last executing test programs: 3.824584981s ago: executing program 3 (id=1259): syz_clone(0x111, 0x0, 0x9, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000"], 0x28}, 0xfc40) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0xfc40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x325) recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 3.40737851s ago: executing program 1 (id=1263): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x96) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x16, &(0x7f0000000100)=@raw=[@generic={0x2, 0x8, 0x5, 0x9, 0x8000}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb79}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x7ff}, @map_val={0x18, 0x8, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x1ff}], &(0x7f00000001c0)='GPL\x00', 0xa, 0x38, &(0x7f0000000200)=""/56, 0x40f00, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x8, 0xcf, 0x5}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[r0, r1, r1], &(0x7f00000003c0)=[{0x2, 0x5, 0x3, 0x6}, {0x2, 0x5, 0x1, 0x1}, {0x4, 0x3, 0x0, 0x2}, {0x5, 0x3, 0x3, 0x8}, {0x1, 0x5, 0xe, 0x2}, {0x0, 0x2, 0x9, 0xc}], 0x10, 0x3}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="660a000000000000611171000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r3, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0], 0x0, 0x26, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x34, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000640)={r3, r1}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000c80)={r1, &(0x7f0000000ac0)="8f90c27b9861b0e88fc5879cbadcc6ca04382d350d2a00e65a2452ff02c82e72041a0a5430667837c5adb085d5729acf18a6300d90fbea8fb2caf2d01bea5849229fbee420f83b08a9ea10a4dc8a525d1027e4b8cafe7c2a2ca826e1ffb9e5d1939801a0c97fd5280f4043f6b6ee333542c8e9f8658303c98b1b83af64fad506e4e8682c4a7d5b951f00ba81e97b020476445ddf06573f8cb0f4e2c468d3691c7a7f9e6e8be51231dc7d571c8f8636279df0ef030a3c642e9858017f7af7aba80702524b5d602b0b06708e4f68887b4db2f59ec67b131bbd81636284867f580c29a9", &(0x7f0000000bc0)=""/180}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@type_tag={0x1, 0x0, 0x0, 0x12, 0x3}]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.459769782s ago: executing program 1 (id=1264): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x100000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', r0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) write$cgroup_devices(r0, &(0x7f00000005c0)=ANY=[], 0xfffffeff) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) 2.067865612s ago: executing program 0 (id=1266): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0, 0x0, 0xfffffffffffffe8d}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1e, 0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000f10d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7b"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0x100e, 0x0, &(0x7f0000000c40)="63bd998e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.941312725s ago: executing program 3 (id=1267): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x901002, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x81084000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)) 1.940177365s ago: executing program 2 (id=1268): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000), 0x1) recvmsg(r0, &(0x7f00000012c0)={&(0x7f0000000040)=@ieee802154, 0x80, &(0x7f0000001200)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/174, 0xae}, {&(0x7f0000001180)=""/108, 0x6c}], 0x3, &(0x7f0000001240)=""/84, 0x54}, 0x100) 1.898699626s ago: executing program 0 (id=1269): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) (async) r1 = socket$kcm(0x10, 0x400000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (async) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000880)=ANY=[@ANYRESOCT=r2, @ANYBLOB="d0c5daafa21df99c2153f345c00543efaaf5f8374973f8616b1db4983cedf3f3263596aac253f98759629a4776eb39f30d204f0073daa1750847e6418e43e56d1577263e624578b121d40401f386f6fcbfa7cf0ed243df04ce4dad7b92890525ee53037470b944efd3095fb9ba2889c516eb0c28b1e8780a9fe91b", @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008600000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0xf8, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.809760088s ago: executing program 2 (id=1270): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x10000, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000660a020000000000180100002020782500000000002020208400000000000000bfa100000000000007010000f8ffffffb70a000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001180), 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r6, 0x4e, 0xfffffffffffffffc}, 0xf) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001140)={r1, 0xe0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000d40)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000d80)=[0x0, 0x0, 0x0], &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x22, &(0x7f0000000e00)=[{}], 0x8, 0x10, &(0x7f0000000e40), &(0x7f0000000e80), 0x8, 0x76, 0x8, 0x8, &(0x7f0000000ec0)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001240)=@bpf_ext={0x1c, 0x25, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x94}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x6, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x1}, @map_val={0x18, 0x5, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x7, 0x1, 0x5, 0x3, 0xb, 0x8, 0x8}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000d00)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x18, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001180)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x1ea8a, r1, 0x8, 0x0, &(0x7f00000011c0)=[{0x0, 0x1, 0x3, 0x7}, {0x3, 0x5, 0x6, 0xc}, {0x3, 0x1, 0xf, 0xa}, {0x4, 0x4, 0x1, 0x5}, {0x5, 0x1, 0x1}, {0x3, 0x1, 0x10, 0xa}, {0x0, 0x1, 0x4}, {0x5, 0x1, 0xc, 0x2}], 0x10, 0x7ee445d0}, 0x94) bpf$MAP_CREATE(0x20000000000000, &(0x7f0000000200)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x50) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="d80000001e0081054e81f782db020000071d08001a000000e8fe08a104000e000a00142603600e1208000fc01e000406a80016c008000e400400027c035c0461c1967f6f94007134cff6d26efb8000a0ffa290457f01895416277ce06bba0000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d25ccca95c9757c01deeb12c0e440f57d6cf23b1900360db7e5167fda40fad956d809d5e12a9ecbee5de6ccd40dd6e4edef3d93452a92950b0000000000000023f9a941000000000000000000007d59ef7e1359485303f720a1ed469c778f", 0xd8}], 0x1}, 0x804) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4b, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000580), &(0x7f0000000680), 0x8, 0x6a, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{r0, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)='%ps \x00'}, 0x20) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x6206, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x50) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a80)=@o_path={&(0x7f0000000a40)='./file0\x00', 0x0, 0x0, r4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x12, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @generic={0x4, 0x9, 0x2, 0x9, 0x400}, @map_val={0x18, 0xa, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x2}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x1}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xa}, @generic={0x1, 0x0, 0x4, 0x8d, 0x5}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @ldst={0x1, 0x3, 0x1, 0x6, 0x8, 0xfffffffffffffff0}]}, &(0x7f0000000280)='syzkaller\x00', 0x2, 0xd4, &(0x7f0000000300)=""/212, 0x41100, 0x8, '\x00', r8, 0x0, r9, 0x8, &(0x7f0000000880)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000008c0)={0x3, 0x7, 0x1, 0xdf6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[r4, r0, r4, r4, r10, r4, r11, r12]}, 0x94) 1.614619312s ago: executing program 3 (id=1271): perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0xd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x8042) r3 = socket$kcm(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60586507000c000300053582c137153e37000c0980fc0b100703", 0x2d}], 0x1}, 0x0) 1.567669954s ago: executing program 0 (id=1272): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(r2) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r4, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000fd7fffff0000000003000000850000003600000095000000000000007145a00f924a2e67dbf7e24bdecc57a58594239595a0e2a2471a7522b2bb41632b99b3c790f013a9cd99ef0ce0ee45b417994949b2ae0310b55b49294aed5d1e5386d50e488a61567ec2f2589b20549c1e7ac47d1510f2bc8cf74349d648a414494862cf80ca7ffad5646d70b001e1b162b2aedec014e309c1d621f058a2b9110c0f5123e9e967831026998e74bbb3acd9732ed742edf5e7482c16b9dcd902e6ccce1024790689ea5b189f41c01f5763a5b52c8e82dd7970ab4ef587790a32e7193e46b59fdf04d7481b5fc39a"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r1, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f00000011c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) 1.469124276s ago: executing program 1 (id=1273): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000027c0)={0x10, 0x21, &(0x7f00000020c0)=ANY=[@ANYBLOB="180000000500000000000000cbf5ffff1811a2fd16e60000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000852000000400000018130000", @ANYRES32, @ANYBLOB="000000000000000018530000100000000000000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x702, 0xe, 0x0, &(0x7f0000000380)="e46033ddaf373b1ce2be0696a3da", 0x0, 0x9ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt$sock_attach_bpf(r0, 0x1, 0x9, &(0x7f00000006c0), 0x4) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000e80)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x5, 0x9}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000880)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x25, &(0x7f0000000000)=r5, 0x20000010) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002040)=[{&(0x7f00000003c0)="179023a2d5a59ffbc58dee411eb532ed7bcdec0f05c2810569e775f5e1707f1d87f37a1f9a21d20bb196a0f9ffffffffffffff5a418159b4882f7dd32ae8c50726d3caaaa5539aedfb1a8700a5521079cb7a3b24e9c9e7062e8ebe6fc09913eb49e3431b851fc0bfecf8", 0x6a}, {&(0x7f0000000040)="056240a08b0dc1f260568c3e2115998ac4676c4b947a1c054fbc87c1c585605952219162e6f9fbf592454191ac311f2aa1fd6c494be82dcbd4", 0x39}, {&(0x7f0000000680)="c05c454f7bec16d7806e4a27703bedf0f692b90052eace83", 0x18}, {&(0x7f0000000700)="de3d2f0c438258d7843b0e62", 0xc}, {&(0x7f0000000f00)="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", 0x1000}, {&(0x7f0000001f00)="febbcf6192b392aa0fdf68951d10abf1c5003b0c9f52f425a1d3de74bec85e6fa6f1c4f93aabbef8df23f3eb48b7ea204ba1892c4b75aa9d894edbc5d57932a31d1166c44e38287ef122193bc7434a98c7eb233c9d42a5c0d78dd8ee2a9cdc4449b33d97dc52f78ab2d2fcedfadc0caecadca094410203b490c1f48175cea50f0301c82501b5779139599bd9961b5ddd95226f558885c676bb3eda0e3ebb1dd4e8a582b69d02fc074c08", 0xaa}, {&(0x7f0000001fc0)="1851185a1b338bbc3993c07fab23cca8ea2306714cabe5405a5c54c68172fe1bc0a5c6eaeecba033092bfe007aa3a777383d85ad58c0244e8a1b151d7e76b651249a4d6f267b86196850d80f8473000625f3123102a4109f083e9f825140ce7ed81d110bcb6337d342342a3e87c960", 0x6f}], 0x7}, 0x2400c801) r7 = gettid() gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8b04, &(0x7f0000000080)={'wlan1\x00', @random="8dffffff0600"}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000940)=[{&(0x7f00000001c0)="d81960948c5f4fca5136c08c03d17e5b30230a1a1c3cafc4b6f9152ff216444628e9d2290321b403eb84b21962ec1eb9eb812b593318929f6fa519eb15c968120081a5d61c974cd98e2f2fba94e0cc841859a75e86e3f45822aaec03f944ad7653dc1e9a6bd58674a4775b0a9b5863b62bf871886c0d25119b6cbbda23c21c8c00ba3fbc3513bb16d47eb99193baf1afc347431af1611f5bec0d30de18f64a1818eae6c3326be696bd5b993863e42385be7b0f3bf8fa1c77", 0xb8}, {&(0x7f0000000280)="011fee7147ed83cf40014252d05f912bf2eb278d489f6dcd8eb81fbe6505a16af329dece39090a4fdaf40ad7e3382c7bb8d5b2bb8d1e0b358517d488e9ba055958e4c85882e307f6bdc0cc3042c9ec460768d32cb6e3d4868894dee9c0035238a2c72e4a868a1ae0d81c8b58112315e4214e70fabefd0c2fd3fab34d022fb096678ff6d359cb6c9b6447beab0c96be022b8509f25bdc6482f80ee78d7e1879b9f301dc58749ecec152b40e1591499e24e278db65082ce7fb27e8a4996843e8010daad6e964c913966ade9dfb418096081706bb404efc08f7f4bd0f9d69edbd5b", 0xe0}, {&(0x7f0000000380)="02", 0x1}, {&(0x7f0000000580)="9abbf2b864011fb3e7fc2d4f67b678ecaa292434bc6ada6613ddf73fad6941362efcfbae6e163ae0145deb04356fe11f45144268b9ba809070921beb0be48652af8c0017c3f0ccee8d3445b08b172036c379acfb26dc71fc2842fe9e2316500ea812b9644a3f315d034b59c4e22dae379556dd7c9373b9fe070abd3d5164fd48b4585f3040c48072da6e7996fd8f589ca0a4ee5cedb1789b8182b218374f8b13fb267aa3aa31543c1aff303f58b57527e6fb9ad0e5423110274f751ec1ca743df80f585db2dfb4d806bdc57f388997a8e8dd8f64d2cc8b5ece16f9bc218df1fe10fe499da785edf50164f9c88fd4e6f56dca83", 0xf3}, {&(0x7f0000000740)="d95ac77a6641a0cd3bc6760a737a91d97cf2856d09fa2303e155a683f6308f9813969b1da025c91111", 0x29}, {&(0x7f0000000c40)="1de06fdd41f31b7fc1b4afbb5aac20d0a1de148c09e8861b079451209fe71087ab0cb6e141dbc6bb93968615ffaaa861b871bf75365bf5d82b598b3704a9047483f6ba371f0790362920dc7a27fd7e8e383a21044c0d9ace2bc96da1ee2072affefdcda52a8fc9a40207faf6e49291e3370b358c272223e292f66b118e040000000000003c2e9dd9450f0ef040a78ad3fda4f6449be90dfc4e9cfed2502e4f69add4452f000062a9ffdccbd134155eca5dc6239fcabf3bcb9c99a02679a4d3949b006f7d4fe2ac1230c1b0cd9b4acb0f05fb2e05ffcee0e21ac717054192ffd90e66f28646db9ae45485fa53027ee72dae8172efe1e50f380a2cd3ffa62e0e958da0309cc73b5635efd5221eb92e4444a387415a6887d8c431e410974f8f0f8e362bb80f3c21a73371bd26e2697b1580ee9fc27eb1c60a7d0822d209086ee612cab38d1d7179e0c93300132e814085180c3fdc8799acc3c4d088ac5d0a65c36b770c16545dd2c92fd97d2556ca8254ce7a34315aa54fd5a094d4b2fb31133078a3a5273a18496718261b09b163546f257ce2a50845eea3751eaa081a83", 0x19d}], 0x6, &(0x7f00000009c0)=[@cred={{0x1c, 0x1, 0x2, {r7, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r7, 0xee00, 0xee01}}}], 0x40, 0x800}, 0x24000000) r9 = socket$kcm(0xf, 0x3, 0x2) recvmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40002101) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c00000008000000050000000800009300000000080000000000040000000c000000080000000300000010000000ffffff7f0700000007000000020000000300000003000000018000000b00000008000000020000000a00000002000000fdffffff002e006100615f00"/138], 0x0, 0x8c, 0x0, 0x1}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r10, 0x1, 0xa, &(0x7f0000000180), 0x4) socket$kcm(0x11, 0x200000000000003, 0x300) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115001d000200142603600e12080005007a010401a8001600200003400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x20000000) 1.366078978s ago: executing program 3 (id=1274): r0 = socket$kcm(0x10, 0x2, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000001001000001000000dc00000000000000c1a97fe32cbc1c58b26eafdeddcffc16239ed4eb75fc45cd0eed87e3334fe2011208a161a8dcc9e4fba8cdb3b696c6a06b3ec0fde5f6260fe1af9bc7bcab25edbc0121f2400926c80f499ba6535436fa6cee715ddee0e72cc0e030efa434d1ad1642de3340ea925ab7c98a8a0bc5d7aafc27716751afae190c4c0eac3481cb5ac3c73b1bb70e0562b26cb487ff331bc48ac34b7c8c0c1588118fff27857d3d21e10e2a78f11411796fd8e69e257da44df5b768d264c60608fbc65ab51cb70222cd8b415762a545ecc1bd364f953127ddf620024340fc6a48f006867c"], 0x18}, 0xfc00) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7c, 0x4, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1d, 0x2, 0x6, &(0x7f0000000300)) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x4}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x4044) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x33fe0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, 0x0, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f000801}, 0x40) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x8, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r5, @ANYRES64=r1, @ANYRES16, @ANYRESOCT, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000c40)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xc0}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c03400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r11 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r9) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r6, 0x58, &(0x7f0000000180)}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) 1.066513735s ago: executing program 1 (id=1275): socket$kcm(0x2, 0x200000000000001, 0x106) (async) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) (async) sendmsg$inet(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001c80)="a26ee3812a43f377cc134b8fc541c7", 0xf}], 0x1}, 0x1c8c4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6c0b9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000280)='blkio.bfq.sectors\x00', 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x4, 0x4, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r4}, &(0x7f0000000600), &(0x7f0000000380)=r3}, 0x20) (async) recvmsg$kcm(r1, &(0x7f0000000180)={&(0x7f0000000380)=@l2={0x1f, 0x0, @fixed}, 0x80, 0x0, 0x0, &(0x7f0000000bc0)=""/209, 0xd1}, 0x40002000) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000040) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8946, &(0x7f0000000300)={'erspan0\x00', @remote}) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x10, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {}, {}, [@alu={0x7, 0x1, 0x3, 0x4, 0x1, 0x8, 0xfffffffffffffff0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x2, 0xbb, &(0x7f0000000980)=""/187, 0x41000, 0x19, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000a40)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000a80)=[{0x0, 0x2, 0x10, 0x24c4600ce6a162f9}, {0x4, 0x4, 0x3, 0x2}]}, 0x94) (async) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x2) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001dc0)="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", 0x62d}], 0x1}, 0x40) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f3, &(0x7f0000000080)) 1.018542336s ago: executing program 3 (id=1276): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x15, &(0x7f0000000040)=@raw=[@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}, @call={0x85, 0x0, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0x4, 0x1, 0x0, r0}], &(0x7f0000000100)='GPL\x00', 0x4, 0x33, &(0x7f0000000140)=""/51, 0x40f00, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000001c0)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000200)=[{0x5, 0x2, 0x1}, {0x0, 0x1, 0x9, 0x7}], 0x10, 0x6}, 0x94) r3 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000340), 0x9) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000380)='./file0\x00', 0x0, 0x0, r2}, 0x18) r5 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r5, &(0x7f00000005c0)={&(0x7f0000000400), 0x80, &(0x7f0000000540)=[{&(0x7f0000000480)=""/62, 0x3e}, {&(0x7f00000004c0)}, {&(0x7f0000000500)=""/54, 0x36}], 0x3, &(0x7f0000000580)=""/29, 0x1d}, 0x10000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={r6, 0x58, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) recvmsg$kcm(r5, &(0x7f0000000a00)={&(0x7f0000000700)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000780)=""/135, 0x87}, {&(0x7f0000000840)=""/213, 0xd5}], 0x2, &(0x7f0000000980)=""/83, 0x53}, 0x40000000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000ac0)={r6, 0x58, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000b00)={r4, 0x1}, 0xc) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000b40)='syz1\x00', 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000000b80)='rdma.current\x00', 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000d00)={r6, &(0x7f0000000bc0)="abd3859d01fc6b68af7b326d753e4f035d98cb366fe4e4df2ab1c4f81949c8fa303ad957fc7d88d690a7a78a2c5de8e52c67c489ed7bfe137bd46f239521cd9dcd7ba734a05ea811991d2d2c9242f0f2c5ecc871c33e13bcad299df5ff79c43ed225a9cb5086cf2cfe2af47dbcdc8dc3dc02ab5e1fd2d0328cd9935b8339fe1a44bf21790d1787cce2e6f67dd66d1656f66002321704333c665ac4d75b8305f2d1332423e91a13", &(0x7f0000000c80)=""/119}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000d40)={@cgroup=r11, r2, 