: no stack [ 94.283591][ T6543] netlink: 'syz.3.209': attribute type 9 has an invalid length. [ 94.297218][ T6541] delete_channel: no stack [ 94.305167][ T6543] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.209'. [ 94.928117][ T6561] netlink: 188 bytes leftover after parsing attributes in process `syz.1.222'. [ 95.981371][ T6596] __nla_validate_parse: 1 callbacks suppressed [ 95.981388][ T6596] netlink: 188 bytes leftover after parsing attributes in process `syz.2.227'. [ 96.147091][ T6602] netlink: 188 bytes leftover after parsing attributes in process `syz.2.229'. [ 96.164400][ T6603] FAULT_INJECTION: forcing a failure. [ 96.164400][ T6603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.183015][ T6603] CPU: 1 PID: 6603 Comm: syz.3.228 Not tainted 6.6.101-syzkaller #0 [ 96.191054][ T6603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 96.201116][ T6603] Call Trace: [ 96.204394][ T6603] [ 96.207321][ T6603] dump_stack_lvl+0x16c/0x230 [ 96.212001][ T6603] ? show_regs_print_info+0x20/0x20 [ 96.217232][ T6603] ? load_image+0x3b0/0x3b0 [ 96.221737][ T6603] ? __lock_acquire+0x7c80/0x7c80 [ 96.226763][ T6603] should_fail_ex+0x39d/0x4d0 [ 96.231444][ T6603] _copy_from_user+0x2f/0xe0 [ 96.236033][ T6603] __copy_msghdr+0x3bb/0x580 [ 96.240627][ T6603] ___sys_sendmsg+0x1a6/0x290 [ 96.245396][ T6603] ? __sys_sendmsg+0x270/0x270 [ 96.250173][ T6603] ? __lock_acquire+0x7c80/0x7c80 [ 96.255211][ T6603] __se_sys_sendmsg+0x1a5/0x270 [ 96.260059][ T6603] ? __x64_sys_sendmsg+0x80/0x80 [ 96.265003][ T6603] ? lockdep_hardirqs_on+0x98/0x150 [ 96.270199][ T6603] do_syscall_64+0x55/0xb0 [ 96.274604][ T6603] ? clear_bhb_loop+0x40/0x90 [ 96.279269][ T6603] ? clear_bhb_loop+0x40/0x90 [ 96.283941][ T6603] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.289831][ T6603] RIP: 0033:0x7f989058eb69 [ 96.294236][ T6603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.313832][ T6603] RSP: 002b:00007f9891461038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.322246][ T6603] RAX: ffffffffffffffda RBX: 00007f98907b6080 RCX: 00007f989058eb69 [ 96.330210][ T6603] RDX: 0000000004000080 RSI: 0000200000000680 RDI: 0000000000000003 [ 96.338178][ T6603] RBP: 00007f9891461090 R08: 0000000000000000 R09: 0000000000000000 [ 96.346140][ T6603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.354100][ T6603] R13: 0000000000000000 R14: 00007f98907b6080 R15: 00007ffebbd51918 [ 96.362077][ T6603] [ 96.476336][ T6606] Illegal XDP return value 1024467417 on prog (id 192) dev N/A, expect packet loss! [ 96.854989][ T6620] netlink: 'syz.2.235': attribute type 9 has an invalid length. [ 96.873129][ T6620] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.235'. [ 97.384783][ T6626] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 97.391662][ T6629] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.238'. [ 97.700419][ T6632] netlink: 'syz.2.240': attribute type 4 has an invalid length. [ 97.710404][ T6632] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.240'. [ 97.860467][ T5103] Bluetooth: hci1: unexpected event 0x18 length: 15 < 23 [ 98.525560][ T6657] netlink: 188 bytes leftover after parsing attributes in process `syz.2.247'. [ 98.526945][ T6659] netlink: 'syz.3.246': attribute type 9 has an invalid length. [ 98.542585][ T6659] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.246'. [ 98.688155][ T6662] FAULT_INJECTION: forcing a failure. [ 98.688155][ T6662] name failslab, interval 1, probability 0, space 0, times 0 [ 98.701025][ T6662] CPU: 0 PID: 6662 Comm: syz.1.248 Not tainted 6.6.101-syzkaller #0 [ 98.709041][ T6662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 98.719120][ T6662] Call Trace: [ 98.722417][ T6662] [ 98.725356][ T6662] dump_stack_lvl+0x16c/0x230 [ 98.730043][ T6662] ? show_regs_print_info+0x20/0x20 [ 98.735238][ T6662] ? load_image+0x3b0/0x3b0 [ 98.739741][ T6662] ? __might_sleep+0xe0/0xe0 [ 98.744330][ T6662] ? __lock_acquire+0x7c80/0x7c80 [ 98.749347][ T6662] ? mark_lock+0x94/0x320 [ 98.753675][ T6662] should_fail_ex+0x39d/0x4d0 [ 98.758353][ T6662] should_failslab+0x9/0x20 [ 98.762956][ T6662] slab_pre_alloc_hook+0x59/0x310 [ 98.767980][ T6662] ? __get_vm_area_node+0x125/0x370 [ 98.773350][ T6662] __kmem_cache_alloc_node+0x53/0x260 [ 98.778728][ T6662] ? __get_vm_area_node+0x125/0x370 [ 98.783924][ T6662] kmalloc_node_trace+0x26/0xe0 [ 98.788776][ T6662] __get_vm_area_node+0x125/0x370 [ 98.793818][ T6662] __vmalloc_node_range+0x36e/0x1320 [ 98.799128][ T6662] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 98.804682][ T6662] ? mark_lock+0x94/0x320 [ 98.809016][ T6662] ? __lock_acquire+0x1334/0x7c80 [ 98.814045][ T6662] ? verify_lock_unused+0x140/0x140 [ 98.819248][ T6662] ? get_pid_task+0x20/0x1e0 [ 98.823842][ T6662] ? free_vm_area+0x50/0x50 [ 98.828342][ T6662] ? end_current_label_crit_section+0x170/0x170 [ 98.834585][ T6662] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 98.840121][ T6662] __vmalloc+0x7a/0x90 [ 98.844190][ T6662] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 98.849728][ T6662] bpf_prog_alloc_no_stats+0x47/0x440 [ 98.855091][ T6662] ? bpf_prog_alloc+0x2b/0x1b0 [ 98.859850][ T6662] bpf_prog_alloc+0x3d/0x1b0 [ 98.864443][ T6662] bpf_prog_load+0x6b8/0x16d0 [ 98.869141][ T6662] ? map_freeze+0x420/0x420 [ 98.873640][ T6662] ? __might_fault+0xaa/0x120 [ 98.878332][ T6662] ? __lock_acquire+0x7c80/0x7c80 [ 98.883355][ T6662] ? file_end_write+0x159/0x250 [ 98.888209][ T6662] ? __might_fault+0xaa/0x120 [ 98.892897][ T6662] ? __might_fault+0xc6/0x120 [ 98.897566][ T6662] ? __might_fault+0xaa/0x120 [ 98.902234][ T6662] ? bpf_lsm_bpf+0x9/0x10 [ 98.906559][ T6662] ? security_bpf+0x7e/0xa0 [ 98.911057][ T6662] __sys_bpf+0x55a/0x800 [ 98.915299][ T6662] ? bpf_link_show_fdinfo+0x350/0x350 [ 98.920674][ T6662] ? lock_chain_count+0x20/0x20 [ 98.925533][ T6662] __x64_sys_bpf+0x7c/0x90 [ 98.929967][ T6662] do_syscall_64+0x55/0xb0 [ 98.934377][ T6662] ? clear_bhb_loop+0x40/0x90 [ 98.939043][ T6662] ? clear_bhb_loop+0x40/0x90 [ 98.943713][ T6662] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.949604][ T6662] RIP: 0033:0x7f2779f8eb69 [ 98.954013][ T6662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.973613][ T6662] RSP: 002b:00007f277ad9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 98.982021][ T6662] RAX: ffffffffffffffda RBX: 00007f277a1b5fa0 RCX: 00007f2779f8eb69 [ 98.990017][ T6662] RDX: 0000000000000094 RSI: 0000200000000700 RDI: 0000000000000005 [ 98.997992][ T6662] RBP: 00007f277ad9a090 R08: 0000000000000000 R09: 0000000000000000 [ 99.005971][ T6662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.013958][ T6662] R13: 0000000000000000 R14: 00007f277a1b5fa0 R15: 00007ffe683a2478 [ 99.021952][ T6662] [ 99.036476][ T6662] syz.1.248: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 99.066072][ T6662] CPU: 0 PID: 6662 Comm: syz.1.248 Not tainted 6.6.101-syzkaller #0 [ 99.074104][ T6662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 99.084178][ T6662] Call Trace: [ 99.087467][ T6662] [ 99.090420][ T6662] dump_stack_lvl+0x16c/0x230 [ 99.095122][ T6662] ? show_regs_print_info+0x20/0x20 [ 99.100343][ T6662] ? load_image+0x3b0/0x3b0 [ 99.104877][ T6662] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 99.111312][ T6662] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 99.117838][ T6662] warn_alloc+0x210/0x300 [ 99.122193][ T6662] ? __get_vm_area_node+0x125/0x370 [ 99.127421][ T6662] ? zone_watermark_ok_safe+0x230/0x230 [ 99.132997][ T6662] ? rcu_is_watching+0x15/0xb0 [ 99.137783][ T6662] ? __get_vm_area_node+0x356/0x370 [ 99.143009][ T6662] __vmalloc_node_range+0x393/0x1320 [ 99.148316][ T6662] ? mark_lock+0x94/0x320 [ 99.152669][ T6662] ? __lock_acquire+0x1334/0x7c80 [ 99.157716][ T6662] ? verify_lock_unused+0x140/0x140 [ 99.162939][ T6662] ? get_pid_task+0x20/0x1e0 [ 99.167556][ T6662] ? free_vm_area+0x50/0x50 [ 99.172080][ T6662] ? end_current_label_crit_section+0x170/0x170 [ 99.178342][ T6662] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 99.183909][ T6662] __vmalloc+0x7a/0x90 [ 99.188014][ T6662] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 99.193583][ T6662] bpf_prog_alloc_no_stats+0x47/0x440 [ 99.198976][ T6662] ? bpf_prog_alloc+0x2b/0x1b0 [ 99.203750][ T6662] bpf_prog_alloc+0x3d/0x1b0 [ 99.208357][ T6662] bpf_prog_load+0x6b8/0x16d0 [ 99.213075][ T6662] ? map_freeze+0x420/0x420 [ 99.217603][ T6662] ? __might_fault+0xaa/0x120 [ 99.222298][ T6662] ? __lock_acquire+0x7c80/0x7c80 [ 99.227342][ T6662] ? file_end_write+0x159/0x250 [ 99.232223][ T6662] ? __might_fault+0xaa/0x120 [ 99.236910][ T6662] ? __might_fault+0xc6/0x120 [ 99.241600][ T6662] ? __might_fault+0xaa/0x120 [ 99.246295][ T6662] ? bpf_lsm_bpf+0x9/0x10 [ 99.250638][ T6662] ? security_bpf+0x7e/0xa0 [ 99.255176][ T6662] __sys_bpf+0x55a/0x800 [ 99.259421][ T6662] ? bpf_link_show_fdinfo+0x350/0x350 [ 99.264812][ T6662] ? lock_chain_count+0x20/0x20 [ 99.269674][ T6662] __x64_sys_bpf+0x7c/0x90 [ 99.274163][ T6662] do_syscall_64+0x55/0xb0 [ 99.278579][ T6662] ? clear_bhb_loop+0x40/0x90 [ 99.283239][ T6662] ? clear_bhb_loop+0x40/0x90 [ 99.287908][ T6662] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.293821][ T6662] RIP: 0033:0x7f2779f8eb69 [ 99.298248][ T6662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.317869][ T6662] RSP: 002b:00007f277ad9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 