last executing test programs: 17.621189052s ago: executing program 1 (id=2321): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00', r3}, 0x10) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e8a9b", 0xd8}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)}, 0x20000004) close(r1) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000400)='xen_mc_flush_reason\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) setsockopt$sock_attach_bpf(r2, 0x84, 0x9, &(0x7f0000000380), 0x4) r5 = socket$kcm(0xf, 0x3, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="02000400ac14"}) sendmsg$inet(r5, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffd, 0x1, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 15.353832676s ago: executing program 1 (id=2324): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x1, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x15, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x5dc}], 0x1}, 0x480c0) sendmsg$inet(r0, 0x0, 0x4000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000240)={'team0\x00', 0x20}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x2}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x5}, 0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) write$cgroup_subtree(r5, &(0x7f0000000140)={[{0x2d, 'hugetlb'}]}, 0x9) 13.784571719s ago: executing program 1 (id=2332): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x16, 0x57, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x118298, 0x7fd, 0x0, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='reclaim_retry_zone\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x3, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000500), 0xce, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x2, &(0x7f00000000c0)=@raw=[@alu={0x4, 0x1, 0x2, 0x8, 0x8, 0x1, 0x1}, @jmp={0x5, 0x0, 0xb, 0xa, 0x5, 0x18, 0xfffffffffffffff0}], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x46}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x11, 0x0, 0x0, 0x0, 0xa, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x8738969e8efb476b) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x72bd1de2ad10b2b3, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x9) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710036000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x9, 0x0, 0x1, 0x9, 0x0, 0x3, 0x80000, 0xf, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000001c0), 0xe}, 0x1000, 0x3, 0x0, 0x6, 0x0, 0x971, 0x9, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0xe) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8940, &(0x7f0000000080)) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc603406034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 12.438754808s ago: executing program 3 (id=2335): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d080218000000401296a1180002000000030000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(r0, &(0x7f0000000680)={&(0x7f0000000300)=@in={0x2, 0x4e24, @local}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000580)="3fbccb824927b2fd8272c4a829c240c5f2018e1a4cf50c345e936a4baf63f78a450b507b6cfc1e1cba13a31b8d6a5aaf30b277dcb7def5cfbb8351a06164db014d7cd3619ab903630a2a136214a1bee9c4d846e7750cbcd1e3159eed9802e0a7ef9fa693b59bd77e4d55853e5b41cf77b33e2cac6bde351b", 0x78}, {&(0x7f0000000600)="bf9d350fda5ed148f8ff6aec848c69fb655977d4dbe687328a5f6a42a911f8aef3f1a276c5b29afa2c0033891d1b6c60b5874724060d73fd3709d516e8673201edfc13aeae321cc40b5bf2289b782d13aa0f7b69f85ea1e07007580bbd0a76606888a6099a030c504c5cb94e8309220f54e884ecf8495ea0953791f3", 0x7c}, {&(0x7f0000003040)="e400502bea78500cd84ab2320f638da0a5e8867fb268fe53629ecac790ba2a71bd0c8211ddb4a58979ae5e7ef0e44d45881e6fbe385e360ad3a8b2dc381bb6f94d4be7fa509e971ae8ff91743506293cc9356e23b1f2c69a6caed8f0a9172fb4592edc86e385c78aea6144f24811628f96d69a062b84973614773c3dc7c41e6f268d764ae7e4509a1131b3954350b1ac861379106a9f79d8a41fe8f4d9709611b0ca8eb2ac4c40c7568900052cc47cd01ee15fa5c5c909f652219814c63b37c90246dff96cb14bf233c3e3da2073f2cbaa30d09a2ff928dd4664b0b6dfd91fcdbc01c0cff43c392fccf3a8096f7ffee1bb4ce104666784a4a6ac7d65519d00c03c8b50b946c193fb5a8d540e49d90cdd4d1444078bab9443ea3d9a5f230f29bbeb5b2f1cc9e62dc25180efdd6fd694104a781b0d470fee6e29e11cd27fc3d2198d80ac1adce88155fe9759b9f97404cb6e16ad4da078e3c0bb7578cd8f5c2afa469314769cf1af911db5d58bed2b89f35c83f11c4cd68655a537565127a6a5cddb463a9190718fe8b181735b5981d7c18ab3f7d0f91897c776c810a865ffd4034de7775412b81b4d393ed9eb58e39ba973c46c4d9c702486afcc96bdd60fda1abdb6e33f4cb469af8907bc70931390bc085d87ae711ff0789e9fa218f53f036f8b4766df758dca71d545ce9d3b6b421a32157995abdbc46bb92c5eeab38177add4acef58c919017ed0a6df06826d096076c4d375c05434913264626bf7b10b0dcb4927f2b6bec7584f4530c2fb9b3d3c66fad7981527870e3259d9fb9a7a4df478d31f25a74b1c3fbb859b6b5688e5e16e75059912254622eb36284d81764ee8cbbe4298c6f185bb0a6da887311cfdcfe2cc13c7df9b44112fe77d6545189d4700df94ced1f160000403b6463574ec2dec4b0572f0c67c6291635dac76107a240c72ae476e90337fc6083d46ae8f3b9e38bb0b2947d85288fb122f82028798f4d84f4b4fd263fa0fe7f4bfdecf399f71f158bd0fc3e4ea7e26c6458434b183b7497ea86e93c1ba01aa5235e669a7ec89830458d17eef666f90be3aa70dd17cf3e5c1c825e1eca31af5ba318aaf2f51958e3351b422d20f53a069bba642ba360ba655bd40270c466755163e83dfe97cb63e9be457ebdf9b0ebdfffc109b1b69f93e27cacbd54e575401da63497a995b094159d7858c2cefc2eb38eaec085649226dbe2f4c5ba621a0b0404471268d549bfd0fc6cd435a346ff9a5cdcb965ad8e82b11e8dcad0c5d95921fc5ec3cda28e8c01cecdcdebf6089e220d6350a088e79ae9966e15b721c7af9ea1d57207adce93bbabf4fc05251eef53fd6cca3d88981314d32a81af66a703dd09d1dae8c7bf478c96c972659b89f473e45e68574067ab72be94d8052cd9b009a219e050c730d6a414fa2872a8831cabbfa9ae53eaa3a71fa596a899a3ca0ae6aa9928ba97befb8510f6495067252e78b7708998a490f4c72739e688b82995b5dd94ebad3763e692d042e601784e506f82e34c2e25807fea57a59e5b65071538c9d377bde359c0fb7bc76a699ba11805fc516caf24630b630b2a19f8dabbf68cb3f6d5911b6bfe64133f0a08f37530412ac3c22329b1fe524027c8b0bb384b52a67c866d4973ee302aafd04351a90ee6b1a60678acea1bbdf419427fafe1b0e7d8c2cbeefeafcefb4337907a19408b022389ece6f63a7a77d538640460e5c5c9dc607e8a0a86b4d451411445e089958ba36e3354cd47cd40d973d89865abda3fd847a5b71a2f2c6bc9dd914fcb55efe5d4698ae803180801888be32baaa4f3a0701a92a20dce3f57d24a043dc2237b3ddecac1a239d533f03a1e2c890165a46a76a464138fb3a670a823683530aa95fa0e10e003d8bc0bd119c97ef1a182f373cde98dcaf6cdb0b5677f8484b25e12f8d33aa09f8d11a5dd7dc9e6249b4afcbb2e975451b88d56408e5d473aee14c2924718228901d5d15a3825bfce6f78d6943958b259fe9dabbc97cee5b26197183b13a03e4cfced665aece804c5c891c6b51b595f9c29410fa9265cdc017bcea53f9699482081258bb1f008e1f28424449f5945f2b220b60b76d4a96e175b5070129685d61c089d37d3621c21ea2f49ab91ea773bd5e349498c0e975fde90f3cdd79338e82eaeb508c2c9ef84b3177af491bb467128a696d3a4068491084a99f8f10d3a482b3a10e3128253e97ad4d5f0850fa9b399518161dab9bc73c80305e988b8eefbb47b3b2655058038951ef0a43813fe71b734bf5010db323c1784ce2ea31d6c4d787e9ddd664c1009385ecd34bd920bf5384e8896c6d3c72a5d59c9c3b43ba82ff8f2ad448d7a74e60f6473da903722b569ece868a19d2e27281cbfe859878586e7ea6e77f352361a4ac976dfd21e9b6e1196bdd8d22247419066d0a7b31687f8740f34a41ad33045a6cd725b59367c3a639c8f99aef0fa01e577c4757f631b792c742f085b9ead5a195f96a3269f2ce31f9ff6dd6283326f73832e306d37e0efd8cffef73d9551170fc051eba6aa5f17e6ce6db05bfa5a59ae03a28d182ba83d6763210ea8ec6a88f1ee0053c5517bc452a1fef5345396a9d9f46a51a3e3430e70d11ec23b5e9254e963dd35b1d06ea615d3a796f032a6cff3eafee688a1aee674df3cb0e8acbe6de6bc886eaecdb00e4b36bdf5bfa0504ddb5bc9fb138853ae2f1d8288d0e4f0402bc30e243a58afbbbfac991dfca0e2aa16a9fa7dd8b117268e15f8c9827b0c1fd8ab0033a63315508da5ab13ef72e6badca8dc7fb31cbf3afb334c9b56ac187beceb538bc64a6ad9a101557522781a7b23cb8004927158f53c496dd9d1c4a0b8715e4e68bed8257567ba1feb901a846fcba067d1c6d6dd69effcf651ba4a8808280559e35bb6977d1929dfa82d8a615292ce7581824ff28f991c4a1fa054dc5cedd24841e65e1e6a5e1d7ea7e3524a81d4526e22ea4b3797dcefe9d257507570c923affc4c2b2f18f1ba1a9ad0d2be70e5ed31b4c8eac89d44daec6a50dfb769e77edf9091df12d78d0ba2e0b76d4db6b880b5796be915db486c19c0780399cb12a15c5f0abd3bfcffa08f6d329d68c85321ac86ed29545426ead2fe237cd977b9175e2291d722de5b4d661994c4b72394a6d9b34112709dcf1b83016fff8c2f1999ed8a01bf01f78973da136f1dd675c5b6af17c76e7a53cc5e45d2ff975e19dfa796103bc526b2e224b21f76fffbc8d5314697f0445f0d5fc632133dc634cf29427049e05244ff009dd5d884019c286ef8ad0cf9d3bf0b8c5dcdea7b6dc018100519deb7fe7a561c28a5e9109a66b1d4a247c7a501c73ade8d15da4680bc53d17b0594c2173e4727d3bd4c5599bff903f7641d342d1b07d8e0a1583021f9be3147c8e86f2802bf6bb28b3864bb39657d9a0be7bc4a0c8a3abe1a5bcd21f64f94c8d47adae7ad687d37515e140ead73bf8d0300324dcbacce1e72babbd4e2423c30675e675bcf6a37de81c320da4cdd52b7fdd6d430bd97bd87fe5eb653229de02d0588710120cbc47d1132b1b04d577ad384f112655d21150c0cbaf86f5df238c3dae970671a2a00656c3283d24174c3da257ec152ebb4c8eaee348a830fc473d574fcdb0594dcb2faea118624810177f5b22356af9d30225d392c84ac7d7903c284735764bd600ce1c2f05295d8f3d39019bc4010f3a69f79f277bdb152e810131b069fda773ef4fe68b5e4caf08804494ccc6b9f711e442e257796dd91e7fe5ddabfd3cbaa2421a898ced291848c7cb6c95b2851a7abcbb5d23b9d31082737b5dbe245caa46a97b955fdae07a3daa202ebcec6028f8a586709a8ae998f76a76f895f3b6156bd56e8b9439d6a45d82f7de520492fe904351448d2a2e834245c22489fb5e7084aa35068b5cc0409eb1e9596716186dc6927ee4d89465b8b6008d7228fae4e525cd194793f485127a123e55ac812c4cb4114d3639fbf5d4a0a8c11fcb745f42146f23ef4830931a6a46b5d98b60f5b9363f8360c5a1112439a9b558fb3e2689716b3fc60a83a5b12433fb2da5bd1c1c889be52c4c297b0afb8ab79b0457166c3e5db41897977a98a282966bb0b4afed7c6f52701a68c299a19ca84832d2eb08e71bc19f6b98922f5f0e0ab5ad49382d72671ef93142ca2b9a4919685815992a7c3c471aee2d603f2dcd98f8d80e41d0572f7bd83ac8e6a5b8545a797bdd5f449b75e15b36f326e82836e0b7cbd7c46693fae0830e9758718871ff85654485bef44c6b05cad9dec4db1ce5819f4d9b27142f8bdbc35d7b243aea3f31061690eff59a0794c6197f3df3aed1be764cd79eb207b445f25143aa363e18b43b213d22ef32f96a69469fc3aacb279f8c0f7f38bdedef09dbad63bdf96c170d609b7301767e10978ce0a5e69ce7e2046a2293f99bc22b0b76907985d5b071aac5ab2fbfbc8ef2a9548a4d9357392c0e881986d2b8cc0c98613fc777dfe0d9e539610efdb9ac1df3897db0d2b021f8ca7e9ccbbf0b0cee5467b5606abf9c3751ea23940e2e40844eff5aa05a69d44ab42c5924d49473dc6f95c9428fc12ffe4861d5b6b4bfa61507378678ee25fce8273f34d47129dd5839d4a3cd45680e148cb4089267a8ae836c7138afa13954de9437ea5fff7bafa98ebe9dea6037567aa4a6fcf7e1d08fc5ebb6a3d8b8ce5a19fb1e663e88957b0ba21eafb176a76aa666b12c6242742092497ec8f6a02d2d1c6bb8ce20ce664076879498cae2086cefb19aeb8004e2f3f47a659bee016ee3c67e2379093a94f562e92bf1995be72a5a0aff4e07b9c6b509bffffca3f49713061d2bf1f7e4d00ac52ba44a5eed3c1958f883e75c9a42dcbc54c8f45a32bd94b965462e1a443c3d0de2959aa2ea7c657af409a4263d2b4bd3f8d70c66849dbbcadc0f07401caa146cd1777b649ce4216f4e0c43c66331498c73060f61e512579baefd10c333241217306ff91f198bcd451afa2b3dbc8ceb7dc3d166d32d5373c3c1d5ed3604cfc7a7b4af3b6449ea53bc37aad115db3bc2c997bc1fdd182dd04e52b3e8cd4e104c67ffb49c48900c29d394d97dabd9fe76d641964598daad8821723d7593f53c54a4a0e0d73a7f122db282b03d8d151ad2454060725ca5feedee8ffe361294336eceb7d8e1c028ebae15cc94b469fed49c892802ab2f8c0ab8e8d157d6edb9c07bfafb1143a7d932b0c7423f6814e716c9742e72440d08b963b8e50703201a8831e597022bb1539ed5a21a01b92f91c24dd499c33a813ed15f6ae4169d9ec2ff57564a8951923c350e658f883fc6fcab9cbec15bc50ebcd5102ff86892157f2f3de2eeb2ce8641c6eb3cd40f0b0d7cdf4206a1ae1fcccf3b8398c4b7c6ea49c97b3fe57831d093c98ac5aee56afc64455315a70e4f96cd1e3408e890cea5a94f17325f61feae9e482b18b028699d8df526539e862c8a6e8df55013c9aeeed4b756afaae5638a01e8c114d67bcfdc3ba3c0c115d9907874d3f0c2ea6c103d08c5c36104de4ad294fc7892958cf518e324f959845ab0998f8304aa3333d33dfe7adf3ea7d8b421d6f6b01f99feb91862da53c479c407e3d4064f1c801060377a278c5008c63d261575a81453d18707030e7cac4b33f02c20376453c5940af3c4862536008b5c9669682c6969331d566477081755462c45294f3b2c90808024960770c8630bbab34ad52e09b3dfc52d585bec92aae20c0044d67f5183032a504ab9ec259b3c500a4935b677a269de0315949d7317f2dfb66e4e9466d5b62587a678b2258d22", 0x1000}, {&(0x7f0000000700)="ee8d83142c5632d7f3dc8a396ec3e4c0f5e3da16c0ec9cc19f0d57c398a546163cd30f4b3e076b7bc034198111b890dd74ac83eac3b1d4ab024b7470503dd963c78f276cbb81eb78cb8f5b1d24bb6200644bcb457d594429308bf90e21a340a6b8579883b0deac3b745021d5ed708ece5e18235d0f91af55b67e", 0x7a}, {&(0x7f0000000780)="ff86f601b9d1cdbe9d75514c6dcdb17b23e3240364381389e31c3b71dd34842cf31918ce4c31e879fd09c860104d39abbae9a02251fdc13f21d717e072032898ed0678da177d6bf895673a607b9f3ba7", 0x50}, {&(0x7f0000000800)="ae8e1310b600e0b589408394d694609f19789a523c33bc13988e86e9d5be8edba89f9b8e3f07a0026deae7fd68841beb7cb323ef147c22334337738052302fc18b1e85eca741d66214d5ca3d07f504aaac32b8ea22ce687c04a5af05e264758299d597c711295034f6ff1992", 0x6c}, {&(0x7f0000000040)}], 0x7, &(0x7f0000000980)=[{0xf8, 0x11, 0xd, "0bf798d078b83b612b3b90fdeebd1bd35aaa2b7dfbf3ae1ae63a4f842a7f3aac12cd9b096a62329fb3639224fb06387772779073ee9e2deccc52157893cd35c97359e7c3a33dddfba63a15ad72abfb4eb8e09c95f9c408a1c74034cb628f34c6829d1c797f64bbb7fc83a89fb825edcd90e05141ebfb7a5883b16aa4ebc8307cc20cc7f7988ecc2f0f8fc7b0846579cd2e3815c3e1e598bd03ef32368bb68503b497046d3e2f5d30f74238ce8e11466c27f7071209cfab966c180a84402e2aaeae6b27a844a46f381329a40c9a7f3a067b05f094d165b1d499314ea680ad4a083adb2afeb5bb14"}], 0xf8}, 0x4091) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x40, 0x5, 0x0, 0xfd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc48, 0xc8, 0x0, 0x8, 0x0, 0x80000000, 0xfffe, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000078000000780000000c00000002000000090000930e0000000600000009000000060000000e0000000104000007"], 0x0, 0x9c, 0x0, 0x0, 0x0, 0x10000}, 0x28) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a0001", 0x37}], 0x1}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfe33) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r6}, 0x10) write$cgroup_subtree(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200052b00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000001c0)="b15dd7cf1c000004000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 12.162263444s ago: executing program 1 (id=2337): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, 0x0, &(0x7f0000000500), 0xce, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) socket$kcm(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x8738969e8efb476b) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710036000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x9, 0x0, 0x1, 0x9, 0x0, 0x3, 0x80000, 0xf, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000001c0), 0xe}, 0x1000, 0x3, 0x0, 0x6, 0x0, 0x971, 0x9, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0xe) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc603406034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 10.594996147s ago: executing program 3 (id=2339): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close(r2) socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_bp={0x0}, 0x105d30, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x1e, 0x1, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b0fd25a806c8c6f94f91024fc60", 0x14}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a8637286dd"], 0xb2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000cfba00000000000008000000911162000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100000004000000040000000400000004000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r7}, 0x10) 10.433210016s ago: executing program 1 (id=2340): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x49) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x3, 0xd}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="27050200420014000600002fb96dbcf706e10500070088a800008100", 0x1c}, {&(0x7f0000000440), 0x18}], 0x2}, 0x0) (fail_nth: 9) 9.747634266s ago: executing program 1 (id=2341): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x10, 0x14, &(0x7f0000001e40)=ANY=[@ANYBLOB="58df72372e2c72816a5c257571217dc7c746c89adfe8d69b94aba38ff0ec6f74ba5beb39aeef93820fb1245adb4449bfcdc831894cdd50c2c41e30dab02fc38a793a4780ee02349f662d845ea8e32de20d39d7fab8a38622e8719230bf5a3f31d05611df43efea60d2285e47ed6d49affc8497922728cda1b122a2365a17b9ba828205df495e80c5a2b1418423a2912be0", @ANYBLOB="7fcc5527db4c2ae8cb3c299db2e71069e918cbb3d5a55ca7e848cacafc83eccd96f9afc8242249ddf6f6d1600013b9b90cc6f3a56a28f752a2e191ab541c2260dda27c3c4f0a26345563ac073368d0f8e5bb39d00d3aacf55582b120746e5e9e8f63c45368ea45b4a408ad4648bd40f0f86dcd6f74387b0175661f7eac1304a964ae93a8677cf73855ef5e3c265a5a1b9ab77e1029560eb33e8ce6b778908814f9afa684be0c062506c1c6e313a9f59e9541c6b5b5e578d06b4120e6dc849c413f91de15672b875f05600ad97a6fce"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bc76, 0x9, 0x9, 0x4, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0xfffffffffffffffe, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x4}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d4f47f000000000000010000000000000000000000140000000000000000000000020000000000000000000000140000000000000000000000020000000000000000000000110000000000000000000000ebffffff0000000000000000110000000000000002000000010000000000000000000000000000000000000000000000070000008300000000960000206a77bdd1a004129054e7704a000000"], 0xf}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000040)={'bridge_slave_1\x00', @random="0200ac7f7f00"}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='cgroup.controllers\x00', 0x0, 0x0) recvmsg$unix(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f00000005c0)=""/171, 0xa2}, {&(0x7f0000000680)=""/99, 0x63}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000004100)=""/139, 0x7c}, {&(0x7f0000000c00)=""/245, 0xf5}], 0x6, &(0x7f0000004200)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}, 0x2000) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000b40)={0x0, r2}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000b80), 0x2}, 0x100904, 0x8000000000, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, r6, 0x0) ioctl$TUNGETIFF(r4, 0xb701, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$MAP_LOOKUP_ELEM(0x3, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x15, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000000d80)=""/4096, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x3, &(0x7f00000009c0), &(0x7f0000000a00)=[{0x1, 0x2, 0x1, 0x4}, {0x4, 0x5, 0x5, 0xc}, {0x2, 0x4, 0xa, 0xc}], 0x10, 0x3}, 0x94) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) 5.504539417s ago: executing program 3 (id=2349): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x16, 0x57, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x118298, 0x7fd, 0x0, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='reclaim_retry_zone\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x3, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000500), 0xce, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x2, &(0x7f00000000c0)=@raw=[@alu={0x4, 0x1, 0x2, 0x8, 0x8, 0x1, 0x1}, @jmp={0x5, 0x0, 0xb, 0xa, 0x5, 0x18, 0xfffffffffffffff0}], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x46}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x11, 0x0, 0x0, 0x0, 0xa, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x8738969e8efb476b) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x72bd1de2ad10b2b3, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x9) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710036000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x9, 0x0, 0x1, 0x9, 0x0, 0x3, 0x80000, 0xf, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000001c0), 0xe}, 0x1000, 0x3, 0x0, 0x6, 0x0, 0x971, 0x9, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0xe) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8940, &(0x7f0000000080)) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc603406034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 4.837985086s ago: executing program 3 (id=2352): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100)=0xfffffffffffffffd, 0x12) ioctl$SIOCSIFHWADDR(r4, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x9, 0x0}, 0x8) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x100, '\x00', 0x0, r1, 0x1, 0x1, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x12, 0x15, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff7}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}]}, &(0x7f00000001c0)='GPL\x00', 0x9, 0x12, &(0x7f0000000200)=""/18, 0x41000, 0x51, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x8, 0x7, 0x2}, 0x10, r5, 0xffffffffffffffff, 0x4, &(0x7f0000000580)=[r1, r6, r1, r1, r1, r4, r1, r0], &(0x7f00000005c0)=[{0x1, 0x4, 0xe}, {0x2, 0x2, 0x10, 0xc}, {0x5, 0x4, 0x6, 0x1}, {0x1, 0x5, 0x9, 0x1}], 0x10, 0x4}, 0x94) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r4) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) gettid() syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 