0x12, 0x2000, r2, @value=r11}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e00)={{r11, 0xffffffffffffffff}, &(0x7f0000000d80), &(0x7f0000000dc0)=r11}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ec0)={{r6, 0xffffffffffffffff}, &(0x7f0000000e40), &(0x7f0000000e80)='%pK \x00'}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002280)={r6, 0xe0, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001fc0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000002000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002040)=[0x0, 0x0, 0x0], 0x0, 0xae, &(0x7f0000002080)=[{}], 0x8, 0x10, &(0x7f00000020c0), &(0x7f0000002100), 0x8, 0x25, 0x8, 0x8, &(0x7f0000002140)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000023c0)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000f00)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r12}}, @exit, @ldst={0x1, 0x0, 0x2, 0x3, 0x0, 0x50, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, @map_val={0x18, 0x5, 0x2, 0x0, r13, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffff9}], &(0x7f0000000f80)='GPL\x00', 0x8001, 0x1000, &(0x7f0000000fc0)=""/4096, 0x41000, 0x0, '\x00', r14, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000022c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000002300)={0x5, 0xb, 0xfffffffb}, 0x10, 0x2098, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000002340)=[{0x1, 0x5, 0x8, 0xc}, {0x4, 0x4, 0x7, 0x8}, {0x2, 0x5, 0x5, 0x7}, {0x4, 0x2, 0x8, 0x1}, {0x3, 0x1, 0xa, 0xa}, {0x5, 0x1, 0x6, 0xa}, {0x3, 0x5, 0xe, 0x1}, {0x3, 0x2, 0xa, 0x6}], 0x10, 0x8}, 0x94) r15 = bpf$ITER_CREATE(0x21, &(0x7f0000002580)={r11}, 0x8) r16 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002800)={0x11, 0x18, &(0x7f0000002600)=@raw=[@cb_func={0x18, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}, @jmp={0x5, 0x0, 0xca4819ebc5b9f49f, 0x3, 0x2, 0xffffffffffffffe0, 0x4}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r13}}, @ldst={0x0, 0x2, 0x6, 0x7, 0x2, 0x2, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], &(0x7f00000026c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x12, '\x00', r14, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002700)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000002740)={0x0, 0xf, 0x3fd, 0x2}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000002780)=[r12, r12], &(0x7f00000027c0)=[{0x5, 0x3, 0xb, 0x4}], 0x10, 0x2da}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002940)={{0x1, 0xffffffffffffffff}, &(0x7f00000028c0), &(0x7f0000002900)=r4}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002a00)=@bpf_ext={0x1c, 0x13, &(0x7f0000002480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@call={0x85, 0x0, 0x0, 0x84}, @alu={0x7, 0x0, 0xd, 0x3, 0x1, 0xffffffffffffffe0, 0x8}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002540)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', r7, 0x0, r15, 0x8, 0x0, 0x0, 0x10, &(0x7f00000025c0)={0x4, 0x6, 0x4, 0x430a}, 0x10, 0x3f88, r16, 0x3, &(0x7f0000002980)=[r0, r12, r11, r12, r13, r17, r12], &(0x7f00000029c0)=[{0x0, 0x1, 0x3, 0x7}, {0x4, 0x2, 0x1}, {0x2, 0x4, 0x9, 0x6}], 0x10, 0xf}, 0x94) r18 = openat$cgroup_ro(r11, &(0x7f0000002ac0)='blkio.bfq.time_recursive\x00', 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000002b00)=r18, 0x4) r19 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003d80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', r9, r18, 0x2, 0x3, 0x1}, 0x50) r20 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003e80)={0x6, 0x29, &(0x7f0000002b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r18}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r17}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff8}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r18}}, @call={0x85, 0x0, 0x0, 0x97}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @generic={0x7f, 0x9, 0x2, 0xfff, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002cc0)='syzkaller\x00', 0xc, 0x1000, &(0x7f0000002d00)=""/4096, 0x40f00, 0x0, '\x00', r8, 0x25, r1, 0x8, &(0x7f0000003d00)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000003d40)={0x4, 0xc, 0x7, 0x1}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000003e00)=[r17, r19], &(0x7f0000003e40)=[{0x2, 0x1, 0x2, 0xc}, {0x0, 0x4, 0xa, 0x9}, {0x3, 0x2, 0xc, 0x8}, {0x1, 0x1, 0x6, 0x8}], 0x10, 0x9}, 0x94) ioctl$TUNSETIFF(r20, 0x400454ca, &(0x7f0000003f40)={'bridge_slave_0\x00'}) 994.084627ms ago: executing program 1 (id=1277): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0, 0x0, 0xfffffffffffffe8d}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1e, 0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0x100e, 0x0, &(0x7f0000000c40)="63bd998e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 810.522201ms ago: executing program 1 (id=1278): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c30000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x33, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f00000000c0), 0x3}, 0xa100, 0xc8, 0x6, 0x6, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0xffffffbc, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xfe, 0x1, 0x0, 0x80, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x100, 0xa}, 0x481a, 0x0, 0x0, 0x2, 0x0, 0x0, 0xf792, 0x0, 0x1, 0x0, 0x8eea}, 0x0, 0x0, r1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63f580fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) perf_event_open(&(0x7f00000004c0)={0x5, 0xfffffffffffffdf8, 0xde, 0x21, 0x0, 0x0, 0x0, 0x0, 0x8400, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0xfffffffffffffff0}, 0x4816, 0x0, 0x0, 0x7, 0x0, 0x0, 0xf792, 0x0, 0xffffffff, 0x0, 0x2000000000000000}, 0x0, 0x9, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xffffffffffffffff, 0x2b4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x40000200, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c30000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x33, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f00000000c0), 0x3}, 0xa100, 0xc8, 0x6, 0x6, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0xffffffbc, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xfe, 0x1, 0x0, 0x80, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x100, 0xa}, 0x481a, 0x0, 0x0, 0x2, 0x0, 0x0, 0xf792, 0x0, 0x1, 0x0, 0x8eea}, 0x0, 0x0, r1, 0x2) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) sendmsg$unix(r3, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63f580fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) (async) perf_event_open(&(0x7f00000004c0)={0x5, 0xfffffffffffffdf8, 0xde, 0x21, 0x0, 0x0, 0x0, 0x0, 0x8400, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0xfffffffffffffff0}, 0x4816, 0x0, 0x0, 0x7, 0x0, 0x0, 0xf792, 0x0, 0xffffffff, 0x0, 0x2000000000000000}, 0x0, 0x9, 0xffffffffffffffff, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) (async) write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[], 0xfdef) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xcfa4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xffffffffffffffff, 0x2b4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_clone(0x40000200, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 809.540661ms ago: executing program 2 (id=1279): bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={0xffffffffffffffff, 0x1}, 0xc) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0xfffffffc, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x88, 0x64, &(0x7f00000002c0)=r3, 0x4) socket$kcm(0x11, 0x2, 0x300) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) r6 = socket$kcm(0x2, 0x3, 0x2) close(r6) r7 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)={[{0x2b, 'freezer'}, {0x2d, 'pids'}, {0x2d, 'pids'}, {0x2b, 'cpuacct'}, {0x2d, 'cpuset'}, {0x2b, 'blkio'}, {0x2b, 'memory'}]}, 0x35) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000140)={r0, r0}) r8 = socket$kcm(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x18, 0x20, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f32}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @ldst={0x2, 0x0, 0x1, 0xb, 0xd, 0x40, 0x4}, @jmp={0x5, 0x0, 0xd, 0x3, 0xb, 0x4, 0xb}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000780)='syzkaller\x00', 0x400, 0x60, &(0x7f00000007c0)=""/96, 0x41000, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x3, 0x7, 0x260d, 0x81}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000940)=[{0x2, 0x4, 0x5, 0x6}, {0x0, 0x1, 0x3, 0x8}, {0x5, 0x2, 0x2, 0x5}, {0x1, 0x2, 0x2, 0xc}, {0x0, 0x5, 0xe, 0xc}, {0x1, 0x2, 0x10, 0xc}, {0x3, 0x4, 0x6, 0x1}], 0x10, 0x28}, 0x94) sendmsg$inet(r8, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) sendmsg$inet(r6, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xac141410}, 0x10, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000c40)="d8000000100081044e81f782db44b904021d083909000000000000a1180015000600142603600e1209002100ff000401a80016000400144006000300036010fab94dcf5c0461c1d67f6f94007134c76ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9acbb1086dd673d809d5e1cace81ed0bffece0b42a9ecbee5de6ccbb0dd6e4edef3d93452a9295", 0xd8}], 0x1}, 0x4000084) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) write$cgroup_int(r9, &(0x7f0000000040)=0x1, 0x12) syz_clone(0x3002500, 0x0, 0x0, 0x0, 0x0, 0x0) 534.988998ms ago: executing program 0 (id=1280): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c13c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c77"], 0xfdef) close(r1) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004340000040"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r2}, 0x4) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@o_path={&(0x7f0000000080)='\x00', r2, 0x4000, r1}, 0x18) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xffbf) 312.179643ms ago: executing program 2 (id=1281): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xd, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000280)=""/213) r2 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0x2d2db, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x43e90bacaf4f4c62, @perf_bp={0x0}, 0x104260, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3ff, 0x0, 0x5}, 0x0, 0xffffffc000000000, r2, 0x0) 246.719325ms ago: executing program 0 (id=1282): perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0xd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x8042) r3 = socket$kcm(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60586507000c000300053582c137153e37000c0980fc0b100703", 0x2d}], 0x1}, 0x0) 125.377777ms ago: executing program 0 (id=1283): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600a40003401c000100035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYBLOB="0200000001"], 0x50) r4 = syz_clone(0x6202000, &(0x7f00000002c0)="b232fccc22fc9d055c306d06cf", 0xd, &(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)="3dbb905e73ee8a4608e2a3f952593690dec7373bb0993c77818a3be431c47a96d61a8c057c46fb4a00c17119cdfa6bb4f855f8cfe3ef") r5 = perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0xa, 0xb, 0x96, 0x1, 0x0, 0x5f, 0x0, 0x4dc578a75f055249, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x5, 0x6, 0x7, 0x8, 0x0, 0xfff7, 0x0, 0x81, 0x0, 0x8000}, r4, 0x0, r1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x42) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$kcm(0xa, 0x2, 0x3a) ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) 122.019957ms ago: executing program 2 (id=1284): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180)=r3, 0x17e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x22}}, &(0x7f0000000480)='GPL\x00'}, 0x80) 6.55896ms ago: executing program 3 (id=1285): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x80000001, 0x7, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x3, 0x28}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xff, 0xff, 0xfc, 0x0, 0x1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x0, 0x1, 0x4, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e22}}, 0x80, 0x0}, 0x20008044) close(r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117200000000008510001202000000850000004800000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x42, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x6}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r7, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f00000007c0)=[0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0], 0x0, 0x28, &(0x7f0000000880)=[{}, {}], 0x10, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0x74, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={r9}, 0x29) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x8, 0x1, &(0x7f00000001c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x5f, &(0x7f00000002c0)=""/95, 0x40f00, 0x5b, '\x00', 0x0, @fallback=0x27, r8, 0x8, &(0x7f0000000340)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r10, 0x2, &(0x7f00000003c0)=[r0, r0], &(0x7f0000000400)=[{0x1, 0x2, 0xa, 0x5}, {0x5, 0x2, 0x5, 0x2}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r8}, 0x94) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000500)=@base={0x6, 0x1000004, 0x37ad, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180200000400000000000000010000008500000041000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x100904, 0x401, 0x25, 0x0, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x22, 0x0, 0x0, 0x0, 0x0, 0x3, 0x37504, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={0x0, 0x8}, 0xf602, 0x6, 0x200, 0x4, 0x0, 0x6, 0x0, 0x0, 0xfffffffc}, 0x0, 0x5, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 0s ago: executing program 2 (id=1286): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0xffffffffffffff80}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x2, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432", 0x30}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x36}}, @ip_tos_u8={{0x11, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f00000000c0), 0x0}, 0x20) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001340), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x16) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_clone(0x8000000, &(0x7f00000006c0)="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", 0xc72, 0x0, &(0x7f0000001700), 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r6, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000304, &(0x7f0000001680)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f00000013c0)=[0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x43, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) r7 = getpid() perf_event_open(0x0, r7, 0xa, r4, 0x8) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') kernel console output (not intermixed with test programs): 5968] _copy_from_user+0x2f/0xe0 [ 76.669515][ T5968] __sys_bpf+0x23e/0x890 [ 76.673762][ T5968] ? bpf_link_show_fdinfo+0x390/0x390 [ 76.679144][ T5968] ? lock_chain_count+0x20/0x20 [ 76.683996][ T5968] __x64_sys_bpf+0x7c/0x90 [ 76.688408][ T5968] do_syscall_64+0x55/0xb0 [ 76.692849][ T5968] ? clear_bhb_loop+0x40/0x90 [ 76.697544][ T5968] ? clear_bhb_loop+0x40/0x90 [ 76.702220][ T5968] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 76.708109][ T5968] RIP: 0033:0x7fc6c7d9e019 [ 76.712537][ T5968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.732146][ T5968] RSP: 002b:00007fc6c8c7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 76.740556][ T5968] RAX: ffffffffffffffda RBX: 00007fc6c8025fa0 RCX: 00007fc6c7d9e019 [ 76.748528][ T5968] RDX: 0000000000000048 RSI: 0000200000000500 RDI: 000000000000000a [ 76.756499][ T5968] RBP: 00007fc6c8c7b090 R08: 0000000000000000 R09: 0000000000000000 [ 76.764468][ T5968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.772431][ T5968] R13: 00007fc6c8026038 R14: 00007fc6c8025fa0 R15: 00007ffee06c67d8 [ 76.780427][ T5968] [ 76.815561][ T5970] sit0: entered promiscuous mode [ 77.266233][ T5973] netlink: 'syz.3.40': attribute type 10 has an invalid length. [ 77.445510][ T5973] veth0_macvtap: left promiscuous mode [ 77.806862][ T5974] netlink: 'syz.1.41': attribute type 10 has an invalid length. [ 77.841303][ T5974] team0: Port device netdevsim0 added [ 78.155427][ T5987] netlink: 140 bytes leftover after parsing attributes in process `syz.3.47'. [ 78.323944][ T5991] netlink: 209588 bytes leftover after parsing attributes in process `syz.3.49'. [ 78.451224][ T5983] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.45'. [ 78.801118][ T5996] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.51'. [ 78.814015][ T5996] netlink: 22856 bytes leftover after parsing attributes in process `syz.2.51'. [ 79.343982][ T6011] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.55'. [ 79.538467][ T6011] netlink: 'syz.0.55': attribute type 21 has an invalid length. [ 79.598615][ T6011] netlink: 'syz.0.55': attribute type 3 has an invalid length. [ 80.177144][ T6017] vcan0: entered allmulticast mode [ 80.369422][ T6020] netlink: 'syz.2.56': attribute type 10 has an invalid length. [ 80.404651][ T6020] veth0_macvtap: left promiscuous mode [ 80.890550][ T6033] __nla_validate_parse: 1 callbacks suppressed [ 80.890565][ T6033] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.61'. [ 80.919660][ T6033] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.61'. [ 81.158616][ T6039] netlink: 'syz.1.63': attribute type 9 has an invalid length. [ 81.176270][ T6039] netlink: 'syz.1.63': attribute type 23 has an invalid length. [ 81.202359][ T6039] netlink: 156008 bytes leftover after parsing attributes in process `syz.1.63'. [ 81.395704][ T6039] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 81.408023][ T6039] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 81.601319][ T6044] netlink: 'syz.2.65': attribute type 33 has an invalid length. [ 81.618528][ T6044] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.65'. [ 81.633323][ T6046] netlink: 74908 bytes leftover after parsing attributes in process `syz.1.66'. [ 81.651466][ T6047] netlink: 60 bytes leftover after parsing attributes in process `syz.2.65'. [ 81.660894][ T6047] netlink: 60 bytes leftover after parsing attributes in process `syz.2.65'. [ 81.683641][ T6044] netlink: 60 bytes leftover after parsing attributes in process `syz.2.65'. [ 82.448871][ T6061] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.71'. [ 82.493397][ T6061] netlink: 22856 bytes leftover after parsing attributes in process `syz.2.71'. [ 82.666519][ T6074] netlink: 'syz.3.75': attribute type 10 has an invalid length. [ 82.674386][ T6074] openvswitch: netlink: Flow key attr not present in new flow. [ 82.715807][ T6077] netlink: 'syz.3.75': attribute type 10 has an invalid length. [ 82.736686][ T6077] openvswitch: netlink: Flow key attr not present in new flow. [ 82.784107][ T6082] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.595197][ T6111] netlink: 'syz.3.82': attribute type 21 has an invalid length. [ 83.769293][ T6111] netlink: 'syz.3.82': attribute type 3 has an invalid length. [ 85.240652][ T6148] warning: `syz.2.97' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 85.874797][ T6158] syzkaller0: entered promiscuous mode [ 85.883815][ T6158] syzkaller0: entered allmulticast mode [ 86.218583][ T6166] __nla_validate_parse: 9 callbacks suppressed [ 86.218598][ T6166] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.103'. [ 86.242085][ T6166] netlink: 22856 bytes leftover after parsing attributes in process `syz.2.103'. [ 86.496880][ T6180] netlink: 'syz.2.108': attribute type 3 has an invalid length. [ 86.513140][ T6180] netlink: 16795 bytes leftover after parsing attributes in process `syz.2.108'. [ 86.549012][ T6183] C: renamed from team_slave_0 (while UP) [ 86.559188][ T6183] netlink: 152 bytes leftover after parsing attributes in process `syz.2.108'. [ 86.583284][ T6174] syzkaller0: entered promiscuous mode [ 86.590736][ T6174] syzkaller0: entered allmulticast mode [ 86.818196][ T27] cfg80211: failed to load regulatory.db [ 87.234270][ T6265] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.116'. [ 87.272253][ T6265] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.116'. [ 87.465908][ T6275] netlink: 'syz.2.120': attribute type 29 has an invalid length. [ 87.560601][ T6279] netlink: 'syz.2.120': attribute type 29 has an invalid length. [ 88.016505][ T6279] netlink: 'syz.2.120': attribute type 29 has an invalid length. [ 88.060623][ T6278] netlink: 'syz.0.118': attribute type 4 has an invalid length. [ 88.078507][ T6278] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.118'. [ 88.094718][ T6280] netlink: 'syz.2.120': attribute type 21 has an invalid length. [ 88.105720][ T6280] netlink: 164 bytes leftover after parsing attributes in process `syz.2.120'. [ 88.707202][ T6296] netlink: 15007 bytes leftover after parsing attributes in process `syz.1.126'. [ 88.732206][ T6300] netlink: 'syz.0.127': attribute type 29 has an invalid length. [ 88.817380][ T6300] netlink: 'syz.0.127': attribute type 29 has an invalid length. [ 89.125114][ T6311] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.130'. [ 90.178651][ T6339] FAULT_INJECTION: forcing a failure. [ 90.178651][ T6339] name failslab, interval 1, probability 0, space 0, times 1 [ 90.212483][ T6339] CPU: 1 PID: 6339 Comm: syz.0.139 Not tainted syzkaller #0 [ 90.219838][ T6339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 90.229907][ T6339] Call Trace: [ 90.233204][ T6339] [ 90.236143][ T6339] dump_stack_lvl+0x18c/0x250 [ 90.240852][ T6339] ? show_regs_print_info+0x20/0x20 [ 90.246064][ T6339] ? load_image+0x420/0x420 [ 90.250620][ T6339] ? __might_sleep+0xe0/0xe0 [ 90.255261][ T6339] ? __lock_acquire+0x7d80/0x7d80 [ 90.260308][ T6339] should_fail_ex+0x394/0x4c0 [ 90.265016][ T6339] should_failslab+0x9/0x20 [ 90.269537][ T6339] slab_pre_alloc_hook+0x59/0x300 [ 90.274581][ T6339] ? tomoyo_encode+0x2ad/0x570 [ 90.279417][ T6339] ? tomoyo_encode+0x2ad/0x570 [ 90.284201][ T6339] __kmem_cache_alloc_node+0x53/0x250 [ 90.289602][ T6339] ? tomoyo_encode+0x2ad/0x570 [ 90.294380][ T6339] __kmalloc+0xa7/0x240 [ 90.298563][ T6339] tomoyo_encode+0x2ad/0x570 [ 90.303181][ T6339] tomoyo_realpath_from_path+0x57c/0x5c0 [ 90.308829][ T6339] ? tomoyo_domain+0xd6/0x120 [ 90.313509][ T6339] tomoyo_path_number_perm+0x248/0x5e0 [ 90.318962][ T6339] ? tomoyo_path_number_perm+0x217/0x5e0 [ 90.324595][ T6339] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 90.330049][ T6339] ? ksys_write+0x1d2/0x260 [ 90.334568][ T6339] ? __fget_files+0x28/0x460 [ 90.339165][ T6339] security_file_ioctl+0x70/0xa0 [ 90.344100][ T6339] __se_sys_ioctl+0x48/0x170 [ 90.348693][ T6339] do_syscall_64+0x55/0xb0 [ 90.353099][ T6339] ? clear_bhb_loop+0x40/0x90 [ 90.357771][ T6339] ? clear_bhb_loop+0x40/0x90 [ 90.362448][ T6339] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 90.368343][ T6339] RIP: 0033:0x7fcb14d9e019 [ 90.372748][ T6339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.392343][ T6339] RSP: 002b:00007fcb15d4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.400749][ T6339] RAX: ffffffffffffffda RBX: 00007fcb15025fa0 RCX: 00007fcb14d9e019 [ 90.408710][ T6339] RDX: 0000200000000140 RSI: 0000000000008914 RDI: 0000000000000004 [ 90.416702][ T6339] RBP: 00007fcb15d4e090 R08: 0000000000000000 R09: 0000000000000000 [ 90.424700][ T6339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.432658][ T6339] R13: 00007fcb15026038 R14: 00007fcb15025fa0 R15: 00007ffdccdd44c8 [ 90.440634][ T6339] [ 90.467008][ T6339] ERROR: Out of memory at tomoyo_realpath_from_path. [ 91.628539][ T6378] __nla_validate_parse: 6 callbacks suppressed [ 91.628573][ T6378] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.149'. [ 91.689131][ T6385] FAULT_INJECTION: forcing a failure. [ 91.689131][ T6385] name failslab, interval 1, probability 0, space 0, times 0 [ 91.706357][ T6385] CPU: 0 PID: 6385 Comm: syz.2.151 Not tainted syzkaller #0 [ 91.713680][ T6385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 91.723747][ T6385] Call Trace: [ 91.727041][ T6385] [ 91.729991][ T6385] dump_stack_lvl+0x18c/0x250 [ 91.734697][ T6385] ? show_regs_print_info+0x20/0x20 [ 91.739941][ T6385] ? load_image+0x420/0x420 [ 91.744480][ T6385] ? __might_sleep+0xe0/0xe0 [ 91.749093][ T6385] ? __lock_acquire+0x7d80/0x7d80 [ 91.754141][ T6385] should_fail_ex+0x394/0x4c0 [ 91.758845][ T6385] should_failslab+0x9/0x20 [ 91.763374][ T6385] slab_pre_alloc_hook+0x59/0x300 [ 91.768426][ T6385] ? tomoyo_encode+0x2ad/0x570 [ 91.773219][ T6385] ? tomoyo_encode+0x2ad/0x570 [ 91.778006][ T6385] __kmem_cache_alloc_node+0x53/0x250 [ 91.783412][ T6385] ? tomoyo_encode+0x2ad/0x570 [ 91.788197][ T6385] __kmalloc+0xa7/0x240 [ 91.792383][ T6385] tomoyo_encode+0x2ad/0x570 [ 91.797003][ T6385] tomoyo_realpath_from_path+0x57c/0x5c0 [ 91.802670][ T6385] ? tomoyo_domain+0xd6/0x120 [ 91.807380][ T6385] tomoyo_path_number_perm+0x248/0x5e0 [ 91.812865][ T6385] ? tomoyo_path_number_perm+0x217/0x5e0 [ 91.818523][ T6385] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 91.824006][ T6385] ? ksys_write+0x1d2/0x260 [ 91.828554][ T6385] ? __fget_files+0x28/0x460 [ 91.833160][ T6385] security_file_ioctl+0x70/0xa0 [ 91.838102][ T6385] __se_sys_ioctl+0x48/0x170 [ 91.842693][ T6385] do_syscall_64+0x55/0xb0 [ 91.847104][ T6385] ? clear_bhb_loop+0x40/0x90 [ 91.851773][ T6385] ? clear_bhb_loop+0x40/0x90 [ 91.856440][ T6385] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.862361][ T6385] RIP: 0033:0x7fc6c7d9e019 [ 91.866779][ T6385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.886374][ T6385] RSP: 002b:00007fc6c8c7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 91.894778][ T6385] RAX: ffffffffffffffda RBX: 00007fc6c8025fa0 RCX: 00007fc6c7d9e019 [ 91.902740][ T6385] RDX: 0000200000000140 RSI: 0000000000008914 RDI: 0000000000000004 [ 91.910701][ T6385] RBP: 00007fc6c8c7b090 R08: 0000000000000000 R09: 0000000000000000 [ 91.918666][ T6385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.926626][ T6385] R13: 00007fc6c8026038 R14: 00007fc6c8025fa0 R15: 00007ffee06c67d8 [ 91.934605][ T6385] [ 91.958858][ T6385] ERROR: Out of memory at tomoyo_realpath_from_path. [ 91.965664][ T6385] bond0: entered promiscuous mode [ 91.974220][ T6385] bond_slave_0: entered promiscuous mode [ 91.981291][ T6385] bond_slave_1: entered promiscuous mode [ 91.990399][ T6385] bond0: entered allmulticast mode [ 91.995649][ T6385] bond_slave_0: entered allmulticast mode [ 92.000882][ T6390] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.152'. [ 92.012333][ T6385] bond_slave_1: entered allmulticast mode [ 92.035599][ T6390] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.152'. [ 92.102500][ T6392] netlink: 'syz.1.154': attribute type 10 has an invalid length. [ 92.110641][ T6392] netlink: 55 bytes leftover after parsing attributes in process `syz.1.154'. [ 92.344013][ T6406] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 94.370556][ T6428] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.163'. [ 94.958918][ T6432] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.165'. [ 94.979238][ T6432] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.165'. [ 95.878662][ T6459] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.176'. [ 95.950859][ T6459] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.176'. [ 96.165005][ T6469] netlink: 'syz.0.178': attribute type 10 has an invalid length. [ 96.237733][ T6469] netlink: 40 bytes leftover after parsing attributes in process `syz.0.178'. [ 96.531482][ T6469] batman_adv: batadv0: Adding interface: virt_wifi0 [ 96.538851][ T6469] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.566732][ T6469] batman_adv: batadv0: Interface activated: virt_wifi0 [ 96.866738][ T6469] syz.0.178 (6469) used greatest stack depth: 19752 bytes left [ 97.121013][ T6485] Q±6ã`Ò˜: renamed from lo (while UP) [ 98.008544][ T6502] netlink: 164 bytes leftover after parsing attributes in process `syz.0.190'. [ 99.015728][ T6528] netlink: 'syz.0.205': attribute type 10 has an invalid length. [ 99.032115][ T6528] team0: Device ipvlan1 failed to register rx_handler [ 103.206680][ T6576] netlink: 'syz.3.211': attribute type 10 has an invalid length. [ 103.402006][ T6579] netlink: 'syz.3.211': attribute type 9 has an invalid length. [ 103.468415][ T6579] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.211'. [ 103.628341][ T6576] team0 (unregistering): Port device team_slave_0 removed [ 103.714999][ T6576] team0 (unregistering): Port device team_slave_1 removed [ 103.809779][ T6576] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.817459][ T6576] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.978743][ T6576] team0 (unregistering): Port device bridge0 removed [ 104.076448][ T6578] netlink: 'syz.3.211': attribute type 21 has an invalid length. [ 104.084640][ T6578] netlink: 156 bytes leftover after parsing attributes in process `syz.3.211'. [ 105.792120][ T6589] syzkaller0: entered promiscuous mode [ 105.812725][ T6589] syzkaller0: entered allmulticast mode [ 105.928499][ T6582] netlink: 'syz.3.211': attribute type 9 has an invalid length. [ 105.956459][ T6582] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.211'. [ 107.401436][ T6626] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 107.411169][ T6626] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 107.574734][ T6634] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 107.978914][ T6638] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.224'. [ 108.905428][ T6647] netlink: 'syz.2.226': attribute type 19 has an invalid length. [ 109.028103][ T6656] netlink: 'syz.1.229': attribute type 27 has an invalid length. [ 109.063291][ T6656] netlink: 'syz.1.229': attribute type 3 has an invalid length. [ 109.086899][ T6644] syz.0.225 (6644) used greatest stack depth: 18472 bytes left [ 109.148533][ T6660] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.231'. [ 109.234574][ T6658] syzkaller0: entered promiscuous mode [ 109.242310][ T6666] netlink: 56851 bytes leftover after parsing attributes in process `syz.0.232'. [ 109.259740][ T6658] syzkaller0: entered allmulticast mode [ 109.272457][ T6662] netlink: 'syz.0.232': attribute type 1 has an invalid length. [ 109.280346][ T6662] netlink: 'syz.0.232': attribute type 4 has an invalid length. [ 109.288187][ T6662] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.232'. [ 109.321860][ T6658] netlink: 'syz.2.230': attribute type 10 has an invalid length. [ 112.580437][ T6715] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.244'. [ 112.782683][ T6717] netlink: 'syz.1.245': attribute type 29 has an invalid length. [ 112.810453][ T6717] netlink: 'syz.1.245': attribute type 29 has an invalid length. [ 113.026175][ T6735] delete_channel: no stack [ 113.034254][ T6735] delete_channel: no stack [ 113.751629][ T6751] netlink: 'syz.2.255': attribute type 3 has an invalid length. [ 113.759459][ T6751] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.255'. [ 114.027668][ T6753] netlink: 16 bytes leftover after parsing attributes in process `syz.1.256'. [ 114.056343][ T6753] netlink: 128 bytes leftover after parsing attributes in process `syz.1.256'. [ 114.111502][ T6774] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.261'. [ 114.525895][ T6771] syzkaller0: entered promiscuous mode [ 114.536156][ T6771] syzkaller0: entered allmulticast mode [ 114.668269][ T6787] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.266'. [ 114.683867][ T6787] netlink: zone id is out of range [ 114.722350][ T6791] tap0: tun_chr_ioctl cmd 1074025673 [ 116.207261][ T6827] netlink: 'syz.0.283': attribute type 39 has an invalid length. [ 116.292735][ T6831] ref_ctr_offset mismatch. inode: 0x42 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 116.667088][ T6825] delete_channel: no stack [ 116.859295][ T6837] netlink: 16 bytes leftover after parsing attributes in process `syz.2.279'. [ 116.876448][ T6837] netlink: 128 bytes leftover after parsing attributes in process `syz.2.279'. [ 117.648903][ T6872] netlink: 'syz.2.291': attribute type 39 has an invalid length. [ 117.682227][ T6874] syz.0.290 uses obsolete (PF_INET,SOCK_PACKET) [ 117.861301][ T6875] ref_ctr_offset mismatch. inode: 0x7a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 118.392587][ T6888] netlink: 16 bytes leftover after parsing attributes in process `syz.3.294'. [ 118.418704][ T6870] delete_channel: no stack [ 118.428832][ T6888] netlink: 128 bytes leftover after parsing attributes in process `syz.3.294'. [ 118.649849][ T6898] netlink: 'syz.0.295': attribute type 10 has an invalid length. [ 118.687049][ T6898] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.764479][ T6898] bridge_slave_1: left allmulticast mode [ 118.812831][ T6898] bridge_slave_1: left promiscuous mode [ 118.847165][ T6898] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.921348][ T6898] bridge_slave_1: entered promiscuous mode [ 118.956924][ T6898] bridge_slave_1: entered allmulticast mode [ 118.986512][ T6898] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 119.313011][ T6912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.300'. [ 119.464013][ T6919] netlink: 'syz.0.302': attribute type 2 has an invalid length. [ 119.500277][ T6919] netlink: 132 bytes leftover after parsing attributes in process `syz.0.302'. [ 119.824696][ T6930] netlink: 'syz.3.305': attribute type 39 has an invalid length. [ 119.958697][ T6937] ref_ctr_offset mismatch. inode: 0x5e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 120.106557][ T6928] delete_channel: no stack [ 120.355080][ T6939] netlink: 'syz.2.308': attribute type 29 has an invalid length. [ 120.373782][ T6939] netlink: 'syz.2.308': attribute type 29 has an invalid length. [ 122.069810][ T6970] netlink: 'syz.2.316': attribute type 12 has an invalid length. [ 122.116156][ T6970] netlink: 132 bytes leftover after parsing attributes in process `syz.2.316'. [ 123.005826][ T6998] netlink: 'syz.3.324': attribute type 1 has an invalid length. [ 123.056137][ T6998] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.324'. [ 123.384960][ T7006] netlink: 'syz.2.321': attribute type 1 has an invalid length. [ 123.399137][ T7006] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.321'. [ 124.007863][ T7008] netlink: 16046 bytes leftover after parsing attributes in process `syz.3.327'. [ 124.629374][ T7030] veth1_to_batadv: entered allmulticast mode [ 124.997251][ T7042] netlink: 'syz.0.336': attribute type 1 has an invalid length. [ 125.004952][ T7042] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.336'. [ 125.291041][ T7044] netlink: 'syz.3.338': attribute type 1 has an invalid length. [ 125.313595][ T7044] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.338'. [ 125.853043][ T7056] syzkaller0: entered promiscuous mode [ 125.875354][ T7056] syzkaller0: entered allmulticast mode [ 125.928804][ T7062] netlink: 'syz.2.339': attribute type 2 has an invalid length. [ 126.286265][ T7062] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.339'. [ 128.498601][ T7127] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.348'. [ 128.763230][ T7143] netlink: 'syz.0.351': attribute type 21 has an invalid length. [ 128.803149][ T7143] netlink: 156 bytes leftover after parsing attributes in process `syz.0.351'. [ 128.963264][ T7143] sit0: left promiscuous mode [ 129.035826][ T7137] sit0: entered promiscuous mode [ 129.245820][ T7162] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.356'. [ 129.279121][ T7162] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.356'. [ 129.385491][ T7164] IPv6: NLM_F_CREATE should be specified when creating new route [ 129.403609][ T7164] netlink: 1 bytes leftover after parsing attributes in process `syz.0.357'. [ 129.463260][ T7164] tap0: tun_chr_ioctl cmd 2147767520 [ 129.541691][ T7169] syzkaller0: entered promiscuous mode [ 129.548220][ T7169] syzkaller0: entered allmulticast mode [ 131.393146][ T7179] netlink: 'syz.2.369': attribute type 1 has an invalid length. [ 131.682273][ T7185] netlink: 105940 bytes leftover after parsing attributes in process `syz.3.363'. [ 131.713503][ T7184] delete_channel: no stack [ 131.953608][ T7194] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.367'. [ 131.971236][ T7194] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.367'. [ 132.407857][ T7207] bond0: left promiscuous mode [ 132.412816][ T7207] bond_slave_0: left promiscuous mode [ 132.454426][ T7207] bond_slave_1: left promiscuous mode [ 132.472072][ T7214] netlink: 'syz.2.373': attribute type 29 has an invalid length. [ 132.503697][ T7207] bond0: left allmulticast mode [ 132.526610][ T7207] bond_slave_0: left allmulticast mode [ 132.554264][ T7207] bond_slave_1: left allmulticast mode [ 132.628213][ T7214] netlink: 'syz.2.373': attribute type 29 has an invalid length. [ 132.685034][ T7214] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.373'. [ 132.762114][ T7214] netlink: zone id is out of range [ 132.771045][ T7214] netlink: zone id is out of range [ 132.816260][ T7214] netlink: zone id is out of range [ 132.826702][ T7214] netlink: zone id is out of range [ 132.838723][ T7214] netlink: zone id is out of range [ 132.856835][ T7214] netlink: zone id is out of range [ 132.874602][ T7214] netlink: zone id is out of range [ 132.881504][ T7222] netlink: 'syz.3.375': attribute type 21 has an invalid length. [ 132.894565][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.894643][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.905155][ T7214] netlink: zone id is out of range [ 132.905184][ T7214] netlink: zone id is out of range [ 132.905192][ T7214] netlink: zone id is out of range [ 132.968376][ T7222] netlink: 156 bytes leftover after parsing attributes in process `syz.3.375'. [ 133.227114][ T7228] sit0: entered allmulticast mode [ 133.266559][ T7222] sit0: entered promiscuous mode [ 133.607919][ T7236] __nla_validate_parse: 1 callbacks suppressed [ 133.607936][ T7236] netlink: 22856 bytes leftover after parsing attributes in process `syz.0.379'. [ 133.628695][ T7238] netlink: 'syz.1.380': attribute type 1 has an invalid length. [ 133.662073][ T7238] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.380'. [ 133.696299][ T7238] netlink: 'syz.1.380': attribute type 1 has an invalid length. [ 133.879456][ T7248] netlink: 'syz.3.383': attribute type 10 has an invalid length. [ 133.991677][ T7251] bond0: left promiscuous mode [ 134.026120][ T7251] bond_slave_0: left promiscuous mode [ 134.032247][ T7251] bond_slave_1: left promiscuous mode [ 134.057117][ T7251] bridge_slave_1: left promiscuous mode [ 134.068726][ T7251] bond0: left allmulticast mode [ 134.073887][ T7251] bond_slave_0: left allmulticast mode [ 134.086971][ T7251] bond_slave_1: left allmulticast mode [ 134.093689][ T7251] bridge_slave_1: left allmulticast mode [ 134.416236][ T7271] netlink: 'syz.2.387': attribute type 39 has an invalid length. [ 134.479805][ T5773] Bluetooth: hci3: ISO packet for unknown connection handle 5 [ 134.564978][ T7276] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.390'. [ 135.206932][ T7280] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.387'. [ 135.567453][ T7276] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.390'. [ 135.600667][ T7280] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.387'. [ 135.878890][ T7290] netlink: 'syz.1.392': attribute type 21 has an invalid length. [ 135.903855][ T7290] netlink: 156 bytes leftover after parsing attributes in process `syz.1.392'. [ 136.176180][ T7295] sit0: left promiscuous mode [ 136.381919][ T7300] sit0: entered promiscuous mode [ 136.878709][ T7306] syzkaller0: entered promiscuous mode [ 136.884233][ T7306] syzkaller0: entered allmulticast mode [ 136.892114][ T7313] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.400'. [ 