99.326276][ T6662] RAX: ffffffffffffffda RBX: 00007f277a1b5fa0 RCX: 00007f2779f8eb69 [ 99.334237][ T6662] RDX: 0000000000000094 RSI: 0000200000000700 RDI: 0000000000000005 [ 99.342192][ T6662] RBP: 00007f277ad9a090 R08: 0000000000000000 R09: 0000000000000000 [ 99.350150][ T6662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.358182][ T6662] R13: 0000000000000000 R14: 00007f277a1b5fa0 R15: 00007ffe683a2478 [ 99.366170][ T6662] [ 99.373295][ T6662] Mem-Info: [ 99.378860][ T6662] active_anon:5173 inactive_anon:0 isolated_anon:0 [ 99.378860][ T6662] active_file:1246 inactive_file:39836 isolated_file:0 [ 99.378860][ T6662] unevictable:768 dirty:149 writeback:0 [ 99.378860][ T6662] slab_reclaimable:11126 slab_unreclaimable:101798 [ 99.378860][ T6662] mapped:24208 shmem:1361 pagetables:524 [ 99.378860][ T6662] sec_pagetables:0 bounce:0 [ 99.378860][ T6662] kernel_misc_reclaimable:0 [ 99.378860][ T6662] free:1353432 free_pcp:12997 free_cma:0 [ 99.424801][ T6662] Node 0 active_anon:20692kB inactive_anon:0kB active_file:4984kB inactive_file:159144kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96832kB dirty:592kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11312kB pagetables:2096kB sec_pagetables:0kB all_unreclaimable? no [ 99.466030][ T6662] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 99.500681][ T6662] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 99.539667][ T6662] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 99.546917][ T6662] Node 0 DMA32 free:1506588kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:20548kB inactive_anon:0kB active_file:4984kB inactive_file:157808kB unevictable:1536kB writepending:592kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:28448kB local_pcp:8228kB free_cma:0kB [ 99.601422][ T6662] lowmem_reserve[]: 0 0 1 1 1 [ 99.620630][ T6662] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1336kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 99.694256][ T6662] lowmem_reserve[]: 0 0 0 0 0 [ 99.699103][ T6662] Node 1 Normal free:3891300kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:24920kB local_pcp:13184kB free_cma:0kB [ 99.740234][ T6662] lowmem_reserve[]: 0 0 0 0 0 [ 99.745704][ T6662] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 99.758879][ T6662] Node 0 DMA32: 1217*4kB (UME) 1129*8kB (UM) 493*16kB (UME) 299*32kB (UM) 49*64kB (UM) 5*128kB (UM) 5*256kB (UME) 3*512kB (UM) 6*1024kB (UM) 4*2048kB (UME) 355*4096kB (M) = 1506364kB [ 99.777926][ T6662] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 99.791119][ T6662] Node 1 Normal: 223*4kB (UE) 81*8kB (UE) 44*16kB (UE) 37*32kB (UE) 14*64kB (UME) 3*128kB (UME) 2*256kB (UE) 2*512kB (UM) 0*1024kB 1*2048kB (U) 948*4096kB (ME) = 3891300kB [ 99.809234][ T6662] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 99.820265][ T6662] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 99.830526][ T6662] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 99.842424][ T6662] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 99.854230][ T6662] 42444 total pagecache pages [ 99.859134][ T6662] 0 pages in swap cache [ 99.864253][ T6662] Free swap = 124996kB [ 99.868577][ T6662] Total swap = 124996kB [ 99.872886][ T6662] 2097051 pages RAM [ 99.903869][ T6662] 0 pages HighMem/MovableOnly [ 99.918524][ T6662] 416137 pages reserved [ 99.941816][ T6662] 0 pages cma reserved [ 102.630815][ T6734] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.273'. [ 102.704473][ T6738] netlink: 188 bytes leftover after parsing attributes in process `syz.1.274'. [ 103.795076][ T6755] netlink: 'syz.0.280': attribute type 4 has an invalid length. [ 103.805295][ T6755] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.280'. [ 103.845533][ T6757] FAULT_INJECTION: forcing a failure. [ 103.845533][ T6757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.859384][ T6757] CPU: 1 PID: 6757 Comm: syz.2.282 Not tainted 6.6.101-syzkaller #0 [ 103.867410][ T6757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 103.877493][ T6757] Call Trace: [ 103.880807][ T6757] [ 103.883749][ T6757] dump_stack_lvl+0x16c/0x230 [ 103.888447][ T6757] ? show_regs_print_info+0x20/0x20 [ 103.893663][ T6757] ? load_image+0x3b0/0x3b0 [ 103.898179][ T6757] ? __might_fault+0xaa/0x120 [ 103.902857][ T6757] ? __lock_acquire+0x7c80/0x7c80 [ 103.907893][ T6757] ? perf_trace_lock_acquire+0x32a/0x3e0 [ 103.913545][ T6757] should_fail_ex+0x39d/0x4d0 [ 103.918247][ T6757] _copy_from_user+0x2f/0xe0 [ 103.922845][ T6757] ___sys_sendmsg+0x159/0x290 [ 103.927533][ T6757] ? __sys_sendmsg+0x270/0x270 [ 103.932333][ T6757] ? __lock_acquire+0x7c80/0x7c80 [ 103.937397][ T6757] __se_sys_sendmsg+0x1a5/0x270 [ 103.942256][ T6757] ? __x64_sys_sendmsg+0x80/0x80 [ 103.947223][ T6757] ? lockdep_hardirqs_on+0x98/0x150 [ 103.952430][ T6757] do_syscall_64+0x55/0xb0 [ 103.956847][ T6757] ? clear_bhb_loop+0x40/0x90 [ 103.961524][ T6757] ? clear_bhb_loop+0x40/0x90 [ 103.966215][ T6757] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.972114][ T6757] RIP: 0033:0x7f43cfb8eb69 [ 103.976552][ T6757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.996182][ T6757] RSP: 002b:00007f43d09b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.004607][ T6757] RAX: ffffffffffffffda RBX: 00007f43cfdb5fa0 RCX: 00007f43cfb8eb69 [ 104.012603][ T6757] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 104.020594][ T6757] RBP: 00007f43d09b2090 R08: 0000000000000000 R09: 0000000000000000 [ 104.028579][ T6757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.036558][ T6757] R13: 0000000000000000 R14: 00007f43cfdb5fa0 R15: 00007ffd3866ae68 [ 104.044559][ T6757] [ 104.259465][ T6760] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.307267][ T6765] FAULT_INJECTION: forcing a failure. [ 104.307267][ T6765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.320685][ T6765] CPU: 1 PID: 6765 Comm: syz.2.285 Not tainted 6.6.101-syzkaller #0 [ 104.328697][ T6765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 104.338774][ T6765] Call Trace: [ 104.342069][ T6765] [ 104.345020][ T6765] dump_stack_lvl+0x16c/0x230 [ 104.349731][ T6765] ? show_regs_print_info+0x20/0x20 [ 104.354950][ T6765] ? load_image+0x3b0/0x3b0 [ 104.359486][ T6765] ? __might_fault+0xaa/0x120 [ 104.364175][ T6765] ? __lock_acquire+0x7c80/0x7c80 [ 104.369195][ T6765] should_fail_ex+0x39d/0x4d0 [ 104.373884][ T6765] _copy_from_user+0x2f/0xe0 [ 104.378484][ T6765] __sys_bpf+0x1e9/0x800 [ 104.382721][ T6765] ? bpf_link_show_fdinfo+0x350/0x350 [ 104.388099][ T6765] ? lock_chain_count+0x20/0x20 [ 104.392953][ T6765] __x64_sys_bpf+0x7c/0x90 [ 104.397362][ T6765] do_syscall_64+0x55/0xb0 [ 104.401771][ T6765] ? clear_bhb_loop+0x40/0x90 [ 104.406437][ T6765] ? clear_bhb_loop+0x40/0x90 [ 104.411106][ T6765] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.416995][ T6765] RIP: 0033:0x7f43cfb8eb69 [ 104.421400][ T6765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.441003][ T6765] RSP: 002b:00007f43d09b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 104.449414][ T6765] RAX: ffffffffffffffda RBX: 00007f43cfdb5fa0 RCX: 00007f43cfb8eb69 [ 104.457378][ T6765] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 104.465339][ T6765] RBP: 00007f43d09b2090 R08: 0000000000000000 R09: 0000000000000000 [ 104.473298][ T6765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.481261][ T6765] R13: 0000000000000000 R14: 00007f43cfdb5fa0 R15: 00007ffd3866ae68 [ 104.489242][ T6765] [ 104.558576][ T6767] netlink: 160 bytes leftover after parsing attributes in process `syz.2.286'. [ 104.590235][ T6767] netlink: 160 bytes leftover after parsing attributes in process `syz.2.286'. [ 104.703016][ T6773] netlink: 188 bytes leftover after parsing attributes in process `syz.0.287'. [ 105.013171][ T6785] netlink: 188 bytes leftover after parsing attributes in process `syz.2.293'. [ 105.255435][ T5103] Bluetooth: hci0: unexpected event 0x18 length: 15 < 23 [ 105.714663][ T6800] netlink: 'syz.1.297': attribute type 4 has an invalid length. [ 105.722448][ T6800] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.297'. [ 106.277078][ T6812] netlink: 188 bytes leftover after parsing attributes in process `syz.0.302'. [ 107.464976][ T5103] Bluetooth: hci2: unexpected event 0x18 length: 15 < 23 [ 107.830548][ T6851] netlink: 188 bytes leftover after parsing attributes in process `syz.3.315'. [ 108.324897][ T6870] FAULT_INJECTION: forcing a failure. [ 108.324897][ T6870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.383545][ T6870] CPU: 1 PID: 6870 Comm: syz.0.324 Not tainted 6.6.101-syzkaller #0 [ 108.391598][ T6870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 108.401684][ T6870] Call Trace: [ 108.404971][ T6870] [ 108.407901][ T6870] dump_stack_lvl+0x16c/0x230 [ 108.412587][ T6870] ? show_regs_print_info+0x20/0x20 [ 108.417783][ T6870] ? load_image+0x3b0/0x3b0 [ 108.422294][ T6870] ? __lock_acquire+0x7c80/0x7c80 [ 108.427321][ T6870] ? snprintf+0xdb/0x120 [ 108.431572][ T6870] should_fail_ex+0x39d/0x4d0 [ 108.436262][ T6870] _copy_to_user+0x2f/0xa0 [ 108.440680][ T6870] simple_read_from_buffer+0xe7/0x150 [ 108.446088][ T6870] proc_fail_nth_read+0x1e3/0x250 [ 108.451126][ T6870] ? proc_fault_inject_write+0x340/0x340 [ 108.456769][ T6870] ? fsnotify_perm+0x271/0x5e0 [ 108.461562][ T6870] ? proc_fault_inject_write+0x340/0x340 [ 108.467205][ T6870] vfs_read+0x27e/0x920 [ 108.471373][ T6870] ? kernel_read+0x1e0/0x1e0 [ 108.475987][ T6870] ? __fget_files+0x28/0x4d0 [ 108.480586][ T6870] ? __fget_files+0x44a/0x4d0 [ 108.485285][ T6870] ? __fdget_pos+0x2a3/0x330 [ 108.489896][ T6870] ? ksys_read+0x75/0x250 [ 108.494244][ T6870] ksys_read+0x147/0x250 [ 108.498513][ T6870] ? vfs_write+0x940/0x940 [ 108.502946][ T6870] ? trace_sys_enter+0x1f/0x80 [ 108.507719][ T6870] do_syscall_64+0x55/0xb0 [ 108.512140][ T6870] ? clear_bhb_loop+0x40/0x90 [ 108.516813][ T6870] ? clear_bhb_loop+0x40/0x90 [ 108.521490][ T6870] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.527385][ T6870] RIP: 0033:0x7f35bdb8d57c [ 108.531802][ T6870] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 108.551420][ T6870] RSP: 002b:00007f35be9cf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 108.559870][ T6870] RAX: ffffffffffffffda RBX: 00007f35bddb6080 RCX: 00007f35bdb8d57c [ 108.567936][ T6870] RDX: 000000000000000f RSI: 00007f35be9cf0a0 RDI: 0000000000000007 [ 108.575907][ T6870] RBP: 00007f35be9cf090 R08: 0000000000000000 R09: 0000000000000000 [ 108.583874][ T6870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.591841][ T6870] R13: 0000000000000000 R14: 00007f35bddb6080 R15: 00007fff4ad34a58 [ 108.599834][ T6870] [ 108.827393][ T6879] netlink: 188 bytes leftover after parsing attributes in process `syz.2.328'. [ 108.905542][ T6884] netlink: 'syz.1.331': attribute type 9 has an invalid length. [ 108.918085][ T6884] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.331'. [ 109.446074][ T6901] netlink: 'syz.0.345': attribute type 9 has an invalid length. [ 109.472747][ T6901] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.345'. [ 109.701708][ T6910] netlink: 'syz.2.339': attribute type 3 has an invalid length. [ 109.710743][ T6908] netlink: 'syz.2.339': attribute type 3 has an invalid length. [ 109.717156][ T6910] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.339'. [ 109.759975][ T6908] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.339'. [ 109.926732][ T6919] netlink: 188 bytes leftover after parsing attributes in process `syz.3.342'. [ 112.107694][ T6960] FAULT_INJECTION: forcing a failure. [ 112.107694][ T6960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.154166][ T6960] CPU: 0 PID: 6960 Comm: syz.0.357 Not tainted 6.6.101-syzkaller #0 [ 112.162232][ T6960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 112.172331][ T6960] Call Trace: [ 112.175657][ T6960] [ 112.178625][ T6960] dump_stack_lvl+0x16c/0x230 [ 112.183354][ T6960] ? show_regs_print_info+0x20/0x20 [ 112.188595][ T6960] ? load_image+0x3b0/0x3b0 [ 112.193160][ T6960] ? __might_fault+0xaa/0x120 [ 112.197888][ T6960] ? __lock_acquire+0x7c80/0x7c80 [ 112.203023][ T6960] should_fail_ex+0x39d/0x4d0 [ 112.207783][ T6960] _copy_from_user+0x2f/0xe0 [ 112.212435][ T6960] ___sys_sendmsg+0x159/0x290 [ 112.217173][ T6960] ? __sys_sendmsg+0x270/0x270 [ 112.222069][ T6960] ? __lock_acquire+0x7c80/0x7c80 [ 112.227233][ T6960] __se_sys_sendmsg+0x1a5/0x270 [ 112.232166][ T6960] ? __x64_sys_sendmsg+0x80/0x80 [ 112.237218][ T6960] ? lockdep_hardirqs_on+0x98/0x150 [ 112.242502][ T6960] do_syscall_64+0x55/0xb0 [ 112.246959][ T6960] ? clear_bhb_loop+0x40/0x90 [ 112.251674][ T6960] ? clear_bhb_loop+0x40/0x90 [ 112.256405][ T6960] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.262351][ T6960] RIP: 0033:0x7f35bdb8eb69 [ 112.266895][ T6960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.286546][ T6960] RSP: 002b:00007f35be9cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.295026][ T6960] RAX: ffffffffffffffda RBX: 00007f35bddb6080 RCX: 00007f35bdb8eb69 [ 112.303033][ T6960] RDX: 0000000000000000 RSI: 0000200000000f00 RDI: 0000000000000005 [ 112.311047][ T6960] RBP: 00007f35be9cf090 R08: 0000000000000000 R09: 0000000000000000 [ 112.319059][ T6960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.327073][ T6960] R13: 0000000000000001 R14: 00007f35bddb6080 R15: 00007fff4ad34a58 [ 112.335141][ T6960] [ 112.696556][ T6968] netlink: 188 bytes leftover after parsing attributes in process `syz.2.361'. [ 113.408351][ T6980] netlink: 188 bytes leftover after parsing attributes in process `syz.1.370'. [ 114.657670][ T6998] netlink: 'syz.1.367': attribute type 9 has an invalid length. [ 114.727579][ T7000] netlink: 'syz.3.369': attribute type 3 has an invalid length. [ 114.734505][ T6998] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.367'. [ 114.776987][ T7000] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.369'. [ 115.108912][ T7005] netlink: 14 bytes leftover after parsing attributes in process `syz.0.371'. [ 117.979874][ T7040] netlink: 'syz.0.384': attribute type 9 has an invalid length. [ 118.063529][ T7040] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.384'. [ 118.489097][ T7044] FAULT_INJECTION: forcing a failure. [ 118.489097][ T7044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.533483][ T7044] CPU: 0 PID: 7044 Comm: syz.3.385 Not tainted 6.6.101-syzkaller #0 [ 118.541544][ T7044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 118.551642][ T7044] Call Trace: [ 118.554962][ T7044] [ 118.558041][ T7044] dump_stack_lvl+0x16c/0x230 [ 118.562785][ T7044] ? show_regs_print_info+0x20/0x20 [ 118.568390][ T7044] ? load_image+0x3b0/0x3b0 [ 118.572960][ T7044] ? __might_fault+0xaa/0x120 [ 118.577697][ T7044] ? __lock_acquire+0x7c80/0x7c80 [ 118.582789][ T7044] should_fail_ex+0x39d/0x4d0 [ 118.587533][ T7044] _copy_from_user+0x2f/0xe0 [ 118.592173][ T7044] kstrtouint_from_user+0xc2/0x150 [ 118.597343][ T7044] ? kstrtol_from_user+0x150/0x150 [ 118.602646][ T7044] proc_fail_nth_write+0x89/0x240 [ 118.607720][ T7044] ? proc_fail_nth_read+0x250/0x250 [ 118.612996][ T7044] ? proc_fail_nth_read+0x250/0x250 [ 118.618241][ T7044] vfs_write+0x288/0x940 [ 118.622554][ T7044] ? file_end_write+0x250/0x250 [ 118.627455][ T7044] ? __fget_files+0x28/0x4d0 [ 118.632090][ T7044] ? __fget_files+0x44a/0x4d0 [ 118.636835][ T7044] ? __fdget_pos+0x2a3/0x330 [ 118.641460][ T7044] ? ksys_write+0x75/0x250 [ 118.645929][ T7044] ksys_write+0x147/0x250 [ 118.650319][ T7044] ? __ia32_sys_read+0x90/0x90 [ 118.655141][ T7044] ? lockdep_hardirqs_on+0x98/0x150 [ 118.660398][ T7044] do_syscall_64+0x55/0xb0 [ 118.664853][ T7044] ? clear_bhb_loop+0x40/0x90 [ 118.669566][ T7044] ? clear_bhb_loop+0x40/0x90 [ 118.674284][ T7044] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 118.680223][ T7044] RIP: 0033:0x7f989058d61f [ 118.684683][ T7044] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 118.704332][ T7044] RSP: 002b:00007f9891461030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 118.712793][ T7044] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f989058d61f [ 118.720804][ T7044] RDX: 0000000000000001 RSI: 00007f98914610a0 RDI: 0000000000000003 [ 118.728820][ T7044] RBP: 00007f9891461090 R08: 0000000000000000 R09: 0000000000000000 [ 118.736832][ T7044] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 118.744839][ T7044] R13: 0000000000000000 R14: 00007f98907b6080 R15: 00007ffebbd51918 [ 118.752902][ T7044] [ 119.048537][ T7048] netlink: 'syz.3.389': attribute type 9 has an invalid length. [ 119.073528][ T7048] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.389'. [ 119.252396][ T7052] netlink: 'syz.0.388': attribute type 21 has an invalid length. [ 119.294341][ T7052] netlink: 14581 bytes leftover after parsing attributes in process `syz.0.388'. [ 121.555571][ T7076] netlink: 'syz.3.397': attribute type 9 has an invalid length. [ 121.603541][ T7076] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.397'. [ 122.411731][ T7087] netlink: 'syz.2.400': attribute type 9 has an invalid length. [ 122.543496][ T7087] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.400'. [ 123.330994][ T7096] netlink: 'syz.3.405': attribute type 21 has an invalid length. [ 123.387184][ T7096] netlink: 14581 bytes leftover after parsing attributes in process `syz.3.405'. [ 124.446073][ T7103] netlink: 188 bytes leftover after parsing attributes in process `syz.3.407'. [ 126.558224][ T7130] netlink: 'syz.0.413': attribute type 3 has an invalid length. [ 126.721721][ T7130] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.413'. [ 126.783562][ T7127] netlink: 'syz.2.415': attribute type 21 has an invalid length. [ 126.833763][ T7127] netlink: 14581 bytes leftover after parsing attributes in process `syz.2.415'. [ 127.621887][ T7137] netlink: 'syz.3.417': attribute type 9 has an invalid length. [ 127.669966][ T7137] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.417'. [ 129.019477][ T7149] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.059969][ T5103] Bluetooth: hci0: unexpected event 0x16 length: 15 > 6 [ 129.086568][ T7154] veth0_to_batadv: entered promiscuous mode [ 129.133463][ T7154] veth0_to_batadv: entered allmulticast mode [ 129.182932][ T7160] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.425'. [ 129.254839][ T7160] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.425'. [ 129.274705][ T7159] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.425'. [ 129.376074][ T7161] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.425'. [ 129.391378][ T7163] netlink: 'syz.0.427': attribute type 9 has an invalid length. [ 129.403491][ T7163] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.427'. [ 129.788134][ T7170] netlink: 