3.634759077s ago: executing program 2 (id=2357): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x16, 0x57, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x118298, 0x7fd, 0x0, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='reclaim_retry_zone\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x3, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000500), 0xce, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x2, &(0x7f00000000c0)=@raw=[@alu={0x4, 0x1, 0x2, 0x8, 0x8, 0x1, 0x1}, @jmp={0x5, 0x0, 0xb, 0xa, 0x5, 0x18, 0xfffffffffffffff0}], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x46}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x11, 0x0, 0x0, 0x0, 0xa, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x8738969e8efb476b) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x72bd1de2ad10b2b3, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x9) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710036000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x9, 0x0, 0x1, 0x9, 0x0, 0x3, 0x80000, 0xf, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000001c0), 0xe}, 0x1000, 0x3, 0x0, 0x6, 0x0, 0x971, 0x9, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0xe) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8940, &(0x7f0000000080)) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc603406034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2.426424948s ago: executing program 0 (id=2358): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x10, 0x14, &(0x7f0000001e40)=ANY=[@ANYBLOB="58df72372e2c72816a5c257571217dc7c746c89adfe8d69b94aba38ff0ec6f74ba5beb39aeef93820fb1245adb4449bfcdc831894cdd50c2c41e30dab02fc38a793a4780ee02349f662d845ea8e32de20d39d7fab8a38622e8719230bf5a3f31d05611df43efea60d2285e47ed6d49affc8497922728cda1b122a2365a17b9ba828205df495e80c5a2b1418423a2912be0", @ANYBLOB="7fcc5527db4c2ae8cb3c299db2e71069e918cbb3d5a55ca7e848cacafc83eccd96f9afc8242249ddf6f6d1600013b9b90cc6f3a56a28f752a2e191ab541c2260dda27c3c4f0a26345563ac073368d0f8e5bb39d00d3aacf55582b120746e5e9e8f63c45368ea45b4a408ad4648bd40f0f86dcd6f74387b0175661f7eac1304a964ae93a8677cf73855ef5e3c265a5a1b9ab77e1029560eb33e8ce6b778908814f9afa684be0c062506c1c6e313a9f59e9541c6b5b5e578d06b4120e6dc849c413f91de15672b875f05600ad97a6fce"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bc76, 0x9, 0x9, 0x4, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0xfffffffffffffffe, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x4}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d4f47f000000000000010000000000000000000000140000000000000000000000020000000000000000000000140000000000000000000000020000000000000000000000110000000000000000000000ebffffff0000000000000000110000000000000002000000010000000000000000000000000000000000000000000000070000008300000000960000206a77bdd1a004129054e7704a000000"], 0xf}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000040)={'bridge_slave_1\x00', @random="0200ac7f7f00"}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='cgroup.controllers\x00', 0x0, 0x0) recvmsg$unix(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f00000005c0)=""/171, 0xa2}, {&(0x7f0000000680)=""/99, 0x63}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000004100)=""/139, 0x7c}, {&(0x7f0000000c00)=""/245, 0xf5}], 0x6, &(0x7f0000004200)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}, 0x2000) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000b40)={0x0, r2}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000b80), 0x2}, 0x100904, 0x8000000000, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, r6, 0x0) ioctl$TUNGETIFF(r4, 0xb701, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$MAP_LOOKUP_ELEM(0x3, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x15, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000000d80)=""/4096, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x3, &(0x7f00000009c0), &(0x7f0000000a00)=[{0x1, 0x2, 0x1, 0x4}, {0x4, 0x5, 0x5, 0xc}, {0x2, 0x4, 0xa, 0xc}], 0x10, 0x3}, 0x94) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2.21680474s ago: executing program 2 (id=2359): socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, 0x0, 0xa4ff) socket$kcm(0x29, 0x1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x22, &(0x7f0000000000)=r3, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r3}, 0x8) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)}, 0x14) 1.955584315s ago: executing program 0 (id=2360): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000640), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1a, 0x14, &(0x7f0000001a80)=ANY=[@ANYRES32, @ANYBLOB, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], &(0x7f0000001880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x20c, @remote}, 0x10, 0x0}, 0x3000c041) 1.5439891s ago: executing program 0 (id=2361): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x6, 0xf3a}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.344611041s ago: executing program 0 (id=2362): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000002ec0)=ANY=[@ANYRESOCT], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @sk_skb=0x26}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x1000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x20000043, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0xd, 0xc, &(0x7f0000001100)=ANY=[@ANYRES8=r1, @ANYRES8=r6, @ANYRES32=r3, @ANYRES32=r4, @ANYRESOCT=r3, @ANYRES16=r0, @ANYRESDEC=r2, @ANYRES16=r0], &(0x7f0000000880)='GPL\x00', 0xf, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x2000}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0600000044000000080000000800000000000000e79291039dca0bb69e4e8ebe709101e6ca5ce47b6eead7dd71f2d6daf2d7", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x2, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000010c0), 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x74679, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x4011, 0xcdd, 0x7, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x9, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000001285feff0100000006830300f200000095000000f9443555b2ac870ee7000000003c5b0200100000001842000002000000000000", @ANYRES32=r8, @ANYBLOB="00000000cc00000000000009a32d397e62256d63ebe60000"], &(0x7f00000004c0)='GPL\x00', 0xfffff000, 0x35, &(0x7f00000006c0)=""/53, 0x40f00, 0x20, '\x00', 0x0, @fallback, r10, 0x8, &(0x7f0000000980)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000b00)={0x1, 0x2, 0x9}, 0x10, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r11 = openat$cgroup_int(r9, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r12 = openat$cgroup_procs(r9, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r12, &(0x7f0000000880), 0x12) write$cgroup_int(r11, &(0x7f0000000040)=0x900, 0x1) 1.258469887s ago: executing program 2 (id=2363): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000050000000000000080000000850000006b0000000733e0ff0400000095"], &(0x7f0000000200)='GPL\x00', 0x800, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, 0x0, r2}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000640), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1a, 0x14, &(0x7f0000001a80)=ANY=[@ANYRES32, @ANYBLOB, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], &(0x7f0000001880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) 1.02320204s ago: executing program 0 (id=2364): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x49, &(0x7f0000000100), 0x4) 875.824519ms ago: executing program 2 (id=2365): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x10, 0x14, &(0x7f0000001e40)=ANY=[@ANYBLOB="58df72372e2c72816a5c257571217dc7c746c89adfe8d69b94aba38ff0ec6f74ba5beb39aeef93820fb1245adb4449bfcdc831894cdd50c2c41e30dab02fc38a793a4780ee02349f662d845ea8e32de20d39d7fab8a38622e8719230bf5a3f31d05611df43efea60d2285e47ed6d49affc8497922728cda1b122a2365a17b9ba828205df495e80c5a2b1418423a2912be0", @ANYBLOB="7fcc5527db4c2ae8cb3c299db2e71069e918cbb3d5a55ca7e848cacafc83eccd96f9afc8242249ddf6f6d1600013b9b90cc6f3a56a28f752a2e191ab541c2260dda27c3c4f0a26345563ac073368d0f8e5bb39d00d3aacf55582b120746e5e9e8f63c45368ea45b4a408ad4648bd40f0f86dcd6f74387b0175661f7eac1304a964ae93a8677cf73855ef5e3c265a5a1b9ab77e1029560eb33e8ce6b778908814f9afa684be0c062506c1c6e313a9f59e9541c6b5b5e578d06b4120e6dc849c413f91de15672b875f05600ad97a6fce"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bc76, 0x9, 0x9, 0x4, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0xfffffffffffffffe, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x4}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d4f47f000000000000010000000000000000000000140000000000000000000000020000000000000000000000140000000000000000000000020000000000000000000000110000000000000000000000ebffffff0000000000000000110000000000000002000000010000000000000000000000000000000000000000000000070000008300000000960000206a77bdd1a004129054e7704a000000"], 0xf}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000040)={'bridge_slave_1\x00', @random="0200ac7f7f00"}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='cgroup.controllers\x00', 0x0, 0x0) recvmsg$unix(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f00000005c0)=""/171, 0xa2}, {&(0x7f0000000680)=""/99, 0x63}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000004100)=""/139, 0x7c}, {&(0x7f0000000c00)=""/245, 0xf5}], 0x6, &(0x7f0000004200)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}, 0x2000) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000b40)={0x0, r2}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000b80), 0x2}, 0x100904, 0x8000000000, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, r6, 0x0) ioctl$TUNGETIFF(r4, 0xb701, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$MAP_LOOKUP_ELEM(0x3, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x15, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000000d80)=""/4096, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x3, &(0x7f00000009c0), &(0x7f0000000a00)=[{0x1, 0x2, 0x1, 0x4}, {0x4, 0x5, 0x5, 0xc}, {0x2, 0x4, 0xa, 0xc}], 0x10, 0x3}, 0x94) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) 859.27875ms ago: executing program 0 (id=2366): close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, &(0x7f0000000040)=""/2, 0x0, 0x2, 0x0, 0x4, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu<-0||!') syz_clone(0x6a02f080, 0x0, 0xfffffffffffffd7b, 0x0, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff02c}, {0x6, 0x9, 0x29}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000540)='(pu&00\t||') 459.302943ms ago: executing program 2 (id=2367): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x10, 0x14, &(0x7f0000001e40)=ANY=[@ANYBLOB="58df72372e2c72816a5c257571217dc7c746c89adfe8d69b94aba38ff0ec6f74ba5beb39aeef93820fb1245adb4449bfcdc831894cdd50c2c41e30dab02fc38a793a4780ee02349f662d845ea8e32de20d39d7fab8a38622e8719230bf5a3f31d05611df43efea60d2285e47ed6d49affc8497922728cda1b122a2365a17b9ba828205df495e80c5a2b1418423a2912be0", @ANYBLOB="7fcc5527db4c2ae8cb3c299db2e71069e918cbb3d5a55ca7e848cacafc83eccd96f9afc8242249ddf6f6d1600013b9b90cc6f3a56a28f752a2e191ab541c2260dda27c3c4f0a26345563ac073368d0f8e5bb39d00d3aacf55582b120746e5e9e8f63c45368ea45b4a408ad4648bd40f0f86dcd6f74387b0175661f7eac1304a964ae93a8677cf73855ef5e3c265a5a1b9ab77e1029560eb33e8ce6b778908814f9afa684be0c062506c1c6e313a9f59e9541c6b5b5e578d06b4120e6dc849c413f91de15672b875f05600ad97a6fce"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bc76, 0x9, 0x9, 0x4, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0xfffffffffffffffe, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x4}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d4f47f000000000000010000000000000000000000140000000000000000000000020000000000000000000000140000000000000000000000020000000000000000000000110000000000000000000000ebffffff0000000000000000110000000000000002000000010000000000000000000000000000000000000000000000070000008300000000960000206a77bdd1a004129054e7704a000000"], 0xf}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000040)={'bridge_slave_1\x00', @random="0200ac7f7f00"}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='cgroup.controllers\x00', 0x0, 0x0) recvmsg$unix(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f00000005c0)=""/171, 0xa2}, {&(0x7f0000000680)=""/99, 0x63}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000004100)=""/139, 0x7c}, {&(0x7f0000000c00)=""/245, 0xf5}], 0x6, &(0x7f0000004200)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}, 0x2000) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000b40)={0x0, r2}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000b80), 0x2}, 0x100904, 0x8000000000, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, r6, 0x0) ioctl$TUNGETIFF(r4, 0xb701, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$MAP_LOOKUP_ELEM(0x3, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x15, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000000d80)=""/4096, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x3, &(0x7f00000009c0), &(0x7f0000000a00)=[{0x1, 0x2, 0x1, 0x4}, {0x4, 0x5, 0x5, 0xc}, {0x2, 0x4, 0xa, 0xc}], 0x10, 0x3}, 0x94) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) 347.14391ms ago: executing program 3 (id=2368): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), 0x0, 0xce, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) socket$kcm(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x8738969e8efb476b) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710036000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x9, 0x0, 0x1, 0x9, 0x0, 0x3, 0x80000, 0xf, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000001c0), 0xe}, 0x1000, 0x3, 0x0, 0x6, 0x0, 0x971, 0x9, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0xe) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc603406034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 110.310264ms ago: executing program 3 (id=2369): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x2, [@ptr={0x4, 0x0, 0x0, 0x2, 0x5}, @enum64={0x3, 0x5, 0x0, 0x13, 0x1, 0x1, [{0xa, 0xffff, 0x6}, {0x2, 0xfff, 0x5}, {0x4, 0x40, 0x3}, {0xa, 0x3, 0x81}, {0x10, 0x473, 0x1}]}, @var={0x6, 0x0, 0x0, 0xe, 0x4}, @func_proto]}}, 0x0, 0x8a, 0x0, 0x1, 0x6, 0x10000}, 0x28) r0 = socket$kcm(0x11, 0x2, 0x0) socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x1c21, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = openat$cgroup_type(r1, 0x0, 0x2, 0x0) write$cgroup_type(r2, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0x15, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001800)="a5", 0x48}], 0x1}, 0x0) (fail_nth: 4) 0s ago: executing program 2 (id=2370): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x6, 0xf3a}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): 0x260 [ 379.843965][T10874] ? proc_fault_inject_write+0x360/0x360 [ 379.849728][T10874] ? fsnotify_perm+0x271/0x5e0 [ 379.854716][T10874] ? proc_fault_inject_write+0x360/0x360 [ 379.860386][T10874] vfs_read+0x28b/0x970 [ 379.864672][T10874] ? kernel_read+0x1e0/0x1e0 [ 379.869381][T10874] ? __fget_files+0x28/0x4b0 [ 379.874012][T10874] ? __fget_files+0x28/0x4b0 [ 379.878687][T10874] ? __fget_files+0x43d/0x4b0 [ 379.883411][T10874] ? __fdget_pos+0x2a3/0x330 [ 379.888028][T10874] ? ksys_read+0x75/0x260 [ 379.892478][T10874] ksys_read+0x150/0x260 [ 379.896878][T10874] ? vfs_write+0x990/0x990 [ 379.901356][T10874] ? lockdep_hardirqs_on+0x98/0x150 [ 379.906661][T10874] do_syscall_64+0x55/0xa0 [ 379.911373][T10874] ? clear_bhb_loop+0x40/0x90 [ 379.916087][T10874] ? clear_bhb_loop+0x40/0x90 [ 379.920887][T10874] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 379.926927][T10874] RIP: 0033:0x7f23e375b58e [ 379.931372][T10874] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 379.951277][T10874] RSP: 002b:00007f23e46b5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 379.960078][T10874] RAX: ffffffffffffffda RBX: 00007f23e46b66c0 RCX: 00007f23e375b58e [ 379.968165][T10874] RDX: 000000000000000f RSI: 00007f23e46b60a0 RDI: 0000000000000003 [ 379.976163][T10874] RBP: 00007f23e46b6090 R08: 0000000000000000 R09: 0000000000000000 [ 379.984166][T10874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.992176][T10874] R13: 00007f23e3a16128 R14: 00007f23e3a16090 R15: 00007ffd19a6efe8 [ 380.000317][T10874] [ 380.309657][T10870] netlink: 'syz.2.1797': attribute type 3 has an invalid length. [ 380.373491][T10870] netlink: 'syz.2.1797': attribute type 1 has an invalid length. [ 380.413944][T10870] netlink: 193404 bytes leftover after parsing attributes in process `syz.2.1797'. [ 381.231873][T10892] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 381.491409][T10901] delete_channel: no stack [ 381.496119][T10901] delete_channel: no stack [ 381.536701][T10901] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1811'. [ 382.338905][T10915] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 383.285501][T10931] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 383.755067][T10928] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 384.161062][T10950] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 385.160435][T10967] netlink: 'syz.1.1835': attribute type 3 has an invalid length. [ 385.173022][T10967] netlink: 'syz.1.1835': attribute type 1 has an invalid length. [ 385.189479][T10967] netlink: 193404 bytes leftover after parsing attributes in process `syz.1.1835'. [ 385.420189][T10975] FAULT_INJECTION: forcing a failure. [ 385.420189][T10975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.458067][T10975] CPU: 1 PID: 10975 Comm: syz.2.1836 Not tainted syzkaller #0 [ 385.465873][T10975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 385.476149][T10975] Call Trace: [ 385.479560][T10975] [ 385.482787][T10975] dump_stack_lvl+0x18c/0x250 [ 385.487606][T10975] ? show_regs_print_info+0x20/0x20 [ 385.492856][T10975] ? load_image+0x400/0x400 [ 385.497634][T10975] ? __might_fault+0xaa/0x120 [ 385.502531][T10975] ? __lock_acquire+0x7d40/0x7d40 [ 385.507653][T10975] should_fail_ex+0x39d/0x4d0 [ 385.512568][T10975] _copy_from_iter+0x1d9/0x12e0 [ 385.517450][T10975] ? slab_post_alloc_hook+0x8a/0x4b0 [ 385.522861][T10975] ? __virt_addr_valid+0x18c/0x540 [ 385.528041][T10975] ? __lock_acquire+0x7d40/0x7d40 [ 385.533108][T10975] ? rcu_is_watching+0x15/0xb0 [ 385.538030][T10975] ? copyout_mc+0x70/0x70 [ 385.542464][T10975] ? __virt_addr_valid+0x18c/0x540 [ 385.547700][T10975] ? __virt_addr_valid+0x18c/0x540 [ 385.552925][T10975] ? __virt_addr_valid+0x469/0x540 [ 385.558215][T10975] ? __check_object_size+0x506/0xa20 [ 385.563699][T10975] netlink_sendmsg+0x76b/0xbf0 [ 385.568495][T10975] ? netlink_getsockopt+0x590/0x590 [ 385.573708][T10975] ? aa_sock_msg_perm+0x94/0x150 [ 385.578755][T10975] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 385.584317][T10975] ? security_socket_sendmsg+0x80/0xa0 [ 385.589852][T10975] ? netlink_getsockopt+0x590/0x590 [ 385.595078][T10975] ____sys_sendmsg+0x5ba/0x960 [ 385.599878][T10975] ? __asan_memset+0x22/0x40 [ 385.604567][T10975] ? __sys_sendmsg_sock+0x30/0x30 [ 385.609607][T10975] ? __import_iovec+0x5f2/0x850 [ 385.614571][T10975] ? import_iovec+0x73/0xa0 [ 385.619182][T10975] ___sys_sendmsg+0x2a6/0x360 [ 385.623993][T10975] ? get_pid_task+0x20/0x1e0 [ 385.628617][T10975] ? __sys_sendmsg+0x2a0/0x2a0 [ 385.633537][T10975] ? __lock_acquire+0x7d40/0x7d40 [ 385.638711][T10975] __se_sys_sendmsg+0x1c2/0x2b0 [ 385.643679][T10975] ? __x64_sys_sendmsg+0x80/0x80 [ 385.648779][T10975] ? lockdep_hardirqs_on+0x98/0x150 [ 385.654077][T10975] do_syscall_64+0x55/0xa0 [ 385.658607][T10975] ? clear_bhb_loop+0x40/0x90 [ 385.663560][T10975] ? clear_bhb_loop+0x40/0x90 [ 385.668337][T10975] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 385.674348][T10975] RIP: 0033:0x7f0fdab9acb9 [ 385.678798][T10975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.698769][T10975] RSP: 002b:00007f0fdbb2a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 385.707383][T10975] RAX: ffffffffffffffda RBX: 00007f0fdae15fa0 RCX: 00007f0fdab9acb9 [ 385.715548][T10975] RDX: 0000000020004080 RSI: 0000200000000040 RDI: 0000000000000003 [ 385.723614][T10975] RBP: 00007f0fdbb2a090 R08: 0000000000000000 R09: 0000000000000000 [ 385.731690][T10975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.739864][T10975] R13: 00007f0fdae16038 R14: 00007f0fdae15fa0 R15: 00007ffc6074dbb8 [ 385.748071][T10975] [ 386.093135][T10987] netlink: 'syz.1.1840': attribute type 3 has an invalid length. [ 386.170853][T10987] netlink: 'syz.1.1840': attribute type 