138.845534][ T7313] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.400'. [ 138.854923][ T7318] netlink: 'syz.2.402': attribute type 21 has an invalid length. [ 138.863666][ T7322] netlink: 144 bytes leftover after parsing attributes in process `syz.0.403'. [ 139.009671][ T7322] team0: Port device team_slave_0 removed [ 139.015900][ T7322] net_ratelimit: 43 callbacks suppressed [ 139.015912][ T7322] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 139.077670][ T7324] netlink: 'syz.0.403': attribute type 21 has an invalid length. [ 139.085690][ T7324] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.403'. [ 139.099827][ T7326] netlink: 'syz.2.404': attribute type 2 has an invalid length. [ 139.108750][ T7326] netlink: 119 bytes leftover after parsing attributes in process `syz.2.404'. [ 139.222495][ T7334] netlink: 'syz.1.405': attribute type 3 has an invalid length. [ 139.245688][ T7337] netlink: 'syz.3.407': attribute type 1 has an invalid length. [ 139.247116][ T7334] netlink: 'syz.1.405': attribute type 1 has an invalid length. [ 139.293688][ T7342] netlink: 'syz.0.408': attribute type 33 has an invalid length. [ 139.303826][ T7334] netlink: 133800 bytes leftover after parsing attributes in process `syz.1.405'. [ 139.317981][ T7342] netlink: 152 bytes leftover after parsing attributes in process `syz.0.408'. [ 139.335859][ T7342] `: renamed from ip6tnl0 (while UP) [ 139.405140][ T7342] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 139.445337][ T7349] netlink: 'syz.3.410': attribute type 9 has an invalid length. [ 139.459366][ T7349] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.410'. [ 139.483421][ T7347] netlink: 'syz.3.410': attribute type 3 has an invalid length. [ 139.523537][ T7347] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.410'. [ 139.729639][ T7360] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.413'. [ 139.783537][ T7360] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.413'. [ 140.257184][ T7377] bridge_slave_1: left allmulticast mode [ 140.262890][ T7377] bridge_slave_1: left promiscuous mode [ 140.371388][ T7377] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.577354][ T7377] bridge_slave_0: left allmulticast mode [ 140.606100][ T7377] bridge_slave_0: left promiscuous mode [ 140.666173][ T7377] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.916567][ T7377] team0: Port device bridge0 removed [ 141.044427][ T7390] netlink: 'syz.3.422': attribute type 21 has an invalid length. [ 142.212693][ T7423] netlink: 'syz.3.432': attribute type 3 has an invalid length. [ 142.238405][ T7419] syzkaller0: entered promiscuous mode [ 144.153464][ T7434] __nla_validate_parse: 7 callbacks suppressed [ 144.153478][ T7434] netlink: 22856 bytes leftover after parsing attributes in process `syz.0.436'. [ 144.306338][ T7446] netlink: 'syz.2.440': attribute type 21 has an invalid length. [ 144.327486][ T7446] netlink: 'syz.2.440': attribute type 3 has an invalid length. [ 144.354899][ T7446] netlink: 'syz.2.440': attribute type 16 has an invalid length. [ 144.377059][ T7446] netlink: 132 bytes leftover after parsing attributes in process `syz.2.440'. [ 144.390400][ T7451] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.443'. [ 144.556283][ T7457] netlink: 'syz.0.444': attribute type 21 has an invalid length. [ 144.575729][ T7457] netlink: 'syz.0.444': attribute type 1 has an invalid length. [ 144.600705][ T7457] netlink: 144 bytes leftover after parsing attributes in process `syz.0.444'. [ 144.716755][ T7460] sock: sock_timestamping_bind_phc: sock not bind to device [ 144.750941][ T7457] netlink: 40 bytes leftover after parsing attributes in process `syz.0.444'. [ 144.811176][ T7457] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.951914][ T7463] can: request_module (can-proto-0) failed. [ 144.983836][ T7457] bridge_slave_0 (unregistering): left allmulticast mode [ 145.005708][ T7457] bridge_slave_0 (unregistering): left promiscuous mode [ 145.015827][ T7457] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.272100][ T7462] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.446'. [ 145.283442][ T7459] netlink: 132 bytes leftover after parsing attributes in process `syz.1.445'. [ 145.562344][ T7477] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.449'. [ 145.612442][ T7477] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.449'. [ 146.173392][ T7504] netlink: 'syz.0.460': attribute type 21 has an invalid length. [ 146.188095][ T7504] netlink: 'syz.0.460': attribute type 21 has an invalid length. [ 146.228671][ T7504] netlink: 176 bytes leftover after parsing attributes in process `syz.0.460'. [ 146.543120][ T7521] netlink: 'syz.0.466': attribute type 5 has an invalid length. [ 146.617473][ T7525] netlink: 'syz.0.466': attribute type 11 has an invalid length. [ 146.629644][ T7525] netlink: 'syz.0.466': attribute type 2 has an invalid length. [ 147.471910][ T7565] FAULT_INJECTION: forcing a failure. [ 147.471910][ T7565] name failslab, interval 1, probability 0, space 0, times 0 [ 147.507558][ T7565] CPU: 1 PID: 7565 Comm: syz.2.481 Not tainted syzkaller #0 [ 147.514885][ T7565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 147.524962][ T7565] Call Trace: [ 147.528262][ T7565] [ 147.531203][ T7565] dump_stack_lvl+0x18c/0x250 [ 147.535919][ T7565] ? show_regs_print_info+0x20/0x20 [ 147.541134][ T7565] ? load_image+0x420/0x420 [ 147.545662][ T7565] ? __might_sleep+0xe0/0xe0 [ 147.550316][ T7565] ? __lock_acquire+0x7d80/0x7d80 [ 147.555365][ T7565] should_fail_ex+0x394/0x4c0 [ 147.560068][ T7565] should_failslab+0x9/0x20 [ 147.564598][ T7565] slab_pre_alloc_hook+0x59/0x300 [ 147.569649][ T7565] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 147.575395][ T7565] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 147.581139][ T7565] __kmem_cache_alloc_node+0x53/0x250 [ 147.586539][ T7565] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 147.592282][ T7565] __kmalloc+0xa7/0x240 [ 147.596461][ T7565] tomoyo_realpath_from_path+0xe6/0x5c0 [ 147.602032][ T7565] ? tomoyo_domain+0xd6/0x120 [ 147.606772][ T7565] tomoyo_path_number_perm+0x248/0x5e0 [ 147.612248][ T7565] ? tomoyo_path_number_perm+0x217/0x5e0 [ 147.617883][ T7565] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 147.623368][ T7565] ? ksys_write+0x1d2/0x260 [ 147.627935][ T7565] ? __fget_files+0x28/0x460 [ 147.632566][ T7565] security_file_ioctl+0x70/0xa0 [ 147.637525][ T7565] __se_sys_ioctl+0x48/0x170 [ 147.642134][ T7565] do_syscall_64+0x55/0xb0 [ 147.646565][ T7565] ? clear_bhb_loop+0x40/0x90 [ 147.651256][ T7565] ? clear_bhb_loop+0x40/0x90 [ 147.655955][ T7565] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 147.661880][ T7565] RIP: 0033:0x7fc6c7d9e019 [ 147.666312][ T7565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.685928][ T7565] RSP: 002b:00007fc6c8c7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 147.694356][ T7565] RAX: ffffffffffffffda RBX: 00007fc6c8025fa0 RCX: 00007fc6c7d9e019 [ 147.702339][ T7565] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 147.710317][ T7565] RBP: 00007fc6c8c7b090 R08: 0000000000000000 R09: 0000000000000000 [ 147.718286][ T7565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.726263][ T7565] R13: 00007fc6c8026038 R14: 00007fc6c8025fa0 R15: 00007ffee06c67d8 [ 147.734249][ T7565] [ 147.742242][ T7565] ERROR: Out of memory at tomoyo_realpath_from_path. [ 147.749065][ T7565] bond0: left promiscuous mode [ 147.753949][ T7565] bond_slave_0: left promiscuous mode [ 147.759684][ T7565] bond_slave_1: left promiscuous mode [ 147.765685][ T7565] bond0: left allmulticast mode [ 147.770692][ T7565] bond_slave_0: left allmulticast mode [ 147.776945][ T7565] bond_slave_1: left allmulticast mode [ 148.759964][ T7602] FAULT_INJECTION: forcing a failure. [ 148.759964][ T7602] name failslab, interval 1, probability 0, space 0, times 0 [ 148.773031][ T7602] CPU: 0 PID: 7602 Comm: syz.0.495 Not tainted syzkaller #0 [ 148.780366][ T7602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.790435][ T7602] Call Trace: [ 148.793730][ T7602] [ 148.796679][ T7602] dump_stack_lvl+0x18c/0x250 [ 148.801383][ T7602] ? show_regs_print_info+0x20/0x20 [ 148.806608][ T7602] ? load_image+0x420/0x420 [ 148.811146][ T7602] ? __might_sleep+0xe0/0xe0 [ 148.815758][ T7602] ? __lock_acquire+0x7d80/0x7d80 [ 148.820809][ T7602] should_fail_ex+0x394/0x4c0 [ 148.825523][ T7602] should_failslab+0x9/0x20 [ 148.830056][ T7602] slab_pre_alloc_hook+0x59/0x300 [ 148.835133][ T7602] ? tomoyo_encode+0x2ad/0x570 [ 148.839922][ T7602] ? tomoyo_encode+0x2ad/0x570 [ 148.844699][ T7602] __kmem_cache_alloc_node+0x53/0x250 [ 148.850111][ T7602] ? tomoyo_encode+0x2ad/0x570 [ 148.854896][ T7602] __kmalloc+0xa7/0x240 [ 148.859081][ T7602] tomoyo_encode+0x2ad/0x570 [ 148.863672][ T7602] tomoyo_realpath_from_path+0x57c/0x5c0 [ 148.869300][ T7602] ? tomoyo_domain+0xd6/0x120 [ 148.873977][ T7602] tomoyo_path_number_perm+0x248/0x5e0 [ 148.879427][ T7602] ? tomoyo_path_number_perm+0x217/0x5e0 [ 148.885092][ T7602] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 148.890541][ T7602] ? trace_call_bpf+0xc3/0x6c0 [ 148.895297][ T7602] ? trace_call_bpf+0xc3/0x6c0 [ 148.900050][ T7602] ? trace_call_bpf+0x5e9/0x6c0 [ 148.904910][ T7602] ? __fget_files+0x28/0x460 [ 148.909501][ T7602] security_file_ioctl+0x70/0xa0 [ 148.914433][ T7602] __se_sys_ioctl+0x48/0x170 [ 148.919017][ T7602] do_syscall_64+0x55/0xb0 [ 148.923424][ T7602] ? clear_bhb_loop+0x40/0x90 [ 148.928103][ T7602] ? clear_bhb_loop+0x40/0x90 [ 148.932771][ T7602] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 148.938652][ T7602] RIP: 0033:0x7fcb14d9e019 [ 148.943056][ T7602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.962650][ T7602] RSP: 002b:00007fcb15d4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 148.971052][ T7602] RAX: ffffffffffffffda RBX: 00007fcb15025fa0 RCX: 00007fcb14d9e019 [ 148.979023][ T7602] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 148.986983][ T7602] RBP: 00007fcb15d4e090 R08: 0000000000000000 R09: 0000000000000000 [ 148.994943][ T7602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.002901][ T7602] R13: 00007fcb15026038 R14: 00007fcb15025fa0 R15: 00007ffdccdd44c8 [ 149.010873][ T7602] [ 149.106423][ T7602] ERROR: Out of memory at tomoyo_realpath_from_path. [ 149.239827][ T7607] __nla_validate_parse: 74 callbacks suppressed [ 149.239841][ T7607] netlink: 112 bytes leftover after parsing attributes in process `syz.0.498'. [ 149.382122][ T7611] netlink: 60 bytes leftover after parsing attributes in process `syz.1.499'. [ 149.431152][ T7611] netlink: 60 bytes leftover after parsing attributes in process `syz.1.499'. [ 149.971658][ T7618] validate_nla: 3 callbacks suppressed [ 149.971674][ T7618] netlink: 'syz.0.501': attribute type 9 has an invalid length. [ 149.985532][ T7618] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.501'. [ 150.099875][ T7620] netlink: 'syz.0.501': attribute type 9 has an invalid length. [ 150.110874][ T7620] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.501'. [ 150.405768][ T7632] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.505'. [ 150.476975][ T7634] FAULT_INJECTION: forcing a failure. [ 150.476975][ T7634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.494721][ T7634] CPU: 1 PID: 7634 Comm: syz.0.506 Not tainted syzkaller #0 [ 150.502035][ T7634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 150.512098][ T7634] Call Trace: [ 150.515417][ T7634] [ 150.518344][ T7634] dump_stack_lvl+0x18c/0x250 [ 150.523025][ T7634] ? show_regs_print_info+0x20/0x20 [ 150.528222][ T7634] ? load_image+0x420/0x420 [ 150.532724][ T7634] ? __might_fault+0xaa/0x120 [ 150.537394][ T7634] ? __lock_acquire+0x7d80/0x7d80 [ 150.542408][ T7634] ? unix_ioctl+0x259/0x6b0 [ 150.546906][ T7634] should_fail_ex+0x394/0x4c0 [ 150.551580][ T7634] _copy_from_user+0x2f/0xe0 [ 150.556160][ T7634] sock_do_ioctl+0x190/0x310 [ 150.560743][ T7634] ? sock_show_fdinfo+0xb0/0xb0 [ 150.565594][ T7634] sock_ioctl+0x5be/0x7e0 [ 150.569927][ T7634] ? sock_poll+0x3e0/0x3e0 [ 150.574344][ T7634] ? bpf_lsm_file_ioctl+0x9/0x10 [ 150.579274][ T7634] ? security_file_ioctl+0x80/0xa0 [ 150.584380][ T7634] ? sock_poll+0x3e0/0x3e0 [ 150.588785][ T7634] __se_sys_ioctl+0xfd/0x170 [ 150.593375][ T7634] do_syscall_64+0x55/0xb0 [ 150.597785][ T7634] ? clear_bhb_loop+0x40/0x90 [ 150.602449][ T7634] ? clear_bhb_loop+0x40/0x90 [ 150.607117][ T7634] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 150.613000][ T7634] RIP: 0033:0x7fcb14d9e019 [ 150.617406][ T7634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.637002][ T7634] RSP: 002b:00007fcb15d4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 150.645406][ T7634] RAX: ffffffffffffffda RBX: 00007fcb15025fa0 RCX: 00007fcb14d9e019 [ 150.653370][ T7634] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 150.661331][ T7634] RBP: 00007fcb15d4e090 R08: 0000000000000000 R09: 0000000000000000 [ 150.669288][ T7634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.677249][ T7634] R13: 00007fcb15026038 R14: 00007fcb15025fa0 R15: 00007ffdccdd44c8 [ 150.685239][ T7634] [ 150.935321][ T7644] netlink: 'syz.0.511': attribute type 1 has an invalid length. [ 151.393959][ T7663] FAULT_INJECTION: forcing a failure. [ 151.393959][ T7663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.420676][ T7663] CPU: 0 PID: 7663 Comm: syz.2.516 Not tainted syzkaller #0 [ 151.428020][ T7663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 151.438080][ T7663] Call Trace: [ 151.441356][ T7663] [ 151.444296][ T7663] dump_stack_lvl+0x18c/0x250 [ 151.448986][ T7663] ? show_regs_print_info+0x20/0x20 [ 151.454181][ T7663] ? load_image+0x420/0x420 [ 151.458690][ T7663] ? __lock_acquire+0x7d80/0x7d80 [ 151.463707][ T7663] ? snprintf+0xe9/0x140 [ 151.467944][ T7663] should_fail_ex+0x394/0x4c0 [ 151.472639][ T7663] _copy_to_user+0x2f/0xa0 [ 151.477090][ T7663] simple_read_from_buffer+0xe7/0x150 [ 151.482458][ T7663] proc_fail_nth_read+0x1e8/0x260 [ 151.487480][ T7663] ? proc_fault_inject_write+0x360/0x360 [ 151.493109][ T7663] ? fsnotify_perm+0x271/0x5e0 [ 151.497866][ T7663] ? proc_fault_inject_write+0x360/0x360 [ 151.503491][ T7663] vfs_read+0x298/0x990 [ 151.507644][ T7663] ? kernel_read+0x1e0/0x1e0 [ 151.512238][ T7663] ? __fget_files+0x28/0x460 [ 151.516827][ T7663] ? __fget_files+0x3fc/0x460 [ 151.521539][ T7663] ? __fdget_pos+0x2a3/0x330 [ 151.526133][ T7663] ? ksys_read+0x74/0x260 [ 151.530460][ T7663] ksys_read+0x151/0x260 [ 151.534714][ T7663] ? vfs_write+0x9a0/0x9a0 [ 151.539125][ T7663] ? lockdep_hardirqs_on+0x98/0x150 [ 151.544318][ T7663] do_syscall_64+0x55/0xb0 [ 151.548724][ T7663] ? clear_bhb_loop+0x40/0x90 [ 151.553393][ T7663] ? clear_bhb_loop+0x40/0x90 [ 151.558066][ T7663] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 151.564001][ T7663] RIP: 0033:0x7fc6c7d5e84e [ 151.568405][ T7663] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 151.588001][ T7663] RSP: 002b:00007fc6c8c7afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 151.596402][ T7663] RAX: ffffffffffffffda RBX: 00007fc6c8c7b6c0 RCX: 00007fc6c7d5e84e [ 151.604365][ T7663] RDX: 000000000000000f RSI: 00007fc6c8c7b0a0 RDI: 0000000000000005 [ 151.612326][ T7663] RBP: 00007fc6c8c7b090 R08: 0000000000000000 R09: 0000000000000000 [ 151.620288][ T7663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.628252][ T7663] R13: 00007fc6c8026038 R14: 00007fc6c8025fa0 R15: 00007ffee06c67d8 [ 151.636221][ T7663] [ 151.903860][ T7680] netlink: 64771 bytes leftover after parsing attributes in process `syz.3.522'. [ 152.344765][ T7696] netlink: 'syz.2.527': attribute type 21 has an invalid length. [ 152.353862][ T7696] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.527'. [ 152.466318][ T7700] syz.0.529[7700] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.466632][ T7700] syz.0.529[7700] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.690054][ T7713] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.533'. [ 152.746971][ T7715] netlink: 'syz.0.534': attribute type 39 has an invalid length. [ 152.825488][ T5773] Bluetooth: hci2: unexpected event 0x04 length: 151 > 10 [ 152.913390][ T7717] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.535'. [ 153.115330][ T7734] lo: entered allmulticast mode [ 153.146429][ T7732] lo: entered promiscuous mode [ 153.151511][ T7732] lo: left allmulticast mode [ 153.772116][ T7752] netlink: 'syz.1.544': attribute type 3 has an invalid length. [ 153.905876][ T7757] netlink: 'syz.2.545': attribute type 10 has an invalid length. [ 154.274437][ T7776] netlink: 'syz.3.551': attribute type 10 has an invalid length. [ 154.886208][ T5773] Bluetooth: hci2: command tx timeout [ 155.169940][ T7788] __nla_validate_parse: 8 callbacks suppressed [ 155.169956][ T7788] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.556'. [ 155.491427][ T7798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.559'. [ 155.813766][ T7806] netlink: 'syz.0.561': attribute type 29 has an invalid length. [ 155.882885][ T7806] netlink: 'syz.0.561': attribute type 29 has an invalid length. [ 155.942387][ T7803] netlink: 'syz.0.561': attribute type 29 has an invalid length. [ 155.945739][ T7809] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.563'. [ 155.985612][ T7803] netlink: 'syz.0.561': attribute type 29 has an invalid length. [ 156.441898][ T7815] netlink: 'syz.1.565': attribute type 21 has an invalid length. [ 156.460378][ T7815] netlink: 'syz.1.565': attribute type 1 has an invalid length. [ 156.477923][ T7815] netlink: 144 bytes leftover after parsing attributes in process `syz.1.565'. [ 156.957835][ T7829] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.571'. [ 157.388382][ T7840] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.576'. [ 157.579368][ T7847] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.578'. [ 158.447871][ T7873] netlink: 'syz.3.583': attribute type 1 has an invalid length. [ 158.527080][ T7873] netlink: 176 bytes leftover after parsing attributes in process `syz.3.583'. [ 158.636307][ T7877] netlink: 55399 bytes leftover after parsing attributes in process `syz.3.583'. [ 160.434162][ T7894] netlink: 'syz.3.589': attribute type 29 has an invalid length. [ 160.443612][ T7894] netlink: 'syz.3.589': attribute type 29 has an invalid length. [ 160.536301][ T7894] netlink: 'syz.3.589': attribute type 29 has an invalid length. [ 161.175343][ T7923] validate_nla: 2 callbacks suppressed [ 161.175380][ T7923] netlink: 'syz.3.600': attribute type 29 has an invalid length. [ 161.203494][ T7926] netlink: 'syz.3.600': attribute type 29 has an invalid length. [ 161.305149][ T7923] netlink: 'syz.3.600': attribute type 29 has an invalid length. [ 161.523121][ T7937] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.603'. [ 161.670672][ T7943] netlink: 60 bytes leftover after parsing attributes in process `syz.0.607'. [ 161.716212][ T7943] netlink: 60 bytes leftover after parsing attributes in process `syz.0.607'. [ 161.726584][ T7948] netlink: 60 bytes leftover after parsing attributes in process `syz.0.607'. [ 161.806710][ T7943] netlink: 60 bytes leftover after parsing attributes in process `syz.0.607'. [ 162.233516][ T7955] IPv6: Can't replace route, no match found [ 162.360958][ T7958] netlink: 'syz.1.611': attribute type 4 has an invalid length. [ 162.403763][ T7958] netlink: 192092 bytes leftover after parsing attributes in process `syz.1.611'. [ 162.745833][ T7974] netlink: 160 bytes leftover after parsing attributes in process `syz.0.615'. [ 164.064686][ T8021] netlink: 132 bytes leftover after parsing attributes in process `syz.2.629'. [ 164.938608][ T8038] netlink: 'syz.1.635': attribute type 12 has an invalid length. [ 164.956138][ T8038] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.635'. [ 165.034196][ T8038] netlink: 168 bytes leftover after parsing attributes