'syz.3.425': attribute type 21 has an invalid length. [ 130.100730][ T7178] netlink: 'syz.0.431': attribute type 21 has an invalid length. [ 130.114988][ T7178] netlink: 128 bytes leftover after parsing attributes in process `syz.0.431'. [ 130.975705][ T7184] netlink: 188 bytes leftover after parsing attributes in process `syz.0.433'. [ 131.338047][ T7189] FAULT_INJECTION: forcing a failure. [ 131.338047][ T7189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.397936][ T7189] CPU: 1 PID: 7189 Comm: syz.1.435 Not tainted 6.6.101-syzkaller #0 [ 131.405982][ T7189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 131.416068][ T7189] Call Trace: [ 131.419368][ T7189] [ 131.422322][ T7189] dump_stack_lvl+0x16c/0x230 [ 131.427037][ T7189] ? show_regs_print_info+0x20/0x20 [ 131.432261][ T7189] ? load_image+0x3b0/0x3b0 [ 131.436790][ T7189] ? __lock_acquire+0x7c80/0x7c80 [ 131.441831][ T7189] ? snprintf+0xdb/0x120 [ 131.446107][ T7189] should_fail_ex+0x39d/0x4d0 [ 131.450810][ T7189] _copy_to_user+0x2f/0xa0 [ 131.455247][ T7189] simple_read_from_buffer+0xe7/0x150 [ 131.460732][ T7189] proc_fail_nth_read+0x1e3/0x250 [ 131.465795][ T7189] ? proc_fault_inject_write+0x340/0x340 [ 131.471453][ T7189] ? fsnotify_perm+0x271/0x5e0 [ 131.476243][ T7189] ? proc_fault_inject_write+0x340/0x340 [ 131.481895][ T7189] vfs_read+0x27e/0x920 [ 131.486079][ T7189] ? kernel_read+0x1e0/0x1e0 [ 131.490693][ T7189] ? __fget_files+0x28/0x4d0 [ 131.495303][ T7189] ? __fget_files+0x44a/0x4d0 [ 131.500007][ T7189] ? __fdget_pos+0x2a3/0x330 [ 131.504613][ T7189] ? ksys_read+0x75/0x250 [ 131.508943][ T7189] ksys_read+0x147/0x250 [ 131.513182][ T7189] ? vfs_write+0x940/0x940 [ 131.517592][ T7189] ? lockdep_hardirqs_on+0x98/0x150 [ 131.522792][ T7189] do_syscall_64+0x55/0xb0 [ 131.527201][ T7189] ? clear_bhb_loop+0x40/0x90 [ 131.531868][ T7189] ? clear_bhb_loop+0x40/0x90 [ 131.536531][ T7189] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.542417][ T7189] RIP: 0033:0x7f2779f8d57c [ 131.546832][ T7189] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 131.566431][ T7189] RSP: 002b:00007f277ad9a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 131.574845][ T7189] RAX: ffffffffffffffda RBX: 00007f277a1b5fa0 RCX: 00007f2779f8d57c [ 131.582802][ T7189] RDX: 000000000000000f RSI: 00007f277ad9a0a0 RDI: 0000000000000004 [ 131.590757][ T7189] RBP: 00007f277ad9a090 R08: 0000000000000000 R09: 0000000000000000 [ 131.598717][ T7189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.606673][ T7189] R13: 0000000000000000 R14: 00007f277a1b5fa0 R15: 00007ffe683a2478 [ 131.614646][ T7189] [ 132.019293][ T7202] netlink: 'syz.2.439': attribute type 9 has an invalid length. [ 132.060832][ T7202] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.439'. [ 132.931847][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.938506][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.989401][ T5103] Bluetooth: hci3: unexpected event 0x16 length: 15 > 6 [ 133.654365][ T7236] netlink: 188 bytes leftover after parsing attributes in process `syz.1.452'. [ 133.920436][ T7246] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.454'. [ 133.937758][ T7246] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.454'. [ 133.958517][ T7242] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.454'. [ 134.030733][ T7242] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.454'. [ 134.393931][ T7257] netlink: 'syz.0.454': attribute type 21 has an invalid length. [ 135.285229][ T7278] FAULT_INJECTION: forcing a failure. [ 135.285229][ T7278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.299114][ T7278] CPU: 0 PID: 7278 Comm: syz.1.466 Not tainted 6.6.101-syzkaller #0 [ 135.307114][ T7278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 135.317161][ T7278] Call Trace: [ 135.320427][ T7278] [ 135.323351][ T7278] dump_stack_lvl+0x16c/0x230 [ 135.328026][ T7278] ? show_regs_print_info+0x20/0x20 [ 135.333211][ T7278] ? load_image+0x3b0/0x3b0 [ 135.337709][ T7278] ? __might_fault+0xaa/0x120 [ 135.342374][ T7278] ? __lock_acquire+0x7c80/0x7c80 [ 135.347388][ T7278] should_fail_ex+0x39d/0x4d0 [ 135.352062][ T7278] _copy_from_user+0x2f/0xe0 [ 135.356655][ T7278] ____sys_sendmsg+0x30d/0x950 [ 135.361413][ T7278] ? __sys_sendmsg_sock+0x30/0x30 [ 135.366424][ T7278] ? __import_iovec+0x5f2/0x860 [ 135.371269][ T7278] ? import_iovec+0x73/0xa0 [ 135.375764][ T7278] ___sys_sendmsg+0x220/0x290 [ 135.380433][ T7278] ? __sys_sendmsg+0x270/0x270 [ 135.385199][ T7278] ? __lock_acquire+0x7c80/0x7c80 [ 135.390225][ T7278] __se_sys_sendmsg+0x1a5/0x270 [ 135.395072][ T7278] ? __x64_sys_sendmsg+0x80/0x80 [ 135.400029][ T7278] ? lockdep_hardirqs_on+0x98/0x150 [ 135.405219][ T7278] do_syscall_64+0x55/0xb0 [ 135.409623][ T7278] ? clear_bhb_loop+0x40/0x90 [ 135.414285][ T7278] ? clear_bhb_loop+0x40/0x90 [ 135.418945][ T7278] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.424828][ T7278] RIP: 0033:0x7f2779f8eb69 [ 135.429228][ T7278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.448818][ T7278] RSP: 002b:00007f277ad9a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.457233][ T7278] RAX: ffffffffffffffda RBX: 00007f277a1b5fa0 RCX: 00007f2779f8eb69 [ 135.465209][ T7278] RDX: 0000000000040004 RSI: 0000200000000100 RDI: 0000000000000003 [ 135.473187][ T7278] RBP: 00007f277ad9a090 R08: 0000000000000000 R09: 0000000000000000 [ 135.481158][ T7278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.489122][ T7278] R13: 0000000000000000 R14: 00007f277a1b5fa0 R15: 00007ffe683a2478 [ 135.497097][ T7278] [ 135.598106][ T7280] netlink: 188 bytes leftover after parsing attributes in process `syz.2.465'. [ 135.872989][ T7285] netlink: 'syz.2.468': attribute type 9 has an invalid length. [ 135.905177][ T7285] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.468'. [ 136.485835][ T7294] FAULT_INJECTION: forcing a failure. [ 136.485835][ T7294] name failslab, interval 1, probability 0, space 0, times 0 [ 136.508503][ T7294] CPU: 1 PID: 7294 Comm: syz.0.471 Not tainted 6.6.101-syzkaller #0 [ 136.516543][ T7294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 136.526639][ T7294] Call Trace: [ 136.529951][ T7294] [ 136.532986][ T7294] dump_stack_lvl+0x16c/0x230 [ 136.537690][ T7294] ? show_regs_print_info+0x20/0x20 [ 136.542912][ T7294] ? load_image+0x3b0/0x3b0 [ 136.547462][ T7294] should_fail_ex+0x39d/0x4d0 [ 136.552173][ T7294] should_failslab+0x9/0x20 [ 136.556702][ T7294] slab_pre_alloc_hook+0x59/0x310 [ 136.561750][ T7294] kmem_cache_alloc+0x5a/0x2e0 [ 136.566540][ T7294] ? dst_alloc+0x105/0x170 [ 136.570968][ T7294] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 136.576596][ T7294] dst_alloc+0x105/0x170 [ 136.580838][ T7294] ip6_rt_cache_alloc+0x39f/0x9c0 [ 136.585865][ T7294] ? rt6_find_cached_rt+0x270/0x270 [ 136.591056][ T7294] ? rt6_find_cached_rt+0x21d/0x270 [ 136.596251][ T7294] ? ip6_pol_route+0x166/0x1160 [ 136.601094][ T7294] ip6_pol_route+0xf3a/0x1160 [ 136.605788][ T7294] ? ip6_pol_route+0x166/0x1160 [ 136.610632][ T7294] ? trace_fib6_table_lookup+0x1c0/0x1c0 [ 136.616272][ T7294] fib6_rule_lookup+0x1d7/0x510 [ 136.621119][ T7294] ? skb_header_pointer+0x120/0x120 [ 136.626305][ T7294] ? fib6_lookup+0x2c0/0x2c0 [ 136.630888][ T7294] ? vsnprintf+0x1980/0x1a40 [ 136.635476][ T7294] ? read_lock_is_recursive+0x20/0x20 [ 136.640841][ T7294] ? tomoyo_write_log2+0x250/0x910 [ 136.645949][ T7294] ? dev_get_by_index_rcu+0xf4/0x110 [ 136.651247][ T7294] ip6_route_output_flags+0x364/0x5d0 [ 136.656620][ T7294] ? ip6_route_output_flags+0x2e/0x5d0 [ 136.662071][ T7294] ip6_dst_lookup_tail+0x199/0x14a0 [ 136.667262][ T7294] ? txopt_get+0x7b/0x3e0 [ 136.671581][ T7294] ? __lock_acquire+0x7c80/0x7c80 [ 136.676608][ T7294] ? ip6_dst_lookup+0x60/0x60 [ 136.681276][ T7294] ? txopt_get+0x7b/0x3e0 [ 136.685599][ T7294] ? txopt_get+0x7b/0x3e0 [ 136.689930][ T7294] ? txopt_get+0x336/0x3e0 [ 136.694337][ T7294] ? fl6_sock_lookup+0xd0/0xd0 [ 136.699092][ T7294] ip6_dst_lookup_flow+0x48/0xe0 [ 136.704022][ T7294] rawv6_sendmsg+0xd07/0x17f0 [ 136.708695][ T7294] ? __might_sleep+0xe0/0xe0 [ 136.713275][ T7294] ? compat_rawv6_ioctl+0x70/0x70 [ 136.718297][ T7294] ? aa_sk_perm+0x7fc/0x930 [ 136.722799][ T7294] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 136.729214][ T7294] ? inet_send_prepare+0x260/0x260 [ 136.734312][ T7294] ? inet_sendmsg+0x7c/0x2f0 [ 136.738889][ T7294] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 136.744193][ T7294] ? security_socket_sendmsg+0x80/0xa0 [ 136.749642][ T7294] ? inet_send_prepare+0x260/0x260 [ 136.754760][ T7294] ____sys_sendmsg+0x5bf/0x950 [ 136.759521][ T7294] ? __asan_memset+0x22/0x40 [ 136.764106][ T7294] ? __sys_sendmsg_sock+0x30/0x30 [ 136.769125][ T7294] ? __import_iovec+0x5f2/0x860 [ 136.773978][ T7294] ? import_iovec+0x73/0xa0 [ 136.778478][ T7294] ___sys_sendmsg+0x220/0x290 [ 136.783149][ T7294] ? __sys_sendmsg+0x270/0x270 [ 136.787921][ T7294] ? __lock_acquire+0x7c80/0x7c80 [ 136.792954][ T7294] __se_sys_sendmsg+0x1a5/0x270 [ 136.797800][ T7294] ? __x64_sys_sendmsg+0x80/0x80 [ 136.802742][ T7294] ? lockdep_hardirqs_on+0x98/0x150 [ 136.807952][ T7294] do_syscall_64+0x55/0xb0 [ 136.812369][ T7294] ? clear_bhb_loop+0x40/0x90 [ 136.817062][ T7294] ? clear_bhb_loop+0x40/0x90 [ 136.821740][ T7294] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 136.827637][ T7294] RIP: 