1 has an invalid length. [ 386.214512][T10987] netlink: 193404 bytes leftover after parsing attributes in process `syz.1.1840'. [ 386.597059][T10995] FAULT_INJECTION: forcing a failure. [ 386.597059][T10995] name failslab, interval 1, probability 0, space 0, times 0 [ 386.610737][T10995] CPU: 0 PID: 10995 Comm: syz.0.1850 Not tainted syzkaller #0 [ 386.618355][T10995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 386.624044][T10991] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 386.628778][T10995] Call Trace: [ 386.628849][T10995] [ 386.628860][T10995] dump_stack_lvl+0x18c/0x250 [ 386.628892][T10995] ? show_regs_print_info+0x20/0x20 [ 386.628914][T10995] ? load_image+0x400/0x400 [ 386.628956][T10995] should_fail_ex+0x39d/0x4d0 [ 386.670181][T10995] should_failslab+0x9/0x20 [ 386.674921][T10995] slab_pre_alloc_hook+0x59/0x310 [ 386.680097][T10995] ? inet_bind2_bucket_find+0x62/0x620 [ 386.685783][T10995] kmem_cache_alloc+0x5a/0x2d0 [ 386.690646][T10995] ? __inet_hash_connect+0xbe4/0x1870 [ 386.696045][T10995] __inet_hash_connect+0xbe4/0x1870 [ 386.701583][T10995] ? inet_bhash2_reset_saddr+0x80/0x80 [ 386.707282][T10995] tcp_v4_connect+0xcac/0x18e0 [ 386.712297][T10995] ? tcp_twsk_unique+0x990/0x990 [ 386.717391][T10995] mptcp_connect+0x449/0x640 [ 386.722302][T10995] __inet_stream_connect+0x254/0xdc0 [ 386.727759][T10995] ? inet_dgram_connect+0x360/0x360 [ 386.733039][T10995] tcp_sendmsg_fastopen+0x3a7/0x5d0 [ 386.738519][T10995] mptcp_sendmsg_fastopen+0x138/0x4d0 [ 386.743979][T10995] mptcp_sendmsg+0x14b2/0x16d0 [ 386.749148][T10995] ? __lock_acquire+0x1273/0x7d40 [ 386.754273][T10995] ? verify_lock_unused+0x140/0x140 [ 386.760126][T10995] ? aa_sk_perm+0x83c/0x970 [ 386.764863][T10995] ? aa_af_perm+0x330/0x330 [ 386.769399][T10995] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 386.775939][T10995] ? mptcp_shutdown+0x80/0x80 [ 386.780668][T10995] ? sock_rps_record_flow+0x19/0x3f0 [ 386.786276][T10995] ? inet_sendmsg+0xe9/0x2f0 [ 386.790910][T10995] ? inet_send_prepare+0x260/0x260 [ 386.796119][T10995] ____sys_sendmsg+0x5ba/0x960 [ 386.801085][T10995] ? __lock_acquire+0x7d40/0x7d40 [ 386.806331][T10995] ? __asan_memset+0x22/0x40 [ 386.811059][T10995] ? __sys_sendmsg_sock+0x30/0x30 [ 386.816195][T10995] ? __import_iovec+0x3fa/0x850 [ 386.821126][T10995] ? import_iovec+0x73/0xa0 [ 386.825724][T10995] ___sys_sendmsg+0x2a6/0x360 [ 386.830597][T10995] ? get_pid_task+0x20/0x1e0 [ 386.835212][T10995] ? __sys_sendmsg+0x2a0/0x2a0 [ 386.840029][T10995] ? __lock_acquire+0x7d40/0x7d40 [ 386.845322][T10995] __se_sys_sendmsg+0x1c2/0x2b0 [ 386.850390][T10995] ? __x64_sys_sendmsg+0x80/0x80 [ 386.855531][T10995] ? lockdep_hardirqs_on+0x98/0x150 [ 386.860759][T10995] do_syscall_64+0x55/0xa0 [ 386.865352][T10995] ? clear_bhb_loop+0x40/0x90 [ 386.870427][T10995] ? clear_bhb_loop+0x40/0x90 [ 386.875434][T10995] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 386.881434][T10995] RIP: 0033:0x7fc90939acb9 [ 386.885932][T10995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.905810][T10995] RSP: 002b:00007fc90a228028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 386.914428][T10995] RAX: ffffffffffffffda RBX: 00007fc909616090 RCX: 00007fc90939acb9 [ 386.922774][T10995] RDX: 000000003000c041 RSI: 0000200000000080 RDI: 0000000000000007 [ 386.931001][T10995] RBP: 00007fc90a228090 R08: 0000000000000000 R09: 0000000000000000 [ 386.939350][T10995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 386.947429][T10995] R13: 00007fc909616128 R14: 00007fc909616090 R15: 00007fff0ff7d738 [ 386.956301][T10995] [ 387.273228][T11002] netlink: 'syz.0.1845': attribute type 10 has an invalid length. [ 387.375094][T11002] team0: Port device netdevsim0 added [ 387.382838][T11000] netlink: 'syz.0.1845': attribute type 10 has an invalid length. [ 388.270977][T11016] netlink: 'syz.1.1848': attribute type 3 has an invalid length. [ 388.286166][T11000] team0: Port device netdevsim0 removed [ 388.320440][T11016] netlink: 'syz.1.1848': attribute type 1 has an invalid length. [ 388.353721][T11000] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 388.368783][T11016] netlink: 193404 bytes leftover after parsing attributes in process `syz.1.1848'. [ 388.380164][T11000] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 388.399440][T11006] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 388.566095][T11024] FAULT_INJECTION: forcing a failure. [ 388.566095][T11024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.582422][T11024] CPU: 1 PID: 11024 Comm: syz.0.1852 Not tainted syzkaller #0 [ 388.590273][T11024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 388.600442][T11024] Call Trace: [ 388.603747][T11024] [ 388.606782][T11024] dump_stack_lvl+0x18c/0x250 [ 388.611654][T11024] ? show_regs_print_info+0x20/0x20 [ 388.616959][T11024] ? load_image+0x400/0x400 [ 388.621491][T11024] ? __might_fault+0xaa/0x120 [ 388.626184][T11024] ? __lock_acquire+0x7d40/0x7d40 [ 388.631324][T11024] should_fail_ex+0x39d/0x4d0 [ 388.636036][T11024] _copy_from_iter+0x1d9/0x12e0 [ 388.640913][T11024] ? slab_post_alloc_hook+0x8a/0x4b0 [ 388.646321][T11024] ? __virt_addr_valid+0x18c/0x540 [ 388.651726][T11024] ? __lock_acquire+0x7d40/0x7d40 [ 388.657476][T11024] ? rcu_is_watching+0x15/0xb0 [ 388.662349][T11024] ? copyout_mc+0x70/0x70 [ 388.666879][T11024] ? __virt_addr_valid+0x18c/0x540 [ 388.672007][T11024] ? __virt_addr_valid+0x18c/0x540 [ 388.677308][T11024] ? __virt_addr_valid+0x469/0x540 [ 388.682442][T11024] ? __check_object_size+0x506/0xa20 [ 388.687765][T11024] netlink_sendmsg+0x76b/0xbf0 [ 388.692585][T11024] ? netlink_getsockopt+0x590/0x590 [ 388.697894][T11024] ? aa_sock_msg_perm+0x94/0x150 [ 388.703289][T11024] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 388.708699][T11024] ? security_socket_sendmsg+0x80/0xa0 [ 388.714492][T11024] ? netlink_getsockopt+0x590/0x590 [ 388.719900][T11024] ____sys_sendmsg+0x5ba/0x960 [ 388.724789][T11024] ? __asan_memset+0x22/0x40 [ 388.729689][T11024] ? __sys_sendmsg_sock+0x30/0x30 [ 388.735109][T11024] ? __import_iovec+0x5f2/0x850 [ 388.740267][T11024] ? import_iovec+0x73/0xa0 [ 388.744823][T11024] ___sys_sendmsg+0x2a6/0x360 [ 388.749616][T11024] ? get_pid_task+0x20/0x1e0 [ 388.754238][T11024] ? __sys_sendmsg+0x2a0/0x2a0 [ 388.759216][T11024] ? __lock_acquire+0x7d40/0x7d40 [ 388.764609][T11024] __se_sys_sendmsg+0x1c2/0x2b0 [ 388.769976][T11024] ? __x64_sys_sendmsg+0x80/0x80 [ 388.775500][T11024] ? lockdep_hardirqs_on+0x98/0x150 [ 388.781265][T11024] do_syscall_64+0x55/0xa0 [ 388.786442][T11024] ? clear_bhb_loop+0x40/0x90 [ 388.791177][T11024] ? clear_bhb_loop+0x40/0x90 [ 388.795878][T11024] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 388.801888][T11024] RIP: 0033:0x7fc90939acb9 [ 388.806426][T11024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.826420][T11024] RSP: 002b:00007fc90a249028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.834947][T11024] RAX: ffffffffffffffda RBX: 00007fc909615fa0 RCX: 00007fc90939acb9 [ 388.842938][T11024] RDX: 00000000000400d0 RSI: 0000200000000080 RDI: 0000000000000003 [ 388.850923][T11024] RBP: 00007fc90a249090 R08: 0000000000000000 R09: 0000000000000000 [ 388.859178][T11024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.867680][T11024] R13: 00007fc909616038 R14: 00007fc909615fa0 R15: 00007fff0ff7d738 [ 388.876037][T11024] [ 389.424867][T11035] netlink: 'syz.3.1854': attribute type 3 has an invalid length. [ 389.587018][T11037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1858'. [ 389.602269][T11035] netlink: 'syz.3.1854': attribute type 1 has an invalid length. [ 389.651551][T11035] netlink: 193404 bytes leftover after parsing attributes in process `syz.3.1854'. [ 390.035745][T11046] netlink: 'syz.1.1859': attribute type 46 has an invalid length. [ 390.175386][T11055] netlink: 'syz.0.1861': attribute type 1 has an invalid length. [ 390.194177][T11055] netlink: 6783 bytes leftover after parsing attributes in process `syz.0.1861'. [ 390.389447][T11050] syzkaller0: entered promiscuous mode [ 390.455291][T11050] syzkaller0: entered allmulticast mode [ 390.696560][T11054] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 391.900633][T11082] netlink: 'syz.2.1871': attribute type 3 has an invalid length. [ 391.920402][T11082] netlink: 'syz.2.1871': attribute type 1 has an invalid length. [ 391.928544][T11082] netlink: 193404 bytes leftover after parsing attributes in process `syz.2.1871'. [ 393.947281][T11087] netlink: 'syz.2.1873': attribute type 46 has an invalid length. [ 393.959918][T11092] netlink: 'syz.1.1875': attribute type 1 has an invalid length. [ 393.980420][T11092] netlink: 'syz.1.1875': attribute type 4 has an invalid length. [ 393.988554][T11092] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1875'. [ 394.107306][T11094] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1876'. [ 394.157775][T11094] batadv_slave_1: entered promiscuous mode [ 394.645421][T11108] netlink: 'syz.3.1882': attribute type 3 has an invalid length. [ 394.705315][T11108] netlink: 'syz.3.1882': attribute type 1 has an invalid length. [ 394.778560][T11108] netlink: 193404 bytes leftover after parsing attributes in process `syz.3.1882'. [ 395.426036][T11122] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1886'. [ 395.476709][T11122] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1886'. [ 395.685619][T11126] netlink: 'syz.0.1887': attribute type 46 has an invalid length. [ 395.779873][T11116] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1885'. [ 396.916018][T11143] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 400.464235][T11183] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 400.547156][T11185] FAULT_INJECTION: forcing a failure. [ 400.547156][T11185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.570652][T11185] CPU: 1 PID: 11185 Comm: syz.1.1908 Not tainted syzkaller #0 [ 400.578342][T11185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 400.588537][T11185] Call Trace: [ 400.592129][T11185] [ 400.595093][T11185] dump_stack_lvl+0x18c/0x250 [ 400.599916][T11185] ? show_regs_print_info+0x20/0x20 [ 400.605161][T11185] ? load_image+0x400/0x400 [ 400.609697][T11185] ? __lock_acquire+0x7d40/0x7d40 [ 400.615113][T11185] ? snprintf+0xe9/0x140 [ 400.619497][T11185] should_fail_ex+0x39d/0x4d0 [ 400.624390][T11185] _copy_to_user+0x2f/0xa0 [ 400.629126][T11185] simple_read_from_buffer+0xe7/0x150 [ 400.634719][T11185] proc_fail_nth_read+0x1e8/0x260 [ 400.639927][T11185] ? proc_fault_inject_write+0x360/0x360 [ 400.645797][T11185] ? fsnotify_perm+0x271/0x5e0 [ 400.650596][T11185] ? proc_fault_inject_write+0x360/0x360 [ 400.656429][T11185] vfs_read+0x28b/0x970 [ 400.661064][T11185] ? kernel_read+0x1e0/0x1e0 [ 400.665770][T11185] ? __fget_files+0x28/0x4b0 [ 400.670381][T11185] ? __fget_files+0x28/0x4b0 [ 400.675516][T11185] ? __fget_files+0x43d/0x4b0 [ 400.680233][T11185] ? __fdget_pos+0x2a3/0x330 [ 400.684931][T11185] ? ksys_read+0x75/0x260 [ 400.689420][T11185] ksys_read+0x150/0x260 [ 400.693870][T11185] ? vfs_write+0x990/0x990 [ 400.698409][T11185] do_syscall_64+0x55/0xa0 [ 400.702920][T11185] ? clear_bhb_loop+0x40/0x90 [ 400.707714][T11185] ? clear_bhb_loop+0x40/0x90 [ 400.712712][T11185] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 400.718804][T11185] RIP: 0033:0x7f326d35b58e [ 400.723246][T11185] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 400.743860][T11185] RSP: 002b:00007f326e2c0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 400.752753][T11185] RAX: ffffffffffffffda RBX: 00007f326e2c16c0 RCX: 00007f326d35b58e [ 400.760927][T11185] RDX: 000000000000000f RSI: 00007f326e2c10a0 RDI: 000000000000000a [ 400.769277][T11185] RBP: 00007f326e2c1090 R08: 0000000000000000 R09: 0000000000000000 [ 400.777441][T11185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.785724][T11185] R13: 00007f326d616038 R14: 00007f326d615fa0 R15: 00007ffc10dfcb28 [ 400.793802][T11185] [ 401.465199][T11209] FAULT_INJECTION: forcing a failure. [ 401.465199][T11209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.479059][T11209] CPU: 0 PID: 11209 Comm: syz.0.1915 Not tainted syzkaller #0 [ 401.486747][T11209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 401.497008][T11209] Call Trace: [ 401.500438][T11209] [ 401.503479][T11209] dump_stack_lvl+0x18c/0x250 [ 401.508304][T11209] ? show_regs_print_info+0x20/0x20 [ 401.513526][T11209] ? load_image+0x400/0x400 [ 401.518068][T11209] ? __might_fault+0xaa/0x120 [ 401.522769][T11209] ? __lock_acquire+0x7d40/0x7d40 [ 401.527826][T11209] should_fail_ex+0x39d/0x4d0 [ 401.532568][T11209] _copy_from_user+0x2f/0xe0 [ 401.537292][T11209] sctp_setsockopt+0x19e/0x11e0 [ 401.542315][T11209] ? sock_common_recvmsg+0x190/0x190 [ 401.547761][T11209] do_sock_setsockopt+0x175/0x1a0 [ 401.552971][T11209] ? __fdget+0x180/0x210 [ 401.557252][T11209] __x64_sys_setsockopt+0x182/0x200 [ 401.562587][T11209] do_syscall_64+0x55/0xa0 [ 401.567208][T11209] ? clear_bhb_loop+0x40/0x90 [ 401.572007][T11209] ? clear_bhb_loop+0x40/0x90 [ 401.576887][T11209] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 401.582821][T11209] RIP: 0033:0x7fc90939acb9 [ 401.587463][T11209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.607450][T11209] RSP: 002b:00007fc90a249028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 401.616257][T11209] RAX: ffffffffffffffda RBX: 00007fc909615fa0 RCX: 00007fc90939acb9 [ 401.624546][T11209] RDX: 0000000000000083 RSI: 0000000000000084 RDI: 0000000000000003 [ 401.632645][T11209] RBP: 00007fc90a249090 R08: 0000000000000008 R09: 0000000000000000 [ 401.641214][T11209] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.649557][T11209] R13: 00007fc909616038 R14: 00007fc909615fa0 R15: 00007fff0ff7d738 [ 401.657661][T11209] [ 401.835285][T11216] FAULT_INJECTION: forcing a failure. [ 401.835285][T11216] name failslab, interval 1, probability 0, space 0, times 0 [ 401.853995][T11216] CPU: 0 PID: 11216 Comm: syz.3.1916 Not tainted syzkaller #0 [ 401.861534][T11216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 401.871728][T11216] Call Trace: [ 401.875041][T11216] [ 401.878005][T11216] dump_stack_lvl+0x18c/0x250 [ 401.882930][T11216] ? show_regs_print_info+0x20/0x20 [ 401.888188][T11216] ? load_image+0x400/0x400 [ 401.892741][T11216] ? __might_sleep+0xe0/0xe0 [ 401.897383][T11216] ? __lock_acquire+0x7d40/0x7d40 [ 401.902447][T11216] should_fail_ex+0x39d/0x4d0 [ 401.907178][T11216] should_failslab+0x9/0x20 [ 401.911715][T11216] slab_pre_alloc_hook+0x59/0x310 [ 401.916776][T11216] ? __lock_acquire+0x7d40/0x7d40 [ 401.921930][T11216] kmem_cache_alloc_node+0x60/0x320 [ 401.927346][T11216] ? __alloc_skb+0x103/0x2c0 [ 401.932149][T11216] __alloc_skb+0x103/0x2c0 [ 401.936608][T11216] netlink_sendmsg+0x66a/0xbf0 [ 401.941512][T11216] ? netlink_getsockopt+0x590/0x590 [ 401.946854][T11216] ? aa_sock_msg_perm+0x94/0x150 [ 401.951988][T11216] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 401.957502][T11216] ? security_socket_sendmsg+0x80/0xa0 [ 401.963186][T11216] ? netlink_getsockopt+0x590/0x590 [ 401.968628][T11216] ____sys_sendmsg+0x5ba/0x960 [ 401.973537][T11216] ? __asan_memset+0x22/0x40 [ 401.978177][T11216] ? __sys_sendmsg_sock+0x30/0x30 [ 401.983374][T11216] ? __import_iovec+0x5f2/0x850 [ 401.988971][T11216] ? import_iovec+0x73/0xa0 [ 401.993521][T11216] ___sys_sendmsg+0x2a6/0x360 [ 401.998324][T11216] ? get_pid_task+0x20/0x1e0 [ 402.002956][T11216] ? __sys_sendmsg+0x2a0/0x2a0 [ 402.008380][T11216] ? __lock_acquire+0x7d40/0x7d40 [ 402.013641][T11216] __se_sys_sendmsg+0x1c2/0x2b0 [ 402.018617][T11216] ? __x64_sys_sendmsg+0x80/0x80 [ 402.023710][T11216] ? lockdep_hardirqs_on+0x98/0x150 [ 402.029050][T11216] do_syscall_64+0x55/0xa0 [ 402.033593][T11216] ? clear_bhb_loop+0x40/0x90 [ 402.038399][T11216] ? clear_bhb_loop+0x40/0x90 [ 402.043302][T11216] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 402.049403][T11216] RIP: 0033:0x7f23e379acb9 [ 402.053933][T11216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.073937][T11216] RSP: 002b:00007f23e4695028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 402.082396][T11216] RAX: ffffffffffffffda RBX: 00007f23e3a16180 RCX: 00007f23e379acb9 [ 402.090492][T11216] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 402.098508][T11216] RBP: 00007f23e4695090 R08: 0000000000000000 R09: 0000000000000000 [ 402.106734][T11216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.115010][T11216] R13: 00007f23e3a16218 R14: 00007f23e3a16180 R15: 00007ffd19a6efe8 [ 402.123419][T11216] [ 402.129155][T10973] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 402.575881][T11222] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 402.821035][T11236] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1924'. [ 403.740500][T11249] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1930'. [ 403.763329][T11249] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1930'. [ 403.785971][T11249] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1930'. [ 403.796982][T11249] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1930'. [ 403.819627][T11232] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1923'. [ 403.852442][T11253] FAULT_INJECTION: forcing a failure. [ 403.852442][T11253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.879167][T11253] CPU: 1 PID: 11253 Comm: syz.3.1932 Not tainted syzkaller #0 [ 403.886801][T11253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 403.898676][T11253] Call Trace: [ 403.902080][T11253] [ 403.905048][T11253] dump_stack_lvl+0x18c/0x250 [ 403.906979][T11232] batadv_slave_1: entered promiscuous mode [ 403.909751][T11253] ? show_regs_print_info+0x20/0x20 [ 403.909810][T11253] ? load_image+0x400/0x400 [ 403.909841][T11253] ? __might_fault+0xaa/0x120 [ 403.930200][T11253] ? __lock_acquire+0x7d40/0x7d40 [ 403.935729][T11253] should_fail_ex+0x39d/0x4d0 [ 403.940731][T11253] _copy_to_iter+0x1ce/0x1120 [ 403.945647][T11253] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 403.951786][T11253] ? iov_iter_init+0x1e0/0x1e0 [ 403.956800][T11253] ? __virt_addr_valid+0x18c/0x540 [ 403.962050][T11253] ? __virt_addr_valid+0x469/0x540 [ 403.967433][T11253] ? __phys_addr_symbol+0x2f/0x70 [ 403.972581][T11253] __skb_datagram_iter+0xdb/0x780 [ 403.977746][T11253] ? tsk_importance+0x150/0x150 [ 403.983132][T11253] ? skb_copy_datagram_iter+0x200/0x200 [ 403.988978][T11253] ? tipc_wait_for_rcvmsg+0x640/0x640 [ 403.994546][T11253] skb_copy_datagram_iter+0xb1/0x200 [ 404.000030][T11253] tipc_recvmsg+0x7cc/0x1400 [ 404.004879][T11253] ? tipc_send_packet+0x90/0x90 [ 404.010027][T11253] ? aa_sock_msg_perm+0x94/0x150 [ 404.015272][T11253] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 404.021190][T11253] ? security_socket_recvmsg+0x89/0xb0 [ 404.026669][T11253] ? tipc_send_packet+0x90/0x90 [ 404.031893][T11253] ____sys_recvmsg+0x2ce/0x5e0 [ 404.036977][T11253] ? __sys_recvmsg_sock+0x50/0x50 [ 404.042652][T11253] ? import_iovec+0x73/0xa0 [ 404.047529][T11253] ___sys_recvmsg+0x216/0x590 [ 404.052947][T11253] ? __sys_recvmsg+0x2a0/0x2a0 [ 404.058355][T11253] ? ksys_write+0x1c4/0x260 [ 404.063239][T11253] ? __fget_files+0x43d/0x4b0 [ 404.068040][T11253] __x64_sys_recvmsg+0x20c/0x2e0 [ 404.073262][T11253] ? ___sys_recvmsg+0x590/0x590 [ 404.078502][T11253] ? lockdep_hardirqs_on+0x98/0x150 [ 404.083903][T11253] do_syscall_64+0x55/0xa0 [ 404.088565][T11253] ? clear_bhb_loop+0x40/0x90 [ 404.093264][T11253] ? clear_bhb_loop+0x40/0x90 [ 404.097962][T11253] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 404.103900][T11253] RIP: 0033:0x7f23e379acb9 [ 404.108448][T11253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.128950][T11253] RSP: 002b:00007f23e46d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 404.137816][T11253] RAX: ffffffffffffffda RBX: 00007f23e3a15fa0 RCX: 00007f23e379acb9 [ 404.146285][T11253] RDX: 0000000000000080 RSI: 00002000000000c0 RDI: 0000000000000003 [ 404.154459][T11253] RBP: 00007f23e46d7090 R08: 0000000000000000 R09: 0000000000000000 [ 404.162731][T11253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.171516][T11253] R13: 00007f23e3a16038 R14: 00007f23e3a15fa0 R15: 00007ffd19a6efe8 [ 404.179700][T11253] [ 404.986024][T11274] netlink: 'syz.2.1939': attribute type 3 has an invalid length. [ 404.995764][T11274] netlink: 'syz.2.1939': attribute type 1 has an invalid length. [ 405.004679][T11274] netlink: 193404 bytes leftover after parsing attributes in process `syz.2.1939'. [ 405.792244][T11285] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 406.782443][T11319] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1955'. [ 