in process `syz.1.635'. [ 166.527389][ T8080] netlink: 'syz.0.649': attribute type 10 has an invalid length. [ 166.567455][ T8080] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 166.868353][ T8090] __nla_validate_parse: 1 callbacks suppressed [ 166.868387][ T8090] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.652'. [ 167.825763][ T8107] netlink: 'syz.1.658': attribute type 21 has an invalid length. [ 167.856622][ T8107] netlink: 164 bytes leftover after parsing attributes in process `syz.1.658'. [ 168.503148][ T8131] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.663'. [ 168.973144][ T8147] netlink: 'syz.3.667': attribute type 21 has an invalid length. [ 169.401036][ T8159] netlink: 184 bytes leftover after parsing attributes in process `syz.0.669'. [ 170.043525][ T8162] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.670'. [ 170.064811][ T8162] openvswitch: netlink: IP tunnel dst address not specified [ 170.096942][ T8172] netlink: 60260 bytes leftover after parsing attributes in process `syz.3.672'. [ 170.106790][ T8172] openvswitch: netlink: Tunnel attr 8545 out of range max 16 [ 170.644517][ T8192] netlink: 132 bytes leftover after parsing attributes in process `syz.2.679'. [ 170.828974][ T8192] netlink: 'syz.2.679': attribute type 1 has an invalid length. [ 171.251404][ T8209] netlink: 184 bytes leftover after parsing attributes in process `syz.1.684'. [ 172.026961][ T8232] netlink: 'syz.3.689': attribute type 10 has an invalid length. [ 172.183284][ T8232] bridge_slave_1: left allmulticast mode [ 172.226252][ T8232] bridge_slave_1: left promiscuous mode [ 172.258085][ T8232] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.346631][ T8232] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 172.414144][ T8241] veth1_to_bond: entered allmulticast mode [ 172.494682][ T8244] netlink: 'syz.0.692': attribute type 17 has an invalid length. [ 172.698641][ T8247] netlink: 'syz.0.694': attribute type 21 has an invalid length. [ 174.025078][ T8273] syzkaller0: entered promiscuous mode [ 174.040898][ T8273] syzkaller0: entered allmulticast mode [ 174.386207][ T8285] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.708'. [ 174.451685][ T8285] openvswitch: netlink: Message has 20476 unknown bytes. [ 174.661802][ T8293] netlink: 169948 bytes leftover after parsing attributes in process `syz.3.710'. [ 175.117697][ T8302] sit0: left promiscuous mode [ 175.220240][ T8311] netlink: 'syz.0.714': attribute type 29 has an invalid length. [ 176.312086][ T8308] netlink: 14546 bytes leftover after parsing attributes in process `syz.3.715'. [ 176.337534][ T8309] sit0: entered promiscuous mode [ 176.481029][ T8311] netlink: 'syz.0.714': attribute type 29 has an invalid length. [ 176.496710][ T8312] netlink: 132 bytes leftover after parsing attributes in process `syz.0.714'. [ 176.505911][ T8321] netlink: 'syz.3.717': attribute type 2 has an invalid length. [ 176.531494][ T8321] netlink: 132 bytes leftover after parsing attributes in process `syz.3.717'. [ 176.699602][ T8326] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.719'. [ 176.736309][ T8326] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.719'. [ 176.762282][ T8333] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.719'. [ 177.142609][ T8338] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.721'. [ 178.219713][ T8344] netlink: 'syz.1.725': attribute type 29 has an invalid length. [ 179.341653][ T8344] netlink: 'syz.1.725': attribute type 29 has an invalid length. [ 179.559275][ T8353] netlink: 160 bytes leftover after parsing attributes in process `syz.1.728'. [ 179.643197][ T8351] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.727'. [ 179.657103][ T8353] A link change request failed with some changes committed already. Interface Q±6ã`Ò˜ may have been left with an inconsistent configuration, please check. [ 180.040924][ T8369] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.731'. [ 181.257463][ T8377] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.734'. [ 181.783191][ T8384] syzkaller0: entered promiscuous mode [ 181.822858][ T8391] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.843830][ T8389] netlink: 'syz.1.737': attribute type 10 has an invalid length. [ 181.852427][ T8389] netlink: 2 bytes leftover after parsing attributes in process `syz.1.737'. [ 181.873704][ T8389] hsr0: entered promiscuous mode [ 183.440027][ T8403] netlink: 14 bytes leftover after parsing attributes in process `syz.1.741'. [ 183.468518][ T8419] syzkaller0: entered promiscuous mode [ 183.491178][ T8419] syzkaller0: entered allmulticast mode [ 183.916923][ T8435] netlink: 132 bytes leftover after parsing attributes in process `syz.3.748'. [ 184.098907][ T8435] syzkaller0: entered promiscuous mode [ 184.108230][ T8435] syzkaller0: entered allmulticast mode [ 184.115061][ T8437] netlink: 'syz.2.749': attribute type 10 has an invalid length. [ 184.123731][ T8437] bridge_slave_1: left allmulticast mode [ 184.138709][ T8437] bridge_slave_1: left promiscuous mode [ 184.144714][ T8437] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.592596][ T8459] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.755'. [ 185.613384][ T8459] netlink: 'syz.1.755': attribute type 33 has an invalid length. [ 185.621233][ T8459] netlink: 'syz.1.755': attribute type 1 has an invalid length. [ 185.634189][ T8459] netlink: 198048 bytes leftover after parsing attributes in process `syz.1.755'. [ 186.178298][ T5783] Bluetooth: hci0: command 0x0406 tx timeout [ 186.178835][ T5781] Bluetooth: hci1: command 0x0406 tx timeout [ 186.184416][ T5783] Bluetooth: hci2: command 0x0406 tx timeout [ 186.197012][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 187.321283][ T8478] netlink: 'syz.3.760': attribute type 3 has an invalid length. [ 187.340514][ T8478] netlink: 'syz.3.760': attribute type 1 has an invalid length. [ 187.356438][ T8478] netlink: 150424 bytes leftover after parsing attributes in process `syz.3.760'. [ 190.342538][ T8495] netlink: 'syz.2.762': attribute type 10 has an invalid length. [ 190.399595][ T8495] netlink: 2 bytes leftover after parsing attributes in process `syz.2.762'. [ 190.448479][ T8495] hsr0: entered promiscuous mode [ 190.489136][ T8495] bridge0: port 2(hsr0) entered blocking state [ 190.534169][ T8495] bridge0: port 2(hsr0) entered disabled state [ 190.541406][ T8495] hsr0: entered allmulticast mode [ 190.551124][ T8495] hsr_slave_0: entered allmulticast mode [ 190.561651][ T8495] hsr_slave_1: entered allmulticast mode [ 190.583210][ T8495] bridge0: port 2(hsr0) entered blocking state [ 190.589588][ T8495] bridge0: port 2(hsr0) entered forwarding state [ 192.866628][ T8535] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.776'. [ 192.986886][ T8537] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.777'. [ 193.138527][ T8541] netlink: 'syz.3.778': attribute type 1 has an invalid length. [ 193.154327][ T8541] netlink: 60 bytes leftover after parsing attributes in process `syz.3.778'. [ 193.203531][ T8543] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.779'. [ 193.246208][ T8543] netlink: 'syz.2.779': attribute type 1 has an invalid length. [ 193.265458][ T8543] netlink: 16520 bytes leftover after parsing attributes in process `syz.2.779'. [ 193.587079][ T8558] syz.2.783 (8558) used obsolete PPPIOCDETACH ioctl [ 194.358380][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.364724][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.510501][ T8572] netlink: 'syz.1.788': attribute type 10 has an invalid length. [ 194.662638][ T8572] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link [ 195.134246][ T8596] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.795'. [ 195.593518][ T8613] netlink: 'syz.0.800': attribute type 21 has an invalid length. [ 195.905055][ T8617] netlink: 'syz.2.802': attribute type 10 has an invalid length. [ 196.085544][ T8617] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link [ 196.585484][ T8624] netlink: 'syz.0.804': attribute type 21 has an invalid length. [ 196.605521][ T8624] netlink: 'syz.0.804': attribute type 6 has an invalid length. [ 196.631382][ T8624] netlink: 132 bytes leftover after parsing attributes in process `syz.0.804'. [ 197.092544][ T8635] netlink: 'syz.2.808': attribute type 29 has an invalid length. [ 197.100636][ T8635] netlink: 'syz.2.808': attribute type 29 has an invalid length. [ 197.110047][ T8635] netlink: 'syz.2.808': attribute type 29 has an invalid length. [ 197.358944][ T8635] netlink: 128 bytes leftover after parsing attributes in process `syz.2.808'. [ 197.406670][ T8635] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 197.724367][ T8641] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.809'. [ 198.153828][ T8647] syz.2.811: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 198.196292][ T8647] CPU: 0 PID: 8647 Comm: syz.2.811 Not tainted syzkaller #0 [ 198.203626][ T8647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 198.213707][ T8647] Call Trace: [ 198.217004][ T8647] [ 198.219953][ T8647] dump_stack_lvl+0x18c/0x250 [ 198.224663][ T8647] ? show_regs_print_info+0x20/0x20 [ 198.229894][ T8647] ? load_image+0x420/0x420 [ 198.234438][ T8647] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 198.240892][ T8647] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 198.247431][ T8647] warn_alloc+0x246/0x340 [ 198.251791][ T8647] ? stack_trace_save+0xaa/0x100 [ 198.256763][ T8647] ? zone_watermark_ok_safe+0x230/0x230 [ 198.262347][ T8647] ? kasan_set_track+0x5f/0x70 [ 198.267138][ T8647] ? kasan_set_track+0x4e/0x70 [ 198.271941][ T8647] ? __kasan_kmalloc+0x8f/0xa0 [ 198.276735][ T8647] ? xsk_init_queue+0xad/0x100 [ 198.281528][ T8647] ? xsk_setsockopt+0x4c9/0x750 [ 198.286408][ T8647] ? do_sock_setsockopt+0x175/0x1a0 [ 198.291634][ T8647] ? __x64_sys_setsockopt+0x182/0x200 [ 198.297039][ T8647] __vmalloc_node_range+0x129/0x1320 [ 198.302391][ T8647] ? free_vm_area+0x50/0x50 [ 198.306935][ T8647] vmalloc_user+0x74/0x80 [ 198.311295][ T8647] ? xskq_create+0xbf/0x170 [ 198.315829][ T8647] xskq_create+0xbf/0x170 [ 198.320189][ T8647] xsk_init_queue+0xad/0x100 [ 198.324788][ T8647] xsk_setsockopt+0x4c9/0x750 [ 198.329470][ T8647] ? xsk_poll+0x670/0x670 [ 198.333804][ T8647] ? __fget_files+0x28/0x460 [ 198.338400][ T8647] ? aa_sock_opt_perm+0x74/0x100 [ 198.343336][ T8647] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 198.348880][ T8647] ? security_socket_setsockopt+0x7e/0xa0 [ 198.354590][ T8647] ? xsk_poll+0x670/0x670 [ 198.358922][ T8647] do_sock_setsockopt+0x175/0x1a0 [ 198.363946][ T8647] ? __fdget+0x180/0x210 [ 198.368200][ T8647] __x64_sys_setsockopt+0x182/0x200 [ 198.373401][ T8647] do_syscall_64+0x55/0xb0 [ 198.377813][ T8647] ? clear_bhb_loop+0x40/0x90 [ 198.382482][ T8647] ? clear_bhb_loop+0x40/0x90 [ 198.387156][ T8647] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 198.393049][ T8647] RIP: 0033:0x7fc6c7d9e019 [ 198.397462][ T8647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.417071][ T8647] RSP: 002b:00007fc6c8c7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 198.425488][ T8647] RAX: ffffffffffffffda RBX: 00007fc6c8025fa0 RCX: 00007fc6c7d9e019 [ 198.433461][ T8647] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008 [ 198.441423][ T8647] RBP: 00007fc6c7e3500c R08: 0000000000000004 R09: 0000000000000000 [ 198.449389][ T8647] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 198.457353][ T8647] R13: 00007fc6c8026038 R14: 00007fc6c8025fa0 R15: 00007ffee06c67d8 [ 198.465334][ T8647] [ 198.546667][ T8647] Mem-Info: [ 198.549837][ T8647] active_anon:22745 inactive_anon:0 isolated_anon:0 [ 198.549837][ T8647] active_file:18995 inactive_file:39998 isolated_file:0 [ 198.549837][ T8647] unevictable:768 dirty:166 writeback:0 [ 198.549837][ T8647] slab_reclaimable:10166 slab_unreclaimable:92806 [ 198.549837][ T8647] mapped:35046 shmem:18506 pagetables:626 [ 198.549837][ T8647] sec_pagetables:0 bounce:0 [ 198.549837][ T8647] kernel_misc_reclaimable:0 [ 198.549837][ T8647] free:1333352 free_pcp:7537 free_cma:0 [ 198.752583][ T8647] Node 0 active_anon:96980kB inactive_anon:0kB active_file:75980kB inactive_file:159788kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:140384kB dirty:664kB writeback:0kB shmem:78488kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12684kB pagetables:2704kB sec_pagetables:0kB all_unreclaimable? no [ 198.801238][ T8654] netlink: 'syz.3.813': attribute type 3 has an invalid length. [ 198.848878][ T8654] netlink: 'syz.3.813': attribute type 1 has an invalid length. [ 198.901007][ T8647] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 198.949781][ T8654] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.813'. [ 198.985411][ T8647] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 199.078438][ T8647] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 199.084294][ T8647] Node 0 DMA32 free:1396064kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:108524kB inactive_anon:0kB active_file:75980kB inactive_file:158952kB unevictable:1536kB writepending:708kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:11540kB local_pcp:2308kB free_cma:0kB [ 199.195146][ T8647] lowmem_reserve[]: 0 0 0 0 0 [ 199.217004][ T51] Bluetooth: hci0: ACL packet too small [ 199.234776][ T8647] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 199.265312][ T8647] lowmem_reserve[]: 0 0 0 0 0 [ 199.270456][ T8647] Node 1 Normal free:3903220kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:18180kB local_pcp:11268kB free_cma:0kB [ 199.316055][ T8647] lowmem_reserve[]: 0 0 0 0 0 [ 199.320969][ T8647] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 199.340816][ T8647] Node 0 DMA32: 502*4kB (UM) 752*8kB (UE) 577*16kB (UME) 549*32kB (UE) 45*64kB (UME) 5*128kB (UME) 9*256kB (UM) 49*512kB (UME) 19*1024kB (UME) 5*2048kB (UM) 316*4096kB (UM) = 1389768kB [ 199.366080][ T8647] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 199.378840][ T8647] Node 1 Normal: 243*4kB (UME) 57*8kB (UME) 26*16kB (UME) 52*32kB (UME) 13*64kB (UME) 10*128kB (UME) 3*256kB (UME) 1*512kB (U) 1*1024kB (E) 2*2048kB (UE) 950*4096kB (M) = 3903220kB [ 199.424758][ T8647] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 199.461826][ T8647] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 199.484741][ T8647] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 199.516301][ T8647] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 199.525629][ T8647] 84407 total pagecache pages [ 199.556063][ T8647] 0 pages in swap cache [ 199.560263][ T8647] Free swap = 124996kB [ 199.564434][ T8647] Total swap = 124996kB [ 199.587651][ T8647] 2097051 pages RAM [ 199.591491][ T8647] 0 pages HighMem/MovableOnly [ 199.626294][ T8647] 416955 pages reserved [ 199.630489][ T8647] 0 pages cma reserved [ 199.906106][ T8676] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.820'. [ 200.018921][ T8683] netlink: 144 bytes leftover after parsing attributes in process `syz.2.820'. [ 200.189967][ T8683] team0: Port device C removed [ 200.225703][ T8683] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 200.433733][ T8687] netlink: 'syz.0.823': attribute type 29 has an invalid length. [ 200.601659][ T8685] netlink: 132 bytes leftover after parsing attributes in process `syz.3.822'. [ 200.669566][ T8687] netlink: 'syz.0.823': attribute type 29 has an invalid length. [ 200.715027][ T8690] netlink: 'syz.0.823': attribute type 29 has an invalid length. [ 201.800437][ T8711] netlink: 132 bytes leftover after parsing attributes in process `syz.2.828'. [ 202.219316][ T8726] netlink: 'syz.3.833': attribute type 33 has an invalid length. [ 202.237719][ T8726] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.833'. [ 203.202443][ T8751] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.840'. [ 203.597714][ T8755] syzkaller0: entered allmulticast mode [ 203.691496][ T8755] syzkaller0: left allmulticast mode [ 204.516550][ T8792] netlink: 128 bytes leftover after parsing attributes in process `syz.1.852'. [ 204.558741][ T8792] A link change request failed with some changes committed already. Interface Q±6ã`Ò˜ may have been left with an inconsistent configuration, please check. [ 204.955300][ T8799] netlink: 'syz.0.853': attribute type 29 has an invalid length. [ 204.998903][ T8803] @0Ù: renamed from bridge_slave_0 (while UP) [ 205.148402][ T8799] netlink: 'syz.0.853': attribute type 29 has an invalid length. [ 205.197526][ T8805] netlink: 'syz.0.853': attribute type 29 has an invalid length. [ 206.073377][ T8823] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.860'. [ 206.258984][ T8826] netlink: 6 bytes leftover after parsing attributes in process `syz.3.861'. [ 206.296135][ T8826] openvswitch: netlink: Flow actions attr not present in new flow. [ 206.314723][ T8827] : renamed from veth1 (while UP) [ 206.811023][ T8830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.968147][ T8851] netlink: 'syz.0.867': attribute type 2 has an invalid length. [ 206.999348][ T8851] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.867'. [ 207.200575][ T8862] netlink: 'syz.3.871': attribute type 21 has an invalid length. [ 207.225396][ T8863] netlink: 'syz.3.871': attribute type 21 has an invalid length. [ 207.494374][ T8876] netlink: 60 bytes leftover after parsing attributes in process `syz.1.876'. [ 207.625757][ T8884] netlink: 60 bytes leftover after parsing attributes in process `syz.3.878'. [ 207.637309][ T8884] netlink: 60 bytes leftover after parsing attributes in process `syz.3.878'. [ 207.657334][ T8884] netlink: 60 bytes leftover after parsing attributes in process `syz.3.878'. [ 207.964251][ T8889] netlink: 135856 bytes leftover after parsing attributes in process `syz.1.880'. [ 208.098520][ T8893] netlink: 36 bytes leftover after parsing attributes in process `syz.0.881'. [ 208.109094][ T8893] : renamed from caif0 [ 208.301767][ T8893] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 208.648615][ T8917] netlink: 'syz.2.886': attribute type 6 has an invalid length. [ 209.808196][ T8977] netlink: 'syz.0.903': attribute type 33 has an invalid length. [ 209.830412][ T8977] __nla_validate_parse: 2 callbacks suppressed [ 209.830424][ T8977] netlink: 152 bytes leftover after parsing attributes in process `syz.0.903'. [ 209.876803][ T8977] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 211.506134][ T9016] tap0: tun_chr_ioctl cmd 1074025677 [ 211.514249][ T9016] tap0: linktype set to 774 [ 212.922609][ T9063] netlink: 132 bytes leftover after parsing attributes in process `syz.0.931'. [ 213.790530][ T9091] netlink: 'syz.0.939': attribute type 10 has an invalid length. [ 213.810104][ T9091] netlink: 168 bytes leftover after parsing attributes in process `syz.0.939'. [ 213.866440][ T9095] €Â0: renamed from batadv_slave_1 (while UP) [ 213.984071][ T9100] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.942'. [ 214.016430][ T9100] netlink: 'syz.0.942': attribute type 1 has an invalid length. [ 214.024112][ T9100] netlink: 16520 bytes leftover after parsing attributes in process `syz.0.942'. [ 214.436845][ T9115] netlink: 'syz.3.947': attribute type 10 has an invalid length. [ 214.455221][ T9115] netlink: 40 bytes leftover after parsing attributes in process `syz.3.947'. [ 214.484624][ T9115] ipvlan1: entered promiscuous mode [ 214.497860][ T9115] ipvlan1: entered allmulticast mode [ 214.518597][ T9115] veth0_vlan: entered allmulticast mode [ 214.589730][ T9115] bridge0: port 2(ipvlan1) entered blocking state [ 214.608656][ T9115] bridge0: port 2(ipvlan1) entered disabled state [ 214.657899][ T9115] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 214.719829][ T9122] netlink: 'syz.0.950': attribute type 10 has an invalid length. [ 214.743867][ T9122] netlink: 2 bytes leftover after parsing attributes in process `syz.0.950'. [ 214.753362][ T9122] hsr0: entered promiscuous mode [ 