0033:0x7f35bdb8eb69 [ 136.832050][ T7294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.851652][ T7294] RSP: 002b:00007f35be9f0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.860147][ T7294] RAX: ffffffffffffffda RBX: 00007f35bddb5fa0 RCX: 00007f35bdb8eb69 [ 136.868109][ T7294] RDX: 0000000000000040 RSI: 0000200000000000 RDI: 0000000000000003 [ 136.876070][ T7294] RBP: 00007f35be9f0090 R08: 0000000000000000 R09: 0000000000000000 [ 136.884029][ T7294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.891991][ T7294] R13: 0000000000000000 R14: 00007f35bddb5fa0 R15: 00007fff4ad34a58 [ 136.899966][ T7294] [ 137.457817][ T7308] netlink: 'syz.1.484': attribute type 10 has an invalid length. [ 137.479402][ T7308] netlink: 55 bytes leftover after parsing attributes in process `syz.1.484'. [ 137.725929][ T7313] netlink: 188 bytes leftover after parsing attributes in process `syz.2.477'. [ 138.309800][ T7325] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.480'. [ 138.380129][ T7325] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.480'. [ 138.466777][ T7324] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.480'. [ 138.510651][ T7329] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.480'. [ 138.665948][ T7331] netlink: 'syz.1.480': attribute type 21 has an invalid length. [ 139.401746][ T7348] netlink: 'syz.2.489': attribute type 10 has an invalid length. [ 139.420226][ T7348] netlink: 55 bytes leftover after parsing attributes in process `syz.2.489'. [ 139.895190][ T7355] netlink: 'syz.2.492': attribute type 9 has an invalid length. [ 139.910488][ T7355] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.492'. [ 140.762807][ T7376] netlink: 188 bytes leftover after parsing attributes in process `syz.2.498'. [ 141.096632][ T7387] netlink: 'syz.3.503': attribute type 9 has an invalid length. [ 141.119684][ T7387] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.503'. [ 141.779654][ T5103] Bluetooth: hci0: unexpected event 0x18 length: 15 < 23 [ 141.992776][ T7414] netlink: 188 bytes leftover after parsing attributes in process `syz.1.511'. [ 142.248847][ T7421] FAULT_INJECTION: forcing a failure. [ 142.248847][ T7421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.262842][ T7421] CPU: 1 PID: 7421 Comm: syz.1.514 Not tainted 6.6.101-syzkaller #0 [ 142.270845][ T7421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 142.280897][ T7421] Call Trace: [ 142.284173][ T7421] [ 142.287100][ T7421] dump_stack_lvl+0x16c/0x230 [ 142.291772][ T7421] ? show_regs_print_info+0x20/0x20 [ 142.296980][ T7421] ? load_image+0x3b0/0x3b0 [ 142.301485][ T7421] ? __might_fault+0xaa/0x120 [ 142.306192][ T7421] ? __lock_acquire+0x7c80/0x7c80 [ 142.311225][ T7421] should_fail_ex+0x39d/0x4d0 [ 142.315922][ T7421] _copy_from_user+0x2f/0xe0 [ 142.320524][ T7421] kstrtouint_from_user+0xc2/0x150 [ 142.325649][ T7421] ? kstrtol_from_user+0x150/0x150 [ 142.330762][ T7421] proc_fail_nth_write+0x89/0x240 [ 142.335782][ T7421] ? proc_fail_nth_read+0x250/0x250 [ 142.340983][ T7421] ? proc_fail_nth_read+0x250/0x250 [ 142.346184][ T7421] vfs_write+0x288/0x940 [ 142.350442][ T7421] ? file_end_write+0x250/0x250 [ 142.355372][ T7421] ? __fget_files+0x28/0x4d0 [ 142.359986][ T7421] ? __fget_files+0x44a/0x4d0 [ 142.364687][ T7421] ? __fdget_pos+0x2a3/0x330 [ 142.369292][ T7421] ? ksys_write+0x75/0x250 [ 142.373733][ T7421] ksys_write+0x147/0x250 [ 142.378061][ T7421] ? __ia32_sys_read+0x90/0x90 [ 142.382839][ T7421] ? lockdep_hardirqs_on+0x98/0x150 [ 142.388072][ T7421] do_syscall_64+0x55/0xb0 [ 142.392596][ T7421] ? clear_bhb_loop+0x40/0x90 [ 142.397288][ T7421] ? clear_bhb_loop+0x40/0x90 [ 142.401988][ T7421] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 142.407911][ T7421] RIP: 0033:0x7f2779f8d61f [ 142.412345][ T7421] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 142.431991][ T7421] RSP: 002b:00007f277ad9a030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 142.440437][ T7421] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2779f8d61f [ 142.448413][ T7421] RDX: 0000000000000001 RSI: 00007f277ad9a0a0 RDI: 0000000000000004 [ 142.456467][ T7421] RBP: 00007f277ad9a090 R08: 0000000000000000 R09: 0000000000000000 [ 142.464476][ T7421] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 142.472449][ T7421] R13: 0000000000000000 R14: 00007f277a1b5fa0 R15: 00007ffe683a2478 [ 142.480435][ T7421] [ 142.522001][ T7423] netlink: 'syz.3.516': attribute type 9 has an invalid length. [ 142.532172][ T7423] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.516'. [ 142.816839][ T7435] netlink: 'syz.2.521': attribute type 10 has an invalid length. [ 142.832745][ T7435] macvlan0: entered promiscuous mode [ 142.839970][ T7435] macvlan0: entered allmulticast mode [ 142.872748][ T7435] veth1_vlan: entered allmulticast mode [ 142.912164][ T7435] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 142.973642][ T7435] syz.2.521 (7435) used greatest stack depth: 19240 bytes left [ 143.258384][ T7448] netlink: 'syz.0.526': attribute type 7 has an invalid length. [ 143.340616][ T7455] netlink: 'syz.3.528': attribute type 9 has an invalid length. [ 143.354826][ T5103] Bluetooth: hci2: unexpected event 0x18 length: 15 < 23 [ 143.363999][ T7455] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.528'. [ 144.616441][ T7484] FAULT_INJECTION: forcing a failure. [ 144.616441][ T7484] name failslab, interval 1, probability 0, space 0, times 0 [ 144.636460][ T7484] CPU: 1 PID: 7484 Comm: syz.3.537 Not tainted 6.6.101-syzkaller #0 [ 144.644488][ T7484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 144.654538][ T7484] Call Trace: [ 144.657816][ T7484] [ 144.660739][ T7484] dump_stack_lvl+0x16c/0x230 [ 144.665432][ T7484] ? show_regs_print_info+0x20/0x20 [ 144.670628][ T7484] ? load_image+0x3b0/0x3b0 [ 144.675139][ T7484] ? __might_sleep+0xe0/0xe0 [ 144.679738][ T7484] ? __lock_acquire+0x7c80/0x7c80 [ 144.684771][ T7484] should_fail_ex+0x39d/0x4d0 [ 144.689449][ T7484] should_failslab+0x9/0x20 [ 144.693950][ T7484] slab_pre_alloc_hook+0x59/0x310 [ 144.699023][ T7484] ? bpf_raw_tp_link_attach+0x23a/0x560 [ 144.704561][ T7484] __kmem_cache_alloc_node+0x53/0x260 [ 144.709934][ T7484] ? bpf_raw_tp_link_attach+0x23a/0x560 [ 144.715488][ T7484] kmalloc_trace+0x2a/0xe0 [ 144.719989][ T7484] bpf_raw_tp_link_attach+0x23a/0x560 [ 144.725364][ T7484] ? bpf_insn_prepare_dump+0x840/0x840 [ 144.730828][ T7484] bpf_raw_tracepoint_open+0x197/0x210 [ 144.736281][ T7484] __sys_bpf+0x364/0x800 [ 144.740516][ T7484] ? bpf_link_show_fdinfo+0x350/0x350 [ 144.745891][ T7484] ? lock_chain_count+0x20/0x20 [ 144.750742][ T7484] __x64_sys_bpf+0x7c/0x90 [ 144.755151][ T7484] do_syscall_64+0x55/0xb0 [ 144.759560][ T7484] ? clear_bhb_loop+0x40/0x90 [ 144.764226][ T7484] ? clear_bhb_loop+0x40/0x90 [ 144.768894][ T7484] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 144.774788][ T7484] RIP: 0033:0x7f989058eb69 [ 144.779194][ T7484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.798806][ T7484] RSP: 002b:00007f9891482038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 144.807229][ T7484] RAX: ffffffffffffffda RBX: 00007f98907b5fa0 RCX: 00007f989058eb69 [ 144.815203][ T7484] RDX: 0000000000000010 RSI: 0000200000000480 RDI: 0000000000000011 [ 144.823176][ T7484] RBP: 00007f9891482090 R08: 0000000000000000 R09: 0000000000000000 [ 144.831144][ T7484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.839109][ T7484] R13: 0000000000000000 R14: 00007f98907b5fa0 R15: 00007ffebbd51918 [ 144.847087][ T7484] [ 145.065762][ T7490] netlink: 'syz.2.540': attribute type 10 has an invalid length. [ 145.085299][ T7490] netlink: 40 bytes leftover after parsing attributes in process `syz.2.540'. [ 145.104406][ T7490] team0: entered promiscuous mode [ 145.109506][ T7490] team_slave_0: entered promiscuous mode [ 145.137381][ T7490] team_slave_1: entered promiscuous mode [ 145.162091][ T7490] team0: entered allmulticast mode [ 145.162434][ T7494] FAULT_INJECTION: forcing a failure. [ 145.162434][ T7494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.173451][ T7490] team_slave_0: entered allmulticast mode [ 145.202302][ T7494] CPU: 1 PID: 7494 Comm: syz.0.541 Not tainted 6.6.101-syzkaller #0 [ 145.203130][ T7490] team_slave_1: entered allmulticast mode [ 145.210327][ T7494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 145.210342][ T7494] Call Trace: [ 145.210351][ T7494] [ 145.210360][ T7494] dump_stack_lvl+0x16c/0x230 [ 145.210387][ T7494] ? show_regs_print_info+0x20/0x20 [ 145.210405][ T7494] ? load_image+0x3b0/0x3b0 [ 145.210433][ T7494] ? __might_fault+0xaa/0x120 [ 145.210455][ T7494] should_fail_ex+0x39d/0x4d0 [ 145.210482][ T7494] copyin+0x1a/0x90 [ 145.210505][ T7494] _copy_from_iter+0x404/0x1290 [ 145.210538][ T7494] ? copyout_mc+0x70/0x70 [ 145.269097][ T7494] ? dev_get_by_index+0x22/0x2d0 [ 145.274042][ T7494] ? dev_get_by_index+0x22/0x2d0 [ 145.278980][ T7494] packet_sendmsg+0x2df4/0x4d30 [ 145.283923][ T7494] ? aa_sk_perm+0x930/0x930 [ 145.288439][ T7494] ? __might_sleep+0xe0/0xe0 [ 145.293024][ T7494] ? perf_trace_lock_acquire+0xfb/0x3e0 [ 145.298659][ T7494] ? perf_trace_lock+0xf7/0x380 [ 145.303513][ T7494] ? aa_sk_perm+0x7fc/0x930 [ 145.308013][ T7494] ? packet_getsockopt+0xa20/0xa20 [ 145.313123][ T7494] ? aa_sock_msg_perm+0x94/0x150 [ 145.318055][ T7494] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 