406.795381][T11315] netlink: 'syz.3.1954': attribute type 3 has an invalid length. [ 406.816405][T11315] netlink: 'syz.3.1954': attribute type 1 has an invalid length. [ 406.829451][T11315] netlink: 193404 bytes leftover after parsing attributes in process `syz.3.1954'. [ 406.855747][T11319] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1955'. [ 407.575672][T11329] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 408.007234][T10973] tipc: Subscription rejected, illegal request [ 408.583975][T11345] FAULT_INJECTION: forcing a failure. [ 408.583975][T11345] name failslab, interval 1, probability 0, space 0, times 0 [ 408.604491][T11345] CPU: 0 PID: 11345 Comm: syz.1.1966 Not tainted syzkaller #0 [ 408.612226][T11345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 408.622602][T11345] Call Trace: [ 408.625907][T11345] [ 408.628884][T11345] dump_stack_lvl+0x18c/0x250 [ 408.633683][T11345] ? show_regs_print_info+0x20/0x20 [ 408.639073][T11345] ? load_image+0x400/0x400 [ 408.643694][T11345] ? __might_sleep+0xe0/0xe0 [ 408.648309][T11345] ? __lock_acquire+0x7d40/0x7d40 [ 408.653363][T11345] should_fail_ex+0x39d/0x4d0 [ 408.658153][T11345] should_failslab+0x9/0x20 [ 408.662852][T11345] slab_pre_alloc_hook+0x59/0x310 [ 408.667988][T11345] ? genl_start+0x1c9/0x6b0 [ 408.672649][T11345] __kmem_cache_alloc_node+0x53/0x250 [ 408.678131][T11345] ? genl_start+0x1c9/0x6b0 [ 408.682824][T11345] kmalloc_trace+0x2a/0xe0 [ 408.687435][T11345] genl_start+0x1c9/0x6b0 [ 408.691962][T11345] ? netlink_lookup+0x30/0x200 [ 408.696801][T11345] __netlink_dump_start+0x4a9/0x810 [ 408.702425][T11345] genl_family_rcv_msg_dumpit+0x214/0x310 [ 408.708427][T11345] ? genl_rcv_msg+0x7a0/0x7a0 [ 408.713204][T11345] ? genl_get_cmd+0x692/0x920 [ 408.717990][T11345] ? genl_family_rcv_msg_doit+0x310/0x310 [ 408.723728][T11345] ? genl_start+0x6b0/0x6b0 [ 408.728246][T11345] ? genl_dumpit+0x1a0/0x1a0 [ 408.733242][T11345] genl_rcv_msg+0x5e5/0x7a0 [ 408.737890][T11345] ? genl_bind+0x360/0x360 [ 408.742337][T11345] ? ethnl_default_doit+0xb80/0xb80 [ 408.747641][T11345] ? ethnl_default_start+0x560/0x560 [ 408.753308][T11345] ? ethnl_default_dumpit+0x8a0/0x8a0 [ 408.758715][T11345] ? ref_tracker_free+0x690/0x840 [ 408.763989][T11345] netlink_rcv_skb+0x241/0x4d0 [ 408.769387][T11345] ? genl_bind+0x360/0x360 [ 408.773998][T11345] ? netlink_ack+0x1180/0x1180 [ 408.778874][T11345] ? __lock_acquire+0x7d40/0x7d40 [ 408.784095][T11345] ? down_read+0x1ac/0x2e0 [ 408.788616][T11345] genl_rcv+0x28/0x40 [ 408.792624][T11345] netlink_unicast+0x751/0x8d0 [ 408.797595][T11345] netlink_sendmsg+0x8d0/0xbf0 [ 408.802557][T11345] ? netlink_getsockopt+0x590/0x590 [ 408.807860][T11345] ? aa_sock_msg_perm+0x94/0x150 [ 408.812904][T11345] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 408.818671][T11345] ? security_socket_sendmsg+0x80/0xa0 [ 408.824147][T11345] ? netlink_getsockopt+0x590/0x590 [ 408.829366][T11345] ____sys_sendmsg+0x5ba/0x960 [ 408.834158][T11345] ? __asan_memset+0x22/0x40 [ 408.838783][T11345] ? __sys_sendmsg_sock+0x30/0x30 [ 408.843993][T11345] ? __import_iovec+0x5f2/0x850 [ 408.849049][T11345] ? import_iovec+0x73/0xa0 [ 408.853751][T11345] ___sys_sendmsg+0x2a6/0x360 [ 408.858537][T11345] ? get_pid_task+0x20/0x1e0 [ 408.863341][T11345] ? __sys_sendmsg+0x2a0/0x2a0 [ 408.868223][T11345] ? __lock_acquire+0x7d40/0x7d40 [ 408.873380][T11345] __se_sys_sendmsg+0x1c2/0x2b0 [ 408.878355][T11345] ? __x64_sys_sendmsg+0x80/0x80 [ 408.883505][T11345] ? lockdep_hardirqs_on+0x98/0x150 [ 408.888903][T11345] do_syscall_64+0x55/0xa0 [ 408.893509][T11345] ? clear_bhb_loop+0x40/0x90 [ 408.898553][T11345] ? clear_bhb_loop+0x40/0x90 [ 408.903339][T11345] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 408.909343][T11345] RIP: 0033:0x7f326d39acb9 [ 408.913962][T11345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.934343][T11345] RSP: 002b:00007f326e2c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 408.943075][T11345] RAX: ffffffffffffffda RBX: 00007f326d615fa0 RCX: 00007f326d39acb9 [ 408.951241][T11345] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 408.959230][T11345] RBP: 00007f326e2c1090 R08: 0000000000000000 R09: 0000000000000000 [ 408.967404][T11345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.975477][T11345] R13: 00007f326d616038 R14: 00007f326d615fa0 R15: 00007ffc10dfcb28 [ 408.983749][T11345] [ 409.419272][T11348] netlink: 'syz.0.1965': attribute type 3 has an invalid length. [ 409.427848][T11348] netlink: 'syz.0.1965': attribute type 1 has an invalid length. [ 409.458397][T11348] __nla_validate_parse: 3 callbacks suppressed [ 409.458422][T11348] netlink: 193404 bytes leftover after parsing attributes in process `syz.0.1965'. [ 410.223348][T11361] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1970'. [ 410.237221][T11370] netlink: 'syz.0.1971': attribute type 3 has an invalid length. [ 410.350221][T11370] netlink: 'syz.0.1971': attribute type 1 has an invalid length. [ 410.404055][T11370] netlink: 193404 bytes leftover after parsing attributes in process `syz.0.1971'. [ 410.678896][T11377] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 411.038112][T11386] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 411.083340][T11382] netlink: 'syz.1.1975': attribute type 3 has an invalid length. [ 411.103361][T11382] netlink: 'syz.1.1975': attribute type 1 has an invalid length. [ 411.112373][T11382] netlink: 193404 bytes leftover after parsing attributes in process `syz.1.1975'. [ 411.725862][T11394] netlink: 'syz.1.1980': attribute type 3 has an invalid length. [ 411.760266][T11394] netlink: 'syz.1.1980': attribute type 1 has an invalid length. [ 411.783442][T11400] netlink: 'syz.2.1981': attribute type 9 has an invalid length. [ 411.793167][T11394] netlink: 193404 bytes leftover after parsing attributes in process `syz.1.1980'. [ 411.809878][T11400] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1981'. [ 412.183174][T11400] netlink: 'syz.2.1981': attribute type 9 has an invalid length. [ 412.210062][T11400] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1981'. [ 412.249129][T11408] FAULT_INJECTION: forcing a failure. [ 412.249129][T11408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.284132][T11408] CPU: 1 PID: 11408 Comm: syz.1.1985 Not tainted syzkaller #0 [ 412.291953][T11408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 412.302747][T11408] Call Trace: [ 412.306326][T11408] [ 412.309534][T11408] dump_stack_lvl+0x18c/0x250 [ 412.314434][T11408] ? show_regs_print_info+0x20/0x20 [ 412.320391][T11408] ? load_image+0x400/0x400 [ 412.324971][T11408] ? __lock_acquire+0x7d40/0x7d40 [ 412.330144][T11408] ? snprintf+0xe9/0x140 [ 412.334463][T11408] should_fail_ex+0x39d/0x4d0 [ 412.339206][T11408] _copy_to_user+0x2f/0xa0 [ 412.343858][T11408] simple_read_from_buffer+0xe7/0x150 [ 412.349394][T11408] proc_fail_nth_read+0x1e8/0x260 [ 412.354673][T11408] ? proc_fault_inject_write+0x360/0x360 [ 412.360387][T11408] ? fsnotify_perm+0x271/0x5e0 [ 412.365221][T11408] ? proc_fault_inject_write+0x360/0x360 [ 412.371104][T11408] vfs_read+0x28b/0x970 [ 412.375473][T11408] ? kernel_read+0x1e0/0x1e0 [ 412.380108][T11408] ? __fget_files+0x28/0x4b0 [ 412.384835][T11408] ? __fget_files+0x28/0x4b0 [ 412.389722][T11408] ? __fget_files+0x43d/0x4b0 [ 412.394626][T11408] ? __fdget_pos+0x2a3/0x330 [ 412.399528][T11408] ? ksys_read+0x75/0x260 [ 412.404029][T11408] ksys_read+0x150/0x260 [ 412.408407][T11408] ? vfs_write+0x990/0x990 [ 412.413196][T11408] ? lockdep_hardirqs_on+0x98/0x150 [ 412.418723][T11408] do_syscall_64+0x55/0xa0 [ 412.423283][T11408] ? clear_bhb_loop+0x40/0x90 [ 412.428045][T11408] ? clear_bhb_loop+0x40/0x90 [ 412.432885][T11408] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 412.438933][T11408] RIP: 0033:0x7f326d35b58e [ 412.443575][T11408] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 412.463486][T11408] RSP: 002b:00007f326e2c0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 412.472111][T11408] RAX: ffffffffffffffda RBX: 00007f326e2c16c0 RCX: 00007f326d35b58e [ 412.480288][T11408] RDX: 000000000000000f RSI: 00007f326e2c10a0 RDI: 0000000000000005 [ 412.488395][T11408] RBP: 00007f326e2c1090 R08: 0000000000000000 R09: 0000000000000000 [ 412.496768][T11408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 412.505125][T11408] R13: 00007f326d616038 R14: 00007f326d615fa0 R15: 00007ffc10dfcb28 [ 412.513344][T11408] [ 412.597686][T11398] delete_channel: no stack [ 412.804522][T11419] FAULT_INJECTION: forcing a failure. [ 412.804522][T11419] name failslab, interval 1, probability 0, space 0, times 0 [ 412.818324][T11419] CPU: 0 PID: 11419 Comm: syz.2.1989 Not tainted syzkaller #0 [ 412.825933][T11419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 412.828697][T11415] netlink: 'syz.1.1988': attribute type 13 has an invalid length. [ 412.836358][T11419] Call Trace: [ 412.836421][T11419] [ 412.850667][T11419] dump_stack_lvl+0x18c/0x250 [ 412.855543][T11419] ? show_regs_print_info+0x20/0x20 [ 412.860840][T11419] ? load_image+0x400/0x400 [ 412.865449][T11419] ? __might_sleep+0xe0/0xe0 [ 412.870246][T11419] ? __lock_acquire+0x7d40/0x7d40 [ 412.875305][T11419] ? is_dynamic_key+0x260/0x260 [ 412.880170][T11419] should_fail_ex+0x39d/0x4d0 [ 412.885150][T11419] should_failslab+0x9/0x20 [ 412.889756][T11419] slab_pre_alloc_hook+0x59/0x310 [ 412.894808][T11419] kmem_cache_alloc_node+0x60/0x320 [ 412.900198][T11419] ? __alloc_skb+0x103/0x2c0 [ 412.904814][T11419] __alloc_skb+0x103/0x2c0 [ 412.909417][T11419] __ip_append_data+0x2b73/0x3d40 [ 412.914827][T11419] ? ip_route_output_key_hash+0x13d/0x330 [ 412.920578][T11419] ? raw_send_hdrinc+0x1170/0x1170 [ 412.925809][T11419] ? mark_lock+0x94/0x320 [ 412.930155][T11419] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 412.936319][T11419] ? ip_setup_cork+0x860/0x860 [ 412.941096][T11419] ? ip_setup_cork+0x530/0x860 [ 412.946001][T11419] ip_append_data+0x10d/0x180 [ 412.950870][T11419] ? raw_send_hdrinc+0x1170/0x1170 [ 412.956022][T11419] raw_sendmsg+0x15c1/0x1c00 [ 412.960657][T11419] ? compat_raw_ioctl+0x70/0x70 [ 412.965526][T11419] ? __lock_acquire+0x1273/0x7d40 [ 412.970664][T11419] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 412.977265][T11419] ? sock_rps_record_flow+0x19/0x3f0 [ 412.982754][T11419] ? inet_sendmsg+0x7c/0x2f0 [ 412.987371][T11419] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 412.992679][T11419] ? security_socket_sendmsg+0x80/0xa0 [ 412.998352][T11419] ? inet_send_prepare+0x260/0x260 [ 413.003509][T11419] ____sys_sendmsg+0x5ba/0x960 [ 413.008461][T11419] ? __lock_acquire+0x7d40/0x7d40 [ 413.013603][T11419] ? __asan_memset+0x22/0x40 [ 413.018844][T11419] ? __sys_sendmsg_sock+0x30/0x30 [ 413.023904][T11419] ? __import_iovec+0x5f2/0x850 [ 413.028880][T11419] ? import_iovec+0x73/0xa0 [ 413.033496][T11419] ___sys_sendmsg+0x2a6/0x360 [ 413.038195][T11419] ? get_pid_task+0x20/0x1e0 [ 413.042985][T11419] ? __sys_sendmsg+0x2a0/0x2a0 [ 413.047781][T11419] ? __lock_acquire+0x7d40/0x7d40 [ 413.052839][T11419] __se_sys_sendmsg+0x1c2/0x2b0 [ 413.057885][T11419] ? __x64_sys_sendmsg+0x80/0x80 [ 413.062968][T11419] ? lockdep_hardirqs_on+0x98/0x150 [ 413.068474][T11419] do_syscall_64+0x55/0xa0 [ 413.072944][T11419] ? clear_bhb_loop+0x40/0x90 [ 413.077656][T11419] ? clear_bhb_loop+0x40/0x90 [ 413.082434][T11419] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 413.088463][T11419] RIP: 0033:0x7f0fdab9acb9 [ 413.092990][T11419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.112808][T11419] RSP: 002b:00007f0fdbb2a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 413.121435][T11419] RAX: ffffffffffffffda RBX: 00007f0fdae15fa0 RCX: 00007f0fdab9acb9 [ 413.129557][T11419] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 413.137844][T11419] RBP: 00007f0fdbb2a090 R08: 0000000000000000 R09: 0000000000000000 [ 413.146004][T11419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.154598][T11419] R13: 00007f0fdae16038 R14: 00007f0fdae15fa0 R15: 00007ffc6074dbb8 [ 413.162622][T11419] [ 413.172111][T11415] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.1988'. [ 413.485699][T11426] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 413.928792][T11423] netlink: 'syz.2.1990': attribute type 3 has an invalid length. [ 413.954204][T11423] netlink: 193404 bytes leftover after parsing attributes in process `syz.2.1990'. [ 414.039696][T11430] netlink: 193404 bytes leftover after parsing attributes in process `syz.1.1993'. [ 414.830953][T11451] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.2000'. [ 415.374912][T11457] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 420.379889][T11474] validate_nla: 3 callbacks suppressed [ 420.380324][T11474] netlink: 'syz.1.2006': attribute type 3 has an invalid length. [ 420.459899][T11474] netlink: 'syz.1.2006': attribute type 1 has an invalid length. [ 420.487344][T11474] netlink: 193404 bytes leftover after parsing attributes in process `syz.1.2006'. [ 420.871426][T11492] netlink: 'syz.3.2009': attribute type 3 has an invalid length. [ 420.950089][T11492] netlink: 'syz.3.2009': attribute type 1 has an invalid length. [ 421.020165][T11492] netlink: 193404 bytes leftover after parsing attributes in process `syz.3.2009'. [ 421.653988][T11507] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 421.705747][T11512] FAULT_INJECTION: forcing a failure. [ 421.705747][T11512] name failslab, interval 1, probability 0, space 0, times 0 [ 421.795008][T11512] CPU: 1 PID: 11512 Comm: syz.3.2016 Not tainted syzkaller #0 [ 421.802956][T11512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 421.813561][T11512] Call Trace: [ 421.816881][T11512] [ 421.819846][T11512] dump_stack_lvl+0x18c/0x250 [ 421.824574][T11512] ? show_regs_print_info+0x20/0x20 [ 421.829991][T11512] ? load_image+0x400/0x400 [ 421.834630][T11512] ? __might_sleep+0xe0/0xe0 [ 421.839363][T11512] ? __lock_acquire+0x7d40/0x7d40 [ 421.844439][T11512] should_fail_ex+0x39d/0x4d0 [ 421.849238][T11512] should_failslab+0x9/0x20 [ 421.853859][T11512] slab_pre_alloc_hook+0x59/0x310 [ 421.859002][T11512] kmem_cache_alloc+0x5a/0x2d0 [ 421.863879][T11512] ? sk_prot_alloc+0x57/0x210 [ 421.868584][T11512] sk_prot_alloc+0x57/0x210 [ 421.873194][T11512] ? sk_alloc+0x24/0x360 [ 421.877584][T11512] sk_alloc+0x3a/0x360 [ 421.881670][T11512] tipc_sk_create+0x165/0x28c0 [ 421.886452][T11512] ? lockdep_init_map_type+0x9c/0x8e0 [ 421.891895][T11512] ? rcu_read_unlock+0x8c/0xa0 [ 421.896673][T11512] ? __lock_acquire+0x7d40/0x7d40 [ 421.901731][T11512] ? msg_importance+0x140/0x140 [ 421.906621][T11512] __sock_create+0x4a6/0x940 [ 421.911275][T11512] __sys_socketpair+0x1c1/0x550 [ 421.916160][T11512] __x64_sys_socketpair+0x9b/0xb0 [ 421.921207][T11512] do_syscall_64+0x55/0xa0 [ 421.925651][T11512] ? clear_bhb_loop+0x40/0x90 [ 421.930436][T11512] ? clear_bhb_loop+0x40/0x90 [ 421.935303][T11512] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 421.941213][T11512] RIP: 0033:0x7f23e379acb9 [ 421.945814][T11512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.965887][T11512] RSP: 002b:00007f23e46d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 421.974313][T11512] RAX: ffffffffffffffda RBX: 00007f23e3a15fa0 RCX: 00007f23e379acb9 [ 421.982749][T11512] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000000000001e [ 421.990957][T11512] RBP: 00007f23e46d7090 R08: 0000000000000000 R09: 0000000000000000 [ 421.998947][T11512] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000002 [ 422.007015][T11512] R13: 00007f23e3a16038 R14: 00007f23e3a15fa0 R15: 00007ffd19a6efe8 [ 422.015263][T11512] [ 422.048556][T11515] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2015'. [ 422.565205][T11523] netlink: 'syz.3.2021': attribute type 3 has an invalid length. [ 422.700573][T11523] netlink: 201336 bytes leftover after parsing attributes in process `syz.3.2021'. [ 423.204649][T11524] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2020'. [ 423.236606][ T5784] Bluetooth: hci0: ISO packet for unknown connection handle 35 [ 423.583769][T11539] netlink: 'syz.0.2028': attribute type 3 has an invalid length. [ 423.602033][T11537] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 423.630169][T11539] netlink: 'syz.0.2028': attribute type 1 has an invalid length. [ 423.648492][T11539] netlink: 193404 bytes leftover after parsing attributes in process `syz.0.2028'. [ 423.784731][T11544] ªªªªªª: renamed from vlan0 (while UP) [ 423.807986][T11544] FAULT_INJECTION: forcing a failure. [ 423.807986][T11544] name failslab, interval 1, probability 0, space 0, times 0 [ 423.825822][T11544] CPU: 0 PID: 11544 Comm: syz.1.2030 Not tainted syzkaller #0 [ 423.833533][T11544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 423.843724][T11544] Call Trace: [ 423.847231][T11544] [ 423.850337][T11544] dump_stack_lvl+0x18c/0x250 [ 423.855321][T11544] ? show_regs_print_info+0x20/0x20 [ 423.860687][T11544] ? load_image+0x400/0x400 [ 423.865479][T11544] ? __might_sleep+0xe0/0xe0 [ 423.870338][T11544] ? __lock_acquire+0x7d40/0x7d40 [ 423.875654][T11544] should_fail_ex+0x39d/0x4d0 [ 423.880713][T11544] should_failslab+0x9/0x20 [ 423.885493][T11544] slab_pre_alloc_hook+0x59/0x310 [ 423.890680][T11544] ? kernfs_rename_ns+0x3b1/0x810 [ 423.895930][T11544] ? kernfs_rename_ns+0x3b1/0x810 [ 423.901071][T11544] __kmem_cache_alloc_node+0x53/0x250 [ 423.906660][T11544] ? kernfs_rename_ns+0x3b1/0x810 [ 423.911874][T11544] __kmalloc_node_track_caller+0xa2/0x230 [ 423.917830][T11544] kstrdup+0x3b/0x80 [ 423.921939][T11544] kernfs_rename_ns+0x3b1/0x810 [ 423.927595][T11544] sysfs_rename_link_ns+0x175/0x1b0 [ 423.933022][T11544] device_rename+0x110/0x1e0 [ 423.937915][T11544] dev_change_name+0x307/0x8c0 [ 423.942773][T11544] ? end_current_label_crit_section+0x170/0x170 [ 423.949215][T11544] ? dev_load+0x21/0x1f0 [ 423.953576][T11544] ? dev_ioctl+0x5dc/0x1140 [ 423.958228][T11544] ? dev_alloc_name+0x1d0/0x1d0 [ 423.963262][T11544] ? full_name_hash+0x92/0xe0 [ 423.968288][T11544] ? dev_ifsioc+0x316/0xc40 [ 423.972939][T11544] dev_ioctl+0x5ec/0x1140 [ 423.977585][T11544] sock_do_ioctl+0x239/0x310 [ 423.982287][T11544] ? sock_show_fdinfo+0xb0/0xb0 [ 423.987464][T11544] sock_ioctl+0x5ba/0x7e0 [ 423.992160][T11544] ? sock_poll+0x3e0/0x3e0 [ 423.996934][T11544] ? bpf_lsm_file_ioctl+0x9/0x10 [ 424.002033][T11544] ? security_file_ioctl+0x80/0xa0 [ 424.007415][T11544] ? sock_poll+0x3e0/0x3e0 [ 424.012032][T11544] __se_sys_ioctl+0xfd/0x170 [ 424.016731][T11544] do_syscall_64+0x55/0xa0 [ 424.021221][T11544] ? clear_bhb_loop+0x40/0x90 [ 424.026156][T11544] ? clear_bhb_loop+0x40/0x90 [ 424.030934][T11544] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 424.037204][T11544] RIP: 0033:0x7f326d39acb9 [ 424.041797][T11544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.061915][T11544] RSP: 002b:00007f326e2c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 424.070600][T11544] RAX: ffffffffffffffda RBX: 00007f326d615fa0 RCX: 00007f326d39acb9 [ 424.078740][T11544] RDX: 0000200000000000 RSI: 0000000000008923 RDI: 0000000000000011 [ 424.086878][T11544] RBP: 00007f326e2c1090 R08: 0000000000000000 R09: 0000000000000000 [ 424.095085][T11544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.103396][T11544] R13: 00007f326d616038 R14: 00007f326d615fa0 R15: 00007ffc10dfcb28 [ 424.111560][T11544] [ 424.309573][ T5784] Bluetooth: hci3: Malformed Event: 0x2f [ 426.112050][T11566] FAULT_INJECTION: forcing a failure. [ 426.112050][T11566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.141804][T11566] CPU: 1 PID: 11566 Comm: syz.1.2035 Not tainted syzkaller #0 [ 426.149349][T11566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 426.159629][T11566] Call Trace: [ 426.163139][T11566] [ 426.166273][T11566] dump_stack_lvl+0x18c/0x250 [ 426.170999][T11566] ? show_regs_print_info+0x20/0x20 [ 426.176418][T11566] ? load_image+0x400/0x400 [ 426.181001][T11566] ? __lock_acquire+0x7d40/0x7d40 [ 426.186086][T11566] ? snprintf+0xe9/0x140 [ 426.190385][T11566] should_fail_ex+0x39d/0x4d0 [ 426.195182][T11566] _copy_to_user+0x2f/0xa0 [ 426.199730][T11566] simple_read_from_buffer+0xe7/0x150 [ 426.205337][T11566] proc_fail_nth_read+0x1e8/0x260 [ 426.211043][T11566] ? proc_fault_inject_write+0x360/0x360 [ 426.216869][T11566] ? fsnotify_perm+0x271/0x5e0 [ 426.221697][T11566] ? proc_fault_inject_write+0x360/0x360 [ 426.227384][T11566] vfs_read+0x28b/0x970 [ 426.231679][T11566] ? kernel_read+0x1e0/0x1e0 [ 426.236662][T11566] ? __fget_files+0x28/0x4b0 [ 426.241385][T11566] ? __fget_files+0x28/0x4b0 [ 426.246039][T11566] ? __fget_files+0x43d/0x4b0 [ 