214.759984][ T9122] bridge0: port 1(hsr0) entered blocking state [ 214.767552][ T9122] bridge0: port 1(hsr0) entered disabled state [ 214.775463][ T9122] hsr0: entered allmulticast mode [ 214.781514][ T9122] hsr_slave_0: entered allmulticast mode [ 214.787777][ T9122] hsr_slave_1: entered allmulticast mode [ 214.805093][ T9122] bridge0: port 1(hsr0) entered blocking state [ 214.811407][ T9122] bridge0: port 1(hsr0) entered forwarding state [ 214.836888][ T9123] netlink: 'syz.0.950': attribute type 10 has an invalid length. [ 214.844636][ T9123] netlink: 2 bytes leftover after parsing attributes in process `syz.0.950'. [ 214.929299][ T9128] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.952'. [ 214.956232][ T9128] netlink: 'syz.2.952': attribute type 1 has an invalid length. [ 214.963902][ T9128] netlink: 16520 bytes leftover after parsing attributes in process `syz.2.952'. [ 214.989163][ T9130] netlink: 'syz.3.953': attribute type 21 has an invalid length. [ 215.170878][ T9139] bridge0: port 2(hsr0) entered disabled state [ 215.177303][ T9139] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.203789][ T9139] bridge0: entered allmulticast mode [ 215.234167][ T9139] hsr0: left allmulticast mode [ 215.264379][ T9139] hsr_slave_0: left allmulticast mode [ 215.292045][ T9139] hsr_slave_1: left allmulticast mode [ 215.336495][ T9139] bridge0: port 2(hsr0) entered disabled state [ 215.390597][ T9139] bridge_slave_0: left allmulticast mode [ 215.429080][ T9139] bridge_slave_0: left promiscuous mode [ 215.456596][ T9139] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.389768][ T9169] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.964'. [ 216.409136][ T9169] netlink: 'syz.1.964': attribute type 1 has an invalid length. [ 216.417057][ T9169] netlink: 16520 bytes leftover after parsing attributes in process `syz.1.964'. [ 216.482820][ T9171] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.963'. [ 216.493508][ T9174] bridge0: entered allmulticast mode [ 216.497431][ T9171] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 216.664370][ T9184] C: renamed from team_slave_0 (while UP) [ 217.080023][ T9184] netlink: 'syz.1.967': attribute type 3 has an invalid length. [ 217.099130][ T9184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.967'. [ 217.112421][ T9184] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 217.249004][ T9194] netlink: 'syz.2.970': attribute type 9 has an invalid length. [ 217.276106][ T9194] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.970'. [ 217.650693][ T9203] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.973'. [ 217.666893][ T9203] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 217.764959][ T9196] netlink: 152 bytes leftover after parsing attributes in process `syz.0.971'. [ 217.795116][ T9196] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 218.801008][ T9252] validate_nla: 3 callbacks suppressed [ 218.801022][ T9252] netlink: 'syz.0.987': attribute type 10 has an invalid length. [ 218.919346][ T9261] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 218.956123][ T9261] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 219.256188][ T51] Bluetooth: hci1: ISO packet for unknown connection handle 8 [ 219.585708][ T9274] syzkaller0: entered promiscuous mode [ 219.619375][ T9274] syzkaller0: entered allmulticast mode [ 222.263875][ T9279] __nla_validate_parse: 3 callbacks suppressed [ 222.263915][ T9279] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.995'. [ 222.319704][ T9279] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 222.451807][ T9282] netlink: 'syz.0.996': attribute type 1 has an invalid length. [ 222.464661][ T9282] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.996'. [ 222.589813][ T9285] delete_channel: no stack [ 222.598142][ T9287] bridge_slave_0: left allmulticast mode [ 222.614660][ T9287] bridge_slave_0: left promiscuous mode [ 222.621423][ T9287] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.633633][ T9285] delete_channel: no stack [ 222.856496][ T9297] netlink: 'syz.1.1002': attribute type 10 has an invalid length. [ 222.879783][ T9297] syz_tun: entered promiscuous mode [ 222.917640][ T9297] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 223.591194][ T9325] netlink: 'syz.1.1008': attribute type 21 has an invalid length. [ 223.627488][ T9323] netlink: 'syz.3.1009': attribute type 21 has an invalid length. [ 223.635413][ T9323] netlink: 'syz.3.1009': attribute type 10 has an invalid length. [ 223.662943][ T9323] netlink: 'syz.3.1009': attribute type 12 has an invalid length. [ 223.671172][ T9323] netlink: 'syz.3.1009': attribute type 13 has an invalid length. [ 223.685523][ T9323] netlink: 'syz.3.1009': attribute type 14 has an invalid length. [ 223.694224][ T9323] netlink: 'syz.3.1009': attribute type 15 has an invalid length. [ 223.742024][ T9323] netlink: 12226 bytes leftover after parsing attributes in process `syz.3.1009'. [ 223.759614][ T9317] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 223.772230][ T9317] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 223.796220][ T9327] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 223.806080][ T9327] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 223.820942][ T9326] validate_nla: 5 callbacks suppressed [ 223.820985][ T9326] netlink: 'syz.3.1009': attribute type 29 has an invalid length. [ 223.837465][ T9329] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1010'. [ 223.876235][ T9323] netlink: 'syz.3.1009': attribute type 29 has an invalid length. [ 223.904041][ T9326] netlink: 'syz.3.1009': attribute type 10 has an invalid length. [ 223.978739][ T9335] syz.1.1011[9335] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 223.979031][ T9335] syz.1.1011[9335] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 225.171821][ T9326] geneve0: entered promiscuous mode [ 225.231172][ T9326] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 225.257543][ T9335] netlink: 'syz.1.1011': attribute type 10 has an invalid length. [ 225.302326][ T9335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.348983][ T9335] team0: Port device bond0 added [ 225.632522][ T9362] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1020'. [ 226.226640][ T9373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1022'. [ 226.240980][ T9375] syz.2.1023[9375] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.241058][ T9375] syz.2.1023[9375] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.269990][ T9375] netlink: 'syz.2.1023': attribute type 10 has an invalid length. [ 226.316549][ T9375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.325710][ T9375] team0: Port device bond0 added [ 226.350098][ T9377] netlink: 'syz.0.1024': attribute type 29 has an invalid length. [ 226.367260][ T9377] netlink: 'syz.0.1024': attribute type 29 has an invalid length. [ 226.640951][ T9388] aaaaaaaaaaaaaaa: entered promiscuous mode [ 227.117119][ T9405] veth1_to_bond: entered allmulticast mode [ 227.145341][ T9409] cgroup: fork rejected by pids controller in /syz3 [ 227.861939][ T9430] syz.0.1036[9430] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.862094][ T9430] syz.0.1036[9430] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.939462][ T9430] netlink: 'syz.0.1036': attribute type 10 has an invalid length. [ 228.019696][ T9430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.060320][ T9430] team0: Port device bond0 added [ 228.244475][ T9439] netlink: 'syz.0.1040': attribute type 10 has an invalid length. [ 228.331900][ T9439] team0: Port device wlan1 added [ 228.348350][ T9442] netlink: 'syz.2.1041': attribute type 11 has an invalid length. [ 228.367403][ T9442] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1041'. [ 228.991896][ T9462] netlink: 'syz.0.1049': attribute type 10 has an invalid length. [ 229.282069][ T5773] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 229.295047][ T5773] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 229.303336][ T5773] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 229.315198][ T5773] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 229.323055][ T5773] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 229.330736][ T5773] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 229.565647][ T9462] veth1_macvtap: left promiscuous mode [ 230.082497][ T9469] chnl_net:caif_netlink_parms(): no params data found [ 230.328411][ T9469] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.345756][ T9469] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.389444][ T9469] bridge_slave_0: entered allmulticast mode [ 230.427761][ T9469] bridge_slave_0: entered promiscuous mode [ 230.457027][ T9469] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.464645][ T9469] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.524520][ T9469] bridge_slave_1: entered allmulticast mode [ 230.534174][ T9469] bridge_slave_1: entered promiscuous mode [ 230.619930][ T9469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.680790][ T9469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.711190][ T9493] IPv6: NLM_F_CREATE should be specified when creating new route [ 230.719967][ T9493] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1055'. [ 230.863465][ T9469] team0: Port device team_slave_0 added [ 230.933037][ T9469] team0: Port device team_slave_1 added [ 230.960382][ T9496] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1056'. [ 231.004550][ T9496] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1056'. [ 231.019407][ T9469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.036350][ T9469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.083473][ T9469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.105849][ T9496] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1056'. [ 231.125941][ T9469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.137214][ T9496] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.1056'. [ 231.145533][ T9469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.191235][ T9469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.313048][ T9469] hsr_slave_0: entered promiscuous mode [ 231.327117][ T9469] hsr_slave_1: entered promiscuous mode [ 231.346124][ T9469] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.353707][ T9469] Cannot create hsr debugfs directory [ 231.366854][ T51] Bluetooth: hci1: command tx timeout [ 231.762658][ T9469] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.829236][ T9515] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1061'. [ 231.953765][ T9469] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.050310][ T9519] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1062'. [ 232.081601][ T9469] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.103999][ T9521] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.1063'. [ 232.162024][ T9518] delete_channel: no stack [ 232.207414][ T9469] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.445487][ T9531] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1066'. [ 232.654558][ T9469] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 232.680207][ T9469] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 232.715623][ T9469] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 232.766297][ T9469] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 232.989960][ T9469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.044114][ T9469] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.081032][ T6229] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.088299][ T6229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.119491][ T6229] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.127254][ T6229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.446127][ T51] Bluetooth: hci1: command tx timeout [ 233.560211][ T9571] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1079'. [ 233.576984][ T9469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.654646][ T9571] netlink: 135056 bytes leftover after parsing attributes in process `syz.0.1079'. [ 233.730767][ T9571] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 233.759972][ T9571] CPU: 1 PID: 9571 Comm: syz.0.1079 Not tainted syzkaller #0 [ 233.767420][ T9571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 233.777513][ T9571] Call Trace: [ 233.780871][ T9571] [ 233.783845][ T9571] dump_stack_lvl+0x18c/0x250 [ 233.788601][ T9571] ? show_regs_print_info+0x20/0x20 [ 233.793846][ T9571] ? load_image+0x420/0x420 [ 233.798455][ T9571] sysfs_warn_dup+0x8e/0xa0 [ 233.803019][ T9571] sysfs_do_create_link_sd+0xc0/0x110 [ 233.808463][ T9571] device_add_class_symlinks+0x1cf/0x240 [ 233.814156][ T9571] device_add+0x4f9/0xc40 [ 233.818551][ T9571] wiphy_register+0x1d99/0x2ac0 [ 233.823489][ T9571] ? cfg80211_event_work+0x40/0x40 [ 233.828621][ T9571] ? minstrel_ht_alloc+0x88a/0x990 [ 233.833782][ T9571] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 233.839899][ T9571] ieee80211_register_hw+0x2dd8/0x3b30 [ 233.845403][ T9571] ? ieee80211_register_hw+0xed1/0x3b30 [ 233.850990][ T9571] ? ieee80211_tasklet_handler+0x20/0x20 [ 233.856637][ T9571] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 233.862554][ T9571] ? __debug_object_init+0xec/0x450 [ 233.867780][ T9571] ? __asan_memset+0x22/0x40 [ 233.872388][ T9571] ? __hrtimer_init+0x189/0x270 [ 233.877269][ T9571] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 233.883057][ T9571] ? mac80211_hwsim_free+0x220/0x220 [ 233.888354][ T9571] ? rcu_is_watching+0x15/0xb0 [ 233.893135][ T9571] ? kstrndup+0xbd/0x140 [ 233.897425][ T9571] hwsim_new_radio_nl+0xdad/0x1a70 [ 233.902573][ T9571] ? __nla_validate+0x50/0x50 [ 233.907302][ T9571] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 233.913672][ T9571] ? __nla_parse+0x40/0x50 [ 233.918115][ T9571] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 233.924477][ T9571] genl_family_rcv_msg_doit+0x21a/0x310 [ 233.930054][ T9571] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 233.935995][ T9571] ? bpf_lsm_capable+0x9/0x10 [ 233.940699][ T9571] ? security_capable+0x89/0xb0 [ 233.945585][ T9571] genl_rcv_msg+0x611/0x7a0 [ 233.950134][ T9571] ? genl_bind+0x360/0x360 [ 233.954564][ T9571] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 233.960917][ T9571] ? perf_trace_lock+0x303/0x3b0 [ 233.965872][ T9571] ? __kasan_kmalloc_large+0x8b/0xa0 [ 233.971195][ T9571] netlink_rcv_skb+0x235/0x4c0 [ 233.975994][ T9571] ? genl_bind+0x360/0x360 [ 233.980458][ T9571] ? netlink_ack+0x1160/0x1160 [ 233.985269][ T9571] ? __lock_acquire+0x7d80/0x7d80 [ 233.990326][ T9571] ? down_read+0x1ac/0x2e0 [ 233.994762][ T9571] genl_rcv+0x28/0x40 [ 233.998760][ T9571] netlink_unicast+0x7b1/0x930 [ 234.003569][ T9571] netlink_sendmsg+0x8d0/0xbf0 [ 234.008390][ T9571] ? netlink_getsockopt+0x590/0x590 [ 234.013619][ T9571] ? apparmor_socket_sendmsg+0x8e/0x330 [ 234.019201][ T9571] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 234.024512][ T9571] ? security_socket_sendmsg+0x80/0xa0 [ 234.029982][ T9571] ? netlink_getsockopt+0x590/0x590 [ 234.035207][ T9571] ____sys_sendmsg+0x61b/0x980 [ 234.040003][ T9571] ? __asan_memset+0x22/0x40 [ 234.044606][ T9571] ? __sys_sendmsg_sock+0x30/0x30 [ 234.049639][ T9571] ? __import_iovec+0x5f2/0x850 [ 234.054530][ T9571] ? import_iovec+0x73/0xa0 [ 234.059057][ T9571] ___sys_sendmsg+0x2a6/0x360 [ 234.063763][ T9571] ? __sys_sendmsg+0x2b0/0x2b0 [ 234.068684][ T9571] __se_sys_sendmsg+0x1d0/0x2c0 [ 234.073561][ T9571] ? perf_trace_preemptirq_template+0x269/0x330 [ 234.079843][ T9571] ? __x64_sys_sendmsg+0x80/0x80 [ 234.084845][ T9571] ? lockdep_hardirqs_on+0x98/0x150 [ 234.090073][ T9571] do_syscall_64+0x55/0xb0 [ 234.094499][ T9571] ? clear_bhb_loop+0x40/0x90 [ 234.099187][ T9571] ? clear_bhb_loop+0x40/0x90 [ 234.103881][ T9571] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 234.109784][ T9571] RIP: 0033:0x7fcb14d9e019 [ 234.114210][ T9571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.133825][ T9571] RSP: 002b:00007fcb15d4e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.142253][ T9571] RAX: ffffffffffffffda RBX: 00007fcb15025fa0 RCX: 00007fcb14d9e019 [ 234.150232][ T9571] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 234.158214][ T9571] RBP: 00007fcb14e3500c R08: 0000000000000000 R09: 0000000000000000 [ 234.166205][ T9571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.174192][ T9571] R13: 00007fcb15026038 R14: 00007fcb15025fa0 R15: 00007ffdccdd44c8 [ 234.182210][ T9571] [ 234.291220][ T9469] veth0_vlan: entered promiscuous mode [ 234.372908][ T9469] veth1_vlan: entered promiscuous mode [ 234.464503][ T9469] veth0_macvtap: entered promiscuous mode [ 234.514579][ T9469] veth1_macvtap: entered promiscuous mode [ 234.615419][ T9469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.659814][ T9469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.765874][ T9469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.783275][ T9469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.794491][ T9469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.813662][ T9469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.856028][ T9469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.868763][ T9469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.896281][ T9469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.926430][ T9469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0 [ 234.937662][ T9469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.948904][ T9469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.960627][ T9469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.971296][ T9469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.982386][ T9469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.992486][ T9469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.005510][ T9469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.017219][ T9469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.040640][ T9469] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.054949][ T9469] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.069983][ T9469] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.078992][ T9469] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.174889][ T9601] netlink: 'syz.1.1085': attribute type 39 has an invalid length. [ 235.259887][ T51] Bluetooth: hci0: unexpected event 0x04 length: 151 > 10 [ 235.342443][ T9609] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1085'. [ 235.462289][ T6219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.518913][ T6219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.538052][ T51] Bluetooth: hci1: command tx timeout [ 235.562286][ T9609] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1085'. [ 235.597341][ T9605] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1085'. [ 235.630928][ T9612] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1085'. [ 235.654787][ T6229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.683157][ T6229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.912559][ T9616] netlink: 169404 bytes leftover after parsing attributes in process `syz.1.1089'. [ 235.926344][ T9616] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 236.114347][ T9629] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1093'. [ 236.523778][ T9646] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1097'. [ 236.533784][ T9646] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1097'. [ 236.937230][ T9660] netlink: 'syz.1.1104': attribute type 2 has an invalid length. [ 236.954389][ T9660] netlink: 'syz.1.1104': attribute type 1 has an invalid length. [ 237.123916][ T9667] netlink: 'syz.3.1105': attribute type 21 has an invalid length. [ 237.253546][ T9671] netlink: 'syz.0.1106': attribute type 3 has an invalid length. [ 237.287530][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 237.307417][ T9680] netlink: 'syz.3.1105': attribute type 10 has an invalid length. [ 237.341515][ T9680] ipvlan1: entered promiscuous mode [ 237.374587][ T9680] ipvlan1: entered allmulticast mode [ 237.392606][ T9680] veth0_vlan: entered allmulticast mode [ 237.416456][ T9680] bridge0: port 3(ipvlan1) entered blocking state [ 237.437787][ T9680] bridge0: port 3(ipvlan1) entered disabled state [ 237.447879][ T9680] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 237.527885][ T9690] syz.0.1111[9690] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 237.528012][ T9690] syz.0.1111[9690] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 237.546427][ T9690] netlink: 'syz.0.1111': attribute type 10 has an invalid length. [ 237.606987][ T51] Bluetooth: hci1: command tx timeout [ 238.062107][ T9691] delete_channel: no stack [ 238.349705][ T9715] netlink: 'syz.0.1119': attribute type 2 has an invalid length. [ 238.397220][ T9715] netlink: 'syz.0.1119': attribute type 8 has an invalid length. [ 239.006258][ T9726] __nla_validate_parse: 6 callbacks suppressed [ 239.006294][ T9726] netlink: 207808 bytes leftover after parsing attributes in process `syz.2.1121'. [ 239.096929][ T9736] syz.0.1123[9736] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 239.097073][ T9736] syz.0.1123[9736] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 239.135198][ T9736] netlink: 'syz.0.1123': attribute type 10 has an invalid length. [ 239.624343][ T9755] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1129'. [ 239.665641][ T9756] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1130'. [ 239.896829][ T9770] syz.3.1133[9770] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 239.896962][ T9770] syz.3.1133[9770] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 240.000376][ T9770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.042003][ T9770] team0: Port device bond0 added [ 240.286662][ T9751] delete_channel: no stack [ 241.218262][ T9794] validate_nla: 1 callbacks suppressed [ 241.218351][ T9794] netlink: 'syz.3.1142': attribute type 10 has an invalid length. [ 241.325416][ T9800] syz.2.1143[9800] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 241.325568][ T9800] syz.2.1143[9800] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 241.398446][ T9794] team0: Port device wlan1 added [ 241.431642][ T9793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.453029][ T9800] netlink: 'syz.2.1143': attribute type 10 has an invalid length. [ 241.652892][ T9808] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1145'. [ 241.746393][ T9808] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1145'. [ 241.843061][ T9806] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1145'. [ 242.161292][ T9809] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1145'. [ 243.691452][ T9836] FAULT_INJECTION: forcing a failure. [ 243.691452][ T9836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.749495][ T9836] CPU: 1 PID: 9836 Comm: syz.0.1151 Not tainted syzkaller #0 [ 243.756918][ T9836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 243.766966][ T9836] Call Trace: [ 243.770235][ T9836] [ 243.773156][ T9836] dump_stack_lvl+0x18c/0x250 [ 243.777833][ T9836] ? show_regs_print_info+0x20/0x20 [ 243.783023][ T9836] ? load_image+0x420/0x420 [ 243.787522][ T9836] ? __might_fault+0xaa/0x120 [ 243.792194][ T9836] ? __lock_acquire+0x7d80/0x7d80 [ 243.797215][ T9836] should_fail_ex+0x394/0x4c0 [ 243.801890][ T9836] _copy_from_user+0x2f/0xe0 [ 243.806474][ T9836] __sys_bpf+0x23e/0x890 [ 243.810709][ T9836] ? bpf_link_show_fdinfo+0x390/0x390 [ 243.816082][ T9836] ? lock_chain_count+0x20/0x20 [ 243.820929][ T9836] __x64_sys_bpf+0x7c/0x90 [ 243.825337][ T9836] do_syscall_64+0x55/0xb0 [ 243.829742][ T9836] ? clear_bhb_loop+0x40/0x90 [ 243.834408][ T9836] ? clear_bhb_loop+0x40/0x90 [ 243.839076][ T9836] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 243.844957][ T9836] RIP: 0033:0x7fcb14d9e019 [ 243.849368][ T9836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.868962][ T9836] RSP: 002b:00007fcb15d2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 243.877365][ T9836] RAX: ffffffffffffffda RBX: 00007fcb15026090 RCX: 00007fcb14d9e019 [ 243.885325][ T9836] RDX: 0000000000000050 RSI: 00002000000008c0 RDI: 000000000000000a [ 243.893286][ T9836] RBP: 00007fcb15d2d090 R08: 0000000000000000 R09: 0000000000000000 [ 243.901250][ T9836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.909210][ T9836] R13: 00007fcb15026128 R14: 00007fcb15026090 R15: 00007ffdccdd44c8 [ 243.917183][ T9836] [ 244.092131][ T9842] syz.3.1155[9842] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 244.092266][ T9842] syz.3.1155[9842] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 244.172595][ T9842] netlink: 'syz.3.1155': attribute type 10 has an invalid length. [ 244.214088][ T51] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 244.363852][ T9848] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1156'. [ 244.462678][ T9848] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1156'. [ 245.121034][ T9887] syz.1.1165[9887] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 245.121168][ T9887] syz.1.1165[9887] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 245.215817][ T9890] FAULT_INJECTION: forcing a failure. [ 245.215817][ T9890] name failslab, interval 1, probability 0, space 0, times 0 [ 245.236326][ T9887] netlink: 'syz.1.1165': attribute type 10 has an invalid length. [ 245.250050][ T9890] CPU: 1 PID: 9890 Comm: syz.0.1167 Not tainted syzkaller #0 [ 245.257447][ T9890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 245.267509][ T9890] Call Trace: [ 245.270780][ T9890] [ 245.273702][ T9890] dump_stack_lvl+0x18c/0x250 [ 245.278378][ T9890] ? show_regs_print_info+0x20/0x20 [ 245.283567][ T9890] ? load_image+0x420/0x420 [ 245.288070][ T9890] ? __lock_acquire+0x7d80/0x7d80 [ 245.293091][ T9890] should_fail_ex+0x394/0x4c0 [ 245.297767][ T9890] should_failslab+0x9/0x20 [ 245.302269][ T9890] slab_pre_alloc_hook+0x59/0x300 [ 245.307303][ T9890] ? bpf_test_init+0x9f/0x140 [ 245.311994][ T9890] ? bpf_test_init+0x9f/0x140 [ 245.316674][ T9890] __kmem_cache_alloc_node+0x53/0x250 [ 245.322043][ T9890] ? bpf_test_init+0x9f/0x140 [ 245.326715][ T9890] __kmalloc+0xa7/0x240 [ 245.330872][ T9890] bpf_test_init+0x9f/0x140 [ 245.335368][ T9890] bpf_prog_test_run_xdp+0x4cd/0x1140 [ 245.340730][ T9890] ? __lock_acquire+0x7d80/0x7d80 [ 245.345754][ T9890] ? dev_put+0x80/0x80 [ 245.349824][ T9890] ? dev_put+0x80/0x80 [ 245.353883][ T9890] bpf_prog_test_run+0x31f/0x390 [ 245.358814][ T9890] __sys_bpf+0x49d/0x890 [ 245.363050][ T9890] ? bpf_link_show_fdinfo+0x390/0x390 [ 245.368421][ T9890] ? lock_chain_count+0x20/0x20 [ 245.373271][ T9890] __x64_sys_bpf+0x7c/0x90 [ 245.377680][ T9890] do_syscall_64+0x55/0xb0 [ 245.382086][ T9890] ? clear_bhb_loop+0x40/0x90 [ 245.386754][ T9890] ? clear_bhb_loop+0x40/0x90 [ 245.391422][ T9890] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 245.397302][ T9890] RIP: 0033:0x7fcb14d9e019 [ 245.401708][ T9890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.421306][ T9890] RSP: 002b:00007fcb15d4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 245.429709][ T9890] RAX: ffffffffffffffda RBX: 00007fcb15025fa0 RCX: 00007fcb14d9e019 [ 245.437673][ T9890] RDX: 0000000000000050 RSI: 00002000000008c0 RDI: 000000000000000a [ 245.445630][ T9890] RBP: 00007fcb15d4e090 R08: 0000000000000000 R09: 0000000000000000 [ 245.453595][ T9890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.461562][ T9890] R13: 00007fcb15026038 R14: 00007fcb15025fa0 R15: 00007ffdccdd44c8 [ 245.469536][ T9890] [ 245.816696][ T9902] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1170'. [ 245.832197][ T9902] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 246.243365][ T9925] syz.2.1177[9925] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 246.243515][ T9925] syz.2.1177[9925] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 246.281299][ T9925] netlink: 'syz.2.1177': attribute type 10 has an invalid length. [ 246.368650][ T9929] FAULT_INJECTION: forcing a failure. [ 246.368650][ T9929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.415649][ T9929] CPU: 0 PID: 9929 Comm: syz.1.1178 Not tainted syzkaller #0 [ 246.423077][ T9929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 246.433149][ T9929] Call Trace: [ 246.436443][ T9929] [ 246.439388][ T9929] dump_stack_lvl+0x18c/0x250 [ 246.444093][ T9929] ? show_regs_print_info+0x20/0x20 [ 246.449318][ T9929] ? load_image+0x420/0x420 [ 246.453853][ T9929] ? __lock_acquire+0x7d80/0x7d80 [ 246.458909][ T9929] should_fail_ex+0x394/0x4c0 [ 246.463614][ T9929] _copy_from_user+0x2f/0xe0 [ 246.468221][ T9929] bpf_test_init+0xde/0x140 [ 246.472749][ T9929] bpf_prog_test_run_xdp+0x4cd/0x1140 [ 246.478143][ T9929] ? __lock_acquire+0x7d80/0x7d80 [ 246.483204][ T9929] ? dev_put+0x80/0x80 [ 246.487308][ T9929] ? dev_put+0x80/0x80 [ 246.491396][ T9929] bpf_prog_test_run+0x31f/0x390 [ 246.496361][ T9929] __sys_bpf+0x49d/0x890 [ 246.500624][ T9929] ? bpf_link_show_fdinfo+0x390/0x390 [ 246.506029][ T9929] ? lock_chain_count+0x20/0x20 [ 246.510913][ T9929] __x64_sys_bpf+0x7c/0x90 [ 246.515347][ T9929] do_syscall_64+0x55/0xb0 [ 246.519780][ T9929] ? clear_bhb_loop+0x40/0x90 [ 246.524475][ T9929] ? clear_bhb_loop+0x40/0x90 [ 246.529175][ T9929] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 246.535170][ T9929] RIP: 0033:0x7fa55919e019 [ 246.539602][ T9929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.559228][ T9929] RSP: 002b:00007fa55a101028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 246.567664][ T9929] RAX: ffffffffffffffda RBX: 00007fa559425fa0 RCX: 00007fa55919e019 [ 246.575655][ T9929] RDX: 0000000000000050 RSI: 00002000000008c0 RDI: 000000000000000a [ 246.583649][ T9929] RBP: 00007fa55a101090 R08: 0000000000000000 R09: 0000000000000000 [ 246.591635][ T9929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.599622][ T9929] R13: 00007fa559426038 R14: 00007fa559425fa0 R15: 00007fff9787f688 [ 246.607630][ T9929] [ 247.034752][ T9939] netlink: 169404 bytes leftover after parsing attributes in process `syz.3.1181'. [ 247.044342][ T9939] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 247.136483][ T9953] syz.0.1187[9953] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 247.136622][ T9953] syz.0.1187[9953] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 247.172612][ T9953] netlink: 'syz.0.1187': attribute type 10 has an invalid length. [ 247.494077][ T9966] FAULT_INJECTION: forcing a failure. [ 247.494077][ T9966] name failslab, interval 1, probability 0, space 0, times 0 [ 247.516563][ T9966] CPU: 1 PID: 9966 Comm: syz.1.1191 Not tainted syzkaller #0 [ 247.523975][ T9966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 247.534045][ T9966] Call Trace: [ 247.537342][ T9966] [ 247.540278][ T9966] dump_stack_lvl+0x18c/0x250 [ 247.544976][ T9966] ? show_regs_print_info+0x20/0x20 [ 247.550196][ T9966] ? load_image+0x420/0x420 [ 247.554728][ T9966] ? __might_sleep+0xe0/0xe0 [ 247.559341][ T9966] ? __lock_acquire+0x7d80/0x7d80 [ 247.564384][ T9966] should_fail_ex+0x394/0x4c0 [ 247.569083][ T9966] should_failslab+0x9/0x20 [ 247.573600][ T9966] slab_pre_alloc_hook+0x59/0x300 [ 247.578644][ T9966] ? __lock_acquire+0x7d80/0x7d80 [ 247.583676][ T9966] ? kvmalloc_node+0x70/0x180 [ 247.588358][ T9966] ? kvmalloc_node+0x70/0x180 [ 247.593030][ T9966] __kmem_cache_alloc_node+0x53/0x250 [ 247.598413][ T9966] ? __schedule_delayed_monitor_work+0x200/0x200 [ 247.604754][ T9966] ? kvmalloc_node+0x70/0x180 [ 247.609447][ T9966] __kmalloc_node+0xa6/0x240 [ 247.614055][ T9966] kvmalloc_node+0x70/0x180 [ 247.618576][ T9966] bpf_test_run_xdp_live+0x1c2/0x1b30 [ 247.623967][ T9966] ? bpf_dispatcher_xdp+0x800/0x1000 [ 247.629260][ T9966] ? bpf_dispatcher_xdp+0x800/0x1000 [ 247.634549][ T9966] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 247.640460][ T9966] ? xdp_convert_md_to_buff+0x330/0x330 [ 247.646035][ T9966] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 247.652300][ T9966] ? _copy_from_user+0xa5/0xe0 [ 247.657090][ T9966] ? bpf_test_init+0x119/0x140 [ 247.661877][ T9966] ? xdp_convert_md_to_buff+0x5b/0x330 [ 247.667357][ T9966] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 247.672748][ T9966] ? __lock_acquire+0x7d80/0x7d80 [ 247.677802][ T9966] ? dev_put+0x80/0x80 [ 247.681890][ T9966] ? dev_put+0x80/0x80 [ 247.685974][ T9966] bpf_prog_test_run+0x31f/0x390 [ 247.690930][ T9966] __sys_bpf+0x49d/0x890 [ 247.695186][ T9966] ? bpf_link_show_fdinfo+0x390/0x390 [ 247.700582][ T9966] ? lock_chain_count+0x20/0x20 [ 247.705444][ T9966] __x64_sys_bpf+0x7c/0x90 [ 247.709867][ T9966] do_syscall_64+0x55/0xb0 [ 247.714284][ T9966] ? clear_bhb_loop+0x40/0x90 [ 247.718968][ T9966] ? clear_bhb_loop+0x40/0x90 [ 247.723652][ T9966] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 247.729552][ T9966] RIP: 0033:0x7fa55919e019 [ 247.733967][ T9966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.753568][ T9966] RSP: 002b:00007fa55a101028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 247.761990][ T9966] RAX: ffffffffffffffda RBX: 00007fa559425fa0 RCX: 00007fa55919e019 [ 247.769972][ T9966] RDX: 0000000000000050 RSI: 00002000000008c0 RDI: 000000000000000a [ 247.777949][ T9966] RBP: 00007fa55a101090 R08: 0000000000000000 R09: 0000000000000000 [ 247.785926][ T9966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.793900][ T9966] R13: 00007fa559426038 R14: 00007fa559425fa0 R15: 00007fff9787f688 [ 247.801888][ T9966] [ 247.854509][ T9969] netlink: 'syz.0.1192': attribute type 10 has an invalid length. [ 248.072925][ T9967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.204806][ T9979] syz.1.1196[9979] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 248.204954][ T9979] syz.1.1196[9979] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 248.306237][ T9979] netlink: 'syz.1.1196': attribute type 10 has an invalid length. [ 248.352458][ T9976] netlink: 64771 bytes leftover after parsing attributes in process `syz.2.1195'. [ 248.925056][ T9996] FAULT_INJECTION: forcing a failure. [ 248.925056][ T9996] name failslab, interval 1, probability 0, space 0, times 0 [ 248.949554][ T9996] CPU: 0 PID: 9996 Comm: syz.2.1204 Not tainted syzkaller #0 [ 248.956966][ T9996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 248.967033][ T9996] Call Trace: [ 248.970320][ T9996] [ 248.973257][ T9996] dump_stack_lvl+0x18c/0x250 [ 248.977956][ T9996] ? show_regs_print_info+0x20/0x20 [ 248.983167][ T9996] ? load_image+0x420/0x420 [ 248.987694][ T9996] ? __might_sleep+0xe0/0xe0 [ 248.992301][ T9996] ? __lock_acquire+0x7d80/0x7d80 [ 248.997339][ T9996] should_fail_ex+0x394/0x4c0 [ 249.002030][ T9996] should_failslab+0x9/0x20 [ 249.006556][ T9996] slab_pre_alloc_hook+0x59/0x300 [ 249.011595][ T9996] ? kvmalloc_node+0x70/0x180 [ 249.016282][ T9996] ? kvmalloc_node+0x70/0x180 [ 249.020964][ T9996] __kmem_cache_alloc_node+0x53/0x250 [ 249.026350][ T9996] ? kvmalloc_node+0x70/0x180 [ 249.031026][ T9996] __kmalloc_node+0xa6/0x240 [ 249.035637][ T9996] kvmalloc_node+0x70/0x180 [ 249.040156][ T9996] bpf_test_run_xdp_live+0x1e9/0x1b30 [ 249.045558][ T9996] ? bpf_dispatcher_xdp+0x800/0x1000 [ 249.050854][ T9996] ? bpf_dispatcher_xdp+0x800/0x1000 [ 249.056148][ T9996] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 249.062067][ T9996] ? xdp_convert_md_to_buff+0x330/0x330 [ 249.067650][ T9996] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 249.073896][ T9996] ? _copy_from_user+0xa5/0xe0 [ 249.078670][ T9996] ? bpf_test_init+0x119/0x140 [ 249.083435][ T9996] ? xdp_convert_md_to_buff+0x5b/0x330 [ 249.088899][ T9996] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 249.094274][ T9996] ? __lock_acquire+0x7d80/0x7d80 [ 249.099316][ T9996] ? dev_put+0x80/0x80 [ 249.103403][ T9996] ? dev_put+0x80/0x80 [ 249.107474][ T9996] bpf_prog_test_run+0x31f/0x390 [ 249.112429][ T9996] __sys_bpf+0x49d/0x890 [ 249.116678][ T9996] ? bpf_link_show_fdinfo+0x390/0x390 [ 249.122069][ T9996] ? lock_chain_count+0x20/0x20 [ 249.126925][ T9996] __x64_sys_bpf+0x7c/0x90 [ 249.131352][ T9996] do_syscall_64+0x55/0xb0 [ 249.135769][ T9996] ? clear_bhb_loop+0x40/0x90 [ 249.140448][ T9996] ? clear_bhb_loop+0x40/0x90 [ 249.145133][ T9996] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 249.151042][ T9996] RIP: 0033:0x7fc6c7d9e019 [ 249.155480][ T9996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.175110][ T9996] RSP: 002b:00007fc6c8c7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 249.183543][ T9996] RAX: ffffffffffffffda RBX: 00007fc6c8025fa0 RCX: 00007fc6c7d9e019 [ 249.191517][ T9996] RDX: 0000000000000050 RSI: 00002000000008c0 RDI: 000000000000000a [ 249.199501][ T9996] RBP: 00007fc6c8c7b090 R08: 0000000000000000 R09: 0000000000000000 [ 249.207473][ T9996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.215450][ T9996] R13: 00007fc6c8026038 R14: 00007fc6c8025fa0 R15: 00007ffee06c67d8 [ 249.223434][ T9996] [ 249.438277][T10003] syz.2.1206[10003] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 249.438416][T10003] syz.2.1206[10003] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 249.455741][T10003] netlink: 'syz.2.1206': attribute type 10 has an invalid length. [ 249.492969][ T9999] netlink: 'syz.1.1205': attribute type 10 has an invalid length. [ 249.570528][ T9999] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 249.610164][ T9999] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 249.738610][ T9999] team0: Port device wlan1 added [ 249.760505][T10005] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1207'. [ 249.823478][ T9998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.865924][T10005] team0: Port device bond0 removed [ 249.901474][T10005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.934387][T10005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.959601][T10005] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 249.984362][T10005] bond0 (unregistering): Released all slaves [ 250.468201][T10038] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1213'. [ 250.480366][T10035] FAULT_INJECTION: forcing a failure. [ 250.480366][T10035] name failslab, interval 1, probability 0, space 0, times 0 [ 250.521324][T10035] CPU: 0 PID: 10035 Comm: syz.3.1214 Not tainted syzkaller #0 [ 250.528919][T10035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 250.538964][T10035] Call Trace: [ 250.542231][T10035] [ 250.545151][T10035] dump_stack_lvl+0x18c/0x250 [ 250.549825][T10035] ? show_regs_print_info+0x20/0x20 [ 250.555013][T10035] ? load_image+0x420/0x420 [ 250.559510][T10035] ? __might_sleep+0xe0/0xe0 [ 250.564094][T10035] ? __lock_acquire+0x7d80/0x7d80 [ 250.569114][T10035] should_fail_ex+0x394/0x4c0 [ 250.573784][T10035] should_failslab+0x9/0x20 [ 250.578284][T10035] slab_pre_alloc_hook+0x59/0x300 [ 250.583306][T10035] ? page_pool_create+0x71/0x5c0 [ 250.588240][T10035] __kmem_cache_alloc_node+0x53/0x250 [ 250.593628][T10035] ? page_pool_create+0x71/0x5c0 [ 250.598558][T10035] kmalloc_node_trace+0x26/0xe0 [ 250.603406][T10035] page_pool_create+0x71/0x5c0 [ 250.608168][T10035] bpf_test_run_xdp_live+0x203/0x1b30 [ 250.613537][T10035] ? bpf_dispatcher_xdp+0x800/0x1000 [ 250.618812][T10035] ? bpf_dispatcher_xdp+0x800/0x1000 [ 250.624088][T10035] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 250.629998][T10035] ? xdp_convert_md_to_buff+0x330/0x330 [ 250.635567][T10035] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 250.641804][T10035] ? _copy_from_user+0xa5/0xe0 [ 250.646560][T10035] ? bpf_test_init+0x119/0x140 [ 250.651313][T10035] ? xdp_convert_md_to_buff+0x5b/0x330 [ 250.656768][T10035] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 250.662143][T10035] ? __lock_acquire+0x7d80/0x7d80 [ 250.667166][T10035] ? dev_put+0x80/0x80 [ 250.671234][T10035] ? dev_put+0x80/0x80 [ 250.675293][T10035] bpf_prog_test_run+0x31f/0x390 [ 250.680229][T10035] __sys_bpf+0x49d/0x890 [ 250.684464][T10035] ? bpf_link_show_fdinfo+0x390/0x390 [ 250.689841][T10035] ? lock_chain_count+0x20/0x20 [ 250.694694][T10035] __x64_sys_bpf+0x7c/0x90 [ 250.699103][T10035] do_syscall_64+0x55/0xb0 [ 250.703508][T10035] ? clear_bhb_loop+0x40/0x90 [ 250.708175][T10035] ? clear_bhb_loop+0x40/0x90 [ 250.712844][T10035] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 250.718732][T10035] RIP: 0033:0x7f6c1819e019 [ 250.723138][T10035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.742738][T10035] RSP: 002b:00007f6c163f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 250.751140][T10035] RAX: ffffffffffffffda RBX: 00007f6c18425fa0 RCX: 00007f6c1819e019 [ 250.759101][T10035] RDX: 0000000000000050 RSI: 00002000000008c0 RDI: 000000000000000a [ 250.767062][T10035] RBP: 00007f6c163f6090 R08: 0000000000000000 R09: 0000000000000000 [ 250.775019][T10035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.782981][T10035] R13: 00007f6c18426038 R14: 00007f6c18425fa0 R15: 00007ffd92432538 [ 250.790954][T10035] [ 251.105400][T10047] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1217'. [ 251.160925][T10054] syz.0.1222[10054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 251.161059][T10054] syz.0.1222[10054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 251.268081][T10054] netlink: 'syz.0.1222': attribute type 10 has an invalid length. [ 251.338592][T10058] netlink: 'syz.3.1224': attribute type 22 has an invalid length. [ 251.351707][T10058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1224'. [ 251.422516][T10060] FAULT_INJECTION: forcing a failure. [ 251.422516][T10060] name failslab, interval 1, probability 0, space 0, times 0 [ 251.446092][T10060] CPU: 1 PID: 10060 Comm: syz.0.1225 Not tainted syzkaller #0 [ 251.453598][T10060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 251.463671][T10060] Call Trace: [ 251.466966][T10060] [ 251.469913][T10060] dump_stack_lvl+0x18c/0x250 [ 251.474613][T10060] ? show_regs_print_info+0x20/0x20 [ 251.479829][T10060] ? load_image+0x420/0x420 [ 251.484361][T10060] ? __might_sleep+0xe0/0xe0 [ 251.488970][T10060] ? __lock_acquire+0x7d80/0x7d80 [ 251.494015][T10060] should_fail_ex+0x394/0x4c0 [ 251.498715][T10060] should_failslab+0x9/0x20 [ 251.503239][T10060] slab_pre_alloc_hook+0x59/0x300 [ 251.508299][T10060] ? kvmalloc_node+0x70/0x180 [ 251.512999][T10060] ? kvmalloc_node+0x70/0x180 [ 251.517696][T10060] __kmem_cache_alloc_node+0x53/0x250 [ 251.523150][T10060] ? kvmalloc_node+0x70/0x180 [ 251.527852][T10060] __kmalloc_node+0xa6/0x240 [ 251.532473][T10060] kvmalloc_node+0x70/0x180 [ 251.537010][T10060] page_pool_create+0x1eb/0x5c0 [ 251.541880][T10060] bpf_test_run_xdp_live+0x203/0x1b30 [ 251.547265][T10060] ? 