145.323335][ T7494] ? security_socket_sendmsg+0x80/0xa0 [ 145.328794][ T7494] ? packet_getsockopt+0xa20/0xa20 [ 145.333900][ T7494] ____sys_sendmsg+0x5bf/0x950 [ 145.338731][ T7494] ? __asan_memset+0x22/0x40 [ 145.343325][ T7494] ? __sys_sendmsg_sock+0x30/0x30 [ 145.348352][ T7494] ? __import_iovec+0x3fa/0x860 [ 145.353209][ T7494] ? import_iovec+0x73/0xa0 [ 145.357716][ T7494] ___sys_sendmsg+0x220/0x290 [ 145.362397][ T7494] ? __sys_sendmsg+0x270/0x270 [ 145.367174][ T7494] ? __lock_acquire+0x7c80/0x7c80 [ 145.372212][ T7494] __se_sys_sendmsg+0x1a5/0x270 [ 145.377065][ T7494] ? __x64_sys_sendmsg+0x80/0x80 [ 145.382015][ T7494] ? lockdep_hardirqs_on+0x98/0x150 [ 145.387214][ T7494] do_syscall_64+0x55/0xb0 [ 145.391620][ T7494] ? clear_bhb_loop+0x40/0x90 [ 145.396287][ T7494] ? clear_bhb_loop+0x40/0x90 [ 145.400957][ T7494] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 145.406851][ T7494] RIP: 0033:0x7f35bdb8eb69 [ 145.411261][ T7494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.430859][ T7494] RSP: 002b:00007f35be9f0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.439263][ T7494] RAX: ffffffffffffffda RBX: 00007f35bddb5fa0 RCX: 00007f35bdb8eb69 [ 145.447226][ T7494] RDX: 000000002a0000c4 RSI: 00002000000006c0 RDI: 0000000000000003 [ 145.455190][ T7494] RBP: 00007f35be9f0090 R08: 0000000000000000 R09: 0000000000000000 [ 145.463152][ T7494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.471113][ T7494] R13: 0000000000000000 R14: 00007f35bddb5fa0 R15: 00007fff4ad34a58 [ 145.479089][ T7494] [ 145.507001][ T7490] bridge0: port 3(team0) entered blocking state [ 145.523679][ T7490] bridge0: port 3(team0) entered disabled state [ 145.576593][ T7490] bridge0: port 3(team0) entered blocking state [ 145.583050][ T7490] bridge0: port 3(team0) entered forwarding state [ 145.780017][ T7500] netlink: 168 bytes leftover after parsing attributes in process `syz.1.542'. [ 146.002985][ T7500] netlink: 'syz.1.542': attribute type 4 has an invalid length. [ 146.023722][ T7500] netlink: 14345 bytes leftover after parsing attributes in process `syz.1.542'. [ 146.046168][ T7510] netlink: 'syz.0.546': attribute type 10 has an invalid length. [ 146.056854][ T7510] macvlan0: entered promiscuous mode [ 146.066692][ T7510] macvlan0: entered allmulticast mode [ 146.126916][ T7510] veth1_vlan: entered allmulticast mode [ 146.174623][ T7510] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 146.368534][ T5103] Bluetooth: hci3: unexpected event 0x17 length: 15 > 6 [ 146.459477][ T7521] netlink: 188 bytes leftover after parsing attributes in process `syz.2.550'. [ 147.104532][ T7541] FAULT_INJECTION: forcing a failure. [ 147.104532][ T7541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.145059][ T7541] CPU: 1 PID: 7541 Comm: syz.2.556 Not tainted 6.6.101-syzkaller #0 [ 147.153106][ T7541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 147.163186][ T7541] Call Trace: [ 147.166492][ T7541] [ 147.169441][ T7541] dump_stack_lvl+0x16c/0x230 [ 147.174146][ T7541] ? show_regs_print_info+0x20/0x20 [ 147.179387][ T7541] ? load_image+0x3b0/0x3b0 [ 147.183922][ T7541] ? __might_fault+0xaa/0x120 [ 147.188624][ T7541] ? __lock_acquire+0x7c80/0x7c80 [ 147.193690][ T7541] should_fail_ex+0x39d/0x4d0 [ 147.198413][ T7541] _copy_from_user+0x2f/0xe0 [ 147.203034][ T7541] sock_copy_user_timeval+0x1ee/0x3b0 [ 147.208445][ T7541] ? sock_get_timeout+0x1d0/0x1d0 [ 147.213501][ T7541] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 147.219693][ T7541] ? lock_chain_count+0x20/0x20 [ 147.224581][ T7541] sock_set_timeout+0xa9/0x2c0 [ 147.229373][ T7541] ? sk_setsockopt+0x29d0/0x29d0 [ 147.234345][ T7541] sk_setsockopt+0x158e/0x29d0 [ 147.239200][ T7541] ? sockopt_capable+0x60/0x60 [ 147.244002][ T7541] ? aa_sk_perm+0x7fc/0x930 [ 147.248564][ T7541] ? aa_af_perm+0x2b0/0x2b0 [ 147.253105][ T7541] ? __fget_files+0x28/0x4d0 [ 147.257725][ T7541] ? aa_sock_opt_perm+0x74/0x100 [ 147.262690][ T7541] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 147.268250][ T7541] ? security_socket_setsockopt+0x7e/0xa0 [ 147.273986][ T7541] do_sock_setsockopt+0x11b/0x1a0 [ 147.279027][ T7541] __x64_sys_setsockopt+0x184/0x200 [ 147.284263][ T7541] do_syscall_64+0x55/0xb0 [ 147.288741][ T7541] ? clear_bhb_loop+0x40/0x90 [ 147.293423][ T7541] ? clear_bhb_loop+0x40/0x90 [ 147.298366][ T7541] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 147.304264][ T7541] RIP: 0033:0x7f43cfb8eb69 [ 147.308680][ T7541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.328300][ T7541] RSP: 002b:00007f43d09b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 147.336718][ T7541] RAX: ffffffffffffffda RBX: 00007f43cfdb5fa0 RCX: 00007f43cfb8eb69 [ 147.344686][ T7541] RDX: 0000000000000042 RSI: 0000000000000001 RDI: 0000000000000003 [ 147.352655][ T7541] RBP: 00007f43d09b2090 R08: 000000000000003b R09: 0000000000000000 [ 147.360621][ T7541] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 147.368589][ T7541] R13: 0000000000000000 R14: 00007f43cfdb5fa0 R15: 00007ffd3866ae68 [ 147.376566][ T7541] [ 147.669492][ T7558] netlink: 188 bytes leftover after parsing attributes in process `syz.2.562'. [ 147.683390][ T5103] Bluetooth: hci1: unexpected event 0x18 length: 15 < 23 [ 148.683959][ T7575] FAULT_INJECTION: forcing a failure. [ 148.683959][ T7575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.724846][ T7575] CPU: 0 PID: 7575 Comm: syz.2.568 Not tainted 6.6.101-syzkaller #0 [ 148.732889][ T7575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 148.742960][ T7575] Call Trace: [ 148.746257][ T7575] [ 148.749207][ T7575] dump_stack_lvl+0x16c/0x230 [ 148.753913][ T7575] ? show_regs_print_info+0x20/0x20 [ 148.759188][ T7575] ? load_image+0x3b0/0x3b0 [ 148.763716][ T7575] ? __lock_acquire+0x7c80/0x7c80 [ 148.768776][ T7575] ? snprintf+0xdb/0x120 [ 148.773150][ T7575] should_fail_ex+0x39d/0x4d0 [ 148.777870][ T7575] _copy_to_user+0x2f/0xa0 [ 148.782312][ T7575] simple_read_from_buffer+0xe7/0x150 [ 148.787719][ T7575] proc_fail_nth_read+0x1e3/0x250 [ 148.792781][ T7575] ? proc_fault_inject_write+0x340/0x340 [ 148.798439][ T7575] ? fsnotify_perm+0x271/0x5e0 [ 148.803211][ T7575] ? proc_fault_inject_write+0x340/0x340 [ 148.808847][ T7575] vfs_read+0x27e/0x920 [ 148.813010][ T7575] ? kernel_read+0x1e0/0x1e0 [ 148.817616][ T7575] ? __fget_files+0x28/0x4d0 [ 148.822208][ T7575] ? __fget_files+0x44a/0x4d0 [ 148.826890][ T7575] ? __fdget_pos+0x2a3/0x330 [ 148.831475][ T7575] ? ksys_read+0x75/0x250 [ 148.835856][ T7575] ksys_read+0x147/0x250 [ 148.840113][ T7575] ? vfs_write+0x940/0x940 [ 148.844538][ T7575] ? lockdep_hardirqs_on+0x98/0x150 [ 148.849740][ T7575] do_syscall_64+0x55/0xb0 [ 148.854397][ T7575] ? clear_bhb_loop+0x40/0x90 [ 148.859071][ T7575] ? clear_bhb_loop+0x40/0x90 [ 148.863742][ T7575] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 148.869641][ T7575] RIP: 0033:0x7f43cfb8d57c [ 148.874055][ T7575] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 148.893673][ T7575] RSP: 002b:00007f43d09b2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 148.902101][ T7575] RAX: ffffffffffffffda RBX: 00007f43cfdb5fa0 RCX: 00007f43cfb8d57c [ 148.910121][ T7575] RDX: 000000000000000f RSI: 00007f43d09b20a0 RDI: 0000000000000006 [ 148.918107][ T7575] RBP: 00007f43d09b2090 R08: 0000000000000000 R09: 0000000000000000 [ 148.926081][ T7575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.934052][ T7575] R13: 0000000000000000 R14: 00007f43cfdb5fa0 R15: 00007ffd3866ae68 [ 148.942040][ T7575] [ 149.994554][ T7608] FAULT_INJECTION: forcing a failure. [ 149.994554][ T7608] name failslab, interval 1, probability 0, space 0, times 0 [ 150.024081][ T7608] CPU: 0 PID: 7608 Comm: syz.0.578 Not tainted 6.6.101-syzkaller #0 [ 150.032114][ T7608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 150.042178][ T7608] Call Trace: [ 150.045481][ T7608] [ 150.048742][ T7608] dump_stack_lvl+0x16c/0x230 [ 150.053434][ T7608] ? show_regs_print_info+0x20/0x20 [ 150.058651][ T7608] ? load_image+0x3b0/0x3b0 [ 150.063164][ T7608] ? __might_sleep+0xe0/0xe0 [ 150.067766][ T7608] ? __lock_acquire+0x7c80/0x7c80 [ 150.072803][ T7608] ? prepend_path+0x4b/0x960 [ 150.077421][ T7608] should_fail_ex+0x39d/0x4d0 [ 150.082105][ T7608] should_failslab+0x9/0x20 [ 150.086631][ T7608] slab_pre_alloc_hook+0x59/0x310 [ 150.091681][ T7608] ? __asan_memcpy+0x40/0x70 [ 150.096310][ T7608] ? tomoyo_encode+0x28b/0x540 [ 150.101091][ T7608] ? tomoyo_encode+0x28b/0x540 [ 150.105852][ T7608] __kmem_cache_alloc_node+0x53/0x260 [ 150.111231][ T7608] ? prepend_path+0x4b/0x960 [ 150.115822][ T7608] ? tomoyo_encode+0x28b/0x540 [ 150.120602][ T7608] __kmalloc+0xa4/0x240 [ 150.124774][ T7608] tomoyo_encode+0x28b/0x540 [ 150.129454][ T7608] tomoyo_realpath_from_path+0x592/0x5d0 [ 150.135098][ T7608] tomoyo_path_number_perm+0x1ea/0x590 [ 150.140580][ T7608] ? tomoyo_path_number_perm+0x1ba/0x590 [ 150.146214][ T7608] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 150.151672][ T7608] ? ksys_write+0x1c1/0x250 [ 150.156193][ T7608] ? __fget_files+0x28/0x4d0 [ 150.160784][ T7608] security_file_ioctl+0x70/0xa0 [ 150.165753][ T7608] __se_sys_ioctl+0x48/0x170 [ 150.170340][ T7608] do_syscall_64+0x55/0xb0 [ 150.174750][ T7608] ? clear_bhb_loop+0x40/0x90 [ 150.179418][ T7608] ? clear_bhb_loop+0x40/0x90 [ 150.184110][ T7608] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 150.190013][ T7608] RIP: 0033:0x7f35bdb8eb69 [ 150.194421][ T7608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.214033][ T7608] RSP: 002b:00007f35be9f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 150.222447][ T7608] RAX: ffffffffffffffda RBX: 00007f35bddb5fa0 RCX: 00007f35bdb8eb69 [ 150.230418][ T7608] RDX: 0000200000000180 RSI: 0000000040107447 RDI: 0000000000000003 [ 150.238409][ T7608] RBP: 00007f35be9f0090 R08: 0000000000000000 R09: 0000000000000000 [ 150.246372][ T7608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.254335][ T7608] R13: 0000000000000000 R14: 00007f35bddb5fa0 R15: 00007fff4ad34a58 [ 150.262310][ T7608] [ 150.286146][ T7608] ERROR: Out of memory at tomoyo_realpath_from_path. [ 150.584802][ T7611] sctp: [Deprecated]: syz.2.579 (pid 7611) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.584802][ T7611] Use struct sctp_sack_info instead [ 150.647264][ T7615] netlink: 188 bytes leftover after parsing attributes in process `syz.1.580'. [ 150.900849][ T7621] netlink: 'syz.3.584': attribute type 9 has an invalid length. [ 150.917430][ T7621] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.584'. [ 150.924593][ T7619] netlink: 188 bytes leftover after parsing attributes in process `syz.2.583'. [ 150.944462][ T7623] sctp: [Deprecated]: syz.1.585 (pid 7623) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.944462][ T7623] Use struct sctp_sack_info instead [ 150.960768][ T7623] FAULT_INJECTION: forcing a failure. [ 150.960768][ T7623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.961764][ T7623] [ 150.961770][ T7623] ====================================================== [ 150.961774][ T7623] WARNING: possible circular locking dependency detected [ 150.961794][ T7623] 6.6.101-syzkaller #0 Not tainted [ 150.961802][ T7623] ------------------------------------------------------ [ 150.961806][ T7623] syz.1.585/7623 is trying to acquire lock: [ 150.961813][ T7623] ffffffff8cd23e00 (console_owner){-...}-{0:0}, at: console_flush_all+0x10f/0xd00 [ 150.961856][ T7623] [ 150.961856][ T7623] but task is already holding lock: [ 150.961860][ T7623] ffff8880b8f3c458 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 150.961897][ T7623] [ 150.961897][ T7623] which lock already depends on the new lock. [ 150.961897][ T7623] [ 150.961901][ T7623] [ 150.961901][ T7623] the existing dependency chain (in reverse order) is: [ 150.961905][ T7623] [ 150.961905][ T7623] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 150.961930][ T7623] _raw_spin_lock_nested+0x32/0x50 [ 150.961944][ T7623] raw_spin_rq_lock_nested+0x2a/0x140 [ 150.961961][ T7623] task_fork_fair+0x62/0x1f0 [ 150.961974][ T7623] sched_cgroup_fork+0x333/0x3c0 [ 150.961985][ T7623] copy_process+0x21e4/0x3d70 [ 150.961999][ T7623] kernel_clone+0x21b/0x840 [ 150.962011][ T7623] user_mode_thread+0xde/0x130 [ 150.962024][ T7623] rest_init+0x27/0x300 [ 150.962036][ T7623] arch_call_rest_init+0xe/0x10 [ 150.962055][ T7623] start_kernel+0x459/0x4e0 [ 150.962072][ T7623] x86_64_start_reservations+0x2a/0x30 [ 150.962089][ T7623] copy_bootdata+0x0/0xe0 [ 150.962105][ T7623] secondary_startup_64_no_verify+0x179/0x17b [ 150.962122][ T7623] [ 150.962122][ T7623] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 150.962141][ T7623] _raw_spin_lock_irqsave+0xa8/0xf0 [ 150.962160][ T7623] try_to_wake_up+0x61/0x10b0 [ 150.962178][ T7623] __wake_up_common+0x2a4/0x4e0 [ 150.962192][ T7623] __wake_up+0x112/0x190 [ 150.962205][ T7623] tty_port_default_wakeup+0xa2/0xf0 [ 150.962218][ T7623] serial8250_tx_chars+0x6bd/0x8a0 [ 150.962234][ T7623] serial8250_handle_irq+0x534/0x6e0 [ 150.962250][ T7623] serial8250_default_handle_irq+0xb8/0x1a0 [ 150.962267][ T7623] serial8250_interrupt+0x9f/0x1c0 [ 150.962281][ T7623] __handle_irq_event_percpu+0x276/0x930 [ 150.962298][ T7623] handle_irq_event+0x8b/0x1e0 [ 150.962315][ T7623] handle_edge_irq+0x247/0xb30 [ 150.962329][ T7623] __common_interrupt+0x13b/0x230 [ 150.962344][ T7623] common_interrupt+0xb4/0xd0 [ 150.962359][ T7623] asm_common_interrupt+0x26/0x40 [ 150.962379][ T7623] debug_check_no_locks_freed+0x21a/0x3c0 [ 150.962394][ T7623] slab_free_freelist_hook+0xc1/0x1b0 [ 150.962406][ T7623] kmem_cache_free+0xf8/0x280 [ 150.962423][ T7623] __put_anon_vma+0x12b/0x2d0 [ 150.962437][ T7623] unlink_anon_vmas+0x501/0x660 [ 150.962450][ T7623] free_pgtables+0x4ff/0x770 [ 150.962467][ T7623] exit_mmap+0x3e8/0xb50 [ 150.962482][ T7623] __mmput+0x118/0x3c0 [ 150.962494][ T7623] exec_mmap+0x584/0x640 [ 150.962509][ T7623] begin_new_exec+0xa2e/0x1eb0 [ 150.962525][ T7623] load_elf_binary+0x9a0/0x2700 [ 150.962549][ T7623] bprm_execve+0xaeb/0x16f0 [ 150.962564][ T7623] do_execveat_common+0x51b/0x6c0 [ 150.962581][ T7623] __x64_sys_execve+0x92/0xa0 [ 150.962596][ T7623] do_syscall_64+0x55/0xb0 [ 150.962610][ T7623] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 150.962629][ T7623] [ 150.962629][ T7623] -> #2 (&tty->write_wait){-.-.}-{2:2}: [ 150.962648][ T7623] _raw_spin_lock_irqsave+0xa8/0xf0 [ 150.962667][ T7623] __wake_up+0xf8/0x190 [ 150.962680][ T7623] tty_port_default_wakeup+0xa2/0xf0 [ 150.962692][ T7623] serial8250_tx_chars+0x6bd/0x8a0 [ 150.962708][ T7623] serial8250_handle_irq+0x534/0x6e0 [ 150.962723][ T7623] serial8250_default_handle_irq+0xb8/0x1a0 [ 150.962740][ T7623] serial8250_interrupt+0x9f/0x1c0 [ 150.962755][ T7623] __handle_irq_event_percpu+0x276/0x930 [ 150.962773][ T7623] handle_irq_event+0x8b/0x1e0 [ 150.962791][ T7623] handle_edge_irq+0x247/0xb30 [ 150.962804][ T7623] __common_interrupt+0x13b/0x230 [ 150.962818][ T7623] common_interrupt+0xb4/0xd0 [ 150.962833][ T7623] asm_common_interrupt+0x26/0x40 [ 150.962852][ T7623] pv_native_safe_halt+0x13/0x20 [ 150.962869][ T7623] default_idle+0x13/0x20 [ 150.962887][ T7623] default_idle_call+0x6c/0xa0 [ 150.962905][ T7623] do_idle+0x1eb/0x510 [ 150.962919][ T7623] cpu_startup_entry+0x43/0x60 [ 150.962933][ T7623] rest_init+0x2e2/0x300 [ 150.962944][ T7623] arch_call_rest_init+0xe/0x10 [ 150.962963][ T7623] start_kernel+0x459/0x4e0 [ 150.962980][ T7623] x86_64_start_reservations+0x2a/0x30 [ 150.962997][ T7623] copy_bootdata+0x0/0xe0 [ 150.963012][ T7623] secondary_startup_64_no_verify+0x179/0x17b [ 150.963029][ T7623] [ 150.963029][ T7623] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 150.963047][ T7623] _raw_spin_lock_irqsave+0xa8/0xf0 [ 150.963066][ T7623] serial8250_console_write+0x16d/0x17a0 [ 150.963083][ T7623] console_flush_all+0x6cd/0xd00 [ 150.963097][ T7623] console_unlock+0xae/0x340 [ 150.963112][ T7623] vprintk_emit+0x477/0x600 [ 150.963126][ T7623] _printk+0xd0/0x110 [ 150.963144][ T7623] register_console+0x91b/0xe60 [ 150.963159][ T7623] univ8250_console_init+0x45/0x50 [ 150.963177][ T7623] console_init+0x17b/0x5e0 [ 150.963195][ T7623] start_kernel+0x2c0/0x4e0 [ 150.963212][ T7623] x86_64_start_reservations+0x2a/0x30 [ 150.963229][ T7623] copy_bootdata+0x0/0xe0 [ 150.963244][ T7623] secondary_startup_64_no_verify+0x179/0x17b [ 150.963261][ T7623] [ 150.963261][ T7623] -> #0 (console_owner){-...}-{0:0}: [ 150.963279][ T7623] __lock_acquire+0x2ddb/0x7c80 [ 150.963293][ T7623] lock_acquire+0x197/0x410 [ 150.963309][ T7623] console_flush_all+0x693/0xd00 [ 150.963322][ T7623] console_unlock+0xae/0x340 [ 150.963334][ T7623] vprintk_emit+0x477/0x600 [ 150.963347][ T7623] _printk+0xd0/0x110 [ 150.963364][ T7623] should_fail_ex+0x37e/0x4d0 [ 150.963381][ T7623] strncpy_from_user+0x36/0x2e0 [ 150.963394][ T7623] strncpy_from_user_nofault+0x71/0x140 [ 150.963411][ T7623] bpf_probe_read_compat_str+0xe1/0x170 [ 150.963431][ T7623] bpf_prog_88d57d73ead2a882+0x45/0x47 [ 150.963445][ T7623] bpf_trace_run2+0x1d1/0x3c0 [ 150.963458][ T7623] __bpf_trace_tlb_flush+0xf6/0x150 [ 150.963470][ T7623] trace_tlb_flush+0xea/0x110 [ 150.963486][ T7623] switch_mm_irqs_off+0x7aa/0xb10 [ 150.963501][ T7623] __schedule+0xf22/0x44d0 [ 150.963515][ T7623] preempt_schedule_common+0x82/0xc0 [ 150.963536][ T7623] preempt_schedule+0xab/0xc0 [ 150.963550][ T7623] preempt_schedule_thunk+0x1a/0x30 [ 150.963569][ T7623] vprintk_emit+0x578/0x600 [ 150.963583][ T7623] _printk+0xd0/0x110 [ 150.963601][ T7623] sctp_setsockopt_delayed_ack+0x1de/0x280 [ 150.963621][ T7623] sctp_setsockopt+0xa02/0x11e0 [ 150.963637][ T7623] do_sock_setsockopt+0x175/0x1a0 [ 150.963655][ T7623] __x64_sys_setsockopt+0x184/0x200 [ 150.963672][ T7623] do_syscall_64+0x55/0xb0 [ 150.963685][ T7623] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 150.963704][ T7623] [ 150.963704][ T7623] other info that might help us debug this: [ 150.963704][ T7623] [ 150.963709][ T7623] Chain exists of: [ 150.963709][ T7623] console_owner --> &p->pi_lock --> &rq->__lock [ 150.963709][ T7623] [ 150.963730][ T7623] Possible unsafe locking scenario: [ 150.963730][ T7623] [ 150.963734][ T7623] CPU0 CPU1 [ 150.963737][ T7623] ---- ---- [ 150.963740][ T7623] lock(&rq->__lock); [ 150.963749][ T7623] lock(&p->pi_lock); [ 150.963758][ T7623] lock(&rq->__lock); [ 150.963767][ T7623] lock(console_owner); [ 150.963775][ T7623] [ 150.963775][ T7623] *** DEADLOCK *** [ 150.963775][ T7623] [ 150.963778][ T7623] 5 locks held by syz.1.585/7623: [ 150.963787][ T7623] #0: ffff88802c680130 (sk_lock-AF_INET){+.+.