426.250805][T11566] ? __fdget_pos+0x2a3/0x330 [ 426.255708][T11566] ? ksys_read+0x75/0x260 [ 426.260494][T11566] ksys_read+0x150/0x260 [ 426.264822][T11566] ? vfs_write+0x990/0x990 [ 426.269570][T11566] ? lockdep_hardirqs_on+0x98/0x150 [ 426.275171][T11566] do_syscall_64+0x55/0xa0 [ 426.279627][T11566] ? clear_bhb_loop+0x40/0x90 [ 426.284516][T11566] ? clear_bhb_loop+0x40/0x90 [ 426.289214][T11566] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 426.295320][T11566] RIP: 0033:0x7f326d35b58e [ 426.300010][T11566] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 426.319914][T11566] RSP: 002b:00007f326e2c0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 426.328528][T11566] RAX: ffffffffffffffda RBX: 00007f326e2c16c0 RCX: 00007f326d35b58e [ 426.336705][T11566] RDX: 000000000000000f RSI: 00007f326e2c10a0 RDI: 0000000000000006 [ 426.344714][T11566] RBP: 00007f326e2c1090 R08: 0000000000000000 R09: 0000000000000000 [ 426.352887][T11566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.361311][T11566] R13: 00007f326d616038 R14: 00007f326d615fa0 R15: 00007ffc10dfcb28 [ 426.369411][T11566] [ 426.478732][T11561] netlink: 'syz.2.2034': attribute type 3 has an invalid length. [ 426.499195][T11561] netlink: 201336 bytes leftover after parsing attributes in process `syz.2.2034'. [ 426.802593][T11586] netlink: 'syz.1.2045': attribute type 1 has an invalid length. [ 426.909102][T11586] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2045'. [ 427.229786][T11592] netlink: 'syz.3.2048': attribute type 3 has an invalid length. [ 427.269467][T11592] netlink: 'syz.3.2048': attribute type 1 has an invalid length. [ 427.303483][T11592] netlink: 193404 bytes leftover after parsing attributes in process `syz.3.2048'. [ 427.515277][T11609] netlink: 207508 bytes leftover after parsing attributes in process `syz.3.2054'. [ 428.236222][T11621] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2058'. [ 428.262962][T11603] netlink: 'syz.1.2052': attribute type 3 has an invalid length. [ 428.274410][T11603] netlink: 201336 bytes leftover after parsing attributes in process `syz.1.2052'. [ 428.715632][T11632] netlink: 'syz.1.2062': attribute type 3 has an invalid length. [ 428.740470][T11632] netlink: 'syz.1.2062': attribute type 1 has an invalid length. [ 428.748727][T11632] netlink: 193404 bytes leftover after parsing attributes in process `syz.1.2062'. [ 428.817466][T11638] netlink: 'syz.2.2065': attribute type 10 has an invalid length. [ 428.826966][T11638] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2065'. [ 429.035984][T11647] raw_sendmsg: syz.1.2068 forgot to set AF_INET. Fix it! [ 429.294361][T11661] netlink: 'syz.0.2078': attribute type 28 has an invalid length. [ 429.599147][T11665] netlink: 'syz.3.2071': attribute type 3 has an invalid length. [ 429.642491][T11665] netlink: 201336 bytes leftover after parsing attributes in process `syz.3.2071'. [ 430.384046][T11677] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2076'. [ 431.420590][T11696] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 431.774233][T11713] validate_nla: 1 callbacks suppressed [ 431.774251][T11713] netlink: 'syz.3.2089': attribute type 3 has an invalid length. [ 431.788418][T11713] __nla_validate_parse: 1 callbacks suppressed [ 431.788433][T11713] netlink: 201336 bytes leftover after parsing attributes in process `syz.3.2089'. [ 431.807174][T11712] FAULT_INJECTION: forcing a failure. [ 431.807174][T11712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.850927][T11712] CPU: 0 PID: 11712 Comm: syz.1.2090 Not tainted syzkaller #0 [ 431.858554][T11712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 431.868694][T11712] Call Trace: [ 431.872107][T11712] [ 431.875084][T11712] dump_stack_lvl+0x18c/0x250 [ 431.879826][T11712] ? show_regs_print_info+0x20/0x20 [ 431.885256][T11712] ? load_image+0x400/0x400 [ 431.889915][T11712] ? __might_fault+0xaa/0x120 [ 431.894827][T11712] ? __lock_acquire+0x7d40/0x7d40 [ 431.900443][T11712] should_fail_ex+0x39d/0x4d0 [ 431.905181][T11712] _copy_from_iter+0x1d9/0x12e0 [ 431.910091][T11712] ? __virt_addr_valid+0x18c/0x540 [ 431.915243][T11712] ? __lock_acquire+0x7d40/0x7d40 [ 431.920554][T11712] ? copyout_mc+0x70/0x70 [ 431.925009][T11712] ? __virt_addr_valid+0x18c/0x540 [ 431.930160][T11712] ? __virt_addr_valid+0x18c/0x540 [ 431.935299][T11712] ? __virt_addr_valid+0x469/0x540 [ 431.940522][T11712] ? __check_object_size+0x506/0xa20 [ 431.946062][T11712] rawv6_send_hdrinc+0x7a4/0x1640 [ 431.951120][T11712] ? txopt_get+0x3f0/0x3f0 [ 431.955554][T11712] ? txopt_get+0x344/0x3f0 [ 431.960165][T11712] ? fl6_sock_lookup+0xc0/0xc0 [ 431.965212][T11712] rawv6_sendmsg+0x12cc/0x1770 [ 431.970134][T11712] ? compat_rawv6_ioctl+0x70/0x70 [ 431.975266][T11712] ? aa_sk_perm+0x83c/0x970 [ 431.979789][T11712] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 431.986314][T11712] ? inet_sendmsg+0x7c/0x2f0 [ 431.991095][T11712] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 431.996478][T11712] ? security_socket_sendmsg+0x80/0xa0 [ 432.002060][T11712] ? inet_send_prepare+0x260/0x260 [ 432.007282][T11712] ____sys_sendmsg+0x5ba/0x960 [ 432.012322][T11712] ? __lock_acquire+0x7d40/0x7d40 [ 432.017392][T11712] ? __asan_memset+0x22/0x40 [ 432.022106][T11712] ? __sys_sendmsg_sock+0x30/0x30 [ 432.027250][T11712] ? __import_iovec+0x5f2/0x850 [ 432.032403][T11712] ? import_iovec+0x73/0xa0 [ 432.036934][T11712] ___sys_sendmsg+0x2a6/0x360 [ 432.041628][T11712] ? get_pid_task+0x20/0x1e0 [ 432.046247][T11712] ? __sys_sendmsg+0x2a0/0x2a0 [ 432.051052][T11712] ? __lock_acquire+0x7d40/0x7d40 [ 432.056205][T11712] __se_sys_sendmsg+0x1c2/0x2b0 [ 432.061279][T11712] ? __x64_sys_sendmsg+0x80/0x80 [ 432.066451][T11712] ? lockdep_hardirqs_on+0x98/0x150 [ 432.071967][T11712] do_syscall_64+0x55/0xa0 [ 432.077453][T11712] ? clear_bhb_loop+0x40/0x90 [ 432.082404][T11712] ? clear_bhb_loop+0x40/0x90 [ 432.087120][T11712] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 432.093158][T11712] RIP: 0033:0x7f326d39acb9 [ 432.097596][T11712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.117400][T11712] RSP: 002b:00007f326e2c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 432.125918][T11712] RAX: ffffffffffffffda RBX: 00007f326d615fa0 RCX: 00007f326d39acb9 [ 432.134163][T11712] RDX: 0000000020000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 432.142678][T11712] RBP: 00007f326e2c1090 R08: 0000000000000000 R09: 0000000000000000 [ 432.150853][T11712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.159197][T11712] R13: 00007f326d616038 R14: 00007f326d615fa0 R15: 00007ffc10dfcb28 [ 432.167521][T11712] [ 432.533745][T11727] Dead loop on virtual device ip6_vti0, fix it urgently! [ 433.047882][T11737] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 433.195117][ T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 433.583075][T11750] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2106'. [ 433.768621][T11749] netlink: 'syz.0.2108': attribute type 3 has an invalid length. [ 433.800146][T11749] netlink: 201336 bytes leftover after parsing attributes in process `syz.0.2108'. [ 433.882753][T11756] netlink: 'syz.1.2109': attribute type 3 has an invalid length. [ 433.895710][T11756] netlink: 201336 bytes leftover after parsing attributes in process `syz.1.2109'. [ 434.495247][T11770] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 434.918187][T11775] netlink: 'syz.3.2122': attribute type 3 has an invalid length. [ 435.061773][T11775] netlink: 201336 bytes leftover after parsing attributes in process `syz.3.2122'. [ 435.494649][T11796] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2119'. [ 435.536802][T11796] openvswitch: netlink: Flow actions attr not present in new flow. [ 435.555125][T11796] FAULT_INJECTION: forcing a failure. [ 435.555125][T11796] name failslab, interval 1, probability 0, space 0, times 0 [ 435.570491][T11796] CPU: 0 PID: 11796 Comm: syz.2.2119 Not tainted syzkaller #0 [ 435.578193][T11796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 435.588560][T11796] Call Trace: [ 435.592224][T11796] [ 435.595272][T11796] dump_stack_lvl+0x18c/0x250 [ 435.600106][T11796] ? show_regs_print_info+0x20/0x20 [ 435.605433][T11796] ? load_image+0x400/0x400 [ 435.610237][T11796] ? __might_sleep+0xe0/0xe0 [ 435.614885][T11796] ? __lock_acquire+0x7d40/0x7d40 [ 435.620043][T11796] should_fail_ex+0x39d/0x4d0 [ 435.624871][T11796] should_failslab+0x9/0x20 [ 435.629592][T11796] slab_pre_alloc_hook+0x59/0x310 [ 435.634843][T11796] ? genl_family_rcv_msg_doit+0x25d/0x310 [ 435.640728][T11796] kmem_cache_alloc_node+0x60/0x320 [ 435.646141][T11796] ? __alloc_skb+0x103/0x2c0 [ 435.650872][T11796] __alloc_skb+0x103/0x2c0 [ 435.655326][T11796] netlink_ack+0x376/0x1180 [ 435.659971][T11796] ? genl_bind+0x360/0x360 [ 435.664501][T11796] ? netlink_dump+0xe50/0xe50 [ 435.669232][T11796] netlink_rcv_skb+0x2c5/0x4d0 [ 435.675247][T11796] ? genl_bind+0x360/0x360 [ 435.679775][T11796] ? netlink_ack+0x1180/0x1180 [ 435.684674][T11796] ? __lock_acquire+0x7d40/0x7d40 [ 435.689748][T11796] ? down_read+0x1ac/0x2e0 [ 435.694314][T11796] genl_rcv+0x28/0x40 [ 435.698419][T11796] netlink_unicast+0x751/0x8d0 [ 435.703254][T11796] netlink_sendmsg+0x8d0/0xbf0 [ 435.708169][T11796] ? netlink_getsockopt+0x590/0x590 [ 435.713524][T11796] ? aa_sock_msg_perm+0x94/0x150 [ 435.718520][T11796] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 435.724108][T11796] ? security_socket_sendmsg+0x80/0xa0 [ 435.729608][T11796] ? netlink_getsockopt+0x590/0x590 [ 435.735038][T11796] ____sys_sendmsg+0x5ba/0x960 [ 435.739962][T11796] ? __asan_memset+0x22/0x40 [ 435.744603][T11796] ? __sys_sendmsg_sock+0x30/0x30 [ 435.749928][T11796] ? __import_iovec+0x5f2/0x850 [ 435.754836][T11796] ? import_iovec+0x73/0xa0 [ 435.759471][T11796] ___sys_sendmsg+0x2a6/0x360 [ 435.764202][T11796] ? __sys_sendmsg+0x2a0/0x2a0 [ 435.769381][T11796] ? trace_call_bpf+0xc3/0x6c0 [ 435.774222][T11796] __se_sys_sendmsg+0x1c2/0x2b0 [ 435.779112][T11796] ? __x64_sys_sendmsg+0x80/0x80 [ 435.784190][T11796] ? lockdep_hardirqs_on+0x98/0x150 [ 435.789688][T11796] do_syscall_64+0x55/0xa0 [ 435.794135][T11796] ? clear_bhb_loop+0x40/0x90 [ 435.798851][T11796] ? clear_bhb_loop+0x40/0x90 [ 435.803566][T11796] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 435.809619][T11796] RIP: 0033:0x7f0fdab9acb9 [ 435.814157][T11796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.834842][T11796] RSP: 002b:00007f0fdbb2a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 435.843398][T11796] RAX: ffffffffffffffda RBX: 00007f0fdae15fa0 RCX: 00007f0fdab9acb9 [ 435.851484][T11796] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 435.859789][T11796] RBP: 00007f0fdbb2a090 R08: 0000000000000000 R09: 0000000000000000 [ 435.867786][T11796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.875875][T11796] R13: 00007f0fdae16038 R14: 00007f0fdae15fa0 R15: 00007ffc6074dbb8 [ 435.884244][T11796] [ 435.934000][T11795] netlink: 'syz.1.2120': attribute type 3 has an invalid length. [ 435.942827][T11795] netlink: 'syz.1.2120': attribute type 1 has an invalid length. [ 435.951395][T11795] netlink: 193404 bytes leftover after parsing attributes in process `syz.1.2120'. [ 436.670548][T11819] netlink: 'syz.3.2127': attribute type 3 has an invalid length. [ 436.689152][T11819] netlink: 201336 bytes leftover after parsing attributes in process `syz.3.2127'. [ 436.844319][T11822] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 437.463283][T11831] netlink: 'syz.1.2133': attribute type 3 has an invalid length. [ 437.489762][T11831] netlink: 'syz.1.2133': attribute type 1 has an invalid length. [ 437.502340][T11831] netlink: 193404 bytes leftover after parsing attributes in process `syz.1.2133'. [ 437.658512][T11845] netlink: 'syz.3.2140': attribute type 3 has an invalid length. [ 437.687827][T11845] netlink: 201336 bytes leftover after parsing attributes in process `syz.3.2140'. [ 438.102188][T11855] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 438.476079][T11869] netlink: 'syz.2.2150': attribute type 3 has an invalid length. [ 438.494657][T11869] netlink: 'syz.2.2150': attribute type 1 has an invalid length. [ 438.512872][T11869] netlink: 193404 bytes leftover after parsing attributes in process `syz.2.2150'. [ 438.724417][T11876] netlink: 'syz.1.2153': attribute type 3 has an invalid length. [ 438.740042][T11876] netlink: 201336 bytes leftover after parsing attributes in process `syz.1.2153'. [ 438.793541][T11880] Dead loop on virtual device ip6_vti0, fix it urgently! [ 438.994572][T11882] netlink: 'syz.3.2156': attribute type 9 has an invalid length. [ 439.005828][T11882] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.2156'. [ 439.203908][T11886] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2156'. [ 439.283389][T11886] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 439.550156][T11893] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 439.589721][T11895] FAULT_INJECTION: forcing a failure. [ 439.589721][T11895] name failslab, interval 1, probability 0, space 0, times 0 [ 439.630481][T11895] CPU: 1 PID: 11895 Comm: syz.2.2160 Not tainted syzkaller #0 [ 439.638121][T11895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 439.648403][T11895] Call Trace: [ 439.651713][T11895] [ 439.654686][T11895] dump_stack_lvl+0x18c/0x250 [ 439.659483][T11895] ? show_regs_print_info+0x20/0x20 [ 439.664791][T11895] ? load_image+0x400/0x400 [ 439.669336][T11895] ? __lock_acquire+0x7d40/0x7d40 [ 439.674485][T11895] should_fail_ex+0x39d/0x4d0 [ 439.679293][T11895] should_failslab+0x9/0x20 [ 439.684087][T11895] slab_pre_alloc_hook+0x59/0x310 [ 439.689238][T11895] ? bpf_test_init+0x9f/0x140 [ 439.694135][T11895] ? bpf_test_init+0x9f/0x140 [ 439.698848][T11895] __kmem_cache_alloc_node+0x53/0x250 [ 439.704595][T11895] ? bpf_test_init+0x9f/0x140 [ 439.709389][T11895] __kmalloc+0xa4/0x230 [ 439.713669][T11895] bpf_test_init+0x9f/0x140 [ 439.718301][T11895] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 439.723718][T11895] ? dev_put+0x80/0x80 [ 439.727913][T11895] ? dev_put+0x80/0x80 [ 439.732105][T11895] bpf_prog_test_run+0x321/0x390 [ 439.737439][T11895] __sys_bpf+0x49d/0x890 [ 439.741941][T11895] ? bpf_link_show_fdinfo+0x390/0x390 [ 439.748147][T11895] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 439.754693][T11895] __x64_sys_bpf+0x7c/0x90 [ 439.759143][T11895] do_syscall_64+0x55/0xa0 [ 439.764071][T11895] ? clear_bhb_loop+0x40/0x90 [ 439.768957][T11895] ? clear_bhb_loop+0x40/0x90 [ 439.773662][T11895] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 439.779590][T11895] RIP: 0033:0x7f0fdab9acb9 [ 439.784120][T11895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.804464][T11895] RSP: 002b:00007f0fdbb2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 439.813012][T11895] RAX: ffffffffffffffda RBX: 00007f0fdae15fa0 RCX: 00007f0fdab9acb9 [ 439.821269][T11895] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 439.829467][T11895] RBP: 00007f0fdbb2a090 R08: 0000000000000000 R09: 0000000000000000 [ 439.837648][T11895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.845745][T11895] R13: 00007f0fdae16038 R14: 00007f0fdae15fa0 R15: 00007ffc6074dbb8 [ 439.853869][T11895] [ 440.490590][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.497494][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.202722][T11907] netlink: 'syz.2.2164': attribute type 3 has an invalid length. [ 441.206034][T11911] netlink: 'syz.3.2165': attribute type 29 has an invalid length. [ 441.211384][T11907] netlink: 'syz.2.2164': attribute type 1 has an invalid length. [ 441.237174][T11907] netlink: 193404 bytes leftover after parsing attributes in process `syz.2.2164'. [ 441.718004][T11915] netlink: 201336 bytes leftover after parsing attributes in process `syz.1.2166'. [ 442.112574][T11919] netlink: 193404 bytes leftover after parsing attributes in process `syz.2.2168'. [ 442.396833][T11935] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2175'. [ 442.434066][T11930] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 442.764079][T11946] validate_nla: 8 callbacks suppressed [ 442.764098][T11946] netlink: 'syz.1.2178': attribute type 3 has an invalid length. [ 442.795124][T11942] netlink: 'syz.3.2177': attribute type 3 has an invalid length. [ 442.795838][T11946] netlink: 201336 bytes leftover after parsing attributes in process `syz.1.2178'. [ 442.804963][T11942] netlink: 'syz.3.2177': attribute type 1 has an invalid length. [ 442.822012][T11942] netlink: 193404 bytes leftover after parsing attributes in process `syz.3.2177'. [ 443.652948][T11964] netlink: 'syz.3.2184': attribute type 3 has an invalid length. [ 443.663994][T11964] netlink: 'syz.3.2184': attribute type 1 has an invalid length. [ 443.672947][T11964] netlink: 193404 bytes leftover after parsing attributes in process `syz.3.2184'. [ 443.755582][T11969] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 443.797621][T11971] netlink: 'syz.1.2188': attribute type 3 has an invalid length. [ 443.809266][T11971] netlink: 201336 bytes leftover after parsing attributes in process `syz.1.2188'. [ 443.923271][T11973] netlink: 'syz.0.2187': attribute type 4 has an invalid length. [ 443.945330][T11973] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2187'. [ 444.072709][T11973] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2187'. [ 444.536723][T11980] netlink: 'syz.3.2191': attribute type 3 has an invalid length. [ 444.545435][T11980] netlink: 'syz.3.2191': attribute type 1 has an invalid length. [ 444.560429][T11980] netlink: 193404 bytes leftover after parsing attributes in process `syz.3.2191'. [ 444.888667][T11997] netlink: 'syz.1.2197': attribute type 9 has an invalid length. [ 444.911446][T11997] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.2197'. [ 445.101575][T12002] netlink: 201336 bytes leftover after parsing attributes in process `syz.0.2199'. [ 445.167701][T11997] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2197'. [ 445.179456][T11997] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 445.375760][T12004] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 447.943460][T12020] validate_nla: 3 callbacks suppressed [ 447.943478][T12020] netlink: 'syz.1.2205': attribute type 3 has an invalid length. [ 448.026762][T12020] netlink: 'syz.1.2205': attribute type 1 has an invalid length. [ 448.093519][T12020] __nla_validate_parse: 1 callbacks suppressed [ 448.093538][T12020] netlink: 193404 bytes leftover after parsing attributes in process `syz.1.2205'. [ 448.217731][T12027] netlink: 'syz.3.2207': attribute type 4 has an invalid length. [ 448.403650][T12034] netlink: 'syz.1.2209': attribute type 3 has an invalid length. [ 448.415149][T12034] netlink: 201336 bytes leftover after parsing attributes in process `syz.1.2209'. [ 448.644220][T12039] netlink: 'syz.2.2211': attribute type 9 has an invalid length. [ 448.657610][T12039] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.2211'. [ 448.825156][T12039] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2211'. [ 448.849149][T12039] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 448.872662][T12043] netlink: 'syz.0.2210': attribute type 3 has an invalid length. [ 448.901582][T12043] netlink: 'syz.0.2210': attribute type 1 has an invalid length. [ 448.952335][T12043] netlink: 193404 bytes leftover after parsing attributes in process `syz.0.2210'. [ 449.845098][T12062] FAULT_INJECTION: forcing a failure. [ 449.845098][T12062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.970729][T12062] CPU: 0 PID: 12062 Comm: syz.0.2217 Not tainted syzkaller #0 [ 449.978283][T12062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 449.988660][T12062] Call Trace: [ 449.992077][T12062] [ 449.995110][T12062] dump_stack_lvl+0x18c/0x250 [ 450.000247][T12062] ? show_regs_print_info+0x20/0x20 [ 450.005603][T12062] ? load_image+0x400/0x400 [ 450.010441][T12062] ? __lock_acquire+0x7d40/0x7d40 [ 450.015548][T12062] should_fail_ex+0x39d/0x4d0 [ 450.020317][T12062] _copy_from_user+0x2f/0xe0 [ 450.025067][T12062] __copy_msghdr+0x3bb/0x580 [ 450.030003][T12062] ___sys_sendmsg+0x214/0x360 [ 450.035179][T12062] ? get_pid_task+0x20/0x1e0 [ 450.039931][T12062] ? __sys_sendmsg+0x2a0/0x2a0 [ 450.044994][T12062] ? __lock_acquire+0x7d40/0x7d40 [ 450.050241][T12062] __se_sys_sendmsg+0x1c2/0x2b0 [ 450.055268][T12062] ? __x64_sys_sendmsg+0x80/0x80 [ 450.060585][T12062] ? lockdep_hardirqs_on+0x98/0x150 [ 450.065981][T12062] do_syscall_64+0x55/0xa0 [ 450.070533][T12062] ? clear_bhb_loop+0x40/0x90 [ 450.075438][T12062] ? clear_bhb_loop+0x40/0x90 [ 450.080950][T12062] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 450.087067][T12062] RIP: 0033:0x7fc90939acb9 [ 450.091514][T12062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.111252][T12062] RSP: 002b:00007fc90a249028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 450.119793][T12062] RAX: ffffffffffffffda RBX: 00007fc909615fa0 RCX: 00007fc90939acb9 [ 450.128087][T12062] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 450.136433][T12062] RBP: 00007fc90a249090 R08: 0000000000000000 R09: 0000000000000000 [ 450.144688][T12062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.155333][T12062] R13: 00007fc909616038 R14: 00007fc909615fa0 R15: 00007fff0ff7d738 [ 450.164699][T12062] [ 450.578796][T12069] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 450.892931][T12079] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 450.962149][T12083] netlink: 'syz.2.2225': attribute type 10 has an invalid length. [ 451.009493][T12083] bond0: (slave batadv0): Releasing backup interface [ 451.051966][T12083] batadv0: left promiscuous mode [ 451.072912][T12083] team0: Device batadv0 is already an upper device of the team interface [ 451.233364][T12086] netlink: 'syz.0.2226': attribute type 9 has an invalid length. [ 451.270147][T12086] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.2226'. [ 451.466958][T12095] FAULT_INJECTION: forcing a failure. [ 451.466958][T12095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 451.521123][T12095] CPU: 1 PID: 12095 Comm: syz.3.2230 Not tainted syzkaller #0 [ 451.528855][T12095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 451.539200][T12095] Call Trace: [ 451.542596][T12095] [ 451.545556][T12095] dump_stack_lvl+0x18c/0x250 [ 451.550441][T12095] ? show_regs_print_info+0x20/0x20 [ 451.555758][T12095] ? load_image+0x400/0x400 [ 451.560464][T12095] ? __might_fault+0xaa/0x120 [ 451.565165][T12095] ? __lock_acquire+0x7d40/0x7d40 [ 451.570300][T12095] should_fail_ex+0x39d/0x4d0 [ 451.575095][T12095] _copy_from_user+0x2f/0xe0 [ 451.579916][T12095] __sys_bpf+0x23e/0x890 [ 451.584384][T12095] ? bpf_link_show_fdinfo+0x390/0x390 [ 451.590165][T12095] ? lock_chain_count+0x20/0x20 [ 451.595218][T12095] __x64_sys_bpf+0x7c/0x90 [ 451.599862][T12095] do_syscall_64+0x55/0xa0 [ 451.604300][T12095] ? clear_bhb_loop+0x40/0x90 [ 451.609509][T12095] ? clear_bhb_loop+0x40/0x90 [ 451.614374][T12095] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 451.620454][T12095] RIP: 0033:0x7f23e379acb9 [ 451.625059][T12095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.644771][T12095] RSP: 002b:00007f23e46d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 451.653291][T12095] RAX: ffffffffffffffda RBX: 00007f23e3a15fa0 RCX: 00007f23e379acb9 [ 451.661278][T12095] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 451.669374][T12095] RBP: 00007f23e46d7090 R08: 0000000000000000 R09: 0000000000000000 [ 451.677468][T12095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.685913][T12095] R13: 00007f23e3a16038 R14: 00007f23e3a15fa0 R15: 00007ffd19a6efe8 [ 451.694268][T12095] [ 451.728547][T12090] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2226'. [ 451.839718][T12090] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 452.053130][T12096] netlink: 'syz.2.2229': attribute type 3 has an invalid length. [ 452.146258][T12096] netlink: 193404 bytes leftover after parsing attributes in process `syz.2.2229'. [ 452.381843][T12107] FAULT_INJECTION: forcing a failure. [ 452.381843][T12107] name failslab, interval 1, probability 0, space 0, times 0 [ 452.454248][T12107] CPU: 1 PID: 12107 Comm: syz.3.2234 Not tainted syzkaller #0 [ 452.461893][T12107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 452.472162][T12107] Call Trace: [ 452.475471][T12107] [ 452.478433][T12107] dump_stack_lvl+0x18c/0x250 [ 452.483270][T12107] ? show_regs_print_info+0x20/0x20 [ 452.488509][T12107] ? load_image+0x400/0x400 [ 452.493075][T12107] ? __might_sleep+0xe0/0xe0 [ 452.497713][T12107] ? __lock_acquire+0x7d40/0x7d40 [ 452.502790][T12107] should_fail_ex+0x39d/0x4d0 [ 452.507527][T12107] should_failslab+0x9/0x20 [ 452.512170][T12107] slab_pre_alloc_hook+0x59/0x310 [ 452.517421][T12107] kmem_cache_alloc+0x5a/0x2d0 [ 452.522234][T12107] ? security_inode_alloc+0x34/0x110 [ 452.527567][T12107] security_inode_alloc+0x34/0x110 [ 452.532717][T12107] inode_init_always+0x8fc/0xc90 [ 452.537698][T12107] new_inode_pseudo+0x95/0x1d0 [ 452.542685][T12107] __sock_create+0x12d/0x940 [ 452.547601][T12107] mptcp_subflow_create_socket+0x10b/0xac0 [ 452.553490][T12107] ? __mptcp_subflow_connect+0x1450/0x1450 [ 452.559347][T12107] ? mark_lock+0x94/0x320 [ 452.563903][T12107] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 452.570306][T12107] __mptcp_nmpc_sk+0x157/0x740 [ 452.575103][T12107] ? __bpf_trace_subflow_check_data_avail+0x160/0x160 [ 452.581883][T12107] ? __local_bh_enable_ip+0x13a/0x1c0 [ 452.587270][T12107] ? lockdep_hardirqs_on+0x98/0x150 [ 452.592493][T12107] ? __local_bh_enable_ip+0x13a/0x1c0 [ 452.598576][T12107] mptcp_sendmsg_fastopen+0x7f/0x4d0 [ 452.604082][T12107] mptcp_sendmsg+0x14b2/0x16d0 [ 452.608891][T12107] ? aa_sk_perm+0x83c/0x970 [ 452.613422][T12107] ? aa_af_perm+0x330/0x330 [ 452.618112][T12107] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 452.624556][T12107] ? mptcp_shutdown+0x80/0x80 [ 452.629341][T12107] ? inet6_sendmsg+0x5f/0xd0 [ 452.634119][T12107] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 452.639504][T12107] ____sys_sendmsg+0x5ba/0x960 [ 452.644284][T12107] ? __lock_acquire+0x7d40/0x7d40 [ 452.649575][T12107] ? __asan_memset+0x22/0x40 [ 452.654193][T12107] ? __sys_sendmsg_sock+0x30/0x30 [ 452.659325][T12107] ? __import_iovec+0x3fa/0x850 [ 452.664207][T12107] ? import_iovec+0x73/0xa0 [ 452.668918][T12107] ___sys_sendmsg+0x2a6/0x360 [ 452.673642][T12107] ? get_pid_task+0x20/0x1e0 [ 452.678527][T12107] ? __sys_sendmsg+0x2a0/0x2a0 [ 452.683345][T12107] ? __lock_acquire+0x7d40/0x7d40 [ 452.688595][T12107] __se_sys_sendmsg+0x1c2/0x2b0 [ 452.693472][T12107] ? __x64_sys_sendmsg+0x80/0x80 [ 452.698461][T12107] ? lockdep_hardirqs_on+0x98/0x150 [ 452.703813][T12107] do_syscall_64+0x55/0xa0 [ 452.708353][T12107] ? clear_bhb_loop+0x40/0x90 [ 452.713236][T12107] ? clear_bhb_loop+0x40/0x90 [ 452.717942][T12107] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 452.723859][T12107] RIP: 0033:0x7f23e379acb9 [ 452.728290][T12107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.748028][T12107] RSP: 002b:00007f23e46d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 452.756543][T12107] RAX: ffffffffffffffda RBX: 00007f23e3a15fa0 RCX: 00007f23e379acb9 [ 452.764627][T12107] RDX: 0000000020000001 RSI: 0000200000000780 RDI: 0000000000000003 [ 452.772851][T12107] RBP: 00007f23e46d7090 R08: 0000000000000000 R09: 0000000000000000 [ 452.780853][T12107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.789003][T12107] R13: 00007f23e3a16038 R14: 00007f23e3a15fa0 R15: 00007ffd19a6efe8 [ 452.797348][T12107] [ 452.820059][T12107] socket: no more sockets [ 452.949585][T12114] C: renamed from team_slave_0 (while UP) [ 452.973257][T12114] validate_nla: 1 callbacks suppressed [ 452.973273][T12114] netlink: 'syz.3.2237': attribute type 1 has an invalid length. [ 452.997171][T12114] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2237'. [ 453.014522][T12114] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 453.043666][T12112] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 453.477787][T12125] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2240'. [ 453.622915][T12136] netlink: 'syz.3.2244': attribute type 7 has an invalid length. [ 453.660453][T12136] FAULT_INJECTION: forcing a failure. [ 453.660453][T12136] name failslab, interval 1, probability 0, space 0, times 0 [ 453.692346][T12136] CPU: 1 PID: 12136 Comm: syz.3.2244 Not tainted syzkaller #0 [ 453.699898][T12136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 453.709998][T12136] Call Trace: [ 453.713320][T12136] [ 453.716288][T12136] dump_stack_lvl+0x18c/0x250 [ 453.721098][T12136] ? show_regs_print_info+0x20/0x20 [ 453.726513][T12136] ? load_image+0x400/0x400 [ 453.731060][T12136] ? __might_sleep+0xe0/0xe0 [ 453.735775][T12136] ? __lock_acquire+0x7d40/0x7d40 [ 453.741450][T12136] should_fail_ex+0x39d/0x4d0 [ 453.746261][T12136] should_failslab+0x9/0x20 [ 453.750859][T12136] slab_pre_alloc_hook+0x59/0x310 [ 453.756007][T12136] ? lockdep_hardirqs_on+0x98/0x150 [ 453.761556][T12136] kmem_cache_alloc_node+0x60/0x320 [ 453.766890][T12136] ? __alloc_skb+0x103/0x2c0 [ 453.771590][T12136] __alloc_skb+0x103/0x2c0 [ 453.776021][T12136] netlink_ack+0x376/0x1180 [ 453.780539][T12136] ? __dev_queue_xmit+0x26b/0x36b0 [ 453.785866][T12136] ? netlink_dump+0xe50/0xe50 [ 453.790729][T12136] ? ref_tracker_free+0x690/0x840 [ 453.795970][T12136] netlink_rcv_skb+0x2c5/0x4d0 [ 453.800926][T12136] ? rtnetlink_bind+0x80/0x80 [ 453.805643][T12136] ? netlink_ack+0x1180/0x1180 [ 453.810431][T12136] ? __lock_acquire+0x7d40/0x7d40 [ 453.815474][T12136] ? netlink_deliver_tap+0x2e/0x1b0 [ 453.820686][T12136] netlink_unicast+0x751/0x8d0 [ 453.825568][T12136] netlink_sendmsg+0x8d0/0xbf0 [ 453.830443][T12136] ? netlink_getsockopt+0x590/0x590 [ 453.835653][T12136] ? aa_sock_msg_perm+0x94/0x150 [ 453.840697][T12136] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 453.845997][T12136] ? security_socket_sendmsg+0x80/0xa0 [ 453.851465][T12136] ? netlink_getsockopt+0x590/0x590 [ 453.856761][T12136] ____sys_sendmsg+0x5ba/0x960 [ 453.861548][T12136] ? __asan_memset+0x22/0x40 [ 453.866180][T12136] ? __sys_sendmsg_sock+0x30/0x30 [ 453.871213][T12136] ? __import_iovec+0x5f2/0x850 [ 453.876094][T12136] ? import_iovec+0x73/0xa0 [ 453.880623][T12136] ___sys_sendmsg+0x2a6/0x360 [ 453.885312][T12136] ? get_pid_task+0x20/0x1e0 [ 453.889922][T12136] ? __sys_sendmsg+0x2a0/0x2a0 [ 453.894728][T12136] ? __lock_acquire+0x7d40/0x7d40 [ 453.899889][T12136] __se_sys_sendmsg+0x1c2/0x2b0 [ 453.904857][T12136] ? __x64_sys_sendmsg+0x80/0x80 [ 453.909821][T12136] ? lockdep_hardirqs_on+0x98/0x150 [ 453.915038][T12136] do_syscall_64+0x55/0xa0 [ 453.919462][T12136] ? clear_bhb_loop+0x40/0x90 [ 453.924235][T12136] ? clear_bhb_loop+0x40/0x90 [ 453.928928][T12136] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 453.935102][T12136] RIP: 0033:0x7f23e379acb9 [ 453.939616][T12136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.959319][T12136] RSP: 002b:00007f23e46d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.968012][T12136] RAX: ffffffffffffffda RBX: 00007f23e3a15fa0 RCX: 00007f23e379acb9 [ 453.975998][T12136] RDX: 0000000000040000 RSI: 0000200000000c40 RDI: 0000000000000003 [ 453.984156][T12136] RBP: 00007f23e46d7090 R08: 0000000000000000 R09: 0000000000000000 [ 453.992138][T12136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.000123][T12136] R13: 00007f23e3a16038 R14: 00007f23e3a15fa0 R15: 00007ffd19a6efe8 [ 454.008380][T12136] [ 455.234217][T12154] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 455.314060][T12157] netlink: 'syz.1.2252': attribute type 7 has an invalid length. [ 455.868657][T12173] syzkaller0: entered promiscuous mode [ 455.877066][T12173] syzkaller0: entered allmulticast mode [ 455.901378][T12177] netlink: 'syz.3.2259': attribute type 29 has an invalid length. [ 455.910660][T12177] netlink: 'syz.3.2259': attribute type 29 has an invalid length. [ 455.921396][T12177] netlink: 'syz.3.2259': attribute type 29 has an invalid length. [ 455.944121][T12177] netlink: set zone limit has 8 unknown bytes [ 455.953946][T12177] ip6gre0: mtu less than device minimum [ 455.986285][T12180] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2258'. [ 456.017448][T12175] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2258'. [ 456.096130][T12184] netlink: 'syz.3.2262': attribute type 3 has an invalid length. [ 456.104679][T12184] netlink: 201336 bytes leftover after parsing attributes in process `syz.3.2262'. [ 456.798536][T12200] FAULT_INJECTION: forcing a failure. [ 456.798536][T12200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 456.827628][T12200] CPU: 1 PID: 12200 Comm: syz.2.2268 Not tainted syzkaller #0 [ 456.835526][T12200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 456.845717][T12200] Call Trace: [ 456.849047][T12200] [ 456.852019][T12200] dump_stack_lvl+0x18c/0x250 [ 456.856827][T12200] ? show_regs_print_info+0x20/0x20 [ 456.862161][T12200] ? load_image+0x400/0x400 [ 456.866815][T12200] ? __might_fault+0xaa/0x120 [ 456.871737][T12200] ? __lock_acquire+0x7d40/0x7d40 [ 456.877005][T12200] should_fail_ex+0x39d/0x4d0 [ 456.881741][T12200] _copy_from_iter+0x1d9/0x12e0 [ 456.886649][T12200] ? slab_post_alloc_hook+0x8a/0x4b0 [ 456.891986][T12200] ? __virt_addr_valid+0x18c/0x540 [ 456.897152][T12200] ? __lock_acquire+0x7d40/0x7d40 [ 456.902241][T12200] ? rcu_is_watching+0x15/0xb0 [ 456.907151][T12200] ? copyout_mc+0x70/0x70 [ 456.911619][T12200] ? __virt_addr_valid+0x18c/0x540 [ 456.916823][T12200] ? __virt_addr_valid+0x18c/0x540 [ 456.921990][T12200] ? __virt_addr_valid+0x469/0x540 [ 456.927432][T12200] ? __check_object_size+0x506/0xa20 [ 456.933046][T12200] netlink_sendmsg+0x76b/0xbf0 [ 456.938136][T12200] ? netlink_getsockopt+0x590/0x590 [ 456.943656][T12200] ? aa_sock_msg_perm+0x94/0x150 [ 456.948848][T12200] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 456.954353][T12200] ? security_socket_sendmsg+0x80/0xa0 [ 456.959955][T12200] ? netlink_getsockopt+0x590/0x590 [ 456.965210][T12200] ____sys_sendmsg+0x5ba/0x960 [ 456.970070][T12200] ? __asan_memset+0x22/0x40 [ 456.974828][T12200] ? __sys_sendmsg_sock+0x30/0x30 [ 456.979906][T12200] ? __import_iovec+0x5f2/0x850 [ 456.984833][T12200] ? import_iovec+0x73/0xa0 [ 456.989393][T12200] ___sys_sendmsg+0x2a6/0x360 [ 456.994204][T12200] ? get_pid_task+0x20/0x1e0 [ 456.998858][T12200] ? __sys_sendmsg+0x2a0/0x2a0 [ 457.003715][T12200] ? __lock_acquire+0x7d40/0x7d40 [ 457.008909][T12200] __se_sys_sendmsg+0x1c2/0x2b0 [ 457.013824][T12200] ? __x64_sys_sendmsg+0x80/0x80 [ 457.018844][T12200] ? lockdep_hardirqs_on+0x98/0x150 [ 457.024108][T12200] do_syscall_64+0x55/0xa0 [ 457.028744][T12200] ? clear_bhb_loop+0x40/0x90 [ 457.033477][T12200] ? clear_bhb_loop+0x40/0x90 [ 457.038318][T12200] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 457.044393][T12200] RIP: 0033:0x7f0fdab9acb9 [ 457.049028][T12200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.068959][T12200] RSP: 002b:00007f0fdbb2a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 457.077437][T12200] RAX: ffffffffffffffda RBX: 00007f0fdae15fa0 RCX: 00007f0fdab9acb9 [ 457.085602][T12200] RDX: ff0f000020000080 RSI: 0000200000000000 RDI: 0000000000000003 [ 457.093940][T12200] RBP: 00007f0fdbb2a090 R08: 0000000000000000 R09: 0000000000000000 [ 457.102222][T12200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.110408][T12200] R13: 00007f0fdae16038 R14: 00007f0fdae15fa0 R15: 00007ffc6074dbb8 [ 457.118552][T12200] [ 457.130364][T12199] netlink: 'syz.1.2267': attribute type 10 has an invalid length. [ 457.396021][T12204] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2270'. [ 457.801840][T12211] netlink: 'syz.0.2273': attribute type 3 has an invalid length. [ 457.824588][T12211] netlink: 201336 bytes leftover after parsing attributes in process `syz.0.2273'. [ 458.269549][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 458.281449][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 458.290602][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 458.324086][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 458.337049][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 458.363291][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 458.485373][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.633346][T12219] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2277'. [ 459.285516][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.342647][T12225] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2277'. [ 459.494040][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.638141][ T49] bond0: (slave netdevsim0): Releasing backup interface [ 459.688593][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.328473][T12244] netlink: 'syz.1.2282': attribute type 3 has an invalid length. [ 460.346510][T12220] chnl_net:caif_netlink_parms(): no params data found [ 460.384326][T12244] netlink: 201336 bytes leftover after parsing attributes in process `syz.1.2282'. [ 460.450092][ T5781] Bluetooth: hci0: command tx timeout [ 461.411177][T12267] FAULT_INJECTION: forcing a failure. [ 461.411177][T12267] name failslab, interval 1, probability 0, space 0, times 0 [ 461.465157][T12267] CPU: 1 PID: 12267 Comm: syz.2.2287 Not tainted syzkaller #0 [ 461.472728][T12267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 461.482830][T12267] Call Trace: [ 461.486138][T12267] [ 461.489185][T12267] dump_stack_lvl+0x18c/0x250 [ 461.493987][T12267] ? show_regs_print_info+0x20/0x20 [ 461.499412][T12267] ? load_image+0x400/0x400 [ 461.503962][T12267] ? __might_sleep+0xe0/0xe0 [ 461.508605][T12267] ? __lock_acquire+0x7d40/0x7d40 [ 461.513744][T12267] should_fail_ex+0x39d/0x4d0 [ 461.518535][T12267] should_failslab+0x9/0x20 [ 461.523060][T12267] slab_pre_alloc_hook+0x59/0x310 [ 461.528281][T12267] ? bpf_trace_run2+0x277/0x3e0 [ 461.533146][T12267] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 461.538883][T12267] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 461.544787][T12267] __kmem_cache_alloc_node+0x53/0x250 [ 461.550267][T12267] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 461.556000][T12267] __kmalloc+0xa4/0x230 [ 461.560295][T12267] tomoyo_realpath_from_path+0xe3/0x5d0 [ 461.566162][T12267] tomoyo_path_number_perm+0x248/0x620 [ 461.571778][T12267] ? tomoyo_path_number_perm+0x217/0x620 [ 461.577528][T12267] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 461.583098][T12267] ? ksys_write+0x1c4/0x260 [ 461.587657][T12267] ? __fget_files+0x28/0x4b0 [ 461.592437][T12267] ? __fget_files+0x28/0x4b0 [ 461.597062][T12267] security_file_ioctl+0x70/0xa0 [ 461.602224][T12267] __se_sys_ioctl+0x48/0x170 [ 461.606978][T12267] do_syscall_64+0x55/0xa0 [ 461.611577][T12267] ? clear_bhb_loop+0x40/0x90 [ 461.616307][T12267] ? clear_bhb_loop+0x40/0x90 [ 461.621103][T12267] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 461.627039][T12267] RIP: 0033:0x7f0fdab9acb9 [ 461.631554][T12267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.651447][T12267] RSP: 002b:00007f0fdbb2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 461.659897][T12267] RAX: ffffffffffffffda RBX: 00007f0fdae15fa0 RCX: 00007f0fdab9acb9 [ 461.667889][T12267] RDX: 0000200000000080 RSI: 00000000000089a2 RDI: 0000000000000008 [ 461.675882][T12267] RBP: 00007f0fdbb2a090 R08: 0000000000000000 R09: 0000000000000000 [ 461.683952][T12267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.692050][T12267] R13: 00007f0fdae16038 R14: 00007f0fdae15fa0 R15: 00007ffc6074dbb8 [ 461.700243][T12267] [ 461.732569][T12267] ERROR: Out of memory at tomoyo_realpath_from_path. [ 461.763790][T12220] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.772856][T12220] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.782031][T12220] bridge_slave_0: entered allmulticast mode [ 461.791808][T12220] bridge_slave_0: entered promiscuous mode [ 461.875055][T12220] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.878631][T12276] FAULT_INJECTION: forcing a failure. [ 461.878631][T12276] name failslab, interval 1, probability 0, space 0, times 0 [ 461.903347][T12220] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.920296][T12220] bridge_slave_1: entered allmulticast mode [ 461.928326][T12276] CPU: 0 PID: 12276 Comm: syz.1.2289 Not tainted syzkaller #0 [ 461.935845][T12276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 461.941439][T12220] bridge_slave_1: entered promiscuous mode [ 461.946437][T12276] Call Trace: [ 461.946449][T12276] [ 461.946458][T12276] dump_stack_lvl+0x18c/0x250 [ 461.946489][T12276] ? show_regs_print_info+0x20/0x20 [ 461.969077][T12276] ? load_image+0x400/0x400 [ 461.973652][T12276] ? __might_sleep+0xe0/0xe0 [ 461.978346][T12276] ? __lock_acquire+0x7d40/0x7d40 [ 461.983400][T12276] should_fail_ex+0x39d/0x4d0 [ 461.988196][T12276] should_failslab+0x9/0x20 [ 461.992718][T12276] slab_pre_alloc_hook+0x59/0x310 [ 461.997847][T12276] ? bpf_insn_prepare_dump+0xb1/0x850 [ 462.003408][T12276] ? bpf_insn_prepare_dump+0xb1/0x850 [ 462.008877][T12276] __kmem_cache_alloc_node+0x53/0x250 [ 462.014271][T12276] ? bpf_insn_prepare_dump+0xb1/0x850 [ 462.019656][T12276] __kmalloc_node_track_caller+0xa2/0x230 [ 462.025486][T12276] ? aa_get_newest_label+0xfd/0x5c0 [ 462.030810][T12276] kmemdup+0x2b/0x70 [ 462.034807][T12276] bpf_insn_prepare_dump+0xb1/0x850 [ 462.040199][T12276] ? bpf_prog_attach_check_attach_type+0x440/0x440 [ 462.046884][T12276] ? bpf_lsm_capable+0x9/0x10 [ 462.051638][T12276] ? security_capable+0x89/0xb0 [ 462.056544][T12276] bpf_obj_get_info_by_fd+0x18e1/0x3080 [ 462.062116][T12276] ? bpf_map_get_fd_by_id+0x310/0x310 [ 462.067582][T12276] ? perf_tp_event+0x132d/0x1450 [ 462.072620][T12276] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 462.078613][T12276] ? get_pid_task+0x20/0x1e0 [ 462.083244][T12276] ? __might_fault+0xaa/0x120 [ 462.088017][T12276] ? __might_fault+0xc6/0x120 [ 462.092976][T12276] ? __might_fault+0xaa/0x120 [ 462.097673][T12276] ? bpf_lsm_bpf+0x9/0x10 [ 462.102142][T12276] ? security_bpf+0x7e/0xa0 [ 462.106835][T12276] __sys_bpf+0x7eb/0x890 [ 462.111092][T12276] ? bpf_link_show_fdinfo+0x390/0x390 [ 462.116584][T12276] ? lock_chain_count+0x20/0x20 [ 462.121456][T12276] __x64_sys_bpf+0x7c/0x90 [ 462.125882][T12276] do_syscall_64+0x55/0xa0 [ 462.130308][T12276] ? clear_bhb_loop+0x40/0x90 [ 462.135083][T12276] ? clear_bhb_loop+0x40/0x90 [ 462.139776][T12276] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 462.145781][T12276] RIP: 0033:0x7f326d39acb9 [ 462.150220][T12276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.169927][T12276] RSP: 002b:00007f326e2c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 462.178623][T12276] RAX: ffffffffffffffda RBX: 00007f326d615fa0 RCX: 00007f326d39acb9 [ 462.186617][T12276] RDX: 0000000000000010 RSI: 0000200000000340 RDI: 000000000000000f [ 462.194695][T12276] RBP: 00007f326e2c1090 R08: 0000000000000000 R09: 0000000000000000 [ 462.202851][T12276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.210834][T12276] R13: 00007f326d616038 R14: 00007f326d615fa0 R15: 00007ffc10dfcb28 [ 462.218834][T12276] [ 462.520534][ T5781] Bluetooth: hci0: command tx timeout [ 462.556833][T12288] netlink: 'syz.1.2291': attribute type 3 has an invalid length. [ 462.581251][T12288] netlink: 201336 bytes leftover after parsing attributes in process `syz.1.2291'. [ 464.220019][ T2949] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 464.605197][ T5781] Bluetooth: hci0: command tx timeout [ 464.712636][T12220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.794123][T12220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.915659][T12220] team0: Port device team_slave_0 added [ 464.993861][T12220] team0: Port device team_slave_1 added [ 465.136368][T12301] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2301'. [ 465.404527][T12220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.463841][T12220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.490857][T12220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.503841][T12296] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2301'. [ 465.617837][T12220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.632702][T12220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.661094][T12220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.850455][T12316] netlink: 'syz.1.2299': attribute type 3 has an invalid length. [ 465.858288][T12316] netlink: 201336 bytes leftover after parsing attributes in process `syz.1.2299'. [ 465.909725][T12220] hsr_slave_0: entered promiscuous mode [ 465.940562][T12220] hsr_slave_1: entered promiscuous mode [ 465.951565][T12220] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 465.969975][T12220] Cannot create hsr debugfs directory [ 466.269557][T12330] FAULT_INJECTION: forcing a failure. [ 466.269557][T12330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 466.378749][T12330] CPU: 0 PID: 12330 Comm: syz.1.2303 Not tainted syzkaller #0 [ 466.386476][T12330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 466.396838][T12330] Call Trace: [ 466.400324][T12330] [ 466.403565][T12330] dump_stack_lvl+0x18c/0x250 [ 466.408621][T12330] ? show_regs_print_info+0x20/0x20 [ 466.414079][T12330] ? load_image+0x400/0x400 [ 466.418849][T12330] ? __might_fault+0xaa/0x120 [ 466.423690][T12330] ? __lock_acquire+0x7d40/0x7d40 [ 466.428838][T12330] ? unix_ioctl+0x261/0x670 [ 466.433630][T12330] should_fail_ex+0x39d/0x4d0 [ 466.438520][T12330] _copy_from_user+0x2f/0xe0 [ 466.443291][T12330] sock_do_ioctl+0x190/0x310 [ 466.448252][T12330] ? sock_show_fdinfo+0xb0/0xb0 [ 466.453602][T12330] sock_ioctl+0x5ba/0x7e0 [ 466.458143][T12330] ? sock_poll+0x3e0/0x3e0 [ 466.462837][T12330] ? bpf_lsm_file_ioctl+0x9/0x10 [ 466.468095][T12330] ? security_file_ioctl+0x80/0xa0 [ 466.473341][T12330] ? sock_poll+0x3e0/0x3e0 [ 466.478080][T12330] __se_sys_ioctl+0xfd/0x170 [ 466.482790][T12330] do_syscall_64+0x55/0xa0 [ 466.487377][T12330] ? clear_bhb_loop+0x40/0x90 [ 466.492136][T12330] ? clear_bhb_loop+0x40/0x90 [ 466.496909][T12330] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 466.502978][T12330] RIP: 0033:0x7f326d39acb9 [ 466.507474][T12330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.527502][T12330] RSP: 002b:00007f326e2a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 466.536115][T12330] RAX: ffffffffffffffda RBX: 00007f326d616090 RCX: 00007f326d39acb9 [ 466.544326][T12330] RDX: 0000200000000280 RSI: 0000000000008914 RDI: 0000000000000008 [ 466.552493][T12330] RBP: 00007f326e2a0090 R08: 0000000000000000 R09: 0000000000000000 [ 466.560738][T12330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.568835][T12330] R13: 00007f326d616128 R14: 00007f326d616090 R15: 00007ffc10dfcb28 [ 466.577002][T12330] [ 466.691558][ T5781] Bluetooth: hci0: command tx timeout [ 467.275137][T12347] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2306'. [ 467.340542][T12340] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2306'. [ 467.684495][T12359] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2310'. [ 467.719995][T12357] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.2309'. [ 467.905658][T12366] netlink: 'syz.1.2311': attribute type 3 has an invalid length. [ 467.922006][T12359] netlink: 'syz.2.2310': attribute type 10 has an invalid length. [ 467.932177][T12366] netlink: 201336 bytes leftover after parsing attributes in process `syz.1.2311'. [ 467.947094][T12359] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2310'. [ 468.257970][T12375] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 468.339052][T12370] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 468.592323][ T49] ªªªªªªÿÿ: left allmulticast mode [ 468.597928][ T49] veth0_vlan: left allmulticast mode [ 468.621022][ T49] ªªªªªªÿÿ: left promiscuous mode [ 468.627913][ T49] À: port 1(ªªªªªªÿÿ) entered disabled state [ 468.714874][ T49] veth0_to_team: left allmulticast mode [ 468.748920][ T49] veth0_to_team: left promiscuous mode [ 468.761265][ T49] Ÿë: port 2(veth0_to_team) entered disabled state [ 468.772318][ T49] veth0_to_bridge: left allmulticast mode [ 468.779741][ T49] veth0_to_bridge: left promiscuous mode [ 468.796453][ T49] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 468.841414][ T49] hsr_slave_0: left promiscuous mode [ 468.853757][ T49] hsr_slave_1: left promiscuous mode [ 468.870673][ T49] bridge_slave_1: left allmulticast mode [ 468.876436][ T49] bridge_slave_1: left promiscuous mode [ 468.891218][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.902510][T12391] FAULT_INJECTION: forcing a failure. [ 468.902510][T12391] name failslab, interval 1, probability 0, space 0, times 0 [ 468.917025][T12391] CPU: 1 PID: 12391 Comm: syz.1.2318 Not tainted syzkaller #0 [ 468.924633][T12391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 468.934729][T12391] Call Trace: [ 468.938027][T12391] [ 468.940970][T12391] dump_stack_lvl+0x18c/0x250 [ 468.945757][T12391] ? show_regs_print_info+0x20/0x20 [ 468.951146][T12391] ? load_image+0x400/0x400 [ 468.955682][T12391] should_fail_ex+0x39d/0x4d0 [ 468.960387][T12391] should_failslab+0x9/0x20 [ 468.964921][T12391] slab_pre_alloc_hook+0x59/0x310 [ 468.970139][T12391] ? nf_ct_ext_add+0x1ab/0x440 [ 468.974945][T12391] ? nf_ct_ext_add+0x1ab/0x440 [ 468.979846][T12391] __kmem_cache_alloc_node+0x53/0x250 [ 468.985537][T12391] ? nf_ct_ext_add+0x1ab/0x440 [ 468.990427][T12391] __kmalloc_node_track_caller+0xa2/0x230 [ 468.996272][T12391] krealloc+0x86/0x120 [ 469.000377][T12391] nf_ct_ext_add+0x1ab/0x440 [ 469.005269][T12391] init_conntrack+0x69c/0xf10 [ 469.010066][T12391] ? early_drop+0x7f0/0x7f0 [ 469.014820][T12391] ? nf_conntrack_find_get+0x650/0x650 [ 469.020339][T12391] ? __siphash_unaligned+0x22e/0x3a0 [ 469.025751][T12391] nf_conntrack_in+0xc06/0x15c0 [ 469.030909][T12391] ? nf_ct_pernet+0x270/0x270 [ 469.035952][T12391] ? ip6t_do_table+0x1d9/0x1510 [ 469.040824][T12391] ? ip6t_alloc_initial_table+0x640/0x640 [ 469.046701][T12391] ? ipv6_defrag+0x2d6/0x3a0 [ 469.051321][T12391] ? ipv6_conntrack_in+0x20/0x20 [ 469.056391][T12391] nf_hook_slow+0xbd/0x200 [ 469.061200][T12391] __ip6_local_out+0x784/0x8a0 [ 469.066288][T12391] ? __ip6_local_out+0x60c/0x8a0 [ 469.071348][T12391] ? ip6_dst_hoplimit+0x350/0x350 [ 469.076396][T12391] ? __ip6_local_out+0x8a0/0x8a0 [ 469.081353][T12391] ? read_lock_is_recursive+0x20/0x20 [ 469.086758][T12391] ip6_local_out+0x2a/0x130 [ 469.091454][T12391] ? ip6_send_skb+0x10f/0x380 [ 469.096151][T12391] ip6_send_skb+0x1d5/0x380 [ 469.100675][T12391] udp_v6_send_skb+0xbbb/0x1860 [ 469.105591][T12391] udp_v6_push_pending_frames+0x133/0x220 [ 469.111533][T12391] udpv6_sendmsg+0xdfe/0x2390 [ 469.116256][T12391] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 469.121394][T12391] ? udp_v6_early_demux+0xf80/0xf80 [ 469.126921][T12391] ? __lock_acquire+0x1273/0x7d40 [ 469.131986][T12391] ? inet_send_prepare+0x5c/0x260 [ 469.137039][T12391] ? inet6_sendmsg+0x5f/0xd0 [ 469.141645][T12391] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 469.146878][T12391] ____sys_sendmsg+0x5ba/0x960 [ 469.152234][T12391] ? __asan_memset+0x22/0x40 [ 469.156858][T12391] ? __sys_sendmsg_sock+0x30/0x30 [ 469.161907][T12391] ? __import_iovec+0x3fa/0x850 [ 469.167138][T12391] ? import_iovec+0x73/0xa0 [ 469.171664][T12391] ___sys_sendmsg+0x2a6/0x360 [ 469.176439][T12391] ? get_pid_task+0x20/0x1e0 [ 469.181228][T12391] ? __sys_sendmsg+0x2a0/0x2a0 [ 469.186042][T12391] ? __lock_acquire+0x7d40/0x7d40 [ 469.191199][T12391] __se_sys_sendmsg+0x1c2/0x2b0 [ 469.196154][T12391] ? __x64_sys_sendmsg+0x80/0x80 [ 469.201117][T12391] ? lockdep_hardirqs_on+0x98/0x150 [ 469.206339][T12391] do_syscall_64+0x55/0xa0 [ 469.210854][T12391] ? clear_bhb_loop+0x40/0x90 [ 469.215716][T12391] ? clear_bhb_loop+0x40/0x90 [ 469.220418][T12391] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 469.226324][T12391] RIP: 0033:0x7f326d39acb9 [ 469.230874][T12391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.250769][T12391] RSP: 002b:00007f326e2c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 469.259206][T12391] RAX: ffffffffffffffda RBX: 00007f326d615fa0 RCX: 00007f326d39acb9 [ 469.267711][T12391] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 469.276042][T12391] RBP: 00007f326e2c1090 R08: 0000000000000000 R09: 0000000000000000 [ 469.284311][T12391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.292738][T12391] R13: 00007f326d616038 R14: 00007f326d615fa0 R15: 00007ffc10dfcb28 [ 469.300911][T12391] [ 469.313626][ T49] bridge_slave_0: left promiscuous mode [ 469.332707][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.360885][ T49] veth1_macvtap: left promiscuous mode [ 469.367620][ T49] veth1_vlan: left promiscuous mode [ 469.373524][ T49] veth0_vlan: left promiscuous mode [ 470.065447][ T49] team0 (unregistering): Port device team_slave_1 removed [ 470.117804][ T49] team0 (unregistering): Port device C removed [ 470.164156][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 470.563582][ T49] bond0 (unregistering): Released all slaves [ 470.746634][T12220] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 470.758522][T12220] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 470.775649][T12220] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 470.800473][T12220] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 471.053617][T12220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.090470][T12220] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.112371][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.119722][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.143148][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.151213][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.478546][T12220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.549242][T12220] veth0_vlan: entered promiscuous mode [ 471.574452][T12220] veth1_vlan: entered promiscuous mode [ 471.632875][T12220] veth0_macvtap: entered promiscuous mode [ 471.647827][T12220] veth1_macvtap: entered promiscuous mode [ 471.677724][T12220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.692176][T12220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.704589][T12220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.725269][T12220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.736408][T12220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.751676][T12220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.766888][T12220] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.775885][T12220] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.784934][T12220] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.794295][T12220] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.900238][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.908296][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.965725][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.974030][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.769400][T12442] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.2328'. [ 474.205459][T12449] netlink: 'syz.1.2330': attribute type 3 has an invalid length. [ 474.383232][T12449] netlink: 'syz.1.2330': attribute type 1 has an invalid length. [ 474.466439][T12449] netlink: 193404 bytes leftover after parsing attributes in process `syz.1.2330'. [ 475.431045][T12456] netlink: 'syz.2.2320': attribute type 3 has an invalid length. [ 475.500763][T12456] netlink: 201336 bytes leftover after parsing attributes in process `syz.2.2320'. [ 476.925075][T12463] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 477.822367][T12468] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 478.586382][T12485] FAULT_INJECTION: forcing a failure. [ 478.586382][T12485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.637537][T12485] CPU: 0 PID: 12485 Comm: syz.2.2329 Not tainted syzkaller #0 [ 478.645292][T12485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 478.655705][T12485] Call Trace: [ 478.659061][T12485] [ 478.662070][T12485] dump_stack_lvl+0x18c/0x250 [ 478.666842][T12485] ? show_regs_print_info+0x20/0x20 [ 478.672107][T12485] ? load_image+0x400/0x400 [ 478.676688][T12485] ? __might_fault+0xaa/0x120 [ 478.681658][T12485] ? __lock_acquire+0x7d40/0x7d40 [ 478.686859][T12485] should_fail_ex+0x39d/0x4d0 [ 478.691629][T12485] _copy_from_user+0x2f/0xe0 [ 478.696326][T12485] __sys_bpf+0x23e/0x890 [ 478.700733][T12485] ? bpf_link_show_fdinfo+0x390/0x390 [ 478.706325][T12485] ? lock_chain_count+0x20/0x20 [ 478.711307][T12485] __x64_sys_bpf+0x7c/0x90 [ 478.716036][T12485] do_syscall_64+0x55/0xa0 [ 478.720535][T12485] ? clear_bhb_loop+0x40/0x90 [ 478.725320][T12485] ? clear_bhb_loop+0x40/0x90 [ 478.730136][T12485] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 478.736366][T12485] RIP: 0033:0x7f0fdab9acb9 [ 478.741812][T12485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.762288][T12485] RSP: 002b:00007f0fdbb2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 478.771167][T12485] RAX: ffffffffffffffda RBX: 00007f0fdae15fa0 RCX: 00007f0fdab9acb9 [ 478.779348][T12485] RDX: 0000000000000050 RSI: 0000200000000880 RDI: 000000000000000a [ 478.787363][T12485] RBP: 00007f0fdbb2a090 R08: 0000000000000000 R09: 0000000000000000 [ 478.795499][T12485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.803717][T12485] R13: 00007f0fdae16038 R14: 00007f0fdae15fa0 R15: 00007ffc6074dbb8 [ 478.811893][T12485] [ 479.885981][T12498] netlink: 'syz.3.2334': attribute type 21 has an invalid length. [ 479.913658][T12498] IPv6: NLM_F_CREATE should be specified when creating new route [ 479.966723][T12495] netlink: 'syz.1.2332': attribute type 3 has an invalid length. [ 480.021278][T12495] netlink: 'syz.1.2332': attribute type 1 has an invalid length. [ 480.061051][T12495] netlink: 193404 bytes leftover after parsing attributes in process `syz.1.2332'. [ 481.082056][T12507] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2335'. [ 481.759028][T12508] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 481.850556][T12512] netlink: 'syz.3.2335': attribute type 10 has an invalid length. [ 481.917312][T12512] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2335'. [ 481.925320][T12514] netlink: 'syz.1.2337': attribute type 3 has an invalid length. [ 481.980913][T12514] netlink: 201336 bytes leftover after parsing attributes in process `syz.1.2337'. [ 485.425417][T12542] netlink: 'syz.2.2345': attribute type 3 has an invalid length. [ 485.446091][T12542] netlink: 'syz.2.2345': attribute type 1 has an invalid length. [ 485.456071][T12542] netlink: 193404 bytes leftover after parsing attributes in process `syz.2.2345'. [ 487.359039][T12541] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 487.634074][T12548] netlink: 'syz.0.2348': attribute type 3 has an invalid length. [ 487.659946][T12548] netlink: 201336 bytes leftover after parsing attributes in process `syz.0.2348'. [ 487.824162][T12550] netlink: 'syz.3.2349': attribute type 3 has an invalid length. [ 487.872793][T12550] netlink: 'syz.3.2349': attribute type 1 has an invalid length. [ 487.909992][T12550] netlink: 193404 bytes leftover after parsing attributes in process `syz.3.2349'. [ 488.319511][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.367889][T12562] FAULT_INJECTION: forcing a failure. [ 488.367889][T12562] name failslab, interval 1, probability 0, space 0, times 0 [ 488.391502][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 488.402853][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 488.405823][T12562] CPU: 0 PID: 12562 Comm: syz.0.2351 Not tainted syzkaller #0 [ 488.417599][T12562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 488.427756][T12562] Call Trace: [ 488.431151][T12562] [ 488.434103][T12562] dump_stack_lvl+0x18c/0x250 [ 488.438977][T12562] ? show_regs_print_info+0x20/0x20 [ 488.444175][T12562] ? load_image+0x400/0x400 [ 488.448858][T12562] ? __might_sleep+0xe0/0xe0 [ 488.453467][T12562] ? __lock_acquire+0x7d40/0x7d40 [ 488.458495][T12562] should_fail_ex+0x39d/0x4d0 [ 488.463215][T12562] should_failslab+0x9/0x20 [ 488.467961][T12562] slab_pre_alloc_hook+0x59/0x310 [ 488.473057][T12562] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 488.478826][T12562] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 488.484685][T12562] __kmem_cache_alloc_node+0x53/0x250 [ 488.490388][T12562] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 488.496288][T12562] __kmalloc+0xa4/0x230 [ 488.500526][T12562] tomoyo_realpath_from_path+0xe3/0x5d0 [ 488.506151][T12562] tomoyo_path_number_perm+0x248/0x620 [ 488.511693][T12562] ? tomoyo_path_number_perm+0x217/0x620 [ 488.517385][T12562] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 488.523086][T12562] ? ktime_get+0x7f/0x280 [ 488.527642][T12562] ? __fget_files+0x28/0x4b0 [ 488.532767][T12562] ? __fget_files+0x28/0x4b0 [ 488.537531][T12562] security_file_ioctl+0x70/0xa0 [ 488.542634][T12562] __se_sys_ioctl+0x48/0x170 [ 488.547292][T12562] do_syscall_64+0x55/0xa0 [ 488.551751][T12562] ? clear_bhb_loop+0x40/0x90 [ 488.556543][T12562] ? clear_bhb_loop+0x40/0x90 [ 488.561340][T12562] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 488.567389][T12562] RIP: 0033:0x7fc90939acb9 [ 488.571843][T12562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.592269][T12562] RSP: 002b:00007fc90a249028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 488.600888][T12562] RAX: ffffffffffffffda RBX: 00007fc909615fa0 RCX: 00007fc90939acb9 [ 488.609053][T12562] RDX: 0000200000000040 RSI: 000000004030582a RDI: 0000000000000006 [ 488.617130][T12562] RBP: 00007fc90a249090 R08: 0000000000000000 R09: 0000000000000000 [ 488.625324][T12562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.633869][T12562] R13: 00007fc909616038 R14: 00007fc909615fa0 R15: 00007fff0ff7d738 [ 488.641991][T12562] [ 488.658487][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 488.670325][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 488.678363][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 488.687936][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 488.716007][T12562] ERROR: Out of memory at tomoyo_realpath_from_path. [ 488.734916][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.768869][T12568] FAULT_INJECTION: forcing a failure. [ 488.768869][T12568] name failslab, interval 1, probability 0, space 0, times 0 [ 488.786261][T12568] CPU: 0 PID: 12568 Comm: syz.2.2353 Not tainted syzkaller #0 [ 488.794051][T12568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 488.804389][T12568] Call Trace: [ 488.807705][T12568] [ 488.810758][T12568] dump_stack_lvl+0x18c/0x250 [ 488.815507][T12568] ? show_regs_print_info+0x20/0x20 [ 488.820999][T12568] ? load_image+0x400/0x400 [ 488.825546][T12568] ? __might_sleep+0xe0/0xe0 [ 488.830263][T12568] ? __lock_acquire+0x7d40/0x7d40 [ 488.835421][T12568] should_fail_ex+0x39d/0x4d0 [ 488.840230][T12568] should_failslab+0x9/0x20 [ 488.844859][T12568] slab_pre_alloc_hook+0x59/0x310 [ 488.849924][T12568] ? ioctl_standard_iw_point+0x51a/0xcf0 [ 488.855595][T12568] ? ioctl_standard_iw_point+0x51a/0xcf0 [ 488.861365][T12568] __kmem_cache_alloc_node+0x53/0x250 [ 488.866861][T12568] ? __mutex_lock+0x94c/0xcc0 [ 488.872186][T12568] ? ioctl_standard_iw_point+0x51a/0xcf0 [ 488.878066][T12568] __kmalloc+0xa4/0x230 [ 488.882485][T12568] ioctl_standard_iw_point+0x51a/0xcf0 [ 488.888081][T12568] ? cfg80211_wext_giwauth+0x10/0x10 [ 488.893683][T12568] ? iw_handler_get_iwstats+0x110/0x110 [ 488.899274][T12568] ? wext_ioctl_dispatch+0x115/0x600 [ 488.904642][T12568] ? mutex_lock_nested+0x20/0x20 [ 488.909706][T12568] ? cfg80211_wext_giwauth+0x10/0x10 [ 488.915035][T12568] ioctl_standard_call+0xb7/0x2b0 [ 488.920181][T12568] ? cfg80211_wext_giwauth+0x10/0x10 [ 488.925573][T12568] wext_ioctl_dispatch+0x1cb/0x600 [ 488.930899][T12568] ? wext_ioctl_dispatch+0x600/0x600 [ 488.936489][T12568] ? iw_handler_get_private+0x1f0/0x1f0 [ 488.942247][T12568] ? wext_handle_ioctl+0x1d0/0x1d0 [ 488.947502][T12568] ? __might_fault+0xaa/0x120 [ 488.952238][T12568] ? __might_fault+0xc6/0x120 [ 488.956948][T12568] ? __might_fault+0xaa/0x120 [ 488.961853][T12568] wext_handle_ioctl+0x117/0x1d0 [ 488.967011][T12568] ? call_commit_handler+0xf0/0xf0 [ 488.972184][T12568] sock_ioctl+0x15d/0x7e0 [ 488.976673][T12568] ? sock_poll+0x3e0/0x3e0 [ 488.981928][T12568] ? bpf_lsm_file_ioctl+0x9/0x10 [ 488.986990][T12568] ? security_file_ioctl+0x80/0xa0 [ 488.992144][T12568] ? sock_poll+0x3e0/0x3e0 [ 488.996610][T12568] __se_sys_ioctl+0xfd/0x170 [ 489.001351][T12568] do_syscall_64+0x55/0xa0 [ 489.005974][T12568] ? clear_bhb_loop+0x40/0x90 [ 489.010955][T12568] ? clear_bhb_loop+0x40/0x90 [ 489.015677][T12568] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 489.021609][T12568] RIP: 0033:0x7f0fdab9acb9 [ 489.026147][T12568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.046503][T12568] RSP: 002b:00007f0fdbb2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 489.055136][T12568] RAX: ffffffffffffffda RBX: 00007f0fdae15fa0 RCX: 00007f0fdab9acb9 [ 489.063251][T12568] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000005 [ 489.071603][T12568] RBP: 00007f0fdbb2a090 R08: 0000000000000000 R09: 0000000000000000 [ 489.079606][T12568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.087883][T12568] R13: 00007f0fdae16038 R14: 00007f0fdae15fa0 R15: 00007ffc6074dbb8 [ 489.095918][T12568] [ 489.264824][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.419509][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.148344][T12572] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 490.451925][T12579] netlink: 'syz.2.2357': attribute type 3 has an invalid length. [ 490.482893][T12579] netlink: 'syz.2.2357': attribute type 1 has an invalid length. [ 490.495324][T12579] netlink: 193404 bytes leftover after parsing attributes in process `syz.2.2357'. [ 490.537897][T12564] chnl_net:caif_netlink_parms(): no params data found [ 490.822172][ T5781] Bluetooth: hci1: command tx timeout [ 490.971853][T12564] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.984889][T12564] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.993067][T12564] bridge_slave_0: entered allmulticast mode [ 491.003454][T12564] bridge_slave_0: entered promiscuous mode [ 491.012945][T12564] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.030598][T12564] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.038229][T12564] bridge_slave_1: entered allmulticast mode [ 491.056640][T12564] bridge_slave_1: entered promiscuous mode [ 491.369239][T12564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.468947][T12564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.634519][T12564] team0: Port device team_slave_0 added [ 491.734315][T12564] team0: Port device team_slave_1 added [ 492.058859][T12564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.088540][T12564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.139681][T12564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.290777][T12564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.315197][T12564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.347735][T12564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.746866][T12629] netlink: 'syz.3.2368': attribute type 3 has an invalid length. [ 492.761370][T12629] netlink: 201336 bytes leftover after parsing attributes in process `syz.3.2368'. [ 492.816483][T12564] hsr_slave_0: entered promiscuous mode [ 492.824397][T12564] hsr_slave_1: entered promiscuous mode [ 492.832415][T12564] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 492.840397][ T5781] Bluetooth: hci1: command tx timeout [ 492.853633][T12564] Cannot create hsr debugfs directory [ 492.980783][ T59] [ 492.983527][ T59] ====================================================== [ 492.991017][ T59] WARNING: possible circular locking dependency detected [ 492.998437][ T59] syzkaller #0 Not tainted [ 493.002880][ T59] ------------------------------------------------------ [ 493.010193][ T59] kworker/u4:4/59 is trying to acquire lock: [ 493.016286][ T59] ffff888030ca0d00 (team->team_lock_key#2){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 493.026360][ T59] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 493.026360][ T59] but task is already holding lock: [ 493.034024][ T59] ffff88805d670768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 493.044841][ T59] [ 493.044841][ T59] which lock already depends on the new lock. [ 493.044841][ T59] [ 493.055631][ T59] [ 493.055631][ T59] the existing dependency chain (in reverse order) is: [ 493.065122][ T59] [ 493.065122][ T59] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 493.073162][ T59] __mutex_lock+0x136/0xcc0 [ 493.078501][ T59] ieee80211_open+0x144/0x200 [ 493.084001][ T59] __dev_open+0x2cb/0x430 [ 493.088897][ T59] dev_open+0xab/0x190 [ 493.093958][ T59] team_add_slave+0xaf8/0x26d0 [ 493.099709][ T59] do_setlink+0xdfe/0x4130 [ 493.104945][ T59] rtnl_newlink+0x17da/0x20a0 [ 493.110265][ T59] rtnetlink_rcv_msg+0x869/0xfa0 [ 493.115767][ T59] netlink_rcv_skb+0x241/0x4d0 [ 493.121642][ T59] netlink_unicast+0x751/0x8d0 [ 493.127162][ T59] netlink_sendmsg+0x8d0/0xbf0 [ 493.132457][ T59] ____sys_sendmsg+0x5ba/0x960 [ 493.138105][ T59] ___sys_sendmsg+0x2a6/0x360 [ 493.143332][ T59] __se_sys_sendmsg+0x1c2/0x2b0 [ 493.148735][ T59] do_syscall_64+0x55/0xa0 [ 493.153672][ T59] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 493.160356][ T59] [ 493.160356][ T59] -> #0 (team->team_lock_key#2){+.+.}-{3:3}: [ 493.168644][ T59] __lock_acquire+0x2df1/0x7d40 [ 493.174078][ T59] lock_acquire+0x19e/0x420 [ 493.179199][ T59] __mutex_lock+0x136/0xcc0 [ 493.184281][ T59] team_del_slave+0x32/0x1c0 [ 493.189694][ T59] team_device_event+0x28d/0xa20 [ 493.195169][ T59] notifier_call_chain+0x197/0x380 [ 493.200828][ T59] unregister_netdevice_many_notify+0x100d/0x1900 [ 493.207810][ T59] unregister_netdevice_queue+0x32c/0x370 [ 493.214094][ T59] _cfg80211_unregister_wdev+0x16b/0x580 [ 493.220286][ T59] ieee80211_remove_interfaces+0x49e/0x690 [ 493.226849][ T59] ieee80211_unregister_hw+0x5d/0x2a0 [ 493.232826][ T59] mac80211_hwsim_del_radio+0x289/0x480 [ 493.238990][ T59] hwsim_exit_net+0x58d/0x650 [ 493.244304][ T59] cleanup_net+0x70a/0xbb0 [ 493.249281][ T59] process_scheduled_works+0xa5d/0x15d0 [ 493.255474][ T59] worker_thread+0xa55/0xfc0 [ 493.260804][ T59] kthread+0x2fa/0x390 [ 493.265508][ T59] ret_from_fork+0x48/0x80 [ 493.271005][ T59] ret_from_fork_asm+0x11/0x20 [ 493.276324][ T59] [ 493.276324][ T59] other info that might help us debug this: [ 493.276324][ T59] [ 493.286835][ T59] Possible unsafe locking scenario: [ 493.286835][ T59] [ 493.294380][ T59] CPU0 CPU1 [ 493.300111][ T59] ---- ---- [ 493.305602][ T59] lock(&rdev->wiphy.mtx); [ 493.310207][ T59] lock(team->team_lock_key#2); [ 493.317675][ T59] lock(&rdev->wiphy.mtx); [ 493.324885][ T59] lock(team->team_lock_key#2); [ 493.330272][ T59] [ 493.330272][ T59] *** DEADLOCK *** [ 493.330272][ T59] [ 493.338512][ T59] 5 locks held by kworker/u4:4/59: [ 493.343750][ T59] #0: ffff888017c73938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 493.354988][ T59] #1: ffffc900015a7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 493.365966][ T59] #2: ffffffff8e3ab490 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 493.375370][ T59] #3: ffffffff8e3b83c8 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 493.385575][ T59] #4: ffff88805d670768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 493.396647][ T59] [ 493.396647][ T59] stack backtrace: [ 493.402627][ T59] CPU: 1 PID: 59 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 493.410273][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 493.420614][ T59] Workqueue: netns cleanup_net [ 493.426016][ T59] Call Trace: [ 493.429314][ T59] [ 493.432773][ T59] dump_stack_lvl+0x18c/0x250 [ 493.437501][ T59] ? load_image+0x400/0x400 [ 493.442196][ T59] ? show_regs_print_info+0x20/0x20 [ 493.447618][ T59] ? print_circular_bug+0x12b/0x1a0 [ 493.452923][ T59] check_noncircular+0x2fc/0x400 [ 493.458308][ T59] ? print_deadlock_bug+0x5d0/0x5d0 [ 493.463619][ T59] ? lockdep_lock+0xf5/0x230 [ 493.468218][ T59] ? __lock_acquire+0x1347/0x7d40 [ 493.473784][ T59] ? _find_first_zero_bit+0xd3/0x100 [ 493.479543][ T59] __lock_acquire+0x2df1/0x7d40 [ 493.484594][ T59] ? verify_lock_unused+0x140/0x140 [ 493.489817][ T59] ? verify_lock_unused+0x140/0x140 [ 493.495286][ T59] lock_acquire+0x19e/0x420 [ 493.499855][ T59] ? team_del_slave+0x32/0x1c0 [ 493.504747][ T59] ? __might_sleep+0xe0/0xe0 [ 493.509717][ T59] ? read_lock_is_recursive+0x20/0x20 [ 493.515322][ T59] __mutex_lock+0x136/0xcc0 [ 493.520270][ T59] ? team_del_slave+0x32/0x1c0 [ 493.525658][ T59] ? __lock_acquire+0x7d40/0x7d40 [ 493.530862][ T59] ? rcu_is_watching+0x15/0xb0 [ 493.535757][ T59] ? trace_contention_end+0x39/0xe0 [ 493.540962][ T59] ? __mutex_lock+0x315/0xcc0 [ 493.545735][ T59] ? team_del_slave+0x32/0x1c0 [ 493.550689][ T59] ? mutex_lock_nested+0x20/0x20 [ 493.556069][ T59] ? bond_netdev_event+0xeb/0xf30 [ 493.561207][ T59] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 493.567424][ T59] team_del_slave+0x32/0x1c0 [ 493.572203][ T59] team_device_event+0x28d/0xa20 [ 493.577240][ T59] notifier_call_chain+0x197/0x380 [ 493.582467][ T59] unregister_netdevice_many_notify+0x100d/0x1900 [ 493.589066][ T59] ? lock_chain_count+0x20/0x20 [ 493.594121][ T59] ? unregister_netdevice_many+0x20/0x20 [ 493.599767][ T59] ? kernfs_remove_by_name_ns+0x117/0x150 [ 493.605511][ T59] ? __lock_acquire+0x7d40/0x7d40 [ 493.610584][ T59] unregister_netdevice_queue+0x32c/0x370 [ 493.616601][ T59] ? list_netdevice+0x730/0x730 [ 493.621742][ T59] ? kernfs_remove_by_name_ns+0x117/0x150 [ 493.627498][ T59] _cfg80211_unregister_wdev+0x16b/0x580 [ 493.633321][ T59] ieee80211_remove_interfaces+0x49e/0x690 [ 493.639401][ T59] ? ieee80211_do_stop+0x1e20/0x1e20 [ 493.644888][ T59] ? rcu_is_watching+0x15/0xb0 [ 493.649863][ T59] ieee80211_unregister_hw+0x5d/0x2a0 [ 493.655270][ T59] mac80211_hwsim_del_radio+0x289/0x480 [ 493.660947][ T59] ? rhashtable_remove_fast+0xc00/0xc00 [ 493.666691][ T59] hwsim_exit_net+0x58d/0x650 [ 493.671583][ T59] ? hwsim_init_net+0x90/0x90 [ 493.676280][ T59] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 493.682097][ T59] cleanup_net+0x70a/0xbb0 [ 493.686520][ T59] ? ops_free_list+0x3b0/0x3b0 [ 493.691409][ T59] ? _raw_spin_unlock_irq+0x23/0x50 [ 493.696990][ T59] ? process_scheduled_works+0x96f/0x15d0 [ 493.702997][ T59] ? process_scheduled_works+0x96f/0x15d0 [ 493.709376][ T59] process_scheduled_works+0xa5d/0x15d0 [ 493.715212][ T59] ? assign_work+0x430/0x430 [ 493.719827][ T59] ? assign_work+0x3d0/0x430 [ 493.724531][ T59] worker_thread+0xa55/0xfc0 [ 493.729130][ T59] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 493.735232][ T59] ? _raw_spin_unlock+0x40/0x40 [ 493.740091][ T59] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 493.746102][ T59] kthread+0x2fa/0x390 [ 493.750357][ T59] ? pr_cont_work+0x560/0x560 [ 493.755334][ T59] ? kthread_blkcg+0xd0/0xd0 [ 493.759949][ T59] ret_from_fork+0x48/0x80 [ 493.764724][ T59] ? kthread_blkcg+0xd0/0xd0 [ 493.769760][ T59] ret_from_fork_asm+0x11/0x20 [ 493.774805][ T59] [ 493.787507][ T59] mac80211_hwsim hwsim3 O3ãc¤± (unregistering): left promiscuous mode [ 493.796008][ T59] mac80211_hwsim hwsim3 O3ãc¤± (unregistering): left allmulticast mode [ 493.842051][ T59] team0: Port device O3ãc¤± removed [ 495.140972][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 495.649269][ T59] vlan0: left allmulticast mode [ 495.654950][ T59] veth0_vlan: left allmulticast mode [ 495.666853][ T59] vlan0: left promiscuous mode [ 495.672881][ T59] À: port 1(vlan0) entered disabled state [ 495.691189][ T59] hsr_slave_0: left promiscuous mode [ 495.697541][ T59] hsr_slave_1: left promiscuous mode [ 495.707592][ T59] veth1_macvtap: left promiscuous mode [ 495.714599][ T59] veth1_vlan: left promiscuous mode [ 495.720111][ T59] veth0_vlan: left promiscuous mode [ 495.986168][ T59] team_slave_1 (unregistering): left promiscuous mode [ 495.993184][ T59] team_slave_1 (unregistering): left allmulticast mode [ 496.001700][ T59] team0 (unregistering): Port device team_slave_1 removed [ 496.030128][ T59] team_slave_0 (unregistering): left promiscuous mode [ 496.037470][ T59] team_slave_0 (unregistering): left allmulticast mode [ 496.046123][ T59] team0 (unregistering): Port device team_slave_0 removed [ 496.074931][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.217409][ T59] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 496.264351][ T59] bond0 (unregistering): Released all slaves [ 498.039464][ T59] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.097430][ T59] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.148466][ T59] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.215537][ T59] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.306076][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.367098][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.417717][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.476194][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.600931][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.646409][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.706949][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.866380][ T59] bond0: (slave netdevsim0): Releasing backup interface [ 498.874978][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 498.885447][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.794798][ T59] hsr_slave_0: left promiscuous mode [ 500.804292][ T59] hsr_slave_1: left promiscuous mode [ 500.816633][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 500.824535][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 500.832523][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 500.840006][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 500.847781][ T59] bridge_slave_1: left allmulticast mode [ 500.853477][ T59] bridge_slave_1: left promiscuous mode [ 500.859255][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.867744][ T59] bridge_slave_0: left allmulticast mode [ 500.873695][ T59] bridge_slave_0: left promiscuous mode [ 500.879615][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.889019][ T59] hsr_slave_0: left promiscuous mode [ 500.895135][ T59] hsr_slave_1: left promiscuous mode [ 500.901194][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 500.908594][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 500.916689][ T59] bridge_slave_1: left allmulticast mode [ 500.922514][ T59] bridge_slave_1: left promiscuous mode [ 500.928297][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.936841][ T59] bridge_slave_0: left allmulticast mode [ 500.943666][ T59] bridge_slave_0: left promiscuous mode [ 500.949427][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.960843][ T59] hsr_slave_0: left promiscuous mode [ 500.966930][ T59] hsr_slave_1: left promiscuous mode [ 500.973357][ T59] batman_adv: batadv0: Removing interface: team0 [ 500.980353][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 500.987769][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 500.996822][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.005270][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.013053][ T59] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 501.020565][ T59] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 501.028121][ T59] batman_adv: batadv0: Interface deactivated: vlan1 [ 501.035038][ T59] batman_adv: batadv0: Removing interface: vlan1 [ 501.042057][ T59] bridge_slave_1: left allmulticast mode [ 501.047975][ T59] bridge_slave_1: left promiscuous mode [ 501.054160][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.062620][ T59] bridge_slave_0: left allmulticast mode [ 501.068431][ T59] bridge_slave_0: left promiscuous mode [ 501.074979][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.084295][ T59] vlan0: left allmulticast mode [ 501.089216][ T59] veth0_vlan: left allmulticast mode [ 501.094855][ T59] vlan0: left promiscuous mode [ 501.100803][ T59] À: port 1(vlan0) entered disabled state [ 501.110931][ T59] hsr_slave_0: left promiscuous mode [ 501.117168][ T59] hsr_slave_1: left promiscuous mode [ 501.126745][ T59] veth1_macvtap: left promiscuous mode [ 501.133386][ T59] veth0_macvtap: left promiscuous mode [ 501.139417][ T59] veth1_vlan: left promiscuous mode [ 501.145135][ T59] veth0_vlan: left promiscuous mode [ 501.151594][ T59] veth1_macvtap: left promiscuous mode [ 501.157271][ T59] veth1_vlan: left promiscuous mode [ 501.162872][ T59] veth0_vlan: left promiscuous mode [ 501.169138][ T59] veth1_macvtap: left promiscuous mode [ 501.175156][ T59] veth1_vlan: left promiscuous mode [ 501.180922][ T59] veth0_vlan: left promiscuous mode [ 501.456496][ T59] team0 (unregistering): Port device team_slave_1 removed [ 501.484758][ T59] team0 (unregistering): Port device team_slave_0 removed [ 501.497651][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.512032][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.577978][ T59] bond0 (unregistering): Released all slaves [ 501.683876][ T59] team0 (unregistering): Port device team_slave_1 removed [ 501.726244][ T59] team0 (unregistering): Port device team_slave_0 removed [ 501.752283][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.787666][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.842498][ T59] bond0 (unregistering): Released all slaves [ 501.883927][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.890673][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.036423][ T59] team0 (unregistering): Port device team_slave_1 removed [ 502.065150][ T59] team0 (unregistering): Port device team_slave_0 removed [ 502.095378][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.104795][ T59] bond_slave_1 (unregistering): left promiscuous mode [ 502.270769][ T59] bond0 (unregistering): Released all slaves [ 502.491356][ T59] team0 (unregistering): Port device team_slave_1 removed [ 502.517972][ T59] team0 (unregistering): Port device team_slave_0 removed [ 502.545872][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.555300][ T59] bond_slave_1 (unregistering): left promiscuous mode [ 502.657589][ T59] bond0 (unregistering): Released all slaves