0xffffffffa0004740 [ 251.551426][T10060] ? 0xffffffffa0004740 [ 251.555583][T10060] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 251.561476][T10060] ? xdp_convert_md_to_buff+0x330/0x330 [ 251.567042][T10060] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 251.573284][T10060] ? _copy_from_user+0xa5/0xe0 [ 251.578044][T10060] ? bpf_test_init+0x119/0x140 [ 251.582801][T10060] ? xdp_convert_md_to_buff+0x5b/0x330 [ 251.588259][T10060] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 251.593625][T10060] ? __lock_acquire+0x7d80/0x7d80 [ 251.598651][T10060] ? dev_put+0x80/0x80 [ 251.602720][T10060] ? dev_put+0x80/0x80 [ 251.606784][T10060] bpf_prog_test_run+0x31f/0x390 [ 251.611714][T10060] __sys_bpf+0x49d/0x890 [ 251.615953][T10060] ? bpf_link_show_fdinfo+0x390/0x390 [ 251.621329][T10060] ? lock_chain_count+0x20/0x20 [ 251.626178][T10060] __x64_sys_bpf+0x7c/0x90 [ 251.630586][T10060] do_syscall_64+0x55/0xb0 [ 251.634993][T10060] ? clear_bhb_loop+0x40/0x90 [ 251.639662][T10060] ? clear_bhb_loop+0x40/0x90 [ 251.644329][T10060] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 251.650212][T10060] RIP: 0033:0x7fcb14d9e019 [ 251.654624][T10060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.674222][T10060] RSP: 002b:00007fcb15d4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 251.682637][T10060] RAX: ffffffffffffffda RBX: 00007fcb15025fa0 RCX: 00007fcb14d9e019 [ 251.690601][T10060] RDX: 0000000000000050 RSI: 00002000000008c0 RDI: 000000000000000a [ 251.698565][T10060] RBP: 00007fcb15d4e090 R08: 0000000000000000 R09: 0000000000000000 [ 251.706528][T10060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.714492][T10060] R13: 00007fcb15026038 R14: 00007fcb15025fa0 R15: 00007ffdccdd44c8 [ 251.722470][T10060] [ 251.762956][T10060] page_pool_create() gave up with errno -12 [ 251.840296][T10066] netlink: 11254 bytes leftover after parsing attributes in process `syz.1.1226'. [ 251.882942][T10066] netlink: 'syz.1.1226': attribute type 7 has an invalid length. [ 251.900586][T10066] netlink: 11254 bytes leftover after parsing attributes in process `syz.1.1226'. [ 252.142039][T10081] syz.1.1233[10081] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 252.142171][T10081] syz.1.1233[10081] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 253.250263][T10096] FAULT_INJECTION: forcing a failure. [ 253.250263][T10096] name failslab, interval 1, probability 0, space 0, times 0 [ 253.276244][T10096] CPU: 1 PID: 10096 Comm: syz.0.1237 Not tainted syzkaller #0 [ 253.283736][T10096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 253.293810][T10096] Call Trace: [ 253.297101][T10096] [ 253.300053][T10096] dump_stack_lvl+0x18c/0x250 [ 253.304754][T10096] ? show_regs_print_info+0x20/0x20 [ 253.309974][T10096] ? load_image+0x420/0x420 [ 253.314504][T10096] ? __might_sleep+0xe0/0xe0 [ 253.319120][T10096] ? __lock_acquire+0x7d80/0x7d80 [ 253.324172][T10096] should_fail_ex+0x394/0x4c0 [ 253.328864][T10096] should_failslab+0x9/0x20 [ 253.333366][T10096] slab_pre_alloc_hook+0x59/0x300 [ 253.338390][T10096] ? __xdp_reg_mem_model+0x1e3/0x5a0 [ 253.343681][T10096] __kmem_cache_alloc_node+0x53/0x250 [ 253.349092][T10096] ? __asan_memset+0x22/0x40 [ 253.353699][T10096] ? __xdp_reg_mem_model+0x1e3/0x5a0 [ 253.358978][T10096] kmalloc_trace+0x2a/0xe0 [ 253.363392][T10096] __xdp_reg_mem_model+0x1e3/0x5a0 [ 253.368499][T10096] ? kvmalloc_node+0x70/0x180 [ 253.373172][T10096] ? kvmalloc_node+0x70/0x180 [ 253.377842][T10096] ? xdp_reg_mem_model+0x40/0x40 [ 253.382779][T10096] xdp_reg_mem_model+0x22/0x40 [ 253.387536][T10096] bpf_test_run_xdp_live+0x262/0x1b30 [ 253.392906][T10096] ? bpf_dispatcher_xdp+0x800/0x1000 [ 253.398196][T10096] ? bpf_dispatcher_xdp+0x800/0x1000 [ 253.403480][T10096] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 253.409376][T10096] ? xdp_convert_md_to_buff+0x330/0x330 [ 253.414988][T10096] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 253.421230][T10096] ? _copy_from_user+0xa5/0xe0 [ 253.425993][T10096] ? bpf_test_init+0x119/0x140 [ 253.430764][T10096] ? xdp_convert_md_to_buff+0x5b/0x330 [ 253.436221][T10096] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 253.441594][T10096] ? __lock_acquire+0x7d80/0x7d80 [ 253.446637][T10096] ? dev_put+0x80/0x80 [ 253.450707][T10096] ? dev_put+0x80/0x80 [ 253.454769][T10096] bpf_prog_test_run+0x31f/0x390 [ 253.459702][T10096] __sys_bpf+0x49d/0x890 [ 253.463939][T10096] ? bpf_link_show_fdinfo+0x390/0x390 [ 253.469313][T10096] ? lock_chain_count+0x20/0x20 [ 253.474162][T10096] __x64_sys_bpf+0x7c/0x90 [ 253.478571][T10096] do_syscall_64+0x55/0xb0 [ 253.482976][T10096] ? clear_bhb_loop+0x40/0x90 [ 253.487645][T10096] ? clear_bhb_loop+0x40/0x90 [ 253.492324][T10096] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 253.498207][T10096] RIP: 0033:0x7fcb14d9e019 [ 253.502615][T10096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.522213][T10096] RSP: 002b:00007fcb15d4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 253.530620][T10096] RAX: ffffffffffffffda RBX: 00007fcb15025fa0 RCX: 00007fcb14d9e019 [ 253.538584][T10096] RDX: 0000000000000050 RSI: 00002000000008c0 RDI: 000000000000000a [ 253.546545][T10096] RBP: 00007fcb15d4e090 R08: 0000000000000000 R09: 0000000000000000 [ 253.554506][T10096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.562467][T10096] R13: 00007fcb15026038 R14: 00007fcb15025fa0 R15: 00007ffdccdd44c8 [ 253.570457][T10096] [ 253.849278][T10110] netlink: 'syz.3.1244': attribute type 23 has an invalid length. [ 253.895246][T10112] netlink: 'syz.2.1245': attribute type 3 has an invalid length. [ 253.903466][T10112] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1245'. [ 254.230585][T10125] netlink: set zone limit has 8 unknown bytes [ 254.238194][T10118] netlink: 209632 bytes leftover after parsing attributes in process `syz.1.1246'. [ 255.214864][T10133] netlink: 'syz.1.1250': attribute type 21 has an invalid length. [ 255.268292][T10133] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1250'. [ 255.309336][T10133] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1250'. [ 255.358587][T10136] netlink: 'syz.2.1251': attribute type 20 has an invalid length. [ 255.381469][T10136] netlink: 'syz.2.1251': attribute type 21 has an invalid length. [ 255.390945][T10136] netlink: 'syz.2.1251': attribute type 23 has an invalid length. [ 255.404943][T10136] netlink: 'syz.2.1251': attribute type 25 has an invalid length. [ 255.413408][T10136] netlink: 'syz.2.1251': attribute type 27 has an invalid length. [ 255.431730][T10136] team0: Device ipvlan1 failed to register rx_handler [ 255.648456][T10144] team0: Device veth1_vlan failed to register rx_handler [ 255.771350][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.777973][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.261863][T10171] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.1265'. [ 257.271428][T10171] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.1265'. [ 258.176535][T10187] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1270'. [ 258.441839][T10195] validate_nla: 5 callbacks suppressed [ 258.441884][T10195] netlink: 'syz.1.1273': attribute type 29 has an invalid length. [ 258.461516][T10195] netlink: 'syz.1.1273': attribute type 3 has an invalid length. [ 258.470171][T10195] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1273'. [ 258.546292][T10199] netlink: 'syz.3.1274': attribute type 3 has an invalid length. [ 258.570563][T10199] netlink: 'syz.3.1274': attribute type 8 has an invalid length. [ 258.602285][T10199] netlink: 'syz.3.1274': attribute type 6 has an invalid length. [ 258.626314][T10199] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.1274'. [ 258.971919][T10215] netlink: 'syz.2.1279': attribute type 33 has an invalid length. [ 258.980963][T10215] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1279'. [ 258.991841][T10215] `: renamed from ip6tnl0 (while UP) [ 259.019514][T10215] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 259.656483][T10233] netlink: 'syz.0.1283': attribute type 21 has an invalid length. [ 259.676303][T10233] netlink: 'syz.0.1283': attribute type 1 has an invalid length. [ 259.710583][T10233] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1283'. [ 259.748040][ C1] [ 259.748048][ C1] ================================ [ 259.748053][ C1] WARNING: inconsistent lock state [ 259.748073][ C1] syzkaller #0 Not tainted [ 259.748082][ C1] -------------------------------- [ 259.748086][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 259.748094][ C1] syz.3.1285/10241 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 259.748113][ C1] ffffffff8d297918 (kernfs_rename_lock){....}-{2:2}, at: kernfs_path_from_node+0x88/0xbd0 [ 259.748169][ C1] {INITIAL USE} state was registered at: [ 259.748174][ C1] lock_acquire+0x19e/0x420 [ 259.748193][ C1] _raw_write_lock_irq+0xaf/0xf0 [ 259.748216][ C1] kernfs_rename_ns+0x5e4/0x830 [ 259.748237][ C1] sysfs_rename_link_ns+0x175/0x1b0 [ 259.748253][ C1] device_rename+0x110/0x1e0 [ 259.748270][ C1] dev_change_name+0x308/0x8e0 [ 259.748287][ C1] do_setlink+0x925/0x3f40 [ 259.748303][ C1] rtnl_newlink+0x1848/0x2170 [ 259.748318][ C1] rtnetlink_rcv_msg+0x843/0xf90 [ 259.748335][ C1] netlink_rcv_skb+0x235/0x4c0 [ 259.748358][ C1] netlink_unicast+0x7b1/0x930 [ 259.748378][ C1] netlink_sendmsg+0x8d0/0xbf0 [ 259.748392][ C1] __sys_sendto+0x4a9/0x6b0 [ 259.748406][ C1] __x64_sys_sendto+0xde/0xf0 [ 259.748420][ C1] do_syscall_64+0x55/0xb0 [ 259.748435][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 259.748456][ C1] irq event stamp: 690 [ 259.748462][ C1] hardirqs last enabled at (689): [] do_syscall_64+0x61/0xb0 [ 259.748484][ C1] hardirqs last disabled at (690): [] noist_exc_debug+0x4d/0x120 [ 259.748506][ C1] softirqs last enabled at (532): [] bpf_prog_load+0x1204/0x1610 [ 259.748528][ C1] softirqs last disabled at (530): [] bpf_ksym_add+0x2c/0x330 [ 259.748551][ C1] [ 259.748551][ C1] other info that might help us debug this: [ 259.748556][ C1] Possible unsafe locking scenario: [ 259.748556][ C1] [ 259.748560][ C1] CPU0 [ 259.748563][ C1] ---- [ 259.748566][ C1] lock(kernfs_rename_lock); [ 259.748577][ C1] [ 259.748580][ C1] lock(kernfs_rename_lock); [ 259.748590][ C1] [ 259.748590][ C1] *** DEADLOCK *** [ 259.748590][ C1] [ 259.748593][ C1] 2 locks held by syz.3.1285/10241: [ 259.748603][ C1] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: atomic_notifier_call_chain+0x26/0x180 [ 259.748647][ C1] #1: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: perf_event_output_forward+0xb9/0x3e0 [ 259.748687][ C1] [ 259.748687][ C1] stack backtrace: [ 259.748692][ C1] CPU: 1 PID: 10241 Comm: syz.3.1285 Not tainted syzkaller #0 [ 259.748708][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 259.748718][ C1] Call Trace: [ 259.748724][ C1] <#DB> [ 259.748730][ C1] dump_stack_lvl+0x18c/0x250 [ 259.748756][ C1] ? show_regs_print_info+0x20/0x20 [ 259.748776][ C1] ? print_usage_bug+0x43d/0x6a0 [ 259.748796][ C1] ? verify_lock_unused+0x15/0x140 [ 259.748816][ C1] lock_acquire+0x2c2/0x420 [ 259.748837][ C1] ? kernfs_path_from_node+0x88/0xbd0 [ 259.748860][ C1] ? read_lock_is_recursive+0x20/0x20 [ 259.748880][ C1] ? cmp_ex_search+0x1e/0x80 [ 259.748899][ C1] ? bsearch+0x8a/0xb0 [ 259.748921][ C1] ? look_up_lock_class+0x75/0x140 [ 259.748944][ C1] _raw_read_lock_irqsave+0xbc/0x100 [ 259.748968][ C1] ? kernfs_path_from_node+0x88/0xbd0 [ 259.748990][ C1] ? _raw_read_lock+0x50/0x50 [ 259.749011][ C1] ? rcu_is_watching+0x15/0xb0 [ 259.749033][ C1] ? lock_release+0xb5/0x8c0 [ 259.749052][ C1] ? percpu_ref_tryget+0x15/0x180 [ 259.749074][ C1] kernfs_path_from_node+0x88/0xbd0 [ 259.749096][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 259.749117][ C1] ? lock_release+0xb5/0x8c0 [ 259.749135][ C1] ? kernfs_name+0x140/0x140 [ 259.749156][ C1] ? get_mem_cgroup_from_mm+0x38/0x290 [ 259.749175][ C1] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 259.749193][ C1] get_mm_memcg_path+0xb9/0x360 [ 259.749219][ C1] __mmap_lock_do_trace_acquire_returned+0xea/0x300 [ 259.749245][ C1] ? get_mm_memcg_path+0x360/0x360 [ 259.749278][ C1] ? __init_rwsem+0x160/0x160 [ 259.749295][ C1] ? _raw_spin_unlock+0x28/0x40 [ 259.749317][ C1] stack_map_get_build_id_offset+0x5fe/0x720 [ 259.749338][ C1] ? pcpu_freelist_pop+0x12a/0x190 [ 259.749358][ C1] ? __bpf_get_stackid+0x900/0x900 [ 259.749374][ C1] ? perf_prepare_sample+0x1558/0x1db0 [ 259.749393][ C1] __bpf_get_stackid+0x564/0x900 [ 259.749416][ C1] bpf_prog_12712c88fd19bd5b+0x29/0x2d [ 259.749432][ C1] bpf_overflow_handler+0x1fc/0x510 [ 259.749454][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 259.749474][ C1] ? bpf_overflow_handler+0xde/0x510 [ 259.749494][ C1] ? tp_perf_event_destroy+0x20/0x20 [ 259.749515][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 259.749534][ C1] __perf_event_overflow+0x461/0x660 [ 259.749551][ C1] perf_swevent_event+0x319/0x570 [ 259.749571][ C1] ? perf_tp_event+0x1550/0x1550 [ 259.749586][ C1] ? trace_call_bpf+0x5e9/0x6c0 [ 259.749600][ C1] ? trace_call_bpf+0xc3/0x6c0 [ 259.749612][ C1] ? perf_trace_lock+0x19d/0x3b0 [ 259.749630][ C1] perf_bp_event+0x319/0x430 [ 259.749646][ C1] ? look_up_lock_class+0x75/0x140 [ 259.749666][ C1] ? perf_event_free_bpf_prog+0x120/0x120 [ 259.749685][ C1] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 259.749714][ C1] ? lock_acquire+0x2c2/0x420 [ 259.749742][ C1] hw_breakpoint_exceptions_notify+0x2fb/0x670 [ 259.749765][ C1] notifier_call_chain+0x18f/0x380 [ 259.749786][ C1] ? atomic_notifier_call_chain+0x26/0x180 [ 259.749806][ C1] atomic_notifier_call_chain+0xda/0x180 [ 259.749827][ C1] notify_die+0x145/0x1a0 [ 259.749847][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 259.749870][ C1] notify_debug+0x2e/0x50 [ 259.749885][ C1] exc_debug+0xde/0x140 [ 259.749903][ C1] asm_exc_debug+0x1e/0x40 [ 259.749920][ C1] RIP: 0010:__get_user_nocheck_8+0xd/0x20 [ 259.749941][ C1] Code: fa 0f 01 cb 0f ae e8 8b 10 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 0f ae e8 48 8b 10 <31> c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 ca [ 259.749955][ C1] RSP: 0000:ffffc9000367f560 EFLAGS: 00040802 [ 259.749969][ C1] RAX: 0000200000000300 RBX: 00000000ffffffff RCX: 1ffff920006cfeca [ 259.749981][ C1] RDX: 00006370692f736e RSI: 0000200000000300 RDI: 0000000000000000 [ 259.749992][ C1] RBP: 0000200000000300 R08: 000000000000007f R09: 0000000000000000 [ 259.750001][ C1] R10: dffffc0000000000 R11: fffffbfff223d6a1 R12: 0000000000000001 [ 259.750012][ C1] R13: 1ffff920006cfec8 R14: 000000000000007f R15: dffffc0000000000 [ 259.750029][ C1] [ 259.750033][ C1] [ 259.750037][ C1] perf_callchain_user+0xbdd/0x15d0 [ 259.750062][ C1] ? get_callchain_entry+0x185/0x3c0 [ 259.750075][ C1] get_perf_callchain+0x394/0x510 [ 259.750084][ C1] ? put_callchain_entry+0xb0/0xb0 [ 259.750094][ C1] ? __perf_event_header__init_id+0x3b0/0x470 [ 259.750104][ C1] perf_prepare_sample+0x3c7/0x1db0 [ 259.750115][ C1] ? read_lock_is_recursive+0x20/0x20 [ 259.750124][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 259.750134][ C1] ? perf_callchain+0x220/0x220 [ 259.750142][ C1] ? lock_chain_count+0x20/0x20 [ 259.750153][ C1] perf_event_output_forward+0x187/0x3e0 [ 259.750162][ C1] ? perf_event_output_forward+0xb9/0x3e0 [ 259.750171][ C1] ? perf_prepare_header+0x1e0/0x1e0 [ 259.750181][ C1] ? __schedule+0x15b6/0x4660 [ 259.750192][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 259.750202][ C1] __perf_event_overflow+0x461/0x660 [ 259.750213][ C1] perf_swevent_overflow+0x274/0x340 [ 259.750225][ C1] ? perf_event_switch_output+0x790/0x790 [ 259.750242][ C1] perf_swevent_event+0x45c/0x570 [ 259.750252][ C1] ? perf_tp_event+0x1550/0x1550 [ 259.750264][ C1] perf_bp_event+0x319/0x430 [ 259.750274][ C1] ? perf_event_free_bpf_prog+0x120/0x120 [ 259.750284][ C1] ? verify_lock_unused+0x140/0x140 [ 259.750299][ C1] ? trace_call_bpf+0xc3/0x6c0 [ 259.750308][ C1] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 259.750320][ C1] notifier_call_chain+0x18f/0x380 [ 259.750330][ C1] ? atomic_notifier_call_chain+0x26/0x180 [ 259.750341][ C1] atomic_notifier_call_chain+0xda/0x180 [ 259.750353][ C1] notify_die+0x145/0x1a0 [ 259.750370][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 259.750393][ C1] notify_debug+0x2e/0x50 [ 259.750407][ C1] noist_exc_debug+0x77/0x120 [ 259.750423][ C1] ? clear_bhb_loop+0x40/0x90 [ 259.750441][ C1] asm_exc_debug+0x33/0x40 [ 259.750454][ C1] RIP: 0033:0x7f6c1817cdbd [ 259.750467][ C1] Code: 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 c5 fd 74 0f fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 90 f3 0f bc [ 259.750481][ C1] RSP: 002b:00007f6c163f58a8 EFLAGS: 00000283 [ 259.750494][ C1] RAX: 0000000000000300 RBX: 00007f6c163f5de0 RCX: 2f666c65732f636f [ 259.750506][ C1] RDX: 0000200000000300 RSI: 00007f6c1825f760 RDI: 0000200000000300 [ 259.750517][ C1] RBP: 0000200000000300 R08: 00007f6c163f6010 R09: 00000000ffffffff [ 259.750528][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 259.750538][ C1] R13: 0000000000000073 R14: 00007f6c18234365 R15: 00007f6c163f5ea0 [ 259.750557][ C1]