}-{0:0}, at: sctp_setsockopt+0x1f6/0x11e0 [ 150.963826][ T7623] #1: ffff8880b8f3c458 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 150.963866][ T7623] #2: ffffffff8cd2fba0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0xde/0x3c0 [ 150.963899][ T7623] #3: ffffffff8cd23ee0 (console_lock){+.+.}-{0:0}, at: _printk+0xd0/0x110 [ 150.963939][ T7623] #4: ffffffff8cc0b6f0 (console_srcu){....}-{0:0}, at: console_flush_all+0x10f/0xd00 [ 150.963976][ T7623] [ 150.963976][ T7623] stack backtrace: [ 150.963980][ T7623] CPU: 1 PID: 7623 Comm: syz.1.585 Not tainted 6.6.101-syzkaller #0 [ 150.963994][ T7623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 150.964002][ T7623] Call Trace: [ 150.964008][ T7623] [ 150.964013][ T7623] dump_stack_lvl+0x16c/0x230 [ 150.964030][ T7623] ? load_image+0x3b0/0x3b0 [ 150.964050][ T7623] ? show_regs_print_info+0x20/0x20 [ 150.964070][ T7623] ? print_circular_bug+0x12b/0x1a0 [ 150.964089][ T7623] check_noncircular+0x2bd/0x3c0 [ 150.964109][ T7623] ? print_deadlock_bug+0x5d0/0x5d0 [ 150.964125][ T7623] ? lockdep_lock+0xe0/0x220 [ 150.964146][ T7623] __lock_acquire+0x2ddb/0x7c80 [ 150.964173][ T7623] ? verify_lock_unused+0x140/0x140 [ 150.964199][ T7623] lock_acquire+0x197/0x410 [ 150.964214][ T7623] ? console_flush_all+0x10f/0xd00 [ 150.964234][ T7623] ? __lock_acquire+0x7c80/0x7c80 [ 150.964248][ T7623] ? do_raw_spin_lock+0x121/0x2c0 [ 150.964266][ T7623] ? read_lock_is_recursive+0x20/0x20 [ 150.964281][ T7623] ? __rwlock_init+0x150/0x150 [ 150.964300][ T7623] ? do_raw_spin_unlock+0x121/0x230 [ 150.964319][ T7623] console_flush_all+0x693/0xd00 [ 150.964336][ T7623] ? console_flush_all+0x10f/0xd00 [ 150.964354][ T7623] ? console_flush_all+0x10f/0xd00 [ 150.964375][ T7623] ? is_console_locked+0x20/0x20 [ 150.964391][ T7623] ? mark_lock+0x94/0x320 [ 150.964413][ T7623] console_unlock+0xae/0x340 [ 150.964430][ T7623] ? other_cpu_in_panic+0xf0/0xf0 [ 150.964447][ T7623] ? __lock_acquire+0x1260/0x7c80 [ 150.964466][ T7623] vprintk_emit+0x477/0x600 [ 150.964484][ T7623] ? printk_sprint+0x460/0x460 [ 150.964500][ T7623] ? move_right+0x5d/0xa0 [ 150.964523][ T7623] ? mark_lock+0x94/0x320 [ 150.964548][ T7623] _printk+0xd0/0x110 [ 150.964569][ T7623] ? vsnprintf+0x1957/0x1a40 [ 150.964589][ T7623] ? load_image+0x3b0/0x3b0 [ 150.964615][ T7623] should_fail_ex+0x37e/0x4d0 [ 150.964636][ T7623] strncpy_from_user+0x36/0x2e0 [ 150.964652][ T7623] strncpy_from_user_nofault+0x71/0x140 [ 150.964673][ T7623] bpf_probe_read_compat_str+0xe1/0x170 [ 150.964696][ T7623] bpf_prog_88d57d73ead2a882+0x45/0x47 [ 150.964712][ T7623] bpf_trace_run2+0x1d1/0x3c0 [ 150.964726][ T7623] ? bpf_trace_run2+0xde/0x3c0 [ 150.964740][ T7623] ? bpf_trace_run1+0x3b0/0x3b0 [ 150.964755][ T7623] ? __bpf_trace_tlb_flush+0xe1/0x150 [ 150.964771][ T7623] __bpf_trace_tlb_flush+0xf6/0x150 [ 150.964785][ T7623] ? local_clock+0x20/0x20 [ 150.964798][ T7623] ? perf_trace_tlb_flush+0x350/0x350 [ 150.964814][ T7623] ? perf_cgroup_switch+0xde/0x690 [ 150.964828][ T7623] ? rcu_read_lock_sched_held+0x8a/0x100 [ 150.964845][ T7623] trace_tlb_flush+0xea/0x110 [ 150.964864][ T7623] switch_mm_irqs_off+0x7aa/0xb10 [ 150.964883][ T7623] ? perf_sched_cb_inc+0x230/0x230 [ 150.964904][ T7623] ? switch_mm+0x130/0x130 [ 150.964920][ T7623] ? psi_task_switch+0x316/0x6d0 [ 150.964941][ T7623] __schedule+0xf22/0x44d0 [ 150.964967][ T7623] ? asan.module_dtor+0x20/0x20 [ 150.964987][ T7623] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 150.965004][ T7623] ? lock_chain_count+0x20/0x20 [ 150.965020][ T7623] ? preempt_schedule+0xab/0xc0 [ 150.965038][ T7623] preempt_schedule_common+0x82/0xc0 [ 150.965055][ T7623] preempt_schedule+0xab/0xc0 [ 150.965072][ T7623] ? schedule_preempt_disabled+0x20/0x20 [ 150.965090][ T7623] ? other_cpu_in_panic+0xf0/0xf0 [ 150.965105][ T7623] ? mark_lock+0x94/0x320 [ 150.965122][ T7623] preempt_schedule_thunk+0x1a/0x30 [ 150.965142][ T7623] ? vprintk_emit+0x573/0x600 [ 150.965159][ T7623] vprintk_emit+0x578/0x600 [ 150.965177][ T7623] ? printk_sprint+0x460/0x460 [ 150.965193][ T7623] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 150.965214][ T7623] ? _raw_spin_unlock+0x40/0x40 [ 150.965239][ T7623] _printk+0xd0/0x110 [ 150.965262][ T7623] ? load_image+0x3b0/0x3b0 [ 150.965281][ T7623] ? __local_bh_enable_ip+0x12e/0x1c0 [ 150.965297][ T7623] ? __local_bh_enable_ip+0x12e/0x1c0 [ 150.965311][ T7623] ? _local_bh_enable+0xa0/0xa0 [ 150.965326][ T7623] sctp_setsockopt_delayed_ack+0x1de/0x280 [ 150.965349][ T7623] sctp_setsockopt+0xa02/0x11e0 [ 150.965368][ T7623] ? sock_common_recvmsg+0x1b0/0x1b0 [ 150.965386][ T7623] do_sock_setsockopt+0x175/0x1a0 [ 150.965404][ T7623] ? __fdget+0x180/0x210 [ 150.965424][ T7623] __x64_sys_setsockopt+0x184/0x200 [ 150.965445][ T7623] do_syscall_64+0x55/0xb0 [ 150.965460][ T7623] ? clear_bhb_loop+0x40/0x90 [ 150.965474][ T7623] ? clear_bhb_loop+0x40/0x90 [ 150.965487][ T7623] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 150.965508][ T7623] RIP: 0033:0x7f2779f8eb69 [ 150.965521][ T7623] Code: Unable to access opcode bytes at 0x7f2779f8eb3f. [ 150.965534][ T7623] RSP: 002b:00007f277ad9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 150.965549][ T7623] RAX: ffffffffffffffda RBX: 00007f277a1b5fa0 RCX: 00007f2779f8eb69 [ 150.965559][ T7623] RDX: 0000000000000010 RSI: 0000000000000084 RDI: 0000000000000003 [ 150.965568][ T7623] RBP: 00007f277ad9a090 R08: 0000000000000008 R09: 0000000000000000 [ 150.965577][ T7623] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.965586][ T7623] R13: 0000000000000000 R14: 00007f277a1b5fa0 R15: 00007ffe683a2478 [ 150.965603][ T7623] [ 152.291071][ T7623] CPU: 1 PID: 7623 Comm: syz.1.585 Not tainted 6.6.101-syzkaller #0 [ 152.299027][ T7623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 152.309061][ T7623] Call Trace: [ 152.312321][ T7623] [ 152.315240][ T7623] dump_stack_lvl+0x16c/0x230 [ 152.319900][ T7623] ? vsnprintf+0x1957/0x1a40 [ 152.324469][ T7623] ? show_regs_print_info+0x20/0x20 [ 152.329645][ T7623] ? load_image+0x3b0/0x3b0 [ 152.334132][ T7623] should_fail_ex+0x39d/0x4d0 [ 152.338876][ T7623] strncpy_from_user+0x36/0x2e0 [ 152.343704][ T7623] strncpy_from_user_nofault+0x71/0x140 [ 152.349231][ T7623] bpf_probe_read_compat_str+0xe1/0x170 [ 152.354762][ T7623] bpf_prog_88d57d73ead2a882+0x45/0x47 [ 152.360198][ T7623] bpf_trace_run2+0x1d1/0x3c0 [ 152.364848][ T7623] ? bpf_trace_run2+0xde/0x3c0 [ 152.369585][ T7623] ? bpf_trace_run1+0x3b0/0x3b0 [ 152.374411][ T7623] ? __bpf_trace_tlb_flush+0xe1/0x150 [ 152.379757][ T7623] __bpf_trace_tlb_flush+0xf6/0x150 [ 152.384946][ T7623] ? local_clock+0x20/0x20 [ 152.389337][ T7623] ? perf_trace_tlb_flush+0x350/0x350 [ 152.394685][ T7623] ? perf_cgroup_switch+0xde/0x690 [ 152.399771][ T7623] ? rcu_read_lock_sched_held+0x8a/0x100 [ 152.405381][ T7623] trace_tlb_flush+0xea/0x110 [ 152.410049][ T7623] switch_mm_irqs_off+0x7aa/0xb10 [ 152.415054][ T7623] ? perf_sched_cb_inc+0x230/0x230 [ 152.420147][ T7623] ? switch_mm+0x130/0x130 [ 152.424554][ T7623] ? psi_task_switch+0x316/0x6d0 [ 152.429472][ T7623] __schedule+0xf22/0x44d0 [ 152.433872][ T7623] ? asan.module_dtor+0x20/0x20 [ 152.438702][ T7623] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 152.444679][ T7623] ? lock_chain_count+0x20/0x20 [ 152.449506][ T7623] ? preempt_schedule+0xab/0xc0 [ 152.454336][ T7623] preempt_schedule_common+0x82/0xc0 [ 152.459612][ T7623] preempt_schedule+0xab/0xc0 [ 152.464269][ T7623] ? schedule_preempt_disabled+0x20/0x20 [ 152.469878][ T7623] ? other_cpu_in_panic+0xf0/0xf0 [ 152.474878][ T7623] ? mark_lock+0x94/0x320 [ 152.479185][ T7623] preempt_schedule_thunk+0x1a/0x30 [ 152.484364][ T7623] ? vprintk_emit+0x573/0x600 [ 152.489018][ T7623] vprintk_emit+0x578/0x600 [ 152.493500][ T7623] ? printk_sprint+0x460/0x460 [ 152.498246][ T7623] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 152.504122][ T7623] ? _raw_spin_unlock+0x40/0x40 [ 152.508952][ T7623] _printk+0xd0/0x110 [ 152.512915][ T7623] ? load_image+0x3b0/0x3b0 [ 152.517396][ T7623] ? __local_bh_enable_ip+0x12e/0x1c0 [ 152.522741][ T7623] ? __local_bh_enable_ip+0x12e/0x1c0 [ 152.528087][ T7623] ? _local_bh_enable+0xa0/0xa0 [ 152.532912][ T7623] sctp_setsockopt_delayed_ack+0x1de/0x280 [ 152.538699][ T7623] sctp_setsockopt+0xa02/0x11e0 [ 152.543529][ T7623] ? sock_common_recvmsg+0x1b0/0x1b0 [ 152.548792][ T7623] do_sock_setsockopt+0x175/0x1a0 [ 152.553796][ T7623] ? __fdget+0x180/0x210 [ 152.558018][ T7623] __x64_sys_setsockopt+0x184/0x200 [ 152.563197][ T7623] do_syscall_64+0x55/0xb0 [ 152.567593][ T7623] ? clear_bhb_loop+0x40/0x90 [ 152.572242][ T7623] ? clear_bhb_loop+0x40/0x90 [ 152.576893][ T7623] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 152.582767][ T7623] RIP: 0033:0x7f2779f8eb69 [ 152.587158][ T7623] Code: Unable to access opcode bytes at 0x7f2779f8eb3f. [ 152.594236][ T7623] RSP: 002b:00007f277ad9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 152.602636][ T7623] RAX: ffffffffffffffda RBX: 00007f277a1b5fa0 RCX: 00007f2779f8eb69 [ 152.610585][ T7623] RDX: 0000000000000010 RSI: 0000000000000084 RDI: 0000000000000003 [ 152.618533][ T7623] RBP: 00007f277ad9a090 R08: 0000000000000008 R09: 0000000000000000 [ 152.626482][ T7623] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.634444][ T7623] R13: 0000000000000000 R14: 00007f277a1b5fa0 R15: 00007ffe683a2478 [ 152.642411][ T7623] [ 152.792818][ T7621] ieee80211 phy65: Selected rate control